nerdexam
Broadcom-VMware

VCP550 · Question #23

Immediately after installing ESXi, an administrator observes that the Configure Lockdown Mode option is grayed out in the Direct Console User Interface (DCUI). What is the most likely explanation?

The correct answer is A. The host has not yet been added to a vCenter Server.. Lockdown Mode requires the ESXi host to be managed by vCenter Server before it can be enabled, causing the DCUI option to appear grayed out on a freshly installed host not yet added to vCenter.

Install and Configure ESXi

Question

Immediately after installing ESXi, an administrator observes that the Configure Lockdown Mode option is grayed out in the Direct Console User Interface (DCUI). What is the most likely explanation?

Options

  • AThe host has not yet been added to a vCenter Server.
  • BThe BIOS on the host does not have NX/XD enabled.
  • CThe ESXi host is running in evaluation mode.
  • DThe host requires a reboot before this feature is available.

How the community answered

(46 responses)
  • A
    80% (37)
  • B
    4% (2)
  • C
    4% (2)
  • D
    11% (5)

Why each option

Lockdown Mode requires the ESXi host to be managed by vCenter Server before it can be enabled, causing the DCUI option to appear grayed out on a freshly installed host not yet added to vCenter.

AThe host has not yet been added to a vCenter Server.Correct

Lockdown Mode restricts direct host access and routes all management through vCenter Server, so ESXi requires an active vCenter Server connection before allowing the feature to be enabled. Because Lockdown Mode depends on vCenter as the alternative management path, the option is unavailable - and grayed out in the DCUI - until the host has been added to a vCenter Server inventory. This dependency is by design to prevent administrators from locking themselves out of an unmanaged host.

BThe BIOS on the host does not have NX/XD enabled.

The NX/XD bit in BIOS is required for ESXi to install and run at all, so if it were missing the host would not have completed the ESXi boot successfully.

CThe ESXi host is running in evaluation mode.

Evaluation mode affects licensing time limits but does not disable or gray out the Lockdown Mode configuration option in the DCUI.

DThe host requires a reboot before this feature is available.

ESXi does not require a reboot after initial installation to make Lockdown Mode accessible; the option is simply unavailable until the host is joined to vCenter Server.

Concept tested: ESXi Lockdown Mode vCenter Server dependency

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-88B24F73-E4F7-4884-A42D-A4F1D65E5728.html

Topics

#lockdown mode#DCUI#vCenter integration#post-install configuration

Community Discussion

No community discussion yet for this question.

Full VCP550 Practice