5V0-31.22 Exam Dumps : VMware Cloud Foundation Specialist (v2)

A quote from reference [1] states that, "To add permissions to users or groups from vCenter Single Sign-On identity sources, the Tanzu Kubernetes cluster administrator can use either the vSphere Client or kubectl."

Another quote from reference [1] states that, "By default, a Tanzu Kubernetes cluster includes a set of predefined roles that provides granular permission control for Kubernetes objects. The predefined roles enable cluster groups to be created with specific permissions across the Kubernetes namespace hierarchy. Administrators can also create custom roles to provide more granular permission control that is specific to their organization's requirements."

References: [1] Tanzu Kubernetes Cluster or Supervisor Cluster[1]: Which do I choose? -

According to VMware Cloud Foundation Planning and Preparation Workbook, a statement that is true regarding NSX Manager configuration in a VMware Cloud Foundation environment is:

• The cluster virtual IP address (VIP) address must be used for API and GUI access to NSX Managers

This is because according to VMware documentation6, when integrating Microsoft Certificate Authority with SDDC Manager, you need to configure basic authentication on the Microsoft Certificate Authority Server and provide valid credentials when establishing a connection from SDDC Manager.