VCP-VMC 2024 Question 212
Single answerAn organization is using VMware Cloud on AWS and wants to ensure that their VMware Cloud SDDC environment remains operational even if their Active Directory (AD) server experiences downtime. As a VMware administrator, what is the best approach to ensure continued administrative access to the environment?
- A
Configure Identity Federation with VMware Cloud Services using an external IdP.
- B
Set up a local administrator account in the VMware Cloud SDDC.
- C
Integrate the VMware Cloud SDDC with a secondary AD server for redundancy.
- D
Enable Single Sign-On (SSO) directly on the VMware Cloud Console.
Show answer and explanation
Correct answer: B
Explanation
To ensure continued administrative access to the VMware Cloud SDDC during Active Directory server downtime, a local administrator account should be set up within the SDDC. This account operates independently of external identity providers or AD servers, providing a fail-safe method for managing the environment during outages.
- A. Incorrect.
Configuring Identity Federation with an external IdP may enhance security, but it doesn't address administrative access during AD server downtime. The external IdP may also depend on the AD server.
- B. Correct.
Setting up a local administrator account in the VMware Cloud SDDC ensures access even when the AD server is unavailable, as this account does not rely on external systems.
- C. Incorrect.
Integrating with a secondary AD server provides redundancy, but it requires additional infrastructure and maintenance. This may not be feasible in all cases and doesn't guarantee immediate administrative access during downtime.
- D. Incorrect.
Enabling SSO on the VMware Cloud Console enhances user convenience but does not address access during AD downtime, as SSO authentication may depend on the AD server.