VMware Certified Professional 6 – Data Center Virtualization: 2V0-621

Correct Answer: A

Global Permissions Global permissions are applied to a global root object that spans solutions, for example, both vCenter Server and vCenter Orchestrator. Use global permissions to give a user or group privileges for all objects in all object hierarchies. Each solution has a root object in its own object hierarchy. The global root object acts as a parent object to each solution object. You can assign global permissions to users or groups, and decide on the role for each user or group. The role determines the set of privileges. You can assign a predefined role or create custom roles. See Using Roles to Assign Privileges. It is important to distinguish between vCenter Server permissions and global permissions.

Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUIDC7702E31-1623-4189-89CB-E1136AA27972.html

Correct Answer: AB

Removing Unnecessary Hardware Devices Any enabled or connected device represents a potential attack channel. Users and processes without privileges on a virtual machine can connect or disconnect hardware devices, such as network adapters and CD-ROM drives. Attackers can use this capability to breach virtual machine security. Removing unnecessary hardware devices can help prevent attacks. Use the following guidelines to increase virtual machine security.

Reference:

https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID822B2ED3-D8D2-4F57-8335-CA46E915A729.html

Correct Answer: ABD

ESXi Certificate Replacement

For ESXi hosts, you can change certificate provisioning behavior from the vSphere Web Client.

VMware Certificate Authority mode (default)

When you renew certificates from the vSphere Web Client, VMCA issues the certificates for the hosts. If

you changed the VMCA root certificate to include a certificate chain, the host certificates include the full

chain.

Custom Certificate Authority mode

Allows you to manually update and use certificates that are not signed or issued by VMCA.

Thumbprint mode

Can be used to retain 5.5 certificates during refresh. Use this mode only temporarily in debugging

situations.

Referance:

https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%2FGUID4469A6D3-048A-471C-9CB4-518A15EA2AC0.html