2V0-32.24 Question 177
Select 3Your organization uses VMware vSphere with a hybrid cloud deployment and has integrated it with Active Directory (AD) for user authentication. Recently, a security audit revealed that several users have unnecessary administrative privileges in vCenter Server. To address this, you need to enforce the principle of least privilege while ensuring secure access for all users. What actions should you take to manage authentication and user access control effectively?
- A
Create custom roles in vCenter Server with only the required privileges and assign them to AD groups.
- B
Disable Active Directory integration and create individual local accounts in vCenter Server for each user.
- C
Enable Multi-Factor Authentication (MFA) for all users accessing vCenter Server.
- D
Audit existing permissions, remove unnecessary privileges, and assign roles to groups instead of individual users.
- E
Grant the Administrator role to all users to ensure consistent access across the environment.
Show answer and explanation
Correct answers: A, C, D
Explanation
To effectively manage authentication and user access control in VMware environments, you should follow best practices like creating custom roles tailored to specific job functions, enabling MFA for enhanced security, and performing regular audits of user permissions. Additionally, assigning roles to Active Directory groups rather than individual users simplifies access management and reduces the risk of configuration errors. Avoid granting excessive privileges to users to maintain a secure and compliant environment.
- A. Correct.
Creating custom roles in vCenter Server based on specific job responsibilities aligns with the principle of least privilege. Assigning these roles to AD groups ensures efficient management.
- B. Incorrect.
Disabling Active Directory integration and relying on local accounts would complicate user management and reduce security by eliminating centralized authentication.
- C. Correct.
Enabling MFA adds an extra layer of security to the authentication process and helps protect against unauthorized access.
- D. Correct.
Auditing existing permissions and removing unnecessary privileges ensures that only authorized actions are allowed. Assigning roles to groups simplifies access control and reduces administrative overhead.
- E. Incorrect.
Granting the Administrator role to all users violates the principle of least privilege and creates significant security risks by giving excessive access.