Security and Identity Management VCP-NV Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of Role-Based Access Control (RBAC) in NSX?

   • ATo provide high availability for NSX Manager
   • BTo enforce least-privilege access by assigning roles to users or groups
   • CTo monitor network performance metrics
   • DTo encrypt all network traffic between NSX components
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which predefined NSX role is specifically designed to manage security policies and firewall rules?

   • ANetwork Admin
   • BAuditor
   • CEnterprise Admin
   • DSecurity Admin
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In NSX RBAC, what is a role?

   • AA network segment with specific security rules
   • BA collection of permissions that define what actions a user can perform
   • CA type of LDAP directory entry
   • DA group of users with the same password policy
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   An organization is integrating NSX with VMware Identity Manager (vIDM) for SSO. The NSX administrator has configured the identity source and imported the SAML metadata. Users can authenticate via vIDM, but when a user is assigned the 'Enterprise Admin' role in vIDM, the role does not take effect in NSX. The user can log in but has no permissions. What is the most likely cause?

   • AThe 'Enterprise Admin' role in vIDM is not mapped to the 'Enterprise Admin' role in NSX.
   • BThe role assignment in vIDM is not synchronized to NSX because the NSX identity source is configured as LDAP instead of vIDM.
   • CThe user's account in vIDM is not a member of the correct group.
   • DThe NSX SAML metadata is not configured with the correct certificate.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization is integrating NSX with VMware Identity Manager (vIDM) for centralized authentication. The NSX administrator wants to ensure that authentication remains available even if one vIDM node fails. What should the administrator do to meet this requirement?

   • AConfigure multiple vIDM nodes in the identity source settings and enable load balancing.
   • BCreate local NSX user accounts as a backup for all vIDM users.
   • CUse a single vIDM node with a higher performance tier.
   • DConfigure NSX to cache vIDM authentication credentials locally.
   Reveal Solution Discussion Select an answer first