Exam 3V0-24.25 Topic 1 Question 1 Discussion

Actual exam question for VMware's 3V0-24.25 exam
Question #: 1
Topic #: 1

A Security Architect needs to integrate an OIDC provider (Azure AD) with vSphere to provide authentication for a new fleet of TKG clusters. The requirement is to map the Azure AD group k8s- platform-admins (Group Claim: 9283-uuid-xyz) to the cluster-admin role on all TKG clusters automatically upon creation.
Which architectural approach achieves this global policy enforcement? (Choose 2.)

A. Configure the Supervisor to trust the OIDC provider directly via the Supervisor Management API, bypassing vCenter. B. Use Tanzu Mission Control (if available/configured) to define an Access Policy that binds the k8s- platform-admins group to the cluster.admin role for the "All Clusters" group. C. Manually create a ClusterRoleBinding on every TKG cluster after provisioning using a script. D. Configure the vCenter Single Sign-On Identity Provider with the Azure AD OIDC settings. E. It is not possible to automate this; the admin kubeconfig must be used to set up RBAC for the first time on each cluster.

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business