Which two statements are true for NFS v4.1 firewall behavior? (Choose two.)
A.
It closes port 2049.
B.
It sets allowed. All flag to TRUE.
C.
It sets allowed. All flag to FALSE.
D.
It opens port 2049.
Explanation:
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.storage.doc%
2FGUID-70686ADB-961A-46BD-B814-48DCF6C5E34B.html
B & D
When you mount the first NFS v4.1 datastore, ESXi enables the nfs41client rule set and sets its allowedAll flag to TRUE. This action opens port 2049 for all IP addresses. Unmounting an NFS v4.1 datastore does not affect the firewall state. That is, the first NFS v4.1 mount opens port 2049 and that port remains enabled unless you close it explicitly.
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-70686ADB-961A-46BD-B814-48DCF6C5E34B.html