This page was exported from Lead2pass New Microsoft Exam Dumps Collection
Export date: Tue Jun 19 23:34:24 2018 / +0000 GMT
Lead2pass VMware 2V0-621D Latest Exam Dumps Download: QUESTION 11 A. Utilize the vmdir command. Answer: AB A. Virtual machine User Answer: AB A. CIM Server Answer: ACD - Replace the Root Certificate Which two steps would need to be performed next? (Choose two.) A. Replace Solution User Certificates (Intermediate CA) Answer: AC A. VMware Certificate Authority mode Answer: ABC A. A user granted administrative privileges in the Exception User list can login. A. Grant the users the administrator role and enable the service. A. Remove the root user account from the ESXi host. Answer: BC A. If administrative access for ESX Admins is not required, this setting can be altered. Answer: AC A. isolation.tools.unity.push.update.disable Answer: AB 2V0-621D dumps full version (PDF&VCE): https://www.lead2pass.com/2v0-621d.html Large amount of free 2V0-621D exam questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDa2xCVTdHZXoxYjA
Which two methods are recommended for managing the VMware Directory Service? (Choose two.)
B. Manage through the vSphere Web Client.
C. Manage using the VMware Directory Service.
D. Utilize the dc rep command.
To manage VMware directory service, you can use vmdir command and vsphere web client. VMware directory service is always managed using vmdir command which is specifically used for directory services.
What are two sample roles that are provided with vCenter Server by default? (Choose two.)
B. Network Administrator
C. Content Library Administrator
D. Storage Administrator
Which three services can be enabled/disabled in the Security Profile for an ESXi host? (Choose three.)
B. Single Sign-On
C. Direct Console UI
D. Syslog Server
E. vSphere Web Access
An administrator would like to use the VMware Certificate Authority (VMCA) as an Intermediate Certificate Authority (CA). The first two steps performed are:
- Replace Machine Certificates (Intermediate CA)
B. Replace the VMware Directory Service Certificate (Intermediate CA)
C. Replace the VMware Directory Service Certificate
D. Replace Solution User Certificates
You can replace the VMCA root certificate with a third-party CA-signed certificate that includes VMCA in the certificate chain. Going forward, all certificates that VMCA generates include the full chain. You can replace existing certificates with newly generated certificates. This approach combines the security of third-party CA-signed certificate with the convenience of automated certificate management.
Which three options are available for ESXi Certificate Replacement? (Choose three.)
B. Custom Certificate Authority mode
C. Thumbprint mode
D. Hybrid Deployment
E. VMware Certificate Endpoint Authority Mode
You can perform different types of certificate replacement depending on company policy and requirements for the system that you are configuring. You can perform each replacement with the vSphere Certificate Manager utility or manually by using the CLIs included with your installation.
VMCA is included in each Platform Services Controller and in each embedded deployment. VMCA provisions each node, each vCenter Server solution user, and each ESXi host with a certificate that is signed by VMCA as the certificate authority. vCenter Server solution users are groups of vCenter Server services. See vSphere Security for a list of solution users.
You can replace the default certificates. For vCenter Server components, you can use a set of command-line tools included in your installation. You have several options.
Lockdown Mode has been enabled on an ESXi 6.x host and users are restricted from logging into the Direct Console User Interface (DCUI).
Which two statements are true given this configuration? (Choose two.)
B. A user defined in the DCUI.Access without administrative privileges can login.
C. A user defined in the ESXi Admins domain group can login.
D. A user set to the vCenter Administrator role can login.
Strict Lockdown Mode has been enabled on an ESXi host.
Which action should an administrator perform to allow ESXi Shell or SSH access for users with administrator privileges?
B. Add the users to Exception Users and enable the service.
C. No action can be taken, Strict Lockdown Mode prevents direct access.
D. Add the users to vsphere.local and enable the service.
A common root user account has been configured for a group of ESXi 6.x hosts.
Which two steps should be taken to mitigate security risks associated with this configuration? (Choose two.)
B. Set a complex password for the root account and limit its use.
C. Use ESXi Active Directory capabilities to assign users the administrator role.
D. Use Lockdown mode to restrict root account access.
To address the security risks, you need to set a complex password for the root account and make sure only authorized personnel use it. The second step is to use ESXi active directory to assign the administrator role to users.
An administrator wants to configure an ESXi 6.x host to use Active Directory (AD) to manage users and groups. The AD domain group ESX Admins is planned for administrative access to the host.
Which two conditions should be considered when planning this configuration? (Choose two.)
B. The users in ESX Admins are not restricted by Lockdown Mode.
C. An ESXi host provisioned with Auto Deploy cannot store AD credentials.
D. The users in ESX Admins are granted administrative privileges in vCenter Server.
The setting can be altered if administrative access for ESX admins is not required. The second rule is that the ESX admins users should not be restricted by Lockdown mode.
Which two advanced features should be disabled for virtual machines that are only hosted on a vSphere system? (Choose two.)
Because VMware virtual machines run in many VMware products in addition to vSphere, some virtual machine parameters do not apply in a vSphere environment. Although these features do not appear in vSphere user interfaces, disabling them reduces the number of vectors through which a guest operating system could access a host. Use the following .vmx setting to disable these features:
isolation.tools.unity.push.update.disable = "TRUE" isolation.tools.ghi.l"unch"enu.change = "TRUE" isolation.tools.ghi.a"tolo"on.disable = "TRUE" isolation.tools.hgfsS"rver"et.disable = "TRUE" isolation.tools.memSc"edFa"eSampleStats.disable = "TRUE" isolation.tools.getCr"ds.d"sable = "TRUE"
Lead2pass VMware 2V0-621D Latest Exam Dumps Download:
A. Utilize the vmdir command.
A. Virtual machine User
A. CIM Server
- Replace the Root Certificate
Which two steps would need to be performed next? (Choose two.)
A. Replace Solution User Certificates (Intermediate CA)
A. VMware Certificate Authority mode
A. A user granted administrative privileges in the Exception User list can login.
A. Grant the users the administrator role and enable the service.
A. Remove the root user account from the ESXi host.
A. If administrative access for ESX Admins is not required, this setting can be altered.
2V0-621D dumps full version (PDF&VCE): https://www.lead2pass.com/2v0-621d.html
Large amount of free 2V0-621D exam questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDa2xCVTdHZXoxYjA
Post date: 2018-03-12 09:41:57
Post date GMT: 2018-03-12 09:41:57
Post modified date: 2018-03-12 09:41:57
Post modified date GMT: 2018-03-12 09:41:57
Powered by [ Universal Post Manager ] plugin. MS Word saving format developed by gVectors Team www.gVectors.com