2V0-21.23 Question 94
Select 3An organization is running a critical virtual machine (VM) that stores sensitive customer data. The administrator has been tasked with securing the VM against unauthorized access and accidental changes to its configuration. Which of the following methods should the administrator implement to achieve these goals?
- A
Enable vSphere VM Encryption for the virtual machine.
- B
Configure VM options to prevent accidental deletion or modification.
- C
Use a distributed port group with promiscuous mode enabled to monitor VM traffic.
- D
Implement a virtual machine lockdown mode.
- E
Apply Role-Based Access Control (RBAC) to restrict permissions on the VM.
Show answer and explanation
Correct answers: A, B, E
Explanation
Securing virtual machines involves a combination of encryption, restricting unauthorized changes, and implementing role-based permissions. Enabling vSphere VM Encryption protects data, while configuring VM options prevents unintentional configuration changes or deletions. RBAC ensures that only authorized users can perform actions on the VM. The other options either do not enhance VM security or are not applicable to VM-level security.
- A. Correct.
Enabling vSphere VM Encryption ensures that the VM's files, including its virtual disks, are encrypted, protecting sensitive data from unauthorized access.
- B. Correct.
Configuring VM options, such as enabling the 'Disable Delete' or 'Disable Edit' settings, prevents accidental changes to the VM's configuration or deletion.
- C. Incorrect.
Enabling promiscuous mode on a distributed port group is not a security measure; instead, it could expose the VM's network traffic to potential monitoring or attacks.
- D. Incorrect.
Virtual machine lockdown mode is not a recognized feature in VMware. Instead, VMware offers lockdown mode for ESXi hosts, which is unrelated to securing individual VMs.
- E. Correct.
Applying Role-Based Access Control (RBAC) allows administrators to define granular permissions, ensuring users only have access to perform actions necessary for their role, thereby enhancing security.