2V0-21.23 Question 180
Single answerAn administrator is configuring identity sources in vCenter Server to enable user authentication. The organization uses Active Directory (AD) for centralized user management but wants to restrict access to specific users and groups within the AD domain. Which identity source configuration should the administrator choose to meet these requirements?
- A
Active Directory (Integrated Windows Authentication)
- B
Active Directory over LDAP
- C
OpenLDAP
- D
Local OS
Show answer and explanation
Correct answer: B
Explanation
To restrict access to specific users and groups within an Active Directory domain, the 'Active Directory over LDAP' identity source enables the administrator to configure Base DNs and filters, providing the required granularity. Other options like Integrated Windows Authentication or Local OS do not offer such filtering capabilities, and OpenLDAP is not applicable for Active Directory integration.
- A. Incorrect.
Active Directory (Integrated Windows Authentication) allows vCenter Server to integrate directly with the AD domain using Windows authentication, but it does not provide fine-grained control over restricting specific users or groups during the configuration.
- B. Correct.
Active Directory over LDAP provides the ability to define specific Base DNs and filter objects (users and groups) from the AD domain for authentication, making it suitable for restricting access to specific users and groups.
- C. Incorrect.
OpenLDAP is used for integrating with LDAP-based directories other than Active Directory. It is not specific to Active Directory and does not meet the organization's requirement for AD integration.
- D. Incorrect.
Local OS authentication is limited to the accounts on the local operating system where vCenter Server is installed and does not support integration with Active Directory for centralized user management.