VMware vSAN 8.x Administrator — Question 27

A VMware Cloud Foundation design incorporates the following technical requirements:
1. All management components must have their login sessions timeout after 2 minutes of inactivity.
2. Communication between management components should be limited to required ports only.
3. Modifications required by compliancy should not impact the management components functionality.
What would be the recommendation from a design perspective that would aid in achieving the above requirements?

Answer options

• A. Apply NSX DFW (Distributed Firewall) to achieve zero-trust
• B. Consult the Compliance Kit for VMware Cloud Foundation
• C. Leverage the results of a vulnerability assessment and apply the recommendations
• D. Consult the vSphere Security Configuration kit

Correct answer: B

Explanation

The correct answer is B because the Compliance Kit for VMware Cloud Foundation provides guidance on ensuring that compliance requirements are met without disrupting the functionality of management components. Option A focuses on security but does not directly address compliance-related modifications. Option C, while useful, does not specifically cater to the compliance aspect needed in this scenario. Option D pertains to security configurations but does not provide comprehensive compliance guidance.