VMware vSphere 8.x Professional — Question 59

Following a merger with another company, an administrator is tasked with configuring an identity source for VMware vCenter so that all vSphere administrators can authenticate using their existing Active Directory accounts. Each company has user accounts in their own Active Directory forests.
The following additional information has been provided:
The corporate policy states that only Windows-based machine accounts are allowed in Active Directory.
Which action should the administrator take to configure vCenter Single Sign-On (SSO) to meet this requirement?

Answer options

• A. Configure SSO to use Active Directory over LDAP as the identity source.
• B. Configure SSO to use OpenLDAP as the identity source.
• C. Join the vCenter Server Appliance to the LDAP domain.
• D. Configure SSO to use Active Directory (Integrated Windows Authentication) as the identity source.

Correct answer: A

Explanation

The correct choice is A, as configuring SSO to use Active Directory over LDAP aligns with the requirement for vSphere administrators to authenticate using their existing Active Directory accounts. Option B is incorrect because OpenLDAP is not compatible with the specified Windows-only policy. Option C is not applicable since joining the vCenter Server Appliance to the LDAP domain does not directly address the SSO configuration requirement. Option D is also incorrect because Integrated Windows Authentication is not the same as using Active Directory over LDAP.