Vcp5- Dcv Study Guide Chapter 3: Securing Vcenter Server And Esxi And Identifying Vsphere Architecture And Solutions

Front 1

2 Ways to access ESXi Firewall (Preferred?)

Back 1

Web Client (Preferred)

esxcli

Front 2

Port used for HTTP

Back 2

80

Front 3

Ports used for FT (3)

Back 3

80

8100

8200

Front 4

Port used for RPC by VCSA

Back 4

111

Front 5

Port used to join VCSA to AD Domain

Back 5

135

Front 6

Port used by SNMP Server

Back 6

161

Front 7

Port used by CIM Client

Back 7

427

Front 8

Port used for HTTPS Access

Back 8

443

Front 9

Port used for VCSA Logging activity

Back 9

513

Front 10

Port used for Authentication, Provisioning, VM Migration, VM consoles, Heartbeat (1 port/3 protocols/directions)

Back 10

902

Front 11

Ports used for vSphere Replication (2)

Back 11

1234 & 1235

Front 12

Port used for CIM transactions over HTTP

Back 12

5988

Front 13

Port used for CIM XML Transactions over HTTPs

Back 13

5989

Front 14

Port used for requests from vMotion

Back 14

8000

Front 15

3 Startup policies for services

Back 15

1. Start and stop with port usage
2. Start and stop with host
3. Start and stop manually

Front 16

What service startup policy will preserve settings across host reboots?

Back 16

Start and stop manually

Front 17

VMware recommended service startup policy

Back 17

start and stop with port usage

Front 18

Access modes that won't work when host in lockdown (3)

Back 18

vSphere CLI

vMA

vSphere client (direct connection)

Front 19

Access modes that will work when in Lockdown Mode (4)

Back 19

ESXi Shell

SSH

DCUI

vSphere Client via vCenter Server

Front 20

3 ways of enabling Lockdown mode

Back 20

When adding host to vCenter Server

via DCUI

with client/web Client

Front 21

Difference in enabling Lockdown mode via DCUI vs vSphere Client/Web Client

Back 21

DCUI - discards local permissions on host

Client - Preserves local host permissions

Front 22

Prerequisites for adding ESXi host to Directory service (3)

Back 22

* Domain controllers and domain name must be resolvable
* ESXi hostname is fully qualified with Domain name
* Time synchronized (preferably with NTP

Front 23

2 Methods for adding ESXi host to AD

Back 23

1. vSphere Authentication Proxy
2. Active Directory Creds

Front 24

Steps for adding ESXi host to AD (2)

Back 24

* Join Host to Domain
* Add admin creds to Host

Front 25

2 ways to enter Domain name (Where does it put the object?)

Back 25

Name.Domain - Puts in Default Location

Name.Domain/Container/Path - Puts in specified location

Front 26

How are ESXi specific permissions managed?

Back 26

Client/Web client connected directly to the host

Front 27

2 types of users in vSphere Environment

Back 27

1. Direct-Access users

2. vCenter Server users

Front 28

How are Direct-Access and vCenter Server users related?

Back 28

Completely independent (no relationship)

Front 29

What is/isn't integrated with SSO?

Back 29

web client is

traditional client and ESXi hosts arent

Front 30

How can user and group lists be exported (formats)

Back 30

HTML, XML, XLS, CSV

Front 31

what is a priviledge

Back 31

defines individual user rights

Front 32

what is a role?

Back 32

collection of privileges

Front 33

3 default system roles

Back 33

* No access
* Read Only
* Administrator

Front 34

6 Sample Roles

Back 34

* VM User
* VM Power user
* Resource Pool administrator
* VMware Consolidated Backup User
* Datastore Consumer
* Network Administrator

Front 35

Best practice for modifying sample roles

Back 35

Copy them

Front 36

Can System roles be modified?

Back 36

No

Front 37

What is a permission

Back 37

a role paired with a user/group, and attached to an object

Front 38

2 forms of permissions. Difference?

Back 38

* Managed Entities - Can have permissions assigned
* Global Entities - Cannot have permissions assigned

Front 39

Examples of Managed Entities

Back 39

Clusters, Datacenters, Folders, Hosts

Front 40

Examples of Global Entities

Back 40

licenses, roles, custom fields.

Front 41

How to make permissions propagate

Back 41

Check "Propagate to Child Objects" Check box in the Assign Permissions window

Front 42

How are multiple permissions handled?

Back 42

* Objects can only have one permission per user/group
* Can inherit multiple from multiple parents
* user will have the union of the permissions

Front 43

vSphere Architecture Layers

Back 43

1. Virtualization
2. Management
3. Interface

Front 44

Virtualization Layer

Back 44

x86 servers with ESXi Hypervisor

Front 45

Management Layer

Back 45

vCenter Server and Associated services

Front 46

Interface Layer

Back 46

Applications that provide functionality, such as vShere client and vSphere CLI

Front 47

Cluster

Back 47

Container aggregates resources of hosts in the cluster

Front 48

Resource Pool;

Back 48

Logically partitions resources of an ESXi host or cluster

Front 49

Plug-ins included with base vCenter product (3)

Back 49

vCenter Storage Monitoring

vCenter Hardware Status

vCenter Service status

Front 50

AD group to add before ESXi host can use it

Back 50

ESX Admins

Front 51

What is vSphere with Operations Management?

