VCP-DCV vSphere Security Practice Question
Which TWO of the following are valid methods to restrict access to the ESXi host's Direct Console User Interface (DCUI) to authorized administrators only?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable lockdown mode and add only authorized administrators to the Exception Users list.
Options B and D are correct. Enabling lockdown mode and adding only authorized administrators to the Exception Users list restricts DCUI access to those users. Setting the advanced option 'DCUI.Access' to a list of authorized users also restricts DCUI access. Option A is incorrect because disabling SSH does not affect DCUI access; DCUI is accessed directly from the console, not via SSH. Option C is incorrect because the root user cannot be removed from the DCUI local users list. Option E is incorrect because Active Directory integration does not restrict DCUI access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disable SSH access on the host to prevent remote DCUI access.
Why it's wrong here
SSH is separate from DCUI; disabling SSH does not affect local DCUI access.
- ✓
Enable lockdown mode and add only authorized administrators to the Exception Users list.
Why this is correct
Lockdown mode restricts DCUI access to users in the Exception Users list.
- ✗
Remove the root user from the DCUI local users list.
Why it's wrong here
The root user cannot be removed; it is built-in.
- ✓
Set the advanced option 'DCUI.Access' to a list of authorized users.
Why this is correct
This advanced option restricts which users can access the DCUI.
- ✗
Configure Active Directory integration and use group policy to disable DCUI.
Why it's wrong here
Active Directory integration does not control DCUI access; it requires authentication but not restriction.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VCP-DCV question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.