2V0-32.24 Question 180
Select 3An organization wants to ensure that their VMware Cloud Director environment adheres to strict security practices. They require administrators to use multi-factor authentication (MFA) for accessing the Cloud Director portal and want to grant specific permissions to users based on their roles. What steps should the administrator take to implement these requirements?
- A
Enable SAML authentication and configure an external identity provider that supports MFA.
- B
Assign predefined roles within VMware Cloud Director based on user responsibilities.
- C
Enable single sign-on (SSO) without leveraging an external identity provider to simplify access.
- D
Grant all users the System Administrator role to ensure they can perform all tasks effectively.
- E
Use LDAP integration to synchronize user accounts and assign role-based permissions.
Show answer and explanation
Correct answers: A, B, E
Explanation
To meet the organization's requirements, the administrator must ensure MFA is enabled by configuring SAML authentication with an external identity provider. Additionally, role-based access control should be enforced using predefined roles or LDAP integration to adhere to the principle of least privilege. Actions like granting all users administrative access or enabling SSO without MFA fail to meet the security and access control goals.
- A. Correct.
SAML authentication allows VMware Cloud Director to integrate with an external identity provider that supports MFA, enhancing security.
- B. Correct.
Assigning predefined roles based on user responsibilities ensures that permissions align with the principle of least privilege.
- C. Incorrect.
Enabling SSO without an external identity provider does not meet the requirement for MFA and may reduce security.
- D. Incorrect.
Granting all users the System Administrator role violates the principle of least privilege and increases security risks.
- E. Correct.
Using LDAP integration helps synchronize user accounts and implement role-based access control, satisfying the organization's user access control requirements.