ExamTopics Logo
Mail Us[email protected]
Menu
Vmware Discussions
exam questions

Exam 2V0-21.23 All Questions

View all questions & answers for the 2V0-21.23 exam
Go to Exam

Exam 2V0-21.23 topic 1 question 18 discussion

Actual exam question from VMware's 2V0-21.23
Question #: 18
Topic #: 1
[All 2V0-21.23 Questions]

An administrator is tasked with configuring an appropriate Single Sign-On (SSO) solution for VMware vCenter based on the following criteria:
The solution should support the creation of Enhanced Link Mode groups.
All user accounts are stored within a single Active Directory domain and the solution must support only this Active Directory domain as the identity source.
All user account password and account lockout policies must be managed within the Active Directory domain.
The solution should support token-based authentication.
Which SSO solution should the administrator choose based on the criteria?

  • A. vCenter Identity Provider Federation with Active Directory Federation Services as the identity provider
  • B. vCenter Single Sign-On with Active Directory over LDAP as the identity source
  • C. vCenter Single Sign-On with Active Directory (Windows Integrated Authentication) as the identity source
  • D. vCenter Identity Provider Federation with Active Directory over LDAP as the identity provider
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by michael24 at May 31, 2023, 12:32 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ktsky
Highly Voted 1 year, 9 months ago
Selected Answer: A
„ In vCenter Server Identity Provider Federation, vCenter Server uses the OpenID Connect (OIDC) protocol to receive an identity token that authenticates the user with vCenter Server.“ Integrated Windows Authentication is deprecated since vSphere 7.0 https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.authentication.doc/GUID-157188E3-531C-4CC2-BDD4-8BF01EA26BDC.html
upvoted 11 times
...
Dhelailla
Most Recent 6 months, 1 week ago
Selected Answer: A Given answer is correct: vCenter Single Sign-On allows vSphere components to communicate with each other through a secure token mechanism. vCenter Single Sign-On uses the following services: Authentication of users through either external identity provider federation or the vCenter Server built-in identity provider. The built-in identity provider supports local accounts, Active Directory or OpenLDAP, Integrated Windows Authentication (IWA), and miscellaneous authentication mechanisms (smart card and RSA SecurID). See also: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-authentication/GUID-575991A7-7FF3-4F79-B962-CC5540A9CE18.html
upvoted 1 times
...
RJB71
7 months, 3 weeks ago
I don't see what's wrong with B - when LDAP accepts token authentication. And identity sources can use 1 link to the domain. It says the solution SHOULD support token based auth and LDAP does this
upvoted 2 times
...
MalGil
9 months, 2 weeks ago
Selected Answer: A
C is depreciated, why is it showing as the correct answer?
upvoted 2 times
...
elekgeek
1 year, 1 month ago
Token-based ---> AD FS
upvoted 1 times
...
FR_Wolfman
1 year, 3 months ago
Selected Answer: A
Answer A. It is the only way to bypass the vCenter SSO, and use Active Directory as the only identity source.
upvoted 1 times
...
ohenriquez65
1 year, 3 months ago
Ima is deprecated, why is it the right answer
upvoted 1 times
...
[Removed]
1 year, 6 months ago
vCenter Server Identity Provider Federation and Enhanced Linked Mode https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-authentication/GUID-4B4E336B-75E4-47D9-9BDE-E835071E71F9.html
upvoted 1 times
...
payam
1 year, 7 months ago
Selected Answer: A
https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-authentication/GUID-C5E998B2-1148-46DC-990E-A5DB71F93351.html
upvoted 2 times
...
kernelkraut
1 year, 7 months ago
Who is choosing these answers? Only A (ADFS) is token based...
upvoted 3 times
...
DesolateMarauder
1 year, 7 months ago
A. vCenter Identity Provider Federation with Active Directory Federation Services as the identity provider.
upvoted 1 times
DesolateMarauder
1 year, 7 months ago
Option A involves using vCenter Identity Provider Federation, which supports token-based authentication, and utilizes Active Directory Federation Services (ADFS) as the identity provider. ADFS enables token-based authentication, allowing users to obtain security tokens to access vCenter resources. This solution satisfies all the criteria, including supporting Enhanced Linked Mode groups, using a single Active Directory domain as the identity source, managing user account policies within Active Directory, and supporting token-based authentication.
upvoted 3 times
...
...
michael24
1 year, 9 months ago
C: the requirement to only allow logins from that specific AD
upvoted 2 times
michael24
1 year, 9 months ago
Yeah, totally missed the token requirement. Switching my answer to A.
upvoted 2 times
RJB71
7 months, 3 weeks ago
it says "should support" not that it's a requirement, but i dont see why B isn't the answer and just use 1 AD URL as the domain -
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago