2V0-32.24 Question 144
Select 3An administrator is managing a vRealize Operations (vROps) and vRealize Log Insight environment. The organization has strict compliance requirements that mandate secure password management for admin and root accounts. Which of the following actions should the administrator take to ensure compliance with the password management requirements?
- A
Set up a password expiration policy for admin and root accounts.
- B
Use the built-in password recovery tool to reset passwords when forgotten.
- C
Manually track admin and root passwords in a secure spreadsheet.
- D
Integrate vROps and vRealize Log Insight with an external identity provider (e.g., Active Directory) for authentication.
- E
Configure audit logging to track password changes and administrative activities.
Show answer and explanation
Correct answers: A, D, E
Explanation
To meet compliance requirements and ensure secure password management for vROps and vRealize Log Insight, administrators should implement a password expiration policy, integrate with an external identity provider for centralized authentication, and configure audit logging to track password changes and administrative activities. These actions align with best practices and compliance standards, while other options like manual tracking or relying solely on password recovery tools do not adequately address security needs.
- A. Correct.
Setting up a password expiration policy ensures that admin and root passwords are periodically changed, improving security and meeting compliance requirements.
- B. Incorrect.
While the built-in password recovery tool is useful for password resets, it does not directly address secure password management or compliance requirements.
- C. Incorrect.
Manually tracking passwords in a spreadsheet is not a secure or compliant method for password management and increases the risk of unauthorized access.
- D. Correct.
Integrating with an external identity provider enables centralized authentication and eliminates the need for managing local admin passwords, aligning with compliance standards.
- E. Correct.
Configuring audit logging ensures visibility into password changes and administrative activities, which is essential for compliance and security monitoring.