Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

VMware 3V0-21.23 Exam - Topic 2 Question 6 Discussion

An architect is tasked with creating a design for a vSphere-based solution.Reviewing requirements with the security team, the architect makes the following design decision:ESXi hosts in the environment will enable shell sandbox for SSH connections and the local ESXi shellWhat is an implication of the design decision to enable shell sandboxing?
A) Only certain commands can be executed in the sandboxed shell
B) Only administrative accounts can access the sandbox shell
C) All commands executed in the sandbox shell will be logged
D) The vSphere 8 hosts will operate in strict lockdown mode

VMware 3V0-21.23 Exam - Topic 2 Question 6 Discussion

Actual exam question for VMware's 3V0-21.23 exam
Question #: 6
Topic #: 2
[All 3V0-21.23 Questions]

An architect is tasked with creating a design for a vSphere-based solution.

Reviewing requirements with the security team, the architect makes the following design decision:

ESXi hosts in the environment will enable shell sandbox for SSH connections and the local ESXi shell

What is an implication of the design decision to enable shell sandboxing?

Show Suggested Answer Hide Answer
Suggested Answer: A

When the shell sandbox is enabled on ESXi hosts, it restricts the execution of commands within the shell to ensure that only authorized or safe commands are allowed. This provides a level of isolation that limits the potential for accidental or malicious commands to be run in the shell, enhancing security while still providing necessary administrative access.


by Lynelle at Mar 07, 2025, 02:21 PM

Limited Time Offer

25%

Off

Get Premium 3V0-21.23 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Iluminada
9 months ago
Wait, are all commands really logged? That seems excessive.
upvoted 0 times
...
William
9 months ago
I agree, that makes sense for security!
upvoted 0 times
...
Raina
10 months ago
Lockdown mode? That's a bit extreme, isn't it?
upvoted 0 times
...
Dulce
10 months ago
I think only admin accounts should access it, right?
upvoted 0 times
...
Angelo
10 months ago
Only certain commands can be executed in the sandboxed shell.
upvoted 0 times
...
Louann
10 months ago
Lockdown mode sounds familiar, but I don’t think that’s directly related to sandboxing. I’m stuck between A and C right now.
upvoted 0 times
...
Naomi
11 months ago
I practiced a similar question, and I think only admin accounts can access certain features, which makes me lean towards B.
upvoted 0 times
...
Inocencia
11 months ago
I’m not entirely sure, but I feel like logging commands in the sandbox shell could be important for security, so maybe C?
upvoted 0 times
...
Junita
11 months ago
I remember something about sandboxing limiting command execution, so I think A might be the right choice.
upvoted 0 times
...
Orville
11 months ago
Ah, I see. Shell sandboxing is about restricting access and logging commands. I think option C is the best answer here - all commands in the sandbox will be logged.
upvoted 0 times
...
Adelina
11 months ago
Okay, so shell sandboxing - that means only certain commands will be allowed, right? I'm leaning towards A, but I want to double-check the other options just to be sure.
upvoted 0 times
...
Yuonne
12 months ago
Hmm, I'm a little unsure about this one. I know shell sandboxing limits what commands can be run, but I'm not sure if that's the only implication. I'll need to think this through carefully.
upvoted 0 times
...
Elizabeth
12 months ago
This one seems straightforward - the key is understanding what shell sandboxing does. I think option A is the correct answer.
upvoted 0 times
...
Fallon
1 year ago
I'm going with B. Only admin accounts should be able to access that sandbox. Can't let just anyone play in there, you know?
upvoted 0 times
...
Alberta
1 year ago
Option C, of course! Logging all the commands in the sandbox shell is the way to go. Gotta keep that audit trail tight.
upvoted 0 times
...
Sabra
1 year ago
Enabling the shell sandbox? Sounds like a safe bet to me. At least we won't have any rogue users wreaking havoc in the shell, right?
upvoted 0 times
Nikita
1 year ago
That's right! Enabling shell sandboxing adds an extra layer of security by restricting certain commands and logging all activities.
upvoted 0 times
...
Carlee
1 year ago
C) All commands executed in the sandbox shell will be logged
upvoted 0 times
...
Alaine
1 year ago
A) Only certain commands can be executed in the sandboxed shell
upvoted 0 times
...
...
Shalon
1 year ago
That's a good point, Denny. It could be a way to track and monitor any changes made in the environment.
upvoted 0 times
...
Denny
2 years ago
But wouldn't it also mean that all commands executed in the sandbox shell will be logged?
upvoted 0 times
...
Stefania
2 years ago
I agree with Lilli, it makes sense to limit the commands that can be run for security reasons.
upvoted 0 times
...
Lilli
2 years ago
I think the implication is that only certain commands can be executed in the sandboxed shell.
upvoted 0 times
...

Save Cancel