2V0-21.23 Question 285
Select 2You are tasked with configuring the ESXi firewall on a host to allow a custom application to communicate over a specific port. Which steps should you perform to correctly configure the firewall for this application?
- A
Create a custom firewall rule using the ESXi CLI to allow the required port.
- B
Enable the necessary service under the 'Services' tab in the vSphere Client.
- C
Add a new rule to the ESXi firewall configuration file to allow traffic for the custom port.
- D
Verify the status of the firewall rule using the 'esxcli network firewall ruleset' command.
- E
Restart the ESXi host to apply the changes to the firewall.
Show answer and explanation
Correct answers: A, D
Explanation
To configure the ESXi firewall for a custom application, administrators should create a custom firewall rule using the ESXi CLI and verify its status to ensure proper functionality. Modifying configuration files directly or enabling unrelated services is not recommended, and changes to the firewall do not require a host reboot.
- A. Correct.
Correct: Configuring a custom firewall rule using the ESXi CLI is the standard method for enabling specific ports for custom applications.
- B. Incorrect.
Incorrect: Enabling a service in the vSphere Client is only applicable to predefined services and will not work for custom applications requiring new ports.
- C. Incorrect.
Incorrect: Changing the ESXi firewall configuration file directly is not recommended and may lead to configuration errors or unsupported states.
- D. Correct.
Correct: Verifying the status of the firewall rule with the 'esxcli network firewall ruleset' command ensures that the necessary rule is active and functioning as intended.
- E. Incorrect.
Incorrect: Restarting the ESXi host is not required to apply firewall configuration changes, as they take effect immediately.