An organization wants to use its existing Active Directory (LDAP) for NSX user authentication. The NSX administrator configures the LDAP identity source with the domain controller's IP address and successfully tests connectivity. Users can authenticate, but when the administrator tries to assign a role to the 'Network Operators' AD group, the group does not appear in the search results. What should the administrator do to resolve this issue?

Change the LDAP identity source type from 'Active Directory' to 'OpenLDAP'.

Verify that the 'Network Operators' group is in the configured base DN and that the bind account has read access to the group's OU.

Assign the role directly to each user in the 'Network Operators' group.

Recreate the 'Network Operators' group as a local NSX group.

A company is integrating NSX with VMware Identity Manager (vIDM) for centralized authentication. The security team requires that only members of the 'NSX-Security-Admins' group in vIDM can log in to the NSX UI. During configuration, the NSX administrator creates the vIDM identity source and successfully tests connectivity. However, when a vIDM user who is a member of 'NSX-Security-Admins' attempts to log in, the user is denied access. What is the most likely cause of this issue?

The vIDM identity source was configured with the wrong LDAP base DN.

The user's account in vIDM is locked due to multiple failed login attempts.

The 'NSX-Security-Admins' group was not assigned a role in NSX.

The vIDM server certificate is not trusted by the NSX Manager nodes.

VMwareCertified Professional – Network Virtualization (VCP-NV)

Domain 1Objective 3

Security and Identity Management VCP-NV Practice Questions (Page 2)

Part of the VMware Solution (NSX) domain, which makes up ~33% of our current practice bank.

21questions here

5free pages

6concepts

Questions 6–10

6foundation · easy
Which type of user account is created locally within NSX and stored in the NSX Manager database?
Select an answer first
7application · medium
A company has a team of security analysts who need to view security policies, monitor firewall logs, and generate reports, but they should NOT be able to make any changes to the NSX configuration. Which predefined role should be assigned to this team?
Select an answer first
8application · medium
An organization wants to use its existing Active Directory (LDAP) for NSX user authentication. The NSX administrator configures the LDAP identity source with the domain controller's IP address and successfully tests connectivity. Users can authenticate, but when the administrator tries to assign a role to the 'Network Operators' AD group, the group does not appear in the search results. What should the administrator do to resolve this issue?
Select an answer first
9application · medium
A company is integrating NSX with VMware Identity Manager (vIDM) for centralized authentication. The security team requires that only members of the 'NSX-Security-Admins' group in vIDM can log in to the NSX UI. During configuration, the NSX administrator creates the vIDM identity source and successfully tests connectivity. However, when a vIDM user who is a member of 'NSX-Security-Admins' attempts to log in, the user is denied access. What is the most likely cause of this issue?
Select an answer first
10application · medium
An NSX administrator needs to grant a team of security engineers the ability to create and manage distributed firewall rules and security groups, but they should NOT be able to modify networking components like segments or Tier-0 gateways. Which predefined role should be assigned?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCP-NV

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCP-NV” is a trademark of its owner, used for identification only.

Security and Identity Management VCP-NV Practice Questions (Page 2)

Questions 6–10

Which type of user account is created locally within NSX and stored in the NSX Manager database?

A company has a team of security analysts who need to view security policies, monitor firewall logs, and generate reports, but they should NOT be able to make any changes to the NSX configuration. Which predefined role should be assigned to this team?

An NSX administrator needs to grant a team of security engineers the ability to create and manage distributed firewall rules and security groups, but they should NOT be able to modify networking components like segments or Tier-0 gateways. Which predefined role should be assigned?

Keep studying — VMware Solution (NSX)