VCP-CMA 2024 Question 36
Select 3You are preparing to install VMware vRealize Automation (vRA) in your environment. As part of the prerequisites, you need to configure DNS, NTP, and service accounts. Which of the following actions should you perform during this preparation phase to ensure a successful installation?
- A
Configure forward and reverse DNS records for all vRA components.
- B
Set up an NTP server and ensure all vRA components synchronize time with it.
- C
Create a service account with local administrator rights on the vRA appliances.
- D
Ensure the service account used for installation has the 'Log on as a batch job' privilege in the Windows environment.
- E
Disable DNSSEC on the DNS server to avoid potential resolution issues.
Show answer and explanation
Correct answers: A, B, D
Explanation
Preparing DNS, NTP, and service accounts is critical for a successful vRA installation. Forward and reverse DNS records are required for service communication, and synchronized time is essential for certificates and proper functioning of components. Service accounts must have the appropriate privileges, such as 'Log on as a batch job' in Windows, to support automated processes. However, disabling DNSSEC is not a valid recommendation as it goes against best practices for secure DNS configuration.
- A. Correct.
Forward and reverse DNS records are critical for the proper resolution of vRA components, as vRA relies heavily on DNS for communication between its services.
- B. Correct.
Time synchronization ensures that all components of vRA are in sync, which is essential for certificates and service communication.
- C. Incorrect.
A service account with local administrator rights on the vRA appliances is not required. Instead, vRA installation typically requires service accounts with specific privileges in Active Directory or the OS, depending on the setup.
- D. Correct.
The 'Log on as a batch job' privilege is necessary for certain automated scripts and services during the installation process in Windows environments, especially for components like IaaS servers.
- E. Incorrect.
Disabling DNSSEC is not a recommended practice for vRA installations. DNSSEC ensures secure DNS transactions and its use is encouraged where possible.