2V0-21.23 Question 276
Select 3An administrator is configuring ESXi services on a newly deployed ESXi host. The environment requires the host to support vSphere vMotion and secure data transfers, but the administrator must ensure that unnecessary services are disabled to minimize the attack surface. Which services should the administrator enable?
- A
vSphere vMotion
- B
SSH
- C
NTP
- D
Management Traffic
- E
vSphere Web Client
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure ESXi services effectively, the administrator must enable only the services required for the environment's functionality while minimizing the attack surface. vSphere vMotion is necessary for live virtual machine migration, NTP ensures secure and synchronized operations, and Management Traffic is required for host management. SSH should remain disabled unless explicitly needed, and the vSphere Web Client is not applicable to an ESXi host configuration.
- A. Correct.
vSphere vMotion is required to migrate virtual machines between hosts without downtime. This service must be enabled to fulfill the environment's requirement for vMotion.
- B. Incorrect.
SSH is not required for vMotion or secure data transfer in normal operation. Enabling SSH unnecessarily increases the attack surface and should be disabled unless needed for troubleshooting.
- C. Correct.
NTP ensures time synchronization on the ESXi host, which is critical for accurate logging and certificate validation. While not directly related to vMotion, it supports secure operations and should be enabled.
- D. Correct.
Management Traffic is necessary for ESXi host management and communication with vCenter, enabling secure data transfers and overall management functionality. This service must be enabled.
- E. Incorrect.
vSphere Web Client is a browser-based interface provided by vCenter Server, not the ESXi host. It does not need to be enabled on the ESXi host itself.