VCP-VCF Administrator 2024 Question 175
Select 3You are tasked with adding an Active Directory identity source to a vCenter Server in your VMware Cloud Foundation environment. During the process, you need to ensure secure authentication and compatibility with your organization's existing infrastructure. Which of the following steps must you perform to successfully add the Active Directory identity source?
- A
Specify the domain name and set the identity source type to Active Directory (Integrated Windows Authentication).
- B
Provide the fully qualified domain name (FQDN) of the Active Directory domain controller.
- C
Ensure that the vCenter Server is joined to the Active Directory domain.
- D
Configure a mapping of Active Directory user groups to vSphere roles.
- E
Enable LDAP over SSL (LDAPS) to establish a secure connection to the Active Directory server.
Show answer and explanation
Correct answers: A, C, D
Explanation
To successfully add an Active Directory identity source to vCenter, you must specify the identity source type as Active Directory (Integrated Windows Authentication), join the vCenter Server to the Active Directory domain, and map AD groups to vSphere roles for proper permissions management. Providing the domain name rather than the FQDN of a domain controller and enabling LDAPS are not mandatory steps for this configuration.
- A. Correct.
Correct: Specifying the domain name and setting the identity source type to Active Directory (Integrated Windows Authentication) is a required step for integrating Active Directory as an identity source in vCenter.
- B. Incorrect.
Incorrect: While providing the FQDN of the domain controller might seem logical, vCenter requires the domain name rather than the specific FQDN of a domain controller. This step is not required for the given configuration.
- C. Correct.
Correct: Joining the vCenter Server to the Active Directory domain is necessary to enable Active Directory-based authentication.
- D. Correct.
Correct: Mapping Active Directory groups to vSphere roles is essential for granting appropriate permissions to users and groups in the vSphere environment.
- E. Incorrect.
Incorrect: Enabling LDAP over SSL (LDAPS) is not mandatory for adding an Active Directory identity source, especially when using Integrated Windows Authentication. It is an optional step for secure LDAP configurations.