READ Free Dumps For VMware- 2V0-621
Question ID 21789 | Which three options are available for ESXi Certificate Replacement? (Choose three.)
|
Option A | VMware Certificate Authority mode
|
Option B | Custom Certificate Authority mode
|
Option C | Thumbprint mode
|
Option D | Hybrid Deployment
|
Option E | VMware Certificate Endpoint Authority Mode
|
Correct Answer | A,B,C |
Explanation Explanation: ESXi Certificate Replacement For ESXi hosts, you can change certificate provisioning behavior from the vSphere Web Client. VMware Certificate Authority mode (default) When you renew certificates from the vSphere Web Client, VMCA issues the certificates for the hosts. If you changed the VMCA root certificate to include a certificate chain, the host certificates include the full chain. Custom Certificate Authority mode Allows you to manually update and use certificates that are not signed or issued by VMCA. Thumbprint mode Can be used to retain 5.5 certificates during refresh.Use this mode only temporarily in debugging situations Reference: https://pubs.vmware.com/vsphere- 60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%2FGUID-4469A6D3-048A-471C-9CB4-518A15EA2AC0.html
Question ID 21790 | Lockdown Mode has been enabled on an ESXi 6.x host and users are restricted from logging into the Direct Console User Interface (DCUI). Which two statements are true given this configuration? (Choose two.)
|
Option A | A user granted administrative privileges in the Exception User list can login.
|
Option B | A user defined in the DCUI.Access without administrative privileges can login.
|
Option C | A user defined in the ESXi Admins domain group can login.
|
Option D | A user set to the vCenter Administrator role can login.
|
Correct Answer | A,B |
Explanation Explanation: In normal lockdown mode the DCUI service is not stopped. If the connection to the vCenterServer is lost and access through the vSphere Web Client is no longer available, privileged accounts can log in to the ESXi host's Direct Console Interface and exit lockdown mode. Only these accounts can access the Direct Console User Interface: Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1008077