VCP-VCF Administrator 2024 Question 39
Single answerAn organization using VMware Cloud Foundation has a security policy requiring periodic password expiration across all components. As a VMware Cloud Foundation administrator, you need to configure password management to comply with this policy. Which step is required to enable password expiration for the vSphere SSO accounts within the Cloud Foundation environment?
- A
Enable the password expiration policy in the SDDC Manager and apply it to all components.
- B
Manually configure the password expiration policy in the vSphere SSO domain settings.
- C
Use the VMware Cloud Foundation API to enforce password expiration for all accounts.
- D
Configure password expiration policies directly in the vRealize Suite Lifecycle Manager.
Show answer and explanation
Correct answer: B
Explanation
To comply with security policies requiring password expiration, administrators must configure the password expiration policy directly in the vSphere SSO domain settings. Other components, like SDDC Manager or the API, do not handle this functionality. Understanding where and how to configure password expiration in a Cloud Foundation environment is critical for compliance.
- A. Incorrect.
SDDC Manager does not handle password expiration policies directly for vSphere SSO; it manages other aspects of the Cloud Foundation environment.
- B. Correct.
Correct. Password expiration for vSphere SSO accounts must be configured manually within the vSphere SSO domain settings.
- C. Incorrect.
The VMware Cloud Foundation API does not provide a direct method to manage password expiration; it is used for automation and management tasks.
- D. Incorrect.
vRealize Suite Lifecycle Manager is unrelated to password management for vSphere SSO accounts; it focuses on lifecycle management for vRealize components.