2V0-21.23 Question 275
Select 3A VMware administrator needs to configure an ESXi host for secure remote management using SSH. The administrator must ensure that SSH is only enabled temporarily for troubleshooting purposes and is not set to run continuously. Which of the following steps should the administrator take to achieve this requirement?
- A
Enable the SSH service using the vSphere Client and configure it to start and stop with host.
- B
Enable the SSH service using the vSphere Client and configure it to start and stop manually.
- C
Use the ESXi shell to start the SSH service and disable it after troubleshooting is complete.
- D
Use the vSphere Client to configure the SSH service to stop automatically after a defined timeout period.
- E
Configure an alarm in vCenter to notify the administrator when SSH is running for an extended period.
Show answer and explanation
Correct answers: B, C, E
Explanation
To configure the ESXi host for secure remote management using SSH temporarily, the administrator should ensure that the SSH service is not left running indefinitely. Configuring the service to start and stop manually (option 2), starting and stopping it using the ESXi shell (option 3), and setting up a vCenter alarm to monitor extended use (option 5) are all appropriate steps. These methods ensure compliance with security best practices and reduce the risk of unauthorized access.
- A. Incorrect.
This would cause the SSH service to start and stop automatically with the host, which does not meet the requirement for temporary troubleshooting use only. SSH could remain active indefinitely if configured this way.
- B. Correct.
Configuring the SSH service to start and stop manually ensures it only runs when explicitly started, which meets the requirement for temporary use during troubleshooting.
- C. Correct.
Using the ESXi shell to start and stop the SSH service manually is another valid way to enable the service temporarily for troubleshooting and disable it afterward.
- D. Incorrect.
vSphere Client does not allow SSH services to be configured to stop automatically after a timeout period. This option is not feasible.
- E. Correct.
Setting up an alarm to notify the administrator when SSH is running for an extended period helps ensure the service is not left enabled unintentionally, aligning with best practices for secure management.