2V0-21.23 Question 277
Single answerA VMware administrator is tasked with ensuring that the ESXi hosts in the environment can be remotely managed securely. The administrator needs to configure the ESXi shell and SSH services to only start when required and stop automatically when not in use. Which configuration option should the administrator choose to achieve this?
- A
Set the ESXi shell and SSH services to 'Start and Stop with Host'.
- B
Set the ESXi shell and SSH services to 'Start and Stop Manually'.
- C
Set the ESXi shell and SSH services to 'Start and Stop with Cluster'.
- D
Set the ESXi shell and SSH services to 'Start and Stop with Host Startup'.
Show answer and explanation
Correct answer: B
Explanation
To ensure secure remote management of ESXi hosts, it is recommended to configure the ESXi shell and SSH services to 'Start and Stop Manually'. This minimizes the attack surface by keeping these services disabled when not actively in use, and they can be manually started when required. Other options either keep the services running unnecessarily or refer to non-existent settings.
- A. Incorrect.
This option is incorrect because 'Start and Stop with Host' will keep the services running continuously, even when they are not actively needed, which increases the attack surface.
- B. Correct.
This is the correct option. Setting the ESXi shell and SSH services to 'Start and Stop Manually' ensures that the services can be started only when required and stopped after use, which is a secure practice.
- C. Incorrect.
This option is incorrect because there is no such setting as 'Start and Stop with Cluster' for ESXi services.
- D. Incorrect.
This option is incorrect because 'Start and Stop with Host Startup' will start the services automatically when the host boots, which is not ideal for secure environments that require minimizing unnecessary service uptime.