VMware 3V0-22.21 Exam - Topic 11 Question 5 Discussion

Actual exam question for VMware's 3V0-22.21 exam

Question #: 5
Topic #: 11

[All 3V0-22.21 Questions]

The security team has decided to follow the VMware-recommended best practices in the vSphere hardening guide.

esxi02b:

Your first task is to create a local user in esxi02b:

* Name: SpecialUser

* Role: Administrator

Your second task is to ensure that SpecialUser is the ONLY user who is able to SSH into esxi02b via Putty.

Your final task is to enforce a strict lockdown on esxi02b.

Your second task is to ensure that SpecialUser is the ONLY user who is able to SSH into esxi02b via Putty.

Your final task is to enforce a strict lockdown on esxi02b.

AExplanation:
Authentication and authorization govern access.vCenter Single Sign-Onsupports authentication, which means it determines whether a user can access vSphere components at all. Each user must also be authorized to view or manipulate vSphere objects.
vSphere supports several different authorization mechanisms, discussed inUnderstanding Authorization in vSphere. The focus of the information in this section is how thevCenter Serverpermission model works and how to perform user management tasks.
vCenter Serverallows fine-grained control over authorization with permissions and roles. When you assign a permission to an object in thevCenter Serverobject hierarchy, you specify which user or group has which privileges on that object. To specify the privileges, you use roles, which are sets of privileges.
Initially, only the administrator user for the vCenter Single Sign-On domain, administrator@vsphere.local by default, is authorized to log in to thevCenter Serversystem. That user can then proceed as follows:
Add an identity source in which users and groups are defined tovCenter Single Sign-On. See thePlatform Services Controller Administrationdocumentation.
Give privileges to a user or group by selecting an object such as a virtual machine or avCenter Serversystem and assigning a role on that object for the user or group.

Show Suggested Answer

Suggested Answer: A

by Barrett at May 04, 2022, 07:37 PM

Limited Time Offer

25%

5 months ago

This looks straightforward, but I want to double-check my understanding of the property category concepts before selecting the answers.

upvoted 0 times

...