VCP-DCV vSphere Security Practice Question
Which TWO actions are recommended to secure the vCenter Server Appliance (VCSA)?
⚠ Common exam trap
A common mix-up: candidates confuse 'recommended security actions' with 'all possible security configurations,' leading them to select options like enabling FIPS or configuring password policies, which are not the two primary actions emphasized in VMware's official security hardening guidance for the VCSA.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Change the default 'root' password
Changing the default 'root' password is a fundamental security best practice for the VCSA. The default password is well-known and documented, leaving the appliance vulnerable to unauthorized access if not changed immediately after deployment. This action directly mitigates the risk of brute-force or credential-based attacks against the root account.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable the auto-lock feature for the admin account
Why it's wrong here
Auto-lock is not a VCSA feature.
- ✓
Change the default 'root' password
Why this is correct
Default passwords should be changed.
- ✓
Disable SSH access
Why this is correct
Disabling SSH reduces attack surface.
- ✗
Configure the password policy for local accounts
Why it's wrong here
Already enforced by default.
- ✗
Enable FIPS 140-2 compliance mode
Why it's wrong here
Optional, not always recommended.
Go deeper
Related to this question
About these practice questions
This VCP-DCV question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.