VCP-DCV vSphere Security Practice Question
A vSphere administrator wants to restrict direct console access to an ESXi host to authorized administrators only, without interrupting running virtual machines. Which feature should the administrator enable?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Lockdown mode
Lockdown mode restricts direct access to the ESXi host via DCUI and SSH, but allows access through vCenter Server while VMs continue to run. Option B (Enable DRS) is wrong because DRS is for load balancing, not security. Option C (Configure a host profile) is wrong because host profiles configure settings but do not enforce access restriction. Option D (Disable SSH service) is wrong because disabling SSH alone does not restrict DCUI.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Lockdown mode
Why this is correct
Lockdown mode restricts direct access to the ESXi host via DCUI and SSH, but allows access through vCenter Server while VMs continue to run. This meets the requirement.
- ✗
Enable DRS
Why it's wrong here
DRS (Distributed Resource Scheduler) is for load balancing VMs across hosts, not for restricting direct console access.
- ✗
Configure a host profile
Why it's wrong here
Host profiles are used to standardize ESXi host configurations, but they do not enforce access restrictions on the console.
- ✗
Disable SSH service
Why it's wrong here
Disabling the SSH service only stops SSH access; it does not restrict the DCUI (Direct Console User Interface) or other direct console methods.
Go deeper
Related to this question
About these practice questions
One of 498 original VCP-DCV practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.