VCP550 · Question #52
To comply with security requirements, an administrator with a vCenter Server Appliance needs to force logoff of the vSphere web client after 10 minutes of inactivity. What should the administrator do
The correct answer is A. Edit: /var/lib/vmware/vsphere-client/webclient.properties, modify session.timeout=10. The vSphere Web Client session timeout on a vCenter Server Appliance is set in /var/lib/vmware/vsphere-client/webclient.properties using a value in minutes, so session.timeout=10 enforces a 10-minute limit.
Question
To comply with security requirements, an administrator with a vCenter Server Appliance needs to force logoff of the vSphere web client after 10 minutes of inactivity. What should the administrator do to meet the requirement?
Options
- AEdit: /var/lib/vmware/vsphere-client/webclient.properties, modify session.timeout=10
- BEdit: /opt/vmware/vsphere-client/webclient.properties, modify session.timeout=600
- CEdit: /var/lib/vmware/vsphere-client/webclient.properties modify session.timeout=600
- DEdit: /opt/vmware/vsphere-client/webclient.properties, modify session.timeout=10
How the community answered
(46 responses)- A76% (35)
- B15% (7)
- C2% (1)
- D7% (3)
Why each option
The vSphere Web Client session timeout on a vCenter Server Appliance is set in /var/lib/vmware/vsphere-client/webclient.properties using a value in minutes, so session.timeout=10 enforces a 10-minute limit.
On the vCenter Server Appliance, the correct path for the Web Client configuration file is /var/lib/vmware/vsphere-client/webclient.properties. The session.timeout property accepts an integer representing minutes, so setting session.timeout=10 configures a 10-minute inactivity timeout, satisfying the security requirement exactly.
The path /opt/vmware/vsphere-client/webclient.properties is incorrect for the vCSA; additionally, a value of 600 in this context would mean 600 minutes (10 hours), not 10 minutes.
Although the file path /var/lib/vmware/vsphere-client/webclient.properties is correct, setting session.timeout=600 would configure a 600-minute (10-hour) timeout instead of the required 10 minutes.
The path /opt/vmware/vsphere-client/webclient.properties is the wrong location on the vCSA for this configuration file, making this option invalid despite the correct timeout value of 10.
Concept tested: vSphere Web Client session timeout configuration on vCenter Server Appliance
Source: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-91B95F85-870F-4D56-B280-CA7FC44AD012.html
Topics
Community Discussion
No community discussion yet for this question.