What are the different security options to upgrade the hosts with VUM ? (choose 3)
A.
Important
B.
Critical
C.
Moderate
D.
security
E.
general
Explanation:
From: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2004397Severity values for the Security category
Critical: Vulnerabilities that can be exploited by an unauthenticated remote attacker or vulnerabilities that break guest/host Operating System isolation. The exploitation results in the compromise of confidentiality, integrity, availability user data, or processing resources without user interaction. Exploitation could be leveraged to propagate an Internet worm or execute arbitrary code between virtual machines and the host.
Important: Vulnerabilities whose exploitation results in the compromise of confidentiality, integrity, or availability of user data and processing resources. Such flaws could allow local users to gain privileges, allow authenticated remote users to execute arbitrary code, or allow local or remote users to easily cause a denial of service.
Moderate: Flaws where the ability to exploit is mitigated to a significant degree by configuration or difficulty of exploitation, but in certain deployment scenarios could still lead to some compromise of the confidentiality, integrity, or availability of user data and processing resources. These are the types of vulnerabilities that could have had a critical impact or important impact but are less easily exploited based on a technical evaluation of the flaw, or affect unlikely configurations.
Low: All other issues that have a security impact. Vulnerabilities where exploitation is believed to be extremely difficult, or where successful exploitation would have minimal impact.
OLD Review::
from http://pubs.vmware.com/vsphere-50/topic/com.vmware.ICbase/PDF/vsphere-update-manager-50-install-administration-guide.pdf
Severity of the update. For hosts, the severity status might be Critical, General, Security,
and so on. For virtual machines, the severity might be Critical, Important, Moderate, and
so on.
Wrong
Correct are B, D and E
from http://pubs.vmware.com/vsphere-50/topic/com.vmware.ICbase/PDF/vsphere-update-manager-50-install-administration-guide.pdf
Severity of the update. For hosts, the severity status might be Critical, General, Security,
and so on.
Source:http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2004397
CATEGORY VALUES in vSphere 5.0 (Not SECURITY OPTIONS as the question)
Update Manager provides the following category values for PATCHES and NOTIFICATIONS.
Security: A patch containing one or more security vulnerabilities fix and other bug fixes.
BugFix: A patch containing one or more bug fixes.
Enhancement: A patch containing hardware enablement enhancement.
Recall: A bulletin specifying the need to recall a package
RecallFix: A bulletin to notify customers that a fix is available for the recalled VIBs.
Info: A generic notification about a wide range of issues.
Other: For backward compatibility – for example, for updates without a category specified, or obsoleted categories.
Severity values for specific categories (Not SECURITY OPTIONS as the question)
The definitions of severity values differ based on the specific category.
Severity values for the BugFix category
Critical: The issues being fixed can potentially cause data loss or severe service disruptions. Immediately implement critical patches.
Important: The issues being fixed can cause certain type of devices, configuration, or component failure, such as a process crash. Immediately plan a maintenance window for this patch.
Moderate: The issues being fixed can cause inconsistency in operations or command failure. Implement the patch in your next maintenance window.
Low: The issues being fixed are considered low impact to product operations. Implement the patch at your convenience.
I think that the question really asks for Security Options for which the correct answers would be: A, B and C
Sorry I meant SEVERITY VALUES
Severity of the update. For hosts, the severity status might be Critical, General, Security, and so on. For virtual machines, the severity might be Critical, Important, Moderate, and so on.