2V0-21.23 Question 95
Select 4A system administrator is managing a virtualized environment and needs to ensure that virtual machines are protected against unauthorized access and potential vulnerabilities. Which of the following actions can be taken to secure the virtual machines?
- A
Enable VM Encryption to protect sensitive virtual machine data.
- B
Configure VMkernel port mirroring to monitor network traffic.
- C
Set up Role-Based Access Control (RBAC) for managing VM permissions.
- D
Disable unnecessary hardware devices such as floppy drives and serial ports on VMs.
- E
Allow unrestricted access to the ESXi hosts to simplify management.
- F
Ensure VMware Tools is installed and up to date on all virtual machines.
Show answer and explanation
Correct answers: A, C, D, F
Explanation
Securing virtual machines involves implementing multiple layers of protection, including encrypting data, restricting access through RBAC, minimizing the attack surface by disabling unused hardware, and keeping VMware Tools updated for optimal security and performance. These measures collectively reduce the risk of unauthorized access, data breaches, and exploitation of vulnerabilities.
- A. Correct.
Enabling VM Encryption ensures that virtual machine data is encrypted at rest, reducing the risk of data breaches or unauthorized access.
- B. Incorrect.
VMkernel port mirroring is used for network traffic analysis but does not directly contribute to securing virtual machines.
- C. Correct.
Role-Based Access Control (RBAC) allows fine-grained access management, ensuring only authorized users can manage or modify virtual machines.
- D. Correct.
Disabling unnecessary hardware devices reduces the attack surface of the virtual machine by limiting potential entry points for attackers.
- E. Incorrect.
Allowing unrestricted access to ESXi hosts is a security risk and contradicts best practices for securing virtual environments.
- F. Correct.
Installing and updating VMware Tools ensures that the virtual machine is running the latest guest OS drivers and security updates, reducing vulnerabilities.