nerdexam
Broadcom-VMware

2V0-621D · Question #220

Which three Authorization types are valid in vSphere? (Choose three.)

The correct answer is A. Group Membership in vsphere.local B. Global D. vCenter Server. Sphere 6.0 and later allows privileged users to give other users permissions to perform tasks in the following ways. These approaches are, for the most part, mutually exclusive; however, you can assign use global permissions to authorize certain users for all solution, and…

Section 1 – Configure and Administer vSphere 6.x Security

Question

Which three Authorization types are valid in vSphere? (Choose three.)

Options

  • AGroup Membership in vsphere.local
  • BGlobal
  • CForest
  • DvCenter Server
  • EGroup Membership in system-domain

How the community answered

(55 responses)
  • A
    89% (49)
  • C
    7% (4)
  • E
    4% (2)

Explanation

Sphere 6.0 and later allows privileged users to give other users permissions to perform tasks in the following ways. These approaches are, for the most part, mutually exclusive; however, you can assign use global permissions to authorize certain users for all solution, and local vCenter Server permissions to authorize other users for individual vCenter Server systems. vCenter ServerPermissions The permission model for vCenter Server systems relies on assigning permissions to objects in the object hierarchy of thatvCenter Server. Each permission gives one user or group a set of privileges, that is, a role for a selected object. For example, you can select an ESXi host and assign a role to a group of users to give those users the corresponding privileges on that host. Global Permissions Global permissions are applied to a global root object that spans solutions. For example, if both vCenter Server and vCenter Orchestrator are installed, you can give permissions to all objects in both object hierarchies using global permissions. Global permissions are replicated across the vsphere.local domain. Global permissions to not provide authorization for services managed through vsphere.local groups. See Global Permissions. Group Membership in vsphere.local Groups The user [email protected] can perform tasks that are associated with services included with the Platform Services Controller. In addition, members of a vsphere.local group can perform the corresponding task. For example, you can perform license management if you are a member of the LicenseService.Administrators group. See Groups in the vsphere.local Domain. 60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-74F53189-EF41-4AC1- A78E-D25621855800.html

Topics

#vSphere security#authorization#vCenter Server#identity sources

Community Discussion

No community discussion yet for this question.

Full 2V0-621D Practice