VMware Cloud Foundation 5.x Administrator — Question 23

A cloud administrator recently deployed a new VI workload domain. As part of the initial VI domain creation, the administrator created a new SSO domain. However, they reconsidered and now want the domain to use the same SSO domain as the management domain.
How can the VI domain be changed from a dedicated SSO domain to sharing the SSO domain with the management domain?

Answer options

• A. From the SDDC Manager console, use the rsautil command to add the VI workload domain to the management domain SSO ring.
• B. The vSphere SSO domain cannot be changed once it has been deployed and a new VI workload domain that is part of the Management SSO domain must be created, and workloads migrated.
• C. From the VI Workload Domain vCenter Server instance, use the rsautil command to join the management domain SSO ring.
• D. From the Management Domain vCenter Server instance, use the rsautil command to add the VI workload domain to the management domain SSO ring.

Correct answer: B

Explanation

The correct answer is B because once a vSphere SSO domain is deployed, it cannot be modified to change its association with a workload domain. Therefore, the only solution is to create a new VI workload domain that joins the existing Management SSO domain, requiring workloads to be migrated. Options A, C, and D are incorrect because they imply an ability to modify the SSO domain association, which is not possible after deployment.