READ Free Dumps For VMware- 2V0-621
Question ID 21793 | An administrator wants to configure an ESXi 6.x host to use Active Directory (AD) to manage users and groups. The AD domain group ESX Admins is planned for
administrative access to the host.
Which two conditions should be considered when planning this configuration? (Choose two.)
|
Option A | If administrative access for ESX Admins is not required, this setting can be altered.
|
Option B | The users in ESX Admins are not restricted by Lockdown Mode.
|
Option C | An ESXi host provisioned with Auto Deploy cannot store AD credentials.
|
Option D | The users in ESX Admins are granted administrative privileges in vCenter Server.
|
Correct Answer | A,C |
Explanation Explanation: Configure a Host to Use Active Directory You can configure a host to use a directory service such as Active Directory to manage users and groups. When you add an ESXi host to Active Directory the DOMAIN group ESX Admins is assigned full administrative access to the host if it exists. If you do not want to make full administrative access available, see VMware Knowledge Base article 1025569 for a workaround. If a host is provisioned with Auto Deploy, Active Directory credentials cannot be stored on the hosts. You can use the vSphere Authentication Proxy to join the host to an Active Directory domain. Because a trust chain exists between the vSphere Authentication Proxy and the host, the Authentication Proxy can join the host to the Active Directory domain. See Using vSphere Authentication Proxy. Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-63D22519-38CC-4A9F-AE85-97A53CB0948A.html
Question ID 21794 | Which two advanced features should be disabled for virtual machines that are only hosted on a vSphere system? (Choose two.)
|
Option A | isolation.tools.unity.push.update.disable
|
Option B | isolation.tools.ghi.launchmenu.change
|
Option C | isolation.tools.bbs.disable
|
Option D | isolation.tools.hgfsServerSet.enable
|
Option F | Correct Answer: A,B.
Explanation:
Disable Unexposed Features
VMware virtual machines are designed to work on both vSphere systems and hosted virtualization platforms such as Workstation and Fusion. Certain VMX
parameters do not need to be enabled when you run a virtual machine on a vSphere system. Disable these parameters to reduce the potential for vulnerabilities.
Prerequisites
Turn off the virtualmachine.
Procedure
Find the virtual machine in the vSphere Web Client inventory.
A
To find a virtual machine, select a datacenter, folder, cluster, resource pool, or host.
B
Click the Related Objects tab and click Virtual Machines. Right-click the virtual machine and click Edit Settings.
Select VM Options.
Click Advanced and click Edit Configuration.
Add or edit the following parameters.
Reference:
https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-60E83710-8295-41A2-9C9D-83DEBB6872C2.html
|
Correct Answer | F |
Explanation