Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

VMware 2V0-13.24 Exam - Topic 2 Question 12 Discussion

Actual exam question for VMware's 2V0-13.24 exam
Question #: 12
Topic #: 2
[All 2V0-13.24 Questions]

An architect had gathered the following requirements and constraints for a VMware Cloud Foundation (VCF) deployment.

Requirements:

* User interface (UI) SSL certificates must have a maximum validity of 6 months.

* Have the least possible administrative time to install and renew certificates.

* Each certificate must be created on a per VCF component basis.

Constraints:

* Limited administrative skillsets on SSL certificate administration

* Limited operational expenditure budget for SSL certificates

Which design decision should be made to satisfy the stated requirement(s) and constraint(s)?

Show Suggested Answer Hide Answer
Suggested Answer: D

The requirements demand per-component certificates with 6-month validity and minimal admin effort, while constraints limit skills and budget. Option D, 'Use and configure integration with Microsoft Certificate Authority (CA),' meets all criteria: Microsoft CA (integrated via SDDC Manager in VCF 5.2) supports individual certificates per component (e.g., vCenter, NSX), allows short validity periods, automates renewal (reducing effort), and leverages existing infrastructure (low cost, skill-friendly). Option A (wildcard certificates) violates per-component needs. Option B (DigiCert) incurs higher costs and requires more skill. Option C (disabling SSL) compromises security, failing compliance. Microsoft CA aligns with VCF's certificate management capabilities.


Contribute your Thoughts:

0/2000 characters
Antonio
3 months ago
Microsoft CA integration seems like a solid choice.
upvoted 0 times
...
Brent
3 months ago
I think integrating with DigiCert is a better option.
upvoted 0 times
...
Vivan
3 months ago
Wait, 6 months max validity? That’s surprising!
upvoted 0 times
...
Natalie
4 months ago
Disabling SSL? That sounds risky!
upvoted 0 times
...
Salome
4 months ago
Wildcard certificates could save time!
upvoted 0 times
...
Yesenia
4 months ago
Disabling SSL certificates seems risky, but I guess it could save time. Still, I feel like that goes against best practices we learned.
upvoted 0 times
...
Emerson
4 months ago
I recall a practice question where we had to choose between wildcard certificates and individual ones. Wildcards seemed easier, but I wonder if they meet the per component requirement here.
upvoted 0 times
...
Fletcher
4 months ago
I think using a certificate vendor like DigiCert could help with the renewal process, but I'm not entirely confident about the cost implications.
upvoted 0 times
...
Wava
5 months ago
I remember we discussed the importance of SSL certificate management in our last study session, but I'm not sure which option minimizes admin time the most.
upvoted 0 times
...
Glynda
5 months ago
I think option D, integrating with Microsoft CA, could be a good solution here. It might be the most cost-effective approach given the constraints.
upvoted 0 times
...
Roselle
5 months ago
Okay, let me think this through. I'm leaning towards option B - using a certificate vendor like DigiCert could help meet the requirements while minimizing admin overhead.
upvoted 0 times
...
Ashleigh
5 months ago
Hmm, I'm not sure about this one. The constraints around limited SSL admin skills and budget are making me hesitant.
upvoted 0 times
...
Reyes
5 months ago
This seems like a tricky one. The requirements around certificate validity and per-component certificates are a bit of a challenge.
upvoted 0 times
...

Save Cancel