2V0-21.23 Question 284
Select 3An administrator needs to enable secure communication between an ESXi host and a specific application by opening a custom port. The administrator decides to use the ESXi firewall for this configuration. Which steps should the administrator perform to achieve this?
- A
Create a custom firewall rule using esxcli commands.
- B
Modify the /etc/vmware/firewall/service.xml file to include the custom rule and reload the firewall configuration.
- C
Enable the SSH service on the ESXi host to allow communication through the custom port.
- D
Use the vSphere Client to add the custom port to the appropriate firewall rule in the Security Profile section.
- E
Restart the ESXi host after adding the custom rule to apply the changes.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure the ESXi firewall to allow communication on a custom port, administrators can use esxcli commands to create the rule dynamically, edit the service.xml file to define the rule and reload the firewall, or use the vSphere Client to configure the rule through the Security Profile interface. SSH is unrelated to firewall configuration, and restarting the host is unnecessary for applying firewall changes.
- A. Correct.
Creating a custom firewall rule using esxcli commands is a valid and recommended method to open a custom port on the ESXi firewall.
- B. Correct.
Modifying the /etc/vmware/firewall/service.xml file and reloading the firewall configuration is another method to define custom firewall rules for non-default ports.
- C. Incorrect.
Enabling SSH is unnecessary for configuring the ESXi firewall and does not inherently open a custom port.
- D. Correct.
Using the vSphere Client to modify the firewall rule in the Security Profile section is a valid method to manage ESXi firewall settings.
- E. Incorrect.
Restarting the ESXi host is not required after modifying firewall rules, as changes can be applied dynamically by reloading the firewall configuration.