Accurate & Verified 2026 New 3V0-21.23 Answers As Experienced in the Actual Test!
3V0-21.23 Certification Sample Questions certification Exam
NEW QUESTION # 31
During a requirements gathering workshop, the customer's Chief Information Security Office (CISO) provides the following requirements that are pertinent to the design of a new vSphere environment:
- All operating system critical patches must be installed within 24 hours of release.
- All virtual machine templates must be updated every three months in line with company policy.
Which requirement classification is being gathered for the design documentation?
- A. Availability
- B. Manageability
- C. Security
- D. Recoverability
Answer: B
Explanation:
Lifecycle managment and patch definition is cover by Manageability Nonfunctional requirement.
https://securityboulevard.com/2020/12/building-non-functional-requirements-framework- requirements-categories/
NEW QUESTION # 32
A company will be replacing the external storage array that is currently providing storage to the vSphere environment. The architect must design a storage architecture for existing and future workloads. Company policy required storage separation of workloads by departments.
Which design decision should the architect make to satisfy the requirement and scale for additional departments?
- A. Use one storage volume per existing department and extend current volumes for new departments.
- B. Use storage volumes based on applications.
- C. Use N + 1 storage volumes for current and future workloads.
- D. Use one storage volume per department and create new volumes for new departments.
Answer: D
Explanation:
The company policy requires storage separation of workloads by departments. To meet this requirement, the architect should design the storage architecture to create a dedicated storage volume for each department. This approach allows for logical separation of each department's data, ensuring that workloads from one department are isolated from the others.
Creating new storage volumes for new departments provides scalability. As new departments are added, new volumes can be provisioned without affecting the existing volumes or requiring reconfiguration of the existing department's storage.
NEW QUESTION # 33
Following a review of security requirements, an architect has confirmed the following requirements:
REQ001- A clustered firewall solution must be placed at the perimeter of the hosting platform, and all ingress and egress network traffic will route via this device.
REQ002- A distributed firewall solution must secure traffic for all virtualized workloads.
REQ003- All virtualized workload, hypervisor, firewall and any management component system events must be monitored by security administrators.
REQ004- The hosting platforms security information and event management (SIEM) system must be scalable to 20,000 events per second.
REQ005- The hosting platforms storage must be configured with data-at-rest encryption.
REQ006- The hosting platform limits access to authorized users.
Which three requirements would be classified as technical (formerly non-functional) requirements? (Choose three.)
- A. The hosting platform limits access to authorized users.
- B. The hosting platforms storage must be configured with data-at-rest encryption.
- C. The hosting platforms security information and event management (SIEM) system must be scalable to
20,000 events per second. - D. A clustered firewall solution must be placed at the perimeter of the hosting platform, and all ingress and egress network traffic will route via this device.
- E. All virtualized workload, hypervisor, firewall and any management component system events must be monitored by security administrators.
- F. A distributed firewall solution must secure traffic for all virtualized workloads.
Answer: B,C,D
Explanation:
A clustered firewall solution must be placed at the perimeter of the hosting platform, and all ingress and egress network traffic will route via this device:
This is a technical requirement because it specifies how network traffic is to be managed through a specific infrastructure element (the firewall). It outlines how the security device is implemented in the network architecture.
The hosting platform's security information and event management (SIEM) system must be scalable to 20,000 events per second:
This is a technical requirement because it deals with the scalability and performance of the SIEM system. It specifies how the system must handle a large volume of data, which is a technical characteristic of the infrastructure.
The hosting platform's storage must be configured with data-at-rest encryption:
This is also a technical requirement because it defines how the data should be stored securely, which is an implementation detail. It specifies that encryption needs to be applied to stored data, a feature related to storage infrastructure.
NEW QUESTION # 34
An architect is designing a backup solution.
Which two statements should be included in the logical design for this solution? (Choose two.)
- A. The database must be backed up even/ day duringthe maintenance window of 1:00AM and 3:00AM.
