What is a key indicator that an external identity provider integration is functioning correctly in VKS?

The identity provider is reachable from the VKS cluster

The identity provider's certificate is valid

A user from the external provider can authenticate and access authorized resources

The identity provider is listed in the VKS configuration

A VKS cluster is integrated with an external OIDC provider. The 'ops' group should have full access to the 'production' namespace only. The 'dev' group should have read-only access to the 'development' namespace. What is the most efficient RBAC configuration?

Create two RoleBindings, one for each group in their respective namespaces.

Create two ClusterRoleBindings, one for each group.

Create a single ClusterRoleBinding for both groups.

Create a RoleBinding for the 'ops' group and a ClusterRoleBinding for the 'dev' group.

In VKS, how are external identity provider users or groups granted permissions to cluster resources?

By adding them to the cluster-admin group

By mapping them to Kubernetes RBAC roles

By creating a Kubernetes service account for each user

By modifying the kubeconfig file

A VKS administrator is configuring an external LDAP provider. The LDAP directory uses nested groups. The 'dev-team' group contains a subgroup 'backend-dev'. Users in 'backend-dev' should have the same permissions as 'dev-team'. What must the administrator ensure?

Add users directly to the 'dev-team' group.

The LDAP provider is configured to expand nested groups in the token.

Create a separate RBAC binding for the 'backend-dev' group.

Use a different identity provider.

VMwareVCAP-VCF VKS (3V0-24.25)

Domain 2Objective 4

Configure VKS Identity and Access Using External Providers and Kubernetes Admin Credentials VCAP-VCF-VKS Practice Questions (Page 3)

Part of the VMware Products and Solutions domain, which makes up ~24% of our current practice bank.

14questions here

3free pages

4concepts

Questions 11–14

11foundation · easy
What is a key indicator that an external identity provider integration is functioning correctly in VKS?
Select an answer first
12expert · hard
A VKS cluster is integrated with an external OIDC provider. The 'ops' group should have full access to the 'production' namespace only. The 'dev' group should have read-only access to the 'development' namespace. What is the most efficient RBAC configuration?
Select an answer first
13foundation · easy
In VKS, how are external identity provider users or groups granted permissions to cluster resources?
Select an answer first
14expert · hard
A VKS administrator is configuring an external LDAP provider. The LDAP directory uses nested groups. The 'dev-team' group contains a subgroup 'backend-dev'. Users in 'backend-dev' should have the same permissions as 'dev-team'. What must the administrator ensure?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to VCAP-VCF-VKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-VKS” is a trademark of its owner, used for identification only.