Back 51

The 3 versions bundled with Operations Management: Standard, Enterprise, and Enterprise Plus

Front 52

Features in vSphere Essentials Kit

Back 52

Thin Provisioning

Update Manager

vStorage APIs for Data Protection

Hint 52

Tall

Umpires are

Awful

Front 53

Features in vSphere Essentials Plus Kit

Back 53

Everything in Essentials kit, plus:

Data Protection

High Availablity

vMotion

vSphere Replication

Hint 53

Don't

Hate

virtual

Reality

Front 54

Features in vSphere Standard

Back 54

Everything in Essentials Plus kit, Plus:

Storage vMotion

Hot Add

vShield Endpoint

Fault Tolerance

Hint 54

Standard SHEF

Front 55

Features in vSphere Enterprise

Back 55

Everything in Standard, Plus:

Storage APIs for Array Integration

Storage APIs for Multipathing

Distributed Resources Scheduler (DRS)

Distributed Power Management (DPM)

Reliable Memory (RMT)

Bid Data Extensions (BDE)

Hint 55

Remaining APIs (2)

2 x Distributed XX

2x 3-letter abbreviations

Front 56

Features in vSphere Enterprise Plus

Back 56

Everything in Enterprise, Plus:

Storage I/O Control

Network IO Control

dvSwitch

Host Profiles

AutoDeploy

Storage DRS

Profile-Driven Storage

App HA

Flash Read Cache

Hint 56

2x I/O

2x "Profile"

dASHF

Front 57

vsphere edition with Thin Provisioning

Back 57

Essentials kit

Front 58

vSphere edition with vUM

Back 58

Essentials kit

Front 59

vSphere edition with vStorage APIs for Data Protection

Back 59

Essentials kit

Front 60

vSphere edition with Data Protection

Back 60

Essentials Plus Kit

Front 61

vSphere edition with High Availabilty

Back 61

Essentials Plus Kit

Front 62

vSphere edition with vMotion

Back 62

Essentials Plus Kit

Front 63

vSphere edition with vSphere Replication

Back 63

Essentials Plus Kit

Front 64

vSphere edition with Storage vMotion

Back 64

Standard

Front 65

vSphere edition with Hot Add

Back 65

Standard

Front 66

vSphere edition with vSheild Endpoint

Back 66

Standard

Front 67

vSphere edition with Fault Tolerance

Back 67

Standard

Front 68

vSphere edition with Storage APIs for array integration

Back 68

Enterprise

Front 69

vSphere edition with Storage APIs for Multipathing

Back 69

Enterprise

Front 70

vSphere edition with DRS

Back 70

Enterprise

Front 71

vSphere edition with DPM

Back 71

Enterprise

Front 72

vSphere edition with RMT

Back 72

Enterprise

Front 73

vSphere edition with BDE

Back 73

Enterprise

Front 74

vSphere edition with Storage I/O Control

Back 74

Enterprise Plus

Front 75

vSphere edition with Network I/O Control

Back 75

Enterprise Plus

Front 76

vSphere edition with dvSwitch

Back 76

Enterprise Plus

Front 77

vSphere edition with Host Profiles

Back 77

Enterprise Plus

Front 78

vSphere edition with Auto Deploy

Back 78

Enterprise Plus

Front 79

vSphere edition with Storage DRS

Back 79

Enterprise Plus

Front 80

vSphere edition with Profile-Driven Storage

Back 80

Enterprise Plus

Front 81

vSphere edition with App HA

Back 81

Enterprise Plus

Front 82

vSphere edition with Flash Read Cache

Back 82

Enterprise Plus

Front 83

Available vSphere Editions

Back 83

Essentials Kit

Essentials Plus Kit

Standard

Enterprise

Enterprise Plus

vSphere with Operations Management ( Standard, Enterprise or Enterprise Plus Bundled with Operations Manager)

Front 84

Solutions that interact with vSphere (6)

Back 84

Horizon View

Horizon Workspace

Horizon Mirage

Site Recovery Manager

vCenter Operations Manager Suite

vCloud Director

Front 85

What is Horizon View?

Back 85

VDI Solution

Front 86

What is Horizon Workspace?

Back 86

Workspace Management Solution

Front 87

What is Horizon Mirage?

Back 87

layered OS management solution

Front 88

What is Site Recovery Manager

Back 88

Disaster Recovery Solution

Front 89

What is vCenter Operations Management Suite

Back 89

Performance, Capacity, and health monitoring solution

Front 90

What is vCloud Director

Back 90

software-defined data center provisioning solution