- B. The network that will beused for backups will be configured to use VLAN ID 1511.
- C. The database will be backed up using an API-based backup solution.
- D. The company's existing backup solution will be unsupported by the third-party vendor in six months.
- E. The bkp-nfs-01 datastore will be used for backups.
Answer: A,C
Explanation:
The database must be backed up every day during the maintenance window of 1:00AM and 3:00AM.
This is a logical design requirement because it specifies the timing for the backup operations. It's important to define backup schedules to align with the maintenance window, ensuring minimal disruption to production workloads.
The database will be backed up using an API-based backup solution.
This is a logical design decision that specifies the method of backup. Using an API-based backup solution is a modern, efficient way to ensure consistent and application-aware backups of databases.
NEW QUESTION # 35
An architect is designing a new vSphere platform to meet a list of requirements from the security team.
Which two requirements would be classified as non-functional requirements- (Choose two.)
- A. A common content library must be maintained across all data centers
- B. Critical events generated within the platform must be logged to an external Syslog service
- C. Log information must be verbose to support incident resolution
- D. Migration of virtual machines between hosts must be encrypted
- E. Data integrity must be ensured
Answer: C,D
Explanation:
NFR provides attribute of a use case or a function.
A - Migration support could be a FR,but as it says encrypted it becomes NFR.
B - Logging would be a FR but calling out it should be verbose makes it NFR.
NEW QUESTION # 36
Which type of requirement focuses on the processing power and resources needed by the system?
- A. Performance requirements
- B. Network requirements
- C. Compute requirements
- D. Storage requirements
Answer: C
NEW QUESTION # 37
An architect is working on a new VMware vSphere design and notes the following information during interviews with stakeholders:
The company has previously worked with multiple VMware partners
The company has an internal security policy that is referenced in long running contracts The company has an Enterprise License Agreement (ELA) with VMware The company has a multi-year cloud subscription agreement Which of these is a business factor that will impact this design?
- A. The company has a multi-year cloud subscription agreement.
- B. The company has an Enterprise License Agreement (ELA) with VMware.
- C. The company has an internal security policy that is referenced in long running contracts.
- D. The company has previously worked with multiple VMware partners.
Answer: C
Explanation:
Based on VMware vSphere 8.x Advanced documentation and standard IT architecture practices, the architect is designing a new VMware vSphere solution and must identify a business factor that will impact the design.
A business factor is a high-level organizational or strategic consideration that influences the design, typically related to goals, policies, financial constraints, or contractual obligations, as opposed to technical or operational details.
Requirements Analysis:
Business factor: This refers to a non-technical, strategic element that shapes the vSphere design, such as corporate policies, financial agreements, or business objectives. It impacts decisions like security, compliance, licensing, or integration with existing strategies.
Provided information:
The company has worked with multiple VMware partners (historical vendor relationships).
The company has an internal security policy referenced in long-running contracts (compliance and security obligations).
The company has an Enterprise License Agreement (ELA) with VMware (licensing and cost structure).
The company has a multi-year cloud subscription agreement (cloud strategy alignment).
Evaluation of Options:
A). The company has previously worked with multiple VMware partners:
Why incorrect: While prior partnerships with VMware partners may influence vendor selection or implementation expertise, this is a historical operational detail, not a strategic business factor. It does not directly impact the design's architecture, such as security, licensing, or workload placement, unless explicitly tied to ongoing obligations (not indicated here).
VMware vSphere 8 design principles focus on business factors like policies or agreements, not past vendor relationships.
B). The company has an Enterprise License Agreement (ELA) with VMware:
Why incorrect: An ELA with VMware is a financial and licensing agreement that provides access to VMware products at a negotiated rate. While it influences cost and licensing choices (e.g., vSphere Enterprise Plus vs.
Standard), it is a contractual enabler rather than a primary business driver shaping the design's architecture.
