2V0-21.23 Question 181
Single answerAn administrator is configuring identity sources in vCenter Server to allow users from an external Active Directory (AD) domain to authenticate. The administrator wants to ensure that the setup supports two-way trust and uses a secure connection. Additionally, there is a requirement to allow users to log in without entering the domain name as a prefix. Which type of identity source should the administrator configure?
- A
Active Directory (Integrated Windows Authentication)
- B
Active Directory over LDAP
- C
OpenLDAP
- D
Local OS
Show answer and explanation
Correct answer: A
Explanation
The correct option is 'Active Directory (Integrated Windows Authentication)' because it meets all the specified requirements: it supports two-way trust relationships, uses secure Kerberos authentication, and allows users to log in without entering the domain name as a prefix. This is the preferred choice when integrating vCenter Server with an external AD domain.
- A. Correct.
Active Directory (Integrated Windows Authentication) supports two-way trust relationships, uses secure Kerberos authentication, and allows users to log in without the domain name as a prefix. This option meets all the requirements.
- B. Incorrect.
Active Directory over LDAP supports external AD domains but requires the domain name to be entered during login and does not support two-way trust relationships in the same seamless manner.
- C. Incorrect.
OpenLDAP is an open-source directory service and does not integrate natively with Active Directory. It does not meet the requirements for two-way trust or allowing AD users to log in.
- D. Incorrect.
Local OS uses accounts on the local operating system of the vCenter Server and does not support external Active Directory domains. It is not suitable for this scenario.