VMware vSAN Administrator (2025) — Question 73

An architect has been tasked with designing a new VMware Cloud Foundation (VCF) solution. During the requirements gathering workshops with the customer, the following requirements were captured:

• REQ01: The solution must support workloads being deployed to multiple physical datacenter locations (DC01, DC02).
• REQ02: The solution must support the use of the two factor authentication for authenticating user access to the administrative tools.
• REQ03: The solution must prioritize reducing the operational overhead associated with managing the deployed infrastructure platform.

A combination of which two design decisions should the architect document for the VCF Single Sign-On architecture in order to meet these requirements? (Choose two.)

Answer options

• A. Deploy VCF Identity Broker (VIDB) in the management domain of every VCF instance in all sites.
• B. Configure all additional VCF instances in the same region to point to the VIDB in the first VCF instance at DC02.
• C. Configure all additional VCF instances in the same private cloud to point to the VIDB in the first VCF instance at DC01.
• D. Deploy VCF Identity Broker (VIDB) in the management domain of each VCF instance at DC02.
• E. Deploy VCF Identity Broker (VIDB) in the first VCF instance management domain at DC01.

Correct answer: C, E

Explanation

The correct answers are C and E because they ensure a centralized authentication model that simplifies management across multiple data centers while also supporting two-factor authentication. Options A and D involve deploying VIDB in every instance, which increases operational overhead and does not meet the requirement for minimizing management complexity.