[Q10-Q27] 100%合格率リアル3V0-22.21試験成功を掴み取れ！[2022年10月]

新問題 10
Your team is experiencing intermittent issues with esxi0la and you have been asked to configure the host to export its syslog data to a preconfigured syslog collector.
To complete this task, you must:
* Configure esxi0la.vciass.local to send syslog events to an external syslog collector on 172.20.10.10.
* Ensure that the ESXi host security policies allow the syslog traffic to pass.

新問題 11
Your security team is getting ready for an audit and wants to check the status of all ESXI hosts’ outstanding security patches. Create a new fixed Update Manager baseline for all security ESXi host patches and name it ”Security patches. ”Use the patches available in the patch repository. Use VCSA01a in this task.
Baseline Name: Security Patches
Baseline Type: Host Patch
Category: Security

新問題 12
You are tasked to automate the installation and deployment of new host added into your company vSphere cluster using Auto Deploy. Ensure Auto Deploy and Image Builder is set to start automatically every time vCenter Server is restarted. Use the web client and VCSA0la to perform this step.
Confirm that the auto deploy plugin is available in the web interface. You may be required to logout and log back in after enabling the services.
The vCenter server is required to retrieve software from an online depot. You are to use the depot provided below and ensure that Auto Deploy is always running even, with restart of vCenter server.
Name FirstDepot
URL https / / hostupdate.vmware.com/software/VUB/PRODUCTION/main/vmw-depot-index.xml Note: ignore error that you received on cannot connect to depot. This is expected due to vCSA do not have internet connection.
Create a deploy Rule on VCSA0la based on information below. You do not need to apply to any host at this time.
Name: Rule1
Specify Rule to match Vendor: Dell
Check ‘Do Not Include Image Profile”
Check ‘Do Not Include Host Profile”
Select host location: Choose cluster PROD-A

新問題 13
You have just deployed a new vCenter Server Appliance. Vcsa0l
a. and are required to back up to configuration after deployment. To complete this task, perform an unencrypted backup of the vCenter Server Appliance using the following details:
* Use the FTP protocol to backup the appliance
* FTP Server Location: 172.20.10.10/
* FTP Username: administrator
* FTP Password: VMware1!
Note: Make sure you include the / at the end of the Server Location

新問題 14
Due to budget constraints, the development team must place its virtual machines on the same ESXi hosts as the production virtual machines. In order to prevent resource contention caused by the development workload, you must limit their resources.
On Cluster PROD-A create a resource pool under this cluster for future development VMs. Create a 4 GHz CPU limit and a 256 MB memory limit
* Cluster Name: PROD-A
* Resource Pool Name: DevRP
* CPU Limit: 4 GHz
* Memory Limit: 256 MB

新問題 15
A new internal network is required to isolate virtual machines for security analysis. The virtual machine (honeypot-01) should reside on a new virtual standard switch with the ability for all traffic on the switch to be monitored.
Add a new virtual switch to accommodate this requirement and configure (honeypot-01) to reside on this switch.
Use the following information to complete this task:
* ESXi host: esxi0la
* Standard Switch: Create a new Standard Switch
* Physical uplink: NO UPLINK
* Network Label: QUARANTINE
* VLAN: none specified

新問題 16
The security team has decided to follow the VMware-recommended best practices in the vSphere hardening guide.
esxi02b:
Your first task is to create a local user in esxi02b:
* Name: SpecialUser
* Role: Administrator
Your second task is to ensure that SpecialUser is the ONLY user who is able to SSH into esxi02b via Putty.
Your final task is to enforce a strict lockdown on esxi02b.
Your second task is to ensure that SpecialUser is the ONLY user who is able to SSH into esxi02b via Putty.
Your final task is to enforce a strict lockdown on esxi02b.