2V0-32.24 Question 228
Select 3An organization uses vRealize Log Insight for centralized log management. The administrator is tasked with configuring authentication and access settings to ensure secure user access. The organization uses Active Directory (AD) for user authentication and wants to grant specific users and groups different levels of access. Which steps should the administrator take to achieve this?
- A
Integrate vRealize Log Insight with the organization's Active Directory by configuring an LDAP connection.
- B
Create local user accounts within vRealize Log Insight for each AD user requiring access.
- C
Assign roles to AD groups within vRealize Log Insight to define permissions for users.
- D
Enable SSL for communication between vRealize Log Insight and the AD server to secure authentication traffic.
- E
Disable the default 'admin' account in vRealize Log Insight to enforce AD-based authentication only.
Show answer and explanation
Correct answers: A, C, D
Explanation
To manage authentication and access in vRealize Log Insight using Active Directory, the administrator must first integrate the system with AD via an LDAP connection. Assigning roles to AD groups ensures permissions are managed effectively, while enabling SSL secures the authentication process. Creating local user accounts is redundant when AD integration is in place, and the default admin account does not need to be disabled to enforce AD-based authentication.
- A. Correct.
Correct: Integrating vRealize Log Insight with Active Directory via an LDAP connection is required to enable AD-based user authentication.
- B. Incorrect.
Incorrect: Creating local user accounts within vRealize Log Insight is unnecessary when AD is integrated, as AD users are authenticated via the directory service.
- C. Correct.
Correct: Assigning roles to AD groups allows the administrator to manage permissions efficiently based on group membership, ensuring proper access control.
- D. Correct.
Correct: Enabling SSL secures the communication between vRealize Log Insight and the AD server, which is critical for protecting sensitive authentication data.
- E. Incorrect.
Incorrect: Disabling the default 'admin' account is not a necessary step for configuring AD-based authentication. Instead, the account can remain active and secured with a strong password.