The ELA ensures access to features but does not dictate specific design decisions like security or workload isolation.
Reference: VMware vSphere 8 documentation notes ELAs as cost-related considerations, secondary to strategic business factors like compliance.
C). The company has an internal security policy that is referenced in long running contracts:
Why correct: An internal security policy referenced in long-running contracts is a business factor because it represents a strategic, organizational requirement that directly impacts the vSphere design. Such policies typically mandate specific security controls (e.g., encryption, access controls, auditing) or compliance standards (e.g., GDPR, HIPAA) that must be incorporated into the architecture. Long-running contracts suggest external obligations (e.g., with customers or regulators), making compliance a critical business driver.
The design must align with these policies to ensure legal and contractual adherence, affecting decisions like VM encryption, network segmentation, or logging.
Reference: VMware vSphere 8 design best practices emphasize incorporating corporate security policies as business factors to ensure compliance and alignment with contractual obligations.
D). The company has a multi-year cloud subscription agreement:
Why incorrect: A multi-year cloud subscription agreement indicates a strategic commitment to cloud services (e.g., VMware Cloud on AWS or another provider). While this could influence hybrid cloud integration, it is a secondary consideration compared to the security policy, as it does not directly mandate specific design requirements for the on-premises vSphere solution. The agreement may suggest future cloud migration but does not inherently impact the current vSphere design's architecture.
Reference: VMware vSphere 8 documentation considers cloud strategies as business factors, but security policies take precedence when tied to contractual obligations.
Why C is the Best Choice:
Strategic impact: The internal security policy, especially when referenced in long-running contracts, is a critical business factor that drives design decisions to ensure compliance, security, and contractual adherence.
It may require specific vSphere features like VM Encryption, NSX firewalls, or audit logging.
Contractual obligations: Long-running contracts imply external commitments (e.g., to clients or regulators), elevating the policy's importance as a business driver over licensing (B) or cloud agreements (D).
Design influence: Security policies directly affect the vSphere architecture, influencing choices like network segmentation, encryption, access controls, and monitoring, making them a primary business factor.
Example Design Implications:
Security Policy Requirements: The policy may mandate data-at-rest encryption, prompting the use of vSphere VM Encryption or vSAN encryption.
Compliance: Contracts may require audit trails, leading to integration with VMware Aria Operations for logging or NSX for micro-segmentation.
Isolation: The policy may enforce workload isolation, influencing cluster design or NSX network policies.
NEW QUESTION # 38
As part of a new hybrid cloud initiative for a large financial company, the customer technical team is presenting an overview of the current state of the infrastructure and their vision for a new solution.
The project team captures notes during the presentation and adds them to the discovery documentation.
Which of the listed statements is a design constraint?
- A. The maximum tolerable data loss is 10 minutes
- B. The two data center locations have a network latency of 8 ms round-trip time (RTT)
- C. The existing storage is out of maintenance
- D. The applications are created in-house with in-guest recovery protection
Answer: B
Explanation:
Customer talks about a new Hybrid cloud solution. Therefore, vSAN comes to my mind as a great solution regarding storage and Hybrid cloud.
Based on the following information, network latency of 8 ms RTT will be considered a design constraint.
Data Site to Data Site Network Latency :
Data site to data site network refers to the communication between non-witness sites, in other words, sites that run virtual machines and hold virtual machine data. Latency or RTT (Round Trip Time) between sites hosting virtual machine objects should not be greater than 5msec (<
2.5msec one-way).
https://core.vmware.com/resource/vsan-stretched-cluster-guide#sec7310-sub3
NEW QUESTION # 39
An architect is responsible for the design of a greenfield vSphere-based solution for hosting a new web-based application. The customer has provided the following high-level information:
The solution will host a highly transactional web application that is spread across multiple workloads within a vSphere cluster.
The workloads should be distributed evenly across the hosts to maximize the performance and availability of the web application.
