2V0-41.24 Question 403
Select 3You are tasked with configuring NSX to integrate with an Active Directory (AD) domain to manage user authentication and assign specific roles to domain users. After adding the AD domain as an identity source, you need to ensure that a user named 'admin_user' from the 'ITAdmins' group in AD has the 'Enterprise Administrator' role in NSX. What steps should you perform to achieve this and validate the configuration?
- A
Add the Active Directory server as an identity source in the System > Users and Roles > Identity Sources section.
- B
Assign the 'Enterprise Administrator' role to the 'ITAdmins' group in the System > Users and Roles > Roles Assignment section.
- C
Validate that 'admin_user' can log in to NSX Manager and has the appropriate permissions for the 'Enterprise Administrator' role.
- D
Add 'admin_user' as a local user with the 'Enterprise Administrator' role in NSX Manager.
- E
Enable SSO authentication in NSX Manager to allow AD users to log in.
Show answer and explanation
Correct answers: A, B, C
Explanation
To integrate NSX with Active Directory for user authentication, you must first add the AD domain as an identity source in NSX Manager. Afterward, you can assign NSX roles to AD groups or users to grant appropriate permissions. Finally, validating the configuration by logging in as the user and checking the assigned permissions ensures that the setup works as intended. Adding a user as a local account or enabling SSO are not necessary steps for this specific scenario.
- A. Correct.
Correct. Adding the Active Directory server as an identity source is the first step to allow NSX Manager to authenticate users against AD.
- B. Correct.
Correct. Assigning the 'Enterprise Administrator' role to the 'ITAdmins' group ensures that all users in the group, including 'admin_user,' inherit the appropriate NSX permissions.
- C. Correct.
Correct. Validating the login and permissions of 'admin_user' confirms that the configuration is successful and permissions are applied correctly.
- D. Incorrect.
Incorrect. Adding 'admin_user' as a local user bypasses the AD integration and does not leverage the identity source configuration.
- E. Incorrect.
Incorrect. While SSO is a valid authentication method, it is not required for the specific task of assigning roles to AD users in this scenario.