nerdexam
Broadcom-VMware

2V0-622 · Question #31

Which group in the vsphere.local domain will have administrator privileges for the VMware Certificate Authority (VMCA)?

The correct answer is B. CAAdmins. The CAAdmins group in the vsphere.local domain is the designated group whose members have administrative privileges over the VMware Certificate Authority.

Section 1 – Configure and Administer vSphere 6.5 Security

Question

Which group in the vsphere.local domain will have administrator privileges for the VMware Certificate Authority (VMCA)?

Options

  • ASolutionUsers
  • BCAAdmins
  • CDCAAdmins
  • DSystemConfiguration.Administrators

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    86% (30)
  • C
    9% (3)
  • D
    3% (1)

Why each option

The CAAdmins group in the vsphere.local domain is the designated group whose members have administrative privileges over the VMware Certificate Authority.

ASolutionUsers

SolutionUsers is a group for vSphere solution accounts such as vpxd and vsphere-webclient that authenticate between services, not for managing the certificate authority.

BCAAdminsCorrect

CAAdmins is a built-in vsphere.local group specifically created during PSC installation to grant members full administrative rights over VMCA, including the ability to issue, revoke, and manage certificates.

CDCAAdmins

DCAAdmins is not a standard built-in group in the vsphere.local domain and has no defined role in certificate authority administration.

DSystemConfiguration.Administrators

SystemConfiguration.Administrators grants access to manage system configuration settings in the PSC, but does not specifically confer VMCA administrative privileges.

Concept tested: vsphere.local built-in groups and VMCA administration

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.authentication.doc/GUID-AE64E616-E4CB-4CF2-BB8E-C5B0E93B5CAA.html

Topics

#VMCA administration#vsphere.local groups#CAAdmins#certificate authority

Community Discussion

No community discussion yet for this question.

Full 2V0-622 Practice