2V0-21.23 Question 281
Single answerAn administrator is configuring Lockdown Mode on an ESXi host to enhance its security. The administrator wants to allow only specified users to log in directly to the host when it is in Lockdown Mode. Which Lockdown Mode configuration should the administrator choose, and what additional step is required to achieve the desired outcome?
- A
Normal Lockdown Mode and add the users to the Exception Users list
- B
Strict Lockdown Mode and add the users to the Exception Users list
- C
Normal Lockdown Mode and rely on vCenter Server to manage access
- D
Strict Lockdown Mode and rely on vCenter Server to manage access
Show answer and explanation
Correct answer: A
Explanation
Lockdown Mode in ESXi enhances security by restricting direct access to the host. In Normal Lockdown Mode, specified users added to the Exception Users list can still log in directly. In Strict Lockdown Mode, all direct access is disabled, and management must occur via vCenter Server. To allow specific users to access the host directly while using Lockdown Mode, the administrator must choose Normal Lockdown Mode and configure the Exception Users list.
- A. Correct.
This is correct. In Normal Lockdown Mode, the Exception Users list allows specified users to bypass Lockdown Mode and access the ESXi host directly.
- B. Incorrect.
This is incorrect. In Strict Lockdown Mode, even users in the Exception Users list cannot log in directly to the host. Access is only possible via vCenter Server.
- C. Incorrect.
This is incorrect. While vCenter Server can manage access, relying solely on it in Normal Lockdown Mode without configuring the Exception Users list will block direct host access for all users.
- D. Incorrect.
This is incorrect. In Strict Lockdown Mode, direct access to the host is disabled entirely, regardless of the Exception Users list.