VMware 2V0-621 Exam Practice Questions (P. 5)
- Full Access (243 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #21
To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)
- AideX:Y.present
- Bserial.present
- CideX:Y.enabled
- Dserial.enabled
Correct Answer:
AB
Removing Unnecessary Hardware Devices
Any enabled or connected device represents a potential attack channel. Users and processes without privileges on a virtual machine can connect or disconnect hardware devices, such as network adapters and CD-ROM drives. Attackers can use this capability to breach virtual machine security. Removing unnecessary hardware devices can help prevent attacks.
Use the following guidelines to increase virtual machine security.

Reference:
https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-822B2ED3-D8D2-4F57-8335-CA46E915A729.html
AB
Removing Unnecessary Hardware Devices
Any enabled or connected device represents a potential attack channel. Users and processes without privileges on a virtual machine can connect or disconnect hardware devices, such as network adapters and CD-ROM drives. Attackers can use this capability to breach virtual machine security. Removing unnecessary hardware devices can help prevent attacks.
Use the following guidelines to increase virtual machine security.

Reference:
https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-822B2ED3-D8D2-4F57-8335-CA46E915A729.html
send
light_mode
delete
Question #22
Which two groups of settings should be reviewed when attempting to increase the security of virtual machines (VMs)? (Choose two.)
- ADisable hardware devices
- BDisable unexposed features
- CDisable VMtools devices
- DDisable VM Template features
Correct Answer:
AB
Securing Virtual Machines -
The guest operating system that runs in the virtual machine is subject to the same security risks as a physical system. Secure virtual machines as you would secure physical machines.
Subtopics -
General Virtual Machine Protection
Configuring Logging Levels for the Guest Operating System
Limiting Exposure of Sensitive Data Copied to the Clipboard
Disable Unexposed Features -
Limiting Guest Operating System Writes to Host Memory
Removing Unnecessary Hardware Devices
Prevent a Virtual Machine User or Process from Disconnecting Devices
Prevent a Virtual Machine User or Process from Disconnecting Devices in the vSphere Web Client
Reference:
https://pubs.vmware.com/vsphere-51/index.jsp#com.vmware.vsphere.security.doc/GUID-CF45F448-2036-4BE3-8829-4A9335072349.html
AB
Securing Virtual Machines -
The guest operating system that runs in the virtual machine is subject to the same security risks as a physical system. Secure virtual machines as you would secure physical machines.
Subtopics -
General Virtual Machine Protection
Configuring Logging Levels for the Guest Operating System
Limiting Exposure of Sensitive Data Copied to the Clipboard
Disable Unexposed Features -
Limiting Guest Operating System Writes to Host Memory
Removing Unnecessary Hardware Devices
Prevent a Virtual Machine User or Process from Disconnecting Devices
Prevent a Virtual Machine User or Process from Disconnecting Devices in the vSphere Web Client
Reference:
https://pubs.vmware.com/vsphere-51/index.jsp#com.vmware.vsphere.security.doc/GUID-CF45F448-2036-4BE3-8829-4A9335072349.html
send
light_mode
delete
Question #23
Which password meets ESXi 6.x host password requirements?
- A8kMVnn2x!
- BzNgtnJBA2
- CNvgt34kn44
- D!b74wr
Correct Answer:
A
ESXi Passwords -
By default, ESXi enforces requirements for user passwords.
Your user password must meet the following length requirements.
✑ Passwords containing characters from one or two character classes must be at least eight characters long.
✑ Passwords containing characters from three character classes must be at least seven characters long.
✑ Passwords containing characters from all four character classes must be at least six characters long.
When you create a password, include a mix of characters from four character classes: lowercase letters, uppercase letters, numbers, and special characters such as an underscore or dash.
The password cannot contain the words root, admin, or administrator in any form.
Reference:
https://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-DC96FFDB-F5F2-43EC-8C73-05ACDAE6BE43.html
A
ESXi Passwords -
By default, ESXi enforces requirements for user passwords.
Your user password must meet the following length requirements.
✑ Passwords containing characters from one or two character classes must be at least eight characters long.
✑ Passwords containing characters from three character classes must be at least seven characters long.
✑ Passwords containing characters from all four character classes must be at least six characters long.
When you create a password, include a mix of characters from four character classes: lowercase letters, uppercase letters, numbers, and special characters such as an underscore or dash.
The password cannot contain the words root, admin, or administrator in any form.
Reference:
https://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-DC96FFDB-F5F2-43EC-8C73-05ACDAE6BE43.html
send
light_mode
delete
Question #24
An administrator would like to use a passphrase for their ESXi 6.x hosts which has these characteristics:
✑ Minimum of 21 characters
✑ Minimum of 2 words
Which advanced options must be set to allow this passphrase configuration to be used?
✑ Minimum of 21 characters
✑ Minimum of 2 words
Which advanced options must be set to allow this passphrase configuration to be used?
- Aretry=3 min=disabled, disabled, 7, 21, 7 passphrase=2
- Bretry=3 min=disabled, disabled, 21, 7, 7 passphrase=2
- Cretry=3 min=disabled, disabled, 2, 21, 7
- Dretry=3 min=disabled, disabled, 21, 21, 2
Correct Answer:
B
B-) ESXi Passwords and Account Lockout
For ESXi hosts, you have to use a password with predefined requirements. You can change the required length and character class requirement or allow pass phrases using the Security.PasswordQualityControl advanced option.ESXi uses the Linux PAM module pam_passwdqc for password management and control.
See the manpages for pam_passwdqc for detailed information.
: ESXi enforces password requirements for direct access from the Direct Console User Interface, the ESXi Shell, SSH, or the vSphere Client.
ESXi Passwords -
When you create a password, include a mix of characters from four character classes: lowercase letters, uppercase letters, numbers, and special characters such as underscore or dash.(link : https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-DC96FFDB-F5F2-43EC-
8C73-05ACDAE6BE43.html
)
B
B-) ESXi Passwords and Account Lockout
For ESXi hosts, you have to use a password with predefined requirements. You can change the required length and character class requirement or allow pass phrases using the Security.PasswordQualityControl advanced option.ESXi uses the Linux PAM module pam_passwdqc for password management and control.
See the manpages for pam_passwdqc for detailed information.
: ESXi enforces password requirements for direct access from the Direct Console User Interface, the ESXi Shell, SSH, or the vSphere Client.
ESXi Passwords -
When you create a password, include a mix of characters from four character classes: lowercase letters, uppercase letters, numbers, and special characters such as underscore or dash.(link : https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-DC96FFDB-F5F2-43EC-
8C73-05ACDAE6BE43.html
)
send
light_mode
delete
Question #25
Which Advanced Setting should be created for the vCenter Server to change the expiration policy of the vpxuser password?
- AVimPasswordExpirationInDays
- BVimExpirationPasswordDays
- CVimPassExpirationInDays
- DVimPasswordRefreshDays
Correct Answer:
A

Reference:
https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-96210743-0C17-4AE9-89FC-76778EC9D06E.html
A

Reference:
https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-96210743-0C17-4AE9-89FC-76778EC9D06E.html
send
light_mode
delete
All Pages