VCP-CMA 2024 Question 52
Select 3An organization is configuring VMware Aria Automation to integrate with their Active Directory (AD) for authentication purposes. They need to add their AD domain as an identity source. Which of the following steps are mandatory when configuring this identity source?
- A
Specify a fully qualified domain name (FQDN) or IP address of the Active Directory server.
- B
Configure the Active Directory server to use LDAP over SSL (LDAPS).
- C
Provide a service account with permissions to query the Active Directory.
- D
Enter the domain name in the 'Domain Alias' field.
- E
Map the AD groups to VMware Aria Automation roles.
Show answer and explanation
Correct answers: A, C, E
Explanation
Configuring an Active Directory identity source in VMware Aria Automation involves specifying the AD server (FQDN or IP), providing a service account for directory queries, and mapping AD groups to roles. While LDAPS and domain aliases are optional, the core requirements focus on connectivity and permissions.
- A. Correct.
This is correct. When adding an AD as an identity source, the FQDN or IP address of the AD server must be specified to establish a connection.
- B. Incorrect.
This is incorrect. LDAP over SSL (LDAPS) is optional and only required if encrypted communication is desired. Plain LDAP can also be used if security policies allow.
- C. Correct.
This is correct. A service account with appropriate permissions is required to query the directory and authenticate users.
- D. Incorrect.
This is incorrect. Entering a domain name in the 'Domain Alias' field is optional and mainly used for convenience in multi-domain setups.
- E. Correct.
This is correct. Mapping AD groups to VMware Aria Automation roles ensures users have the proper permissions to access resources.