36979019
Description
Quiz by Paul Bachan, updated more than 1 year ago
|
Created by Paul Bachan
almost 2 years ago
|
|
Question 1
Question
1.) You are preparing to import certificates for your vSphere environment. Which of the following is not a requirement?
Answer
-
A.) x509 Version 3
-
B.) PKCS8 and PKCS1 PEM format
-
C.) Digital signature and key encipherment keys
-
D.) 1024- to 16,384-bit keys
Question 2
Question
2.) You are making plans for ESXi host certificates. Which of the following is not a valid certificate mode?
Answer
-
A.) VMware Endpoint Certificate Store Mode
-
B.) VMware Certificate Authority Mode
-
C.) Custom Certificate Authority Mode
-
D.) Thumbprint Mode
Question 3
Question
3.) You are preparing to apply permissions in vCenter Server. Which of the following is a system role?
Answer
-
A.) Read-only
-
B.) Virtual machine user
-
C.) Datastore consumer
-
D.) Content library administrator
Question 4
Question
4.) You are configuring permissions in vCenter Server. Which privilege is required for a user to use Storage vMotion to migrate a virtual machine?
Answer
-
A.) Resource.Migrate Powered On Virtual Machine
-
B.) Resource.Migrate Powered Off Virtual Machine
-
C.) Resource.Assign Virtual Machine to Resource Pool on the Cluster
-
D.) Resource.Assign Virtual Machine to Resource Pool on the VM Folder
Question 5
Question
5. You are hardening your ESXi hosts. Which of the following is true concerning normal lockdown mode?
Answer
-
A.) All users with administrator privileges on the host can access the DCUI.
-
B.) All users in the Exception Users list can access the DCUI.
-
C.) No one can access the DCUI.
-
D.) Users identified in the host’s DCUI.Access advanced option can access the DCUI.
Question 6
Question
6.) You are creating user accounts in the vCenter SSO domain. With default settings, which of the following is a valid password?
Answer
-
A.) VMware1!
-
B.) VMworld!
-
C.) VMwareR0cks
-
D.) VMwarerocks!!
Question 7
Question
7.) You are configuring IPsec on your ESXi hosts. Which of the following commands can you use to list the available security associations on an ESXi host?
Answer
-
A.) esxcli network ipsec sa list
-
B.) esxcli network ip ipsec sa list
-
C.) esxcli network ip ipsec list
-
D.) esxcli network ip sa list
Question 8
Question
8.) You want to migrate virtual machines across vCenter instances. Which of the following statements is true concerning vMotion migration across vCenter Server instances?
Answer
-
A.) For encrypted vMotion migration, you can use the vSphere Client.
-
B.) For encrypted vMotion migration, you must use the vSphere APIs.
-
C.) vMotion migration of encrypted virtual machines is not supported.
-
D.) Encrypted vMotion migration of non-encrypted virtual machines is not supported.
Question 9
Question
9.) You are hardening virtual machines in your vSphere 7 environment. Which of the following options can be set to TRUE to disable an unexposed feature?
Answer
-
A.) tools.guestlib.enableHostInfo
-
B.) tools.setInfo.sizeLimit
-
C.) vmx.log.keepOld
-
D.) isolation.tools.ghi.launchmenu.change
Question 10
Question
10.) You want to use microsegmentation to protect the applications and data in your vSphere environment. What should you implement?
Answer
-
A.) VMware AppDefense
-
B.) VMware NSX
-
C.) VMware vRealize Automation
-
D.) VMware vRealize Log Insight
Want to create your own Quizzes for free with GoConqr? Learn more.