The architect has made various design decisions, including:
The solution will deploy vSphere distributed switches for all virtual networking.
Which network load balancing method should the architect document in the physical design to meet the requirements?
- A. Route Based on Originating Virtual Port
- B. Route Based on IP Hash
- C. Route Based on Physical NIC Load
- D. Route Based on Source MAC Hash
Answer: C
Explanation:
Based on VMware vSphere 8.x Advanced documentation and the customer requirements, the architect is designing a greenfield vSphere-based solution for a highly transactional web application hosted across multiple workloads in a vSphere cluster. The workloads must be distributed evenly across hosts to maximize performance and availability, and the solution will use vSphere Distributed Switches (vDS) for virtual networking. The architect must select a network load balancing method for the physical design that aligns with these requirements.
Requirements Analysis:
* Highly transactional web application: The application requires high network performance and low latency, as transactional workloads are sensitive to network bottlenecks.
* Workloads spread across multiple workloads in a vSphere cluster: The application runs on multiple VMs, implying a need for balanced resource utilization across hosts.
* Workloads distributed evenly across hosts: This suggests the use of vSphere features like Distributed Resource Scheduler (DRS) for compute load balancing and a network load balancing method to ensure even distribution of network traffic across NICs.
* Maximize performance and availability: The network design must avoid bottlenecks, ensure redundancy, and dynamically adapt to traffic demands to maintain application performance and uptime.
* vSphere Distributed Switches: vDS provides advanced networking features like Network I/O Control (NIOC), Link Aggregation Control Protocol (LACP), and dynamic load balancing, which are critical for meeting performance and availability goals.
Evaluation of Network Load Balancing Methods:
The load balancing method determines how traffic from VMs is distributed across the physical NICs (uplinks) in a vDS. The options are:
* A. Route Based on IP Hash:
* Description: Distributes traffic based on a hash of the source and destination IP addresses, requiring Link Aggregation Control Protocol (LACP) or EtherChannel configuration on the physical switch.
* Why incorrect: While IP Hash can distribute traffic across NICs, it requires complex switch configuration and is less effective for dynamic load balancing in a highly transactional environment. It does not adapt to real-time NIC load, which could lead to uneven traffic distribution and potential bottlenecks, failing to maximize performance. It also increases complexity without clear benefits for this use case.
* B. Route Based on Physical NIC Load:
* Description: Also known as Load-Based Teaming (LBT), this method dynamically balances traffic across uplinks based on the actual load of each physical NIC, reassigning VM traffic if a NIC becomes congested (e.g., exceeds 75% utilization over a 30-second window).
* Why correct: LBT is ideal for a highly transactional web application, as it ensures even distribution of network traffic across NICs, maximizing performance by preventing any single NIC from becoming a bottleneck. It supports availability by leveraging multiple NICs for redundancy and dynamically adapting to traffic patterns, aligning with the requirement to distribute workloads evenly. LBT works seamlessly with vDS and does not require complex switch configurations, making it suitable for a greenfield design. Combined with features like NIOC, it ensures optimal network resource utilization for the application.: VMware vSphere 8 networking documentation recommends Route Based on Physical NIC Load for dynamic load balancing in performance-sensitive environments.
C: Route Based on Originating Virtual Port:
Description: Assigns each VM's traffic to a physical NIC based on the VM's virtual port ID on the vDS, distributing traffic statically across uplinks.
Why incorrect: This method is simple and requires no switch configuration, but it does not account for actual NIC load, potentially leading to uneven traffic distribution if some VMs (e.g., transactional workloads) generate more traffic than others. It fails to maximize performance for a highly transactional application, as it cannot dynamically adapt to traffic spikes or ensure even NIC utilization.
D: Route Based on Source MAC Hash:
Description: Distributes traffic based on a hash of the VM's source MAC address, statically assigning traffic to uplinks.
