VCP-DCV vSphere Security Practice Question
An administrator wants to configure the ESXi host firewall to allow connections only from a specific management subnet. How can this be achieved?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the ESXi firewall settings to define allowed IP addresses for the required services.
The ESXi host firewall can be configured with rule sets that allow traffic only from specific IP addresses or subnets. This is done by editing the firewall rules for the required services and specifying the allowed IP addresses. Option A is incorrect because vSphere HA is a high availability feature that does not manage firewall settings or control management traffic. Option C is incorrect because the DCUI (Direct Console User Interface) is used for local console configuration, not for setting firewall rules. Option D is incorrect because allowing all incoming connections would be insecure and not restrict access to a specific management subnet.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable vSphere HA and set it to control management traffic.
Why it's wrong here
vSphere HA does not control firewall rules.
- ✓
Use the ESXi firewall settings to define allowed IP addresses for the required services.
Why this is correct
The ESXi firewall allows per-rule IP-based restrictions.
- ✗
Configure the DCUI to restrict management access.
Why it's wrong here
DCUI is for local console lockdown, not network firewall.
- ✗
Set the firewall to enabled and allow all incoming connections.
Why it's wrong here
This would open the host to all management traffic.
Visual reference
Go deeper
Related to this question
About these practice questions
This VCP-DCV question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.