VCP-DCV vSphere Security Practice Question

Correct answer & explanation

Enable FIPS 140-2 mode on the vCenter Server appliance. When deploying vCenter Server in a DMZ, enabling FIPS 140-2 mode ensures that the appliance uses only FIPS-approved cryptographic algorithms, enhancing security and compliance. Option A is incorrect because joining the vCenter Server to the corporate Active Directory domain exposes it to domain-related attacks and increases the attack surface in the DMZ. Option B is incorrect because enabling SSH for remote administration is a security risk; SSH should be disabled unless absolutely necessary, and even then, it should be tightly controlled. Option D is incorrect because deleting the root user account is not a best practice; the root account is essential for system recovery and maintenance, and the recommended approach is to limit its use and enforce strong passwords.