ISC2 Certified Cloud Security Professional (CCSP) Practice Question
Your organization is rolling out a hardened Ubuntu 22.04 LTS virtual machine template onto a vSphere-based private cloud. After powering on the first instance you discover that drag-and-drop and copy-and-paste from the vSphere console are disabled and the interface has fallen back to an emulated E1000 network adapter, causing noticeably poor throughput. To restore expected management features and optimized paravirtualized drivers without relaxing the server's security baseline, which of the following should you do next?
Manually edit the VM's .vmx file to set isolation.tools.copy.disable and isolation.tools.paste.disable to FALSE.
Disable Secure Boot for the virtual machine and apply the vendor's firmware updates from within the guest.
Enable promiscuous mode on the virtual switch and open TCP port 5900 on the guest firewall so the console can pass traffic.
Install and configure the latest open-vm-tools package inside the Ubuntu guest operating system.
The symptoms point to a missing guest OS virtualization toolset. vSphere relies on VMware Tools (or the open-source equivalent, open-vm-tools) to deliver enhanced functions such as clipboard and drag-and-drop redirection, high-performance VMXNET3 network drivers, time synchronization, and graceful shutdown. Installing the current open-vm-tools package inside the guest immediately enables these capabilities while keeping the existing security controls intact because the modules are signed and loaded with kernel-level protection.
Merely enabling promiscuous mode and opening VNC/console ports would not provide paravirtualized drivers and would weaken security. Disabling Secure Boot or modifying the VM's VMX parameters could introduce additional risks and still would not install the required drivers and guest agents. Therefore, deploying the official guest toolset is the correct and most secure remediation step.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is open-vm-tools critical for virtual machines in vSphere?
Open an interactive chat with Bash
What are paravirtualized drivers, and how do they improve performance?
Open an interactive chat with Bash
How does enabling open-vm-tools enhance security compared to other methods?
Open an interactive chat with Bash
ISC2 Certified Cloud Security Professional (CCSP)
Cloud Security Operations
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .