2V0-71.23 Question 70
Select 3An organization is using VMware Tanzu Mission Control (TMC) to manage their Kubernetes clusters across multiple environments. The operations team needs to ensure proper access control, centralized policy management, and compliance for their clusters. Which actions should the team take to achieve these goals using Tanzu Mission Control?
- A
Define and enforce policies using the Policies feature in Tanzu Mission Control.
- B
Grant individual users direct access to the Kubernetes API server for each cluster.
- C
Enable role-based access control (RBAC) for users and groups in Tanzu Mission Control.
- D
Use the Workspace feature to group clusters and apply policies at a workspace level.
- E
Manually configure network policies on each individual cluster.
Show answer and explanation
Correct answers: A, C, D
Explanation
To ensure proper access control, centralized policy management, and compliance in Tanzu Mission Control, administrators should leverage its native features such as Policies and Workspaces. These features provide scalable and centralized management for Kubernetes clusters. Role-based access control (RBAC) further ensures that access permissions are properly managed. Direct access to Kubernetes APIs and manual configuration of network policies are inefficient and counter to the centralized approach offered by Tanzu Mission Control.
- A. Correct.
Tanzu Mission Control provides a Policies feature that enables administrators to define and enforce policies across clusters, ensuring compliance and consistent configurations.
- B. Incorrect.
Granting individual users direct access to Kubernetes API servers bypasses the centralized management capabilities of Tanzu Mission Control, which is not recommended.
- C. Correct.
Role-based access control (RBAC) in Tanzu Mission Control allows administrators to assign roles and permissions to users and groups, enabling proper access control across clusters.
- D. Correct.
The Workspace feature in Tanzu Mission Control helps group clusters logically, making it easier to apply consistent policies and manage them centrally.
- E. Incorrect.
Manually configuring network policies on each cluster is not efficient or scalable when managing multiple clusters with Tanzu Mission Control.