VMware 3V0-21.23 Exam - Topic 2 Question 6 Discussion

Actual exam question for VMware's 3V0-21.23 exam

Question #: 6
Topic #: 2

[All 3V0-21.23 Questions]

An architect is tasked with creating a design for a vSphere-based solution.

Reviewing requirements with the security team, the architect makes the following design decision:

ESXi hosts in the environment will enable shell sandbox for SSH connections and the local ESXi shell

What is an implication of the design decision to enable shell sandboxing?

AOnly certain commands can be executed in the sandboxed shell

BOnly administrative accounts can access the sandbox shell

CAll commands executed in the sandbox shell will be logged

DThe vSphere 8 hosts will operate in strict lockdown mode

Show Suggested Answer

Suggested Answer: A

When the shell sandbox is enabled on ESXi hosts, it restricts the execution of commands within the shell to ensure that only authorized or safe commands are allowed. This provides a level of isolation that limits the potential for accidental or malicious commands to be run in the shell, enhancing security while still providing necessary administrative access.

by Lynelle at Mar 07, 2025, 02:21 PM

Limited Time Offer

25%

Off

Get Premium 3V0-21.23 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Iluminada

2 months ago

Wait, are all commands really logged? That seems excessive.

upvoted 0 times

...

William

2 months ago

I agree, that makes sense for security!

upvoted 0 times

...

Raina

3 months ago

Lockdown mode? That's a bit extreme, isn't it?

upvoted 0 times

...

Dulce

3 months ago

I think only admin accounts should access it, right?

upvoted 0 times

...

Angelo

3 months ago

Only certain commands can be executed in the sandboxed shell.

upvoted 0 times

...

Louann

3 months ago

Lockdown mode sounds familiar, but I don’t think that’s directly related to sandboxing. I’m stuck between A and C right now.

upvoted 0 times

...

Naomi

4 months ago

I practiced a similar question, and I think only admin accounts can access certain features, which makes me lean towards B.

upvoted 0 times

...

Inocencia

4 months ago

I’m not entirely sure, but I feel like logging commands in the sandbox shell could be important for security, so maybe C?

upvoted 0 times

...

Junita

4 months ago

I remember something about sandboxing limiting command execution, so I think A might be the right choice.

upvoted 0 times

...

Orville

4 months ago

Ah, I see. Shell sandboxing is about restricting access and logging commands. I think option C is the best answer here - all commands in the sandbox will be logged.

upvoted 0 times

...

Adelina

4 months ago

Okay, so shell sandboxing - that means only certain commands will be allowed, right? I'm leaning towards A, but I want to double-check the other options just to be sure.

upvoted 0 times

...

Yuonne

5 months ago

Hmm, I'm a little unsure about this one. I know shell sandboxing limits what commands can be run, but I'm not sure if that's the only implication. I'll need to think this through carefully.

upvoted 0 times

...

Elizabeth

5 months ago

This one seems straightforward - the key is understanding what shell sandboxing does. I think option A is the correct answer.

upvoted 0 times

...

Fallon

11 months ago

I'm going with B. Only admin accounts should be able to access that sandbox. Can't let just anyone play in there, you know?

upvoted 0 times

...

Alberta

11 months ago

Option C, of course! Logging all the commands in the sandbox shell is the way to go. Gotta keep that audit trail tight.

upvoted 0 times

...

Sabra

11 months ago

Enabling the shell sandbox? Sounds like a safe bet to me. At least we won't have any rogue users wreaking havoc in the shell, right?

upvoted 0 times

Nikita

10 months ago

That's right! Enabling shell sandboxing adds an extra layer of security by restricting certain commands and logging all activities.

upvoted 0 times

...

Carlee

10 months ago

C) All commands executed in the sandbox shell will be logged

upvoted 0 times

...

Alaine

10 months ago

A) Only certain commands can be executed in the sandboxed shell

upvoted 0 times

...

Shalon

11 months ago

That's a good point, Denny. It could be a way to track and monitor any changes made in the environment.

upvoted 0 times

...

Denny

11 months ago

But wouldn't it also mean that all commands executed in the sandbox shell will be logged?

upvoted 0 times

...

Stefania

11 months ago

I agree with Lilli, it makes sense to limit the commands that can be run for security reasons.

upvoted 0 times

...

Lilli

12 months ago

I think the implication is that only certain commands can be executed in the sandboxed shell.

upvoted 0 times

...