VCP-CMA 2024 Question 49
Select 4An administrator is tasked with configuring an Active Directory identity source in VMware Aria Automation. The environment requires secure communications and the ability to use domain credentials for user authentication. Which of the following steps must the administrator complete to successfully add the directory as an identity source?
- A
Specify the directory type as Active Directory over LDAP or LDAPS.
- B
Provide the domain name and domain controller address.
- C
Enable Just-In-Time (JIT) user provisioning for all users.
- D
Upload the root CA certificate if using LDAPS for secure communication.
- E
Configure a service account with read-only permissions to the domain.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To configure an Active Directory identity source in VMware Aria Automation, the administrator must define the directory type and connection method (LDAP or LDAPS). The domain name and controller address establish the connection, while a service account with appropriate permissions allows user and group queries. If LDAPS is used, a root CA certificate must be uploaded to secure communications. JIT provisioning, while useful, is not a mandatory requirement for this configuration.
- A. Correct.
This step is mandatory as it specifies the protocol and directory type. Active Directory can be integrated using LDAP or LDAPS for secure communication.
- B. Correct.
The domain name and domain controller address are required to establish a connection to the Active Directory environment.
- C. Incorrect.
While JIT provisioning can be used in some scenarios, it is not a mandatory step for adding the directory as an identity source.
- D. Correct.
Uploading the root CA certificate is necessary when using LDAPS to ensure secure communications between VMware Aria Automation and the directory services.
- E. Correct.
A service account with read-only permissions is required for accessing and querying the directory to retrieve user and group information.