VMware 3V0-21.23 Exam - Topic 1 Question 27 Discussion

Actual exam question for VMware's 3V0-21.23 exam

Question #: 27
Topic #: 1

[All 3V0-21.23 Questions]

An architect is updating the design for a vSphere environment.

During a workshop focused on security, the following has been identified:

It has been determined that any configuration of ESXi hosts can only be completed via VMware vCenter

The Direct Console User Interface (DCUI) service must be disabled on ESXi hosts

The SSH service must be disabled on ESXi hosts

Based on the information from the workshop, which element does the architect need to include in the design?

AStrict Lockdown Mode

BNormal Lockdown Mode

CNormal Lockdown Mode with a defined Exception User list

DStrict Lockdown Mode with a defined Exception User list

Show Suggested Answer

Suggested Answer: A

Strict Lockdown Mode is the correct choice because it restricts all access to the ESXi host directly, ensuring that configuration can only be performed through VMware vCenter. This is in line with the requirement that configuration can only be done via vCenter.

Strict Lockdown Mode disables the Direct Console User Interface (DCUI) and SSH services, which aligns with the customer's requirement to have these services disabled for security purposes.

by Lashawna at Jul 16, 2026, 04:16 PM

Limited Time Offer

25%

1 month ago

I remember something about lockdown modes, but I'm not entirely sure which one fits best with disabling DCUI and SSH.

upvoted 0 times

...