NCM-MCI-5.20 · Question #11
An administrator configures authentication in Prism Central (PC) for the NTNX-Admins group. Users report that they are unable to log in. The administrator confirms that the Active Directory (AD)…
The correct answer is A. A role mapping needs to be associated with the AD group. Roles in Prism Central must be granted to AD groups. Best practices are to grant the least permissions possible. With this in mind, we would not add the Domain Admins group in AD to any of the roles in Prism Central. Instead, a new group would be created in AD, linked in Prism…
Question
An administrator configures authentication in Prism Central (PC) for the NTNX-Admins group. Users report that they are unable to log in. The administrator confirms that the Active Directory (AD) settings in PC are correct. Which condition could result in this behavior?
Options
- AA role mapping needs to be associated with the AD group.
- BThe users must be added to the Domain Admins AD group.
- CThe Local authentication type must also be selected in PC.
- DA client chap certificate must also be added in PC.
How the community answered
(54 responses)- A72% (39)
- B17% (9)
- C7% (4)
- D4% (2)
Explanation
Roles in Prism Central must be granted to AD groups. Best practices are to grant the least permissions possible. With this in mind, we would not add the Domain Admins group in AD to any of the roles in Prism Central. Instead, a new group would be created in AD, linked in Prism Central, and only the necessary personnel who needed access would be added.
Topics
Community Discussion
No community discussion yet for this question.