Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

VMware Exam 3V0-21.23 Topic 2 Question 6 Discussion

Actual exam question for VMware's 3V0-21.23 exam
Question #: 6
Topic #: 2
[All 3V0-21.23 Questions]

An architect is tasked with creating a design for a vSphere-based solution.

Reviewing requirements with the security team, the architect makes the following design decision:

ESXi hosts in the environment will enable shell sandbox for SSH connections and the local ESXi shell

What is an implication of the design decision to enable shell sandboxing?

Show Suggested Answer Hide Answer
Suggested Answer: A

When the shell sandbox is enabled on ESXi hosts, it restricts the execution of commands within the shell to ensure that only authorized or safe commands are allowed. This provides a level of isolation that limits the potential for accidental or malicious commands to be run in the shell, enhancing security while still providing necessary administrative access.


Contribute your Thoughts:

Fallon
1 days ago
I'm going with B. Only admin accounts should be able to access that sandbox. Can't let just anyone play in there, you know?
upvoted 0 times
...
Alberta
3 days ago
Option C, of course! Logging all the commands in the sandbox shell is the way to go. Gotta keep that audit trail tight.
upvoted 0 times
...
Sabra
4 days ago
Enabling the shell sandbox? Sounds like a safe bet to me. At least we won't have any rogue users wreaking havoc in the shell, right?
upvoted 0 times
...
Shalon
5 days ago
That's a good point, Denny. It could be a way to track and monitor any changes made in the environment.
upvoted 0 times
...
Denny
16 days ago
But wouldn't it also mean that all commands executed in the sandbox shell will be logged?
upvoted 0 times
...
Stefania
20 days ago
I agree with Lilli, it makes sense to limit the commands that can be run for security reasons.
upvoted 0 times
...
Lilli
29 days ago
I think the implication is that only certain commands can be executed in the sandboxed shell.
upvoted 0 times
...

Save Cancel