nerdexam
Broadcom-VMware

VCP550 · Question #52

To comply with security requirements, an administrator with a vCenter Server Appliance needs to force logoff of the vSphere web client after 10 minutes of inactivity. What should the administrator do

The correct answer is A. Edit: /var/lib/vmware/vsphere-client/webclient.properties, modify session.timeout=10. The vSphere Web Client session timeout on a vCenter Server Appliance is set in /var/lib/vmware/vsphere-client/webclient.properties using a value in minutes, so session.timeout=10 enforces a 10-minute limit.

Install and Configure vCenter Server

Question

To comply with security requirements, an administrator with a vCenter Server Appliance needs to force logoff of the vSphere web client after 10 minutes of inactivity. What should the administrator do to meet the requirement?

Options

  • AEdit: /var/lib/vmware/vsphere-client/webclient.properties, modify session.timeout=10
  • BEdit: /opt/vmware/vsphere-client/webclient.properties, modify session.timeout=600
  • CEdit: /var/lib/vmware/vsphere-client/webclient.properties modify session.timeout=600
  • DEdit: /opt/vmware/vsphere-client/webclient.properties, modify session.timeout=10

How the community answered

(46 responses)
  • A
    76% (35)
  • B
    15% (7)
  • C
    2% (1)
  • D
    7% (3)

Why each option

The vSphere Web Client session timeout on a vCenter Server Appliance is set in /var/lib/vmware/vsphere-client/webclient.properties using a value in minutes, so session.timeout=10 enforces a 10-minute limit.

AEdit: /var/lib/vmware/vsphere-client/webclient.properties, modify session.timeout=10Correct

On the vCenter Server Appliance, the correct path for the Web Client configuration file is /var/lib/vmware/vsphere-client/webclient.properties. The session.timeout property accepts an integer representing minutes, so setting session.timeout=10 configures a 10-minute inactivity timeout, satisfying the security requirement exactly.

BEdit: /opt/vmware/vsphere-client/webclient.properties, modify session.timeout=600

The path /opt/vmware/vsphere-client/webclient.properties is incorrect for the vCSA; additionally, a value of 600 in this context would mean 600 minutes (10 hours), not 10 minutes.

CEdit: /var/lib/vmware/vsphere-client/webclient.properties modify session.timeout=600

Although the file path /var/lib/vmware/vsphere-client/webclient.properties is correct, setting session.timeout=600 would configure a 600-minute (10-hour) timeout instead of the required 10 minutes.

DEdit: /opt/vmware/vsphere-client/webclient.properties, modify session.timeout=10

The path /opt/vmware/vsphere-client/webclient.properties is the wrong location on the vCSA for this configuration file, making this option invalid despite the correct timeout value of 10.

Concept tested: vSphere Web Client session timeout configuration on vCenter Server Appliance

Source: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-91B95F85-870F-4D56-B280-CA7FC44AD012.html

Topics

#vCenter Server Appliance#session timeout#webclient.properties#security hardening

Community Discussion

No community discussion yet for this question.

Full VCP550 Practice