VCP-CMA 2024 Question 187
Select 3You are a cloud administrator managing a vRealize Automation (vRA) environment. Your team has been tasked with creating a new project that will allow developers to deploy workloads only to a specific vSphere cluster. The developers should not have access to any other cloud zones in your environment. What steps must you take to ensure the project is properly configured?
- A
Assign the specific vSphere cluster to a cloud zone and associate it with the project.
- B
Ensure the project members are assigned the 'Cloud Assembly User' role in vRA.
- C
Create a custom approval policy to restrict deployments to the specific vSphere cluster.
- D
Add only the required users or groups to the project's membership list.
- E
Enable the 'Restrict Access to Cloud Zones' option in the project's settings.
Show answer and explanation
Correct answers: A, D, E
Explanation
To ensure that developers can deploy workloads only to the specified vSphere cluster, you must associate the cluster with a cloud zone and link it to the project. Additionally, restricting access to cloud zones and limiting project membership ensures proper resource usage and access control. Other options, such as assigning roles or creating approval policies, are not directly related to managing projects or limiting deployments to specific clusters.
- A. Correct.
Correct: Assigning the vSphere cluster to a cloud zone and associating it with the project ensures the project can utilize only that specific infrastructure.
- B. Incorrect.
Incorrect: While roles are important for user permissions, assigning the 'Cloud Assembly User' role is not specific to limiting deployments to a particular cluster.
- C. Incorrect.
Incorrect: Approval policies are used for governance and approval workflows, not for resource restriction or cloud zone assignment.
- D. Correct.
Correct: Adding only the necessary users or groups to the project's membership ensures that only authorized individuals can deploy workloads within the project.
- E. Correct.
Correct: Enabling the 'Restrict Access to Cloud Zones' option ensures that project members can only deploy to the cloud zone(s) explicitly associated with the project.