Exam 2V0-21.19 topic 1 question 71 discussion

This question identifies a NEW Domain added to vSphere, as an identiy source, and within this new domain is a user group called adminstrators. Simply because this new domain has a Administrators group doesn't mean it is automatically assigned ADMINISTRATOR rights within vCenter. The default access role would be applied to it meaning "No Access". Therefore I believe the correct answer to this question is D.

I believe the correct answer is D. "The administrator of the vCenter Single Sign-On domain, [email protected] by default, the root user, and vpxuser are assigned the Administrator role by default. Other users are assigned the No Access role by default." https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-93B962A7-93FA-4E96-B68F-AE66D3D6C663.html

This question is tricky. Key seems to be domain added as an identity source but not the group. https://docs.vmware.com/en/VMware-vSphere/5.5/com.vmware.vsphere.security.doc/GUID-1F0106C9-0524-4583-9AC5-A748FD1DC4C5.html vCenter Single Sign-On does not propagate permissions that result from nested groups from dissimilar identity sources. For example, if you add the Domain Administrators group to the Local Administrators group, the permissions are not propagated because Local OS and Active Directory are separate identity sources. D is the best answer without being given further information.

Adding Identity Source in vCenter is just a prerequisite to give someone an rights. Next you have to map AD user/group to vCenter privilege/permission. Right Answer is D – No Access

D is Correct. https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-93B962A7-93FA-4E96-B68F-AE66D3D6C663.html No Access Role The administrator of the vCenter Single Sign-On domain, [email protected] by default, the root user, and vpxuser are assigned the Administrator role by default. Other users are assigned the No Access role by default.

Answer is D. The question is indicating that an Active Directory is configured as an identity source, therefore any AD user by default will have the No Access role in the vCenter until it is configured

The new AD domain group "administrators" is in a different evironments than vsphere.local. You would still need to grant the "domain\administrators" group the Administrator role. Until that is done, no access.

No Access Role Users with the No Access role for an object cannot view or change the object in any way. New users and groups are assigned this role by default. You can change the role on an object-by-object basis. The administrator of the vCenter Single Sign-On domain, [email protected] by default, the root user, and vpxuser are assigned the Administrator role by default. Other users are assigned the No Access role by default.

Correct answer D. Checked in egzam.

D= correct. after https://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc_50%2FGUID-9A748247-BFCF-4A8C-816A-3DB404B612C4.html "Users who are in the Active Directory group ESX Admins are automatically assigned the Administrator role." "ESX Admins" is not automatically created on AD and domains admins are not automatically members of "ESX Admins" group. After adding AD as identity source to vCenter you need to explicitly add vmware roles/permissions to AD users/groups.

Correct answer is D. Because new identity source AD has been added so you can see all those users who are listed under AD in vCenter but you have to explicitly give them vCenter rights, by "default" they have "no access" at all.

Correct answer D. Checked in exam.

You guys are sharing the right links but it clearly states "By default, the [email protected] user has the Administrator role on both vCenter Single Sign-On and vCenter Server after installation. That user can then associate other users with the Administrator role on vCenter Server." Unless I'm missing something

The answer is C. "The administrator of the vCenter Single Sign-On domain, [email protected] by default is assigned the Administrator role by default. Other users are assigned the No Access role by default." https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-93B962A7-93FA-4E96-B68F-AE66D3D6C663.html

Agree on D from experience.

Same Answer: D

It is D in my personal experience without looking for confirmation.