Why incorrect: Similar to Originating Virtual Port, this method is static and does not consider real-time NIC load, risking uneven traffic distribution and potential bottlenecks. It is less effective for a highly transactional application where dynamic load balancing is needed to ensure performance and availability.
Why B is the Best Choice:
Performance optimization: Route Based on Physical NIC Load dynamically balances traffic based on NIC utilization, ensuring no single NIC is overwhelmed, which is critical for a highly transactional web application with variable traffic patterns.
Even distribution: By monitoring and redistributing traffic, LBT aligns with the requirement to distribute workloads evenly across hosts, complementing DRS for compute resources with balanced network utilization.
Availability: LBT leverages multiple NICs for redundancy, ensuring traffic failover if a NIC fails, supporting the high availability needs of the application.
vDS compatibility: LBT is fully supported on vDS and integrates with features like NIOC to prioritize application traffic, enhancing performance and resilience.
Simplicity: Unlike IP Hash, LBT requires no complex switch configuration, making it ideal for a greenfield design.
Example Configuration:
vDS Setup: Configure a vDS with multiple uplink port groups for management, vMotion, and workload traffic (web application VMs).
Load Balancing: Set Route Based on Physical NIC Load for the workload port group to dynamically balance the application's transactional traffic across available NICs (e.g., 2-4 x 10 GbE NICs per host).
NIOC: Use Network I/O Control to prioritize web application traffic over other traffic types (e.g., vMotion) during contention.
Redundancy: Ensure at least two NICs per port group for failover, aligning with availability requirements.
NEW QUESTION # 40
Following a recent acquisition, an architect needs to merge IT assets into its current data center.
The combined vSphere environment will need to run the newly acquired company's virtual machines.
Network integration work has already been completed and the current environment has capacity to host all virtual machines. The Operations team needs to identify which virtual machines belong to the acquired company and report on their usage.
How should the architect merge the company's assets and virtual machines?
- A. Leave the newly acquired company's assets in its current place
- B. Migrate and apply vSphere tags to the acquired company's virtual machines
- C. Migrate the acquired company's virtual machines into the existing vSphere environment
- D. Lift and shift the acquired assets into the data center
Answer: B
Explanation:
The Operations team needs to identify which virtual machines belong to the acquired company and report on their usage.
We can use tags to report on usage.
NEW QUESTION # 41
What does a single-site deployment design entail?
- A. Deploying vCenter Server across multiple data centers in different regions.
- B. Deploying vCenter Server in a highly available configuration within a single data center.
- C. Deploying vCenter Server on multiple physical servers for load balancing.
- D. Deploying vCenter Server on a single virtual machine.
Answer: B
NEW QUESTION # 42
What is the purpose of creating a vSphere storage logical design?
- A. To identify the specific tasks and operations vSphere storage should perform.
- B. To determine the hardware and infrastructure requirements for vSphere storage.
- C. To provide an abstract representation of vSphere storage components and their interconnections.
- D. To ensure the design meets the required industry regulations and standards.
Answer: C
NEW QUESTION # 43
What does the term "Recoverability" refer to in the AMPRSS framework?
- A. Ensuring that only authorized users can access the system.
- B. The process of restoring data and services after a failure.
- C. Monitoring and managing the system's resources efficiently.
- D. The ability of the system to withstand increased user demands.
Answer: B
NEW QUESTION # 44
A company is expanding an existing vSphere deployment to meet new demands from the business. The following requirements have been identified for the expanded infrastructure:
REQ001- It must support enhanced vMotion compatibility (EVC) mode for Intel "Nehalem" Generation (Intel Xeon Core i7) processors.
REQ002- It must be accessible via an API.
REQ003- It must support a variety of operating systems.
REQ004- It must notify administrators whenever a virtual machine is connected to more than one network.
Which requirement would be classified as a technical (formerly non-functional) requirement?
- A. It must notify administrators whenever a virtual machine is connected to more than one network.
- B. It must support enhanced vMotion compatibility (EVC) mode for Intel "Nehalem" Generation (Intel Xeon Core i7) processors.
