2V0-21.23 Question 286
Single answerA VMware administrator needs to allow traffic for a custom application that requires a specific TCP port on the ESXi host. The administrator decides to configure the ESXi firewall to enable the required traffic. What is the correct way to achieve this using the vSphere Client?
- A
Navigate to the ESXi host, select 'Manage' > 'Security & Services' > 'Firewall Rules', and modify the existing rule for the required port.
- B
Navigate to the ESXi host, select 'Configure' > 'Firewall', and add a new rule to allow the specific TCP port.
- C
Navigate to the ESXi host, select 'Configure' > 'Firewall', and enable the predefined rule that matches the required port.
- D
Navigate to the ESXi host, select 'Manage' > 'Networking', and configure a new port group for the required port.
Show answer and explanation
Correct answer: C
Explanation
To configure the ESXi firewall, administrators must enable or disable predefined rules that match the required service or port. These rules are managed through the 'Firewall' section in the vSphere Client's 'Configure' tab for the specific ESXi host. Administrators cannot directly modify or add new rules through the vSphere Client, but they can enable the appropriate predefined rule to allow traffic on the required port.
- A. Incorrect.
This option is incorrect because the ESXi firewall does not allow direct modification of existing rules. Existing rules are predefined, and modifications are made by enabling or disabling them.
- B. Incorrect.
This option is incorrect because the ESXi firewall does not allow administrators to manually add new rules through the vSphere Client. New rules can only be added using the ESXi shell or API.
- C. Correct.
This option is correct because the ESXi firewall includes predefined rules for common services and ports. The administrator can enable the appropriate predefined rule via the vSphere Client.
- D. Incorrect.
This option is incorrect because configuring a port group does not modify the ESXi firewall. Port groups are related to virtual networking, not firewall rules.