VCP-DCV vSphere Security Practice Question
Exhibit
Refer to the exhibit. ``` ~ # esxcli system security lockdown list Enabled: true Mode: Normal Exception users: root Command list for exception users: term vimsh ```
An administrator runs the above command on an ESXi host. Which of the following is true about this host?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Root user can still access the DCUI or SSH using the allowed exception commands.
The command output shows that lockdown mode is enabled, root is listed as an exception user, and the allowed exception commands are 'terminal' and 'vimsh'. In normal lockdown mode (not strict), exception users retain access to the DCUI and SSH using only the permitted commands. Therefore, root can still access the DCUI or SSH via the allowed commands, making option A correct. Option B is incorrect because lockdown mode is indeed enabled. Option C is incorrect because the exception user can only run the specified commands, not any command. Option D is incorrect because the presence of exception commands indicates normal lockdown mode, not strict lockdown.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Root user can still access the DCUI or SSH using the allowed exception commands.
Why this is correct
Root is an exception and has access to term and vimsh.
- ✗
Lockdown mode is not enabled.
Why it's wrong here
The output shows Enabled: true.
- ✗
The exception user can run any command via the DCUI.
Why it's wrong here
Only the listed commands (term, vimsh) are allowed.
- ✗
The host is in strict lockdown mode.
Why it's wrong here
Strict lockdown would not have exception users.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VCP-DCV question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.