- C. It must support a variety of operating systems.
- D. It must be accessible via an API.
Answer: D
NEW QUESTION # 45
Refer to the exhibit.
An architect is assigned a new project to design a VMware hybrid cloud solution.
The project is following a proven design methodology following the V-Model of systems engineering and verification. The selected methodology follows these phases: Assess, Design, Deploy and Validate.
Which activity would be conducted during the Design phase?
- A. The architect conducts a series of group interviews with stakeholders
- B. The architect resolves configuration issues and addresses concerns
- C. The architect helps stakeholders learn the mechanics of the solution
- D. The architect defines the scope of the project
Answer: A
Explanation:
Design phase: The purpose of the Design phase is to define how the solution will meet the specific requirements. During this phase, the architect works closely with stakeholders to understand their needs and translate those needs into a technical design. A key activity in this phase often involves refining the solution details through interviews and discussions with key stakeholders to ensure that the design aligns with the business and technical requirements.
NEW QUESTION # 46
An architect is tasked with an application migration to a new VMware Cloud platform. The application service owner assistance from the architect to identify the technical requirements of the application.
The following has been made available following initial discussions:
A VMware Aria Operations report containing current resource usage
The output from a planning session including a roadmap for planned service growth A service dependency map from the company's IT operations management tool The desired consolidation ratio for the target platform is 10:1 The applications hosting budget is reducing by 10% Which two contain the technical requirements of the application? (Choose two.)
- A. The output from a planning session including a roadmap for planned service growth
- B. The applications hosting budget is reducing by 10%
- C. A VMware Aria Operations report containing current resource usage
- D. The desired consolidation ratio for the target platform is 10:1
- E. A service dependency map from the company's IT operations management tool
Answer: C,D
Explanation:
The desired consolidation ratio for the target platform is 10:1:
The consolidation ratio is a key technical requirement as it directly influences the planning for the deployment and resource allocation in the new VMware Cloud platform. It defines how many virtual machines can be consolidated per physical host in the target environment, which is critical for the sizing and resource planning.
A VMware Aria Operations report containing current resource usage:
The VMware Aria Operations report provides actual data on the current resource consumption of the application. This report is essential for understanding how much resource the application currently uses and helps in determining the necessary capacity in the target platform. This is a technical requirement since it informs resource allocation, scaling, and performance expectations.
NEW QUESTION # 47
Refer to the exhibit. During a requirements gathering workshop, a customer shares the following diagram regarding their availability service-level agreements (SLAs):
The customer states that there is no application level availability for legacy applications.
Which recommendation could the architect make to meet the customer's high availability requirements for the legacy applications virtual machines?
- A. Achieve application availability with snapshots
- B. Enable Fault Tolerance
- C. Enable vSphere HA and add a VM Override with VM Restart Priority set to Disabled
- D. Enable vSphere HA and add a VM Override with VM Restart Priority set to Lowest
Answer: B
NEW QUESTION # 48
What is the primary purpose of determining security requirements for a vSphere design?
- A. To identify the specific tasks and operations the vSphere system should perform.
- B. To optimize the network protocols and configurations for data transfer.
- C. To specify the expected levels of system performance and responsiveness.
- D. To ensure the confidentiality, integrity, and availability of data and resources in the vSphere environment.
Answer: D
NEW QUESTION # 49
An architect is redesigning a storage environment to provide simplified management of a VMware environment. The administrators have expressed the need to provision storage and apply a custom set of array features granularly to virtual machines. They will re-use their existing shared storage platform as it does support all modern VMware storage integrations.
Which two technologies or features are needed to support the requirements of this project? (Choose two.)
- A. vSphere Virtual Volumes (vVols)
- B. vSphere Storage DRS
- C. Raw Device Mappings (RDMs)
- D. Datastore Clusters
- E. vStorage APIs for Storage Awareness (VASA)
Answer: A,E
NEW QUESTION # 50
A customer has a database cluster with 40/60 read/write ratio and a high IOPs requirement with no contention on an all-flash vSAN cluster.
