2V0-41.24 Question 218
Select 3An organization is planning to integrate VMware NSX with their existing LDAP system to manage user authentication and role assignment. Which of the following are benefits of integrating NSX with LDAP, and which aspects describe the LDAP authentication architecture?
- A
Centralized authentication and user management across the organization
- B
Granular role-based access control (RBAC) using LDAP group memberships
- C
Eliminates the need for NSX Manager to store any user credentials
- D
Requires manual synchronization of user accounts between NSX and LDAP
- E
Supports multiple LDAP servers for high availability and redundancy
Show answer and explanation
Correct answers: A, B, E
Explanation
Integrating NSX with LDAP provides centralized authentication, granular role-based access control, and high availability through support for multiple LDAP servers. These features simplify user management and enhance security. However, it does not require manual synchronization or fully eliminate the dependency on user credential verification via LDAP.
- A. Correct.
Centralized authentication and management are key benefits of integrating NSX with LDAP. By using LDAP, administrators can manage user access and authentication centrally without needing to configure it separately in NSX.
- B. Correct.
LDAP integration enables RBAC by leveraging LDAP group memberships. Administrators can assign users to specific groups in LDAP, and NSX can map these groups to roles for access control.
- C. Incorrect.
While LDAP integration reduces the need for NSX to store user credentials, this is not entirely accurate as NSX still relies on LDAP for credential verification. This option is misleading and incorrect.
- D. Incorrect.
LDAP integration avoids manual synchronization of user accounts as it relies on real-time queries to the LDAP directory. This option is incorrect because no manual syncing is required.
- E. Correct.
NSX supports multiple LDAP servers for redundancy and high availability, ensuring that user authentication is not disrupted even if one LDAP server fails.