Given a Scenario, Troubleshoot Issues with Identity and Access Management (VMware Identity Broker) VCP-VCF-SUPPORT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A VCF administrator notices that users from a specific domain can log in, but users from another domain cannot. The Identity Broker configuration appears correct. Which of the following is the most likely cause of this policy misalignment?

   • AThe first domain's users have stronger passwords.
   • BThe Identity Broker service is running on a different network segment.
   • CThe vCenter SSO certificate is only trusted for the first domain.
   • DThe second domain is not added as an identity source in Identity Broker.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following diagnostic commands or tools is most commonly used to validate the connectivity between Identity Broker and an external LDAP server?

   • Aldapsearch
   • Bnsxcli
   • Cvmkping
   • Desxcli network
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A user reports they cannot log in to vCenter through the VCF fleet, and the error message indicates an SSO token validation failure. Which of the following is the most likely cause?

   • AThe Identity Broker service is not running.
   • BThe SSO token issued by Identity Broker is invalid or has expired.
   • CThe user is not a member of any group in the external identity source.
   • DThe user's password has expired in the external identity source.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A user successfully authenticates through VMware Identity Broker and can see the vCenter Server in the HTML5 client, but receives an error when attempting to power on a VM. The user's AD group is listed in the vCenter global permission with the 'Operator' role. Which configuration should the administrator verify first?

   • AVerify that the Identity Broker service account has permission to enumerate AD groups.
   • BConfirm that the user's AD group is also assigned a role on the specific VM or its parent folder.
   • CEnsure that the vCenter Server's time is synchronized with the Identity Broker.
   • DCheck whether the user's account is locked out in Active Directory.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A user successfully authenticates to vCenter in a VCF fleet but cannot see any VMs in the inventory. Which of the following is the most likely cause of this authorization issue?

   • AThe Identity Broker is not connected to the external identity source.
   • BThe vCenter SSO certificate is not trusted.
   • CThe user's password has expired.
   • DThe user's group is not assigned the appropriate vCenter role or permission.
   Reveal Solution Discussion Select an answer first