Exam 2V0-21.23 Topic 4 Question 22 Discussion
Actual exam question for VMware's 2V0-21.23 exam
Question #: 22
Topic #: 4
Question #: 22
Topic #: 4
An administrator is tasked with configuring an appropriate Single Sign-On (SSO) solution for VMware vCenter based on the following criteria:
* The solution should support the creation of Enhanced Link Mode groups.
* All user accounts are stored within a single Active Directory domain and the solution must support only this Active Directory domain as the identity source.
* All user account password and account lockout policies must be managed within the Active Directory domain.
* The solution should support token-based authentication.
Which SSO solution should the administrator choose based on the criteria?
* The solution should support the creation of Enhanced Link Mode groups.
* All user accounts are stored within a single Active Directory domain and the solution must support only this Active Directory domain as the identity source.
* All user account password and account lockout policies must be managed within the Active Directory domain.
* The solution should support token-based authentication.
Which SSO solution should the administrator choose based on the criteria?
Suggested Answer: C Vote an answer
Explanation
Option C is correct because it indicates that vCenter Single Sign-On with Active Directory (Windows Integrated Authentication) as the identity source is the best SSO solution for VMware vCenter based on the criteria, as this solution supports Enhanced Link Mode groups, supports only one Active Directory domain as the identity source, delegates password and account lockout policies to Active Directory, and supports token-based authentication. Option A is incorrect because vCenter Identity Provider Federation with Active Directory Federation Services as the identity provider is not necessary for a single Active Directory domain scenario and may introduce additional complexity and overhead. Option B is incorrect because vCenter Single Sign-On with Active Directory over LDAP as the identity source does not support token-based authentication and may require additional configuration for password and account lockout policies. Option D is incorrect because vCenter Identity Provider Federation with Active Directory over LDAP as the identity provider does not support token-based authentication and may introduce additional complexity and overhead. References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vcenter.install.doc/GUID-A2A4371A-B888-404
Option C is correct because it indicates that vCenter Single Sign-On with Active Directory (Windows Integrated Authentication) as the identity source is the best SSO solution for VMware vCenter based on the criteria, as this solution supports Enhanced Link Mode groups, supports only one Active Directory domain as the identity source, delegates password and account lockout policies to Active Directory, and supports token-based authentication. Option A is incorrect because vCenter Identity Provider Federation with Active Directory Federation Services as the identity provider is not necessary for a single Active Directory domain scenario and may introduce additional complexity and overhead. Option B is incorrect because vCenter Single Sign-On with Active Directory over LDAP as the identity source does not support token-based authentication and may require additional configuration for password and account lockout policies. Option D is incorrect because vCenter Identity Provider Federation with Active Directory over LDAP as the identity provider does not support token-based authentication and may introduce additional complexity and overhead. References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vcenter.install.doc/GUID-A2A4371A-B888-404
by Hilary at Feb 24, 2025, 07:57 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).