VCP-CMA 2024 Question 251
Select 2An organization is using VMware Aria Automation to manage its cloud environment. The IT team wants to ensure that all deployed virtual machines (VMs) adhere to specific compliance requirements, such as tagging for cost tracking and ensuring no VMs are deployed with public IPs unless explicitly required. Which approach should the administrator take to enforce these requirements?
- A
Create and enforce a resource quota policy to limit the number of VMs that can be deployed.
- B
Define a custom policy in VMware Aria Automation to enforce tagging and restrict public IP usage.
- C
Use VMware Aria Automation Service Broker to apply pre-configured approval policies for each deployment.
- D
Leverage a constraint tag in the VMware Aria Automation blueprint to enforce tagging and restrict public IP allocation.
- E
Enable a governance policy for all cloud zones in VMware Aria Automation.
Show answer and explanation
Correct answers: B, D
Explanation
To enforce compliance requirements such as tagging and restricting public IP usage, VMware Aria Automation administrators should combine policies and constraints. Custom policies allow for the enforcement of specific rules, while constraint tags in blueprints ensure that deployments adhere to predefined configurations. Resource quotas, approval policies, and governance policies serve other purposes and are not suitable for addressing these specific compliance needs.
- A. Incorrect.
A resource quota policy limits the number of resources, such as VMs, but does not address compliance requirements like tagging or public IP restrictions.
- B. Correct.
Custom policies in VMware Aria Automation can be designed to enforce compliance requirements such as tagging and restricting public IP usage, making this option correct.
- C. Incorrect.
Approval policies in VMware Aria Automation Service Broker are designed to manage approvals for resource requests but do not enforce compliance requirements.
- D. Correct.
A constraint tag in an Aria Automation blueprint is a mechanism to enforce specific configurations, such as tagging and public IP restrictions, making this option correct.
- E. Incorrect.
Governance policies in VMware Aria Automation apply to cloud zones but are not used to enforce specific deployment-level compliance requirements like tagging or public IP restrictions.