← Back to exam page

Free 2V0-11-25 – Vmware 2V0-11-25 Practice Test Question

Loading demo links...

Showing 4–6 of 6 questions

Question 4 (Topic 1)

Following an internal security audit of the new VMware Cloud Foundation (VCF) instance, the following audit finding was documented for priority remediation: All users from the custom administrators group could access the Direct Console User Interface (DCUI) on all ESXi hosts within the workload domain. RISK=High, IMPACT=High The company IT security policy around accessing ESXi servers states the following: Users within the custom administrators group must access ESXi host configurations from within vCenter Server or the vSphere Web Client only. Only users within the restricted administrators group must be allowed direct access to ESXi hosts. Which two actions should the administrator perform on each of the hosts within the workload domain to remediate the security finding? (Choose two.)

Select an option, then click Submit answer.

  • ○ Disable SSH and the ESXi Shell.
  • ○ Add the custom administrators group to the DCUI.Access advanced system setting.
  • ○ Add the restricted administrators group to the DCUI.Access advanced system setting.
  • ○ Enable Strict Lockdown Mode.
  • ○ Enable Normal Lockdown Mode.
Question 5 (Topic 1)

As part of the deployment of VMware Cloud Foundation (VCF), a cloud administrator has been tasked with deploying and configuring VMware Aria Suite Lifecycle. The VCF Management domain deployment has already completed successfully. What is the benefit of installing VMware Aria Suite Lifecycle in VCF mode compared to standalone mode?

Select an option, then click Submit answer.

  • ○ Removes all restrictions and requirements imposed for updating product admin passwords
  • ○ Flexible infrastructure selection in the VMware Aria Suite Lifecycle deployment wizards
  • ○ Allows customers to deploy VMware Aria Suite Lifecycle in a clustered configuration
  • ○ Automatic load balancer configuration for Aria components
Question 6 (Topic 1)

An administrator has been tasked with configuring the Tunnel Endpoint (TEP) IP addresses for an NSX Edge transport node for a VMware Cloud Foundation (VCF) VI workload domain. When using the SDDC Manager UI, how should IP addresses be assigned?

Select an option, then click Submit answer.

  • ○ Edge node TEP IPs must be assigned using DHCP.
  • ○ Edge node TEP IPs must be assigned using an NSX IP pool.
  • ○ Edge node TEP IPs must be assigned using SDDC Manager network pools.
  • ○ Edge node TEP IPs must be assigned statically.