VCP-VCF Administrator 2024 Question 176
Select 3You are configuring vCenter Server to integrate with your organization's Active Directory (AD) for user authentication. While adding AD as an identity source, you need to ensure that the configuration is successful. Which of the following steps must you complete during this process?
- A
Specify the domain name and select the Active Directory (Integrated Windows Authentication) option.
- B
Ensure that vCenter Server can communicate with a domain controller over the appropriate network ports.
- C
Enter the Lightweight Directory Access Protocol (LDAP) URL of the Active Directory server.
- D
Configure the vCenter Server to use the administrator@vsphere.local account for authentication.
- E
Verify that the time synchronization between the vCenter Server and the Active Directory domain controller is correct.
Show answer and explanation
Correct answers: A, B, E
Explanation
To successfully add an Active Directory identity source to vCenter Server, you must specify the correct domain name and identity source type, ensure network connectivity between vCenter and the AD domain controller, and verify that time synchronization is correct. These steps ensure proper integration and prevent authentication errors. Configuring LDAP URLs or using the administrator@vsphere.local account is not required for this specific identity source type.
- A. Correct.
Correct: When adding an Active Directory identity source, you must specify the domain name and select the correct identity source type, such as 'Active Directory (Integrated Windows Authentication)'.
- B. Correct.
Correct: vCenter Server must be able to communicate with the Active Directory domain controller over the appropriate network ports (e.g., TCP 389 for LDAP or TCP 636 for LDAPS). Without this communication, the integration will fail.
- C. Incorrect.
Incorrect: Entering the LDAP URL is not required when using 'Active Directory (Integrated Windows Authentication)'. This step is only necessary if you are configuring an identity source of type 'LDAP Server'.
- D. Incorrect.
Incorrect: Configuring vCenter Server to use the administrator@vsphere.local account is not required for adding an Active Directory identity source. This account is used for managing vSphere itself, not for AD integration.
- E. Correct.
Correct: Time synchronization is critical between vCenter Server and the Active Directory domain controller. Significant time drift can cause authentication and communication issues.