READ Free Dumps For VMware- 2V0-621
| Question ID 21785 | An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments.
Which statement best describes how the administrator would accomplish this?
|
| Option A | Assign a Global Permission to the user.
|
| Option B | Assign a vCenter Permission to the user.
|
| Option C | Assign vsphere.local membership to the user.
|
| Option D | Assign an ESXi Permission to the user.
|
| Correct Answer | A |
Explanation Explanation: Global Permissions Global permissions are applied to a global root object that spans solutions, for example, both vCenter Server and vCenter Orchestrator. Use global permissions to give a user or group privileges for all objects in all object hierarchies. Each solution has a root object in its own object hierarchy. The global root object acts as a parent object to each solution object. You can assign global permissions to users or groups, and decide on the role for each user or group. The role determines the set of privileges. You can assign a predefined role or create custom roles. See Using Roles to Assign Privileges. It is important to distinguish between vCenter Server permissions and global permissions. vCenter Serverper missions In most cases, you apply a permission to a vCenter Server inventory object such as an ESXi host or a virtual machine. When you do, you specify that a user or group has a set of privileges, called a role, on the object. Global permissions Global permissions give a user or group privileges to view or manage all objects in each of the inventory hierarchies in your deployment. If you assigna global and do not select Propagate, the users or groups associated with this permission do not have access to the objects in the hierarchy. They only have access to some global functionality such as creating roles. Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-C7702E31-1623-4189-89CB-E1136AA27972.html
| Question ID 21786 | Which two methods are recommended for managing the VMware Directory Service? (Choose two.)
|
| Option A | Utilize the vmdir command.
|
| Option B | Manage through the vSphere Web Client.
|
| Option C | Manage using the VMware Directory Service.
|
| Option D | Utilize the dc rep command.
|
| Correct Answer | A,B |
Explanation Explanation: The dir-cli utility allows you to create and update solution users, create other user accounts, and manage certificates and passwords in vmdir. ( link: to see vmdir commands-- https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2 Fcom.vmware.vsphere.security.doc%2FGUID-4FBEA58E-9492-409B- B584-C18477F041D8.html)