VMware vSphere 6 Advanced Design (VCAP6-DCV Design) — Question 49

An organization's security policy requires a design where the ESXi hosts will be manageable only through vCenter Server.
Which two security configurations will help meet this requirement? (Choose two.)

Answer options

• A. enable lockdown mode strict
• B. disable DCUI access
• C. enable lockdown mode normal
• D. disable shell access

Correct answer: B, C

Explanation

Disabling DCUI access (B) ensures that management through the ESXi console is restricted, while enabling lockdown mode normal (C) further limits access to the host, allowing management only through vCenter. The other options, enabling lockdown mode strict (A) and disabling shell access (D), do not specifically enforce management exclusively through vCenter, making them less effective in this scenario.