2V0-71.23 Question 69
Select 3Your organization is using VMware Tanzu Mission Control (TMC) to manage multiple Kubernetes clusters across different cloud providers. As an administrator, you are tasked with setting up access controls for developers while ensuring compliance with organizational security policies. Which of the following actions can you perform in Tanzu Mission Control to achieve this objective?
- A
Create role-based access control (RBAC) policies to define permissions for specific user groups.
- B
Enforce network policies directly on individual pods in the managed clusters.
- C
Set up workspace-level policies to apply consistent governance across multiple clusters.
- D
Enable data protection policies to schedule backups for critical namespaces.
- E
Integrate Tanzu Mission Control with an external identity provider (IdP) for single sign-on (SSO).
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the requirements of access controls and compliance in Tanzu Mission Control, administrators can use RBAC to define user permissions, apply workspace-level policies for governance, and integrate with external IdPs for centralized authentication and single sign-on. These actions help manage access and enforce security policies across multiple clusters. Network policies and data protection are important but are not directly related to access control in this scenario.
- A. Correct.
Tanzu Mission Control supports role-based access control (RBAC) to define fine-grained permissions for clusters, workspaces, and namespaces, making this a valid action.
- B. Incorrect.
Tanzu Mission Control does not directly enforce network policies on pods; this is typically done at the cluster level via Kubernetes or other network policy tools.
- C. Correct.
Workspace-level policies in Tanzu Mission Control allow administrators to apply governance, such as security and resource policies, across multiple clusters, making this a valid action.
- D. Incorrect.
While Tanzu Mission Control includes features for data protection and backup, these are not directly related to access control or organizational compliance in this context.
- E. Correct.
Tanzu Mission Control can integrate with external identity providers (IdPs) to enable single sign-on (SSO) and centralized identity management, which is relevant for enforcing access controls.