VMware NSX 4.x Professional: 2V0-41.23

Correct Answer: DEF

According to the VMware NSX 4.x Professional documents and tutorials, an NSX Manager is a standalone appliance that hosts the API services, the management plane, control plane, and policy management. The NSX Manager has three built-in roles: policy, manager, and controller2. The policy role handles the declarative configuration of the system and translates it into desired state for the manager role. The manager role receives and validates the configuration from the policy role and stores it in a distributed persistent database. The manager role also publishes the configuration to the central control plane. The controller role implements the central control plane that computes the network state based on the configuration and topology information3. The other roles (master, cloud, and zookeeper) are not valid NSX Manager roles.

Correct Answer: CD

NSX supports two types of authentication, authorization, and accounting (AAA) systems when integrating with VMware Identity Manager: RSA SecurID and LDAP and OpenLDAP based on Active Directory (AD). RSA SecurID is a two-factor authentication system that uses a token-based approach to verify the identity of users. LDAP and OpenLDAP based on AD are directory services that store and manage user information and credentials. Both systems can be used to provide centralized authentication for users who want to access applications in an NSX environment . https://blogs.vmware.com/networkvirtualization/2017/11/remote-user-authentication-and-rbac-with-nsx-t.html

The integration of VMware Identity Manager with NSX provides the following benefits related to user authentication:

Support for extensive authentication, authorization, and accounting (AAA) systems, including:

--RADIUS --Smart cards and common access cards --RSA SecureID --LDAP and OpenLDAP based on Active Directory (AD) Enterprise SSO: --Common authentication platform across multiple VMware solutions--Seamless SSO experience

NSX has its own native LDAP and Active Directory integration, but VMware Identity Manager also offers this capability

Correct Answer: ABEG

https://docs.vmware.com/en/VMware-NSX/4.1/administration/GUID-26C44DE8-1854-4B06-B6DA-A2FD426CDF44.html