2V0-21.23 Question 282
Single answerA VMware administrator is tasked with configuring Lockdown Mode on an ESXi host to enhance security. They need to ensure only the vSphere administrators can manage the host remotely, while still allowing access via the DCUI (Direct Console User Interface) for troubleshooting if required. Which Lockdown Mode configuration should the administrator choose?
- A
Normal Lockdown Mode
- B
Strict Lockdown Mode
- C
Enabled Lockdown Mode with SSH service running
- D
Disabled Lockdown Mode
Show answer and explanation
Correct answer: A
Explanation
Lockdown Mode in VMware ESXi enhances security by restricting remote access to the host. The 'Normal Lockdown Mode' configuration is suitable for this scenario since it restricts remote access to only vSphere administrators while allowing access via the DCUI for troubleshooting purposes. This strikes a balance between security and operational flexibility.
- A. Correct.
Normal Lockdown Mode allows access to the host through the DCUI for troubleshooting purposes while restricting remote management to only vSphere administrators. This is the correct configuration for the scenario.
- B. Incorrect.
Strict Lockdown Mode disables access to the host through the DCUI, which is not suitable for the given requirement of allowing troubleshooting access via the DCUI.
- C. Incorrect.
Lockdown Mode is not defined as 'Enabled'; instead, VMware provides 'Normal' and 'Strict' modes. Additionally, running SSH alongside Lockdown Mode is generally not recommended for security reasons.
- D. Incorrect.
Disabled Lockdown Mode does not enforce any restrictions, leaving the host vulnerable to unauthorized access. This does not meet the requirement to enhance security.