2V0-32.24 Question 227
Select 3An organization uses vRealize Log Insight and wants to configure authentication to ensure secure user access. They use Active Directory (AD) as their identity provider and want users to log in with their AD credentials. Which of the following steps are required to configure AD integration and manage user access in vRealize Log Insight?
- A
Add the Active Directory server under the Authentication settings in vRealize Log Insight.
- B
Enable LDAP over SSL (LDAPS) for secure communication between vRealize Log Insight and Active Directory.
- C
Create local users in vRealize Log Insight and map them to AD groups for access control.
- D
Assign user roles and permissions to Active Directory groups in vRealize Log Insight.
- E
Configure the Active Directory domain under the vSphere Single Sign-On (SSO) settings in vCenter Server.
Show answer and explanation
Correct answers: A, B, D
Explanation
To enable Active Directory integration with vRealize Log Insight, administrators must add the AD server, ensure secure communication via LDAPS, and assign roles and permissions to AD groups or users. These steps ensure that authentication and access control are managed securely and efficiently. Configuring local users or vSphere SSO settings is not relevant to AD integration in this context.
- A. Correct.
This step is required to integrate Active Directory with vRealize Log Insight. Adding the AD server enables authentication requests to be directed to the AD identity provider.
- B. Correct.
Enabling LDAPS ensures secure communication between vRealize Log Insight and Active Directory, preventing sensitive data, such as username and password, from being transmitted in plain text.
- C. Incorrect.
This is incorrect because local users in vRealize Log Insight are not mapped to AD groups. Instead, AD integration allows group-based or user-based access directly from AD.
- D. Correct.
After integrating with AD, roles and permissions should be assigned to AD groups or users within vRealize Log Insight for access control.
- E. Incorrect.
This is not a requirement for vRealize Log Insight. Configuring AD in vSphere SSO is unrelated to the authentication settings specific to Log Insight.