Which two storage settings should be configured for best performance? (Choose two.)
- A. RAID 5/6
- B. Deduplication and Compression enabled
- C. RAID 1
- D. IOPs limits enabled
- E. Deduplication and Compression disabled
Answer: C,E
NEW QUESTION # 51
An architect is designing an environment for a retail customer. The design will use a single small vCenter Server Appliance and a cluster of eight ESXi hosts at a remote site. There is a single 10 GbE connected network at the remote site to support all management services. It is not possible to create additional management networks at the remote site. Virtual machine backups at the site will be dependent on the vCenter Server being available.
Which design decision should the architect make to maximize availability for backups?
- A. The vCenter Server Appliance will be protected with vSphere Fault Tolerance.
- B. The cluster will be configured with vSphere HA and set to restart virtual machines based on guest operating system heartbeat monitoring.
- C. The cluster will be configured to use vSphere DRS in fully automated mode.
- D. vCenter Server High Availability will be configured.
Answer: A
NEW QUESTION # 52
An architect is tasked with designing a new VMware software-defined data center (SDDC) solution for an online retail customer who has a primary and secondary data center as well as 10 distribution hubs.
The customer has provided the following business requirements to help inform the design:
- The solution must support the running of up to 1,000 concurrent virtual machines across the primary and secondary data center.
- The solution must support the running of up to 20 concurrent virtual machines in each distribution hub.
- The solution must support the separation of management and lines-of-business application virtual machines.
- All management components (including directory services, backup, automation, operations and logging) must be deployed to the primary data center.
- All virtual infrastructure components must have redundancy of N+1.
- All sites are connected to each other using a wide area network that has multiple diversely routed links.
- The solution should support a monthly uptime target of 99.9%.
- The recovery time objective (RTO) for the solution must be four hours.
- The recovery point objective (RPO) for the solution must be 24 hours.
Given the information from the customer, which assumption should the architect include in the design?
- A. Each distribution hub should be configured with a backup device.
- B. All business application virtual machines can be deployed into a single cluster within the primary data center.
- C. The wide area network has sufficient bandwidth to support centralized management.
- D. Each cluster will have a minimum of four hosts.
Answer: C
Explanation:
As centralised management is needed from the primary datacenter and also backup deployment must be within primary DC so need to ensure enough bandwidth for this.
NEW QUESTION # 53
An architect is updating the design for a vSphere environment.
During a workshop focused on security, the following has been identified:
It has been determined that any configuration of ESXi hosts can only be completed via VMware vCenter The Direct Console User Interface (DCUI) service must be disabled on ESXi hosts The SSH service must be disabled on ESXi hosts Based on the information from the workshop, which element does the architect need to include in the design?
- A. Strict Lockdown Mode with a defined Exception User list
- B. Strict Lockdown Mode
- C. Normal Lockdown Mode
- D. Normal Lockdown Mode with a defined Exception User list
Answer: B
Explanation:
Strict Lockdown Mode is the correct choice because it restricts all access to the ESXi host directly, ensuring that configuration can only be performed through VMware vCenter. This is in line with the requirement that configuration can only be done via vCenter.
Strict Lockdown Mode disables the Direct Console User Interface (DCUI) and SSH services, which aligns with the customer's requirement to have these services disabled for security purposes.
NEW QUESTION # 54
......
VMware 3V0-21.23 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
Certification Topics of 3V0-21.23 Exam PDF Recently Updated Questions: https://www.dumpsvalid.com/3V0-21.23-still-valid-exam.html
3V0-21.23 Exam Prep Guide: Prep guide for the 3V0-21.23 Exam: https://drive.google.com/open?id=1WxyUooCAfB3bMpaC0yR0KN90dVtIgpRY