2V0-41.24 Question 402
Select 3An administrator is tasked with integrating NSX with their organization's Active Directory (AD) to allow domain-based authentication and role assignments. After adding the Active Directory domain as an identity source, the administrator needs to assign the 'NSX Administrator' role to a group of domain users. Which steps should the administrator take to complete this task and validate the configuration?
- A
Navigate to the 'System' tab in the NSX Manager UI, add the Active Directory domain as an identity source, and verify the connection.
- B
Go to the 'Users and Roles' section of NSX Manager, add the domain user group, and assign them the 'NSX Administrator' role.
- C
Use the 'nsxcli' command-line interface to manually assign the NSX Administrator role to each user in the domain group.
- D
Log in to NSX Manager using a test account from the domain group to validate role-based access permissions.
- E
Reboot the NSX Manager appliance after assigning roles to apply the changes.
Show answer and explanation
Correct answers: A, B, D
Explanation
To integrate NSX with Active Directory and assign roles to domain users, the administrator must first add the AD domain as an identity source in NSX Manager. Then, they need to assign the desired NSX role (e.g., NSX Administrator) to the appropriate domain groups or users through the 'Users and Roles' section. Finally, validating the configuration by logging in with a test account ensures that the role-based permissions are applied correctly. Using the NSX Manager UI is sufficient for these tasks, and a reboot is unnecessary.
- A. Correct.
Correct: Adding the Active Directory domain as an identity source is a necessary step to integrate NSX with AD and enable domain-based authentication.
- B. Correct.
Correct: Assigning the role to the domain user group is required to define their permissions within NSX Manager.
- C. Incorrect.
Incorrect: The 'nsxcli' command-line interface is not used for assigning roles to domain users in this context. Roles are managed through NSX Manager's UI.
- D. Correct.
Correct: Logging in with a test account from the domain group ensures the assigned role works as expected and validates the configuration.
- E. Incorrect.
Incorrect: A reboot of the NSX Manager appliance is not required after assigning roles, as the changes take effect immediately.