5V0-35.21 Exam Dumps : VMware vRealize Operations Specialist

The regulatory, standards-based compliance pack that is available in vRealize Operations is the CIS Security Standards. The CIS Security Standards are a set of best practices and recommendations for securing IT systems and data against cyberattacks. The CIS Security Standards are developed and maintained by the Center for Internet Security (CIS), a nonprofit organization that provides cybersecurity resources and guidance to organizations and individuals1. The vRealize Operations Compliance Pack for CIS provides alerts, policies,and reports to validate the vSphere resources against the CIS hardening guide. The following resources are being validated using this content: ESXi Host, Virtual Machine, vCenter Server, Distributed Switch, Distributed Port Group, and Distributed Firewall2. The vRealize Operations Compliance Pack for CIS can be downloaded and installed from the VMware Marketplace3. The Sarbanes-Oxley Act (SOX) (option A) is not a regulatory, standards-based compliance pack that is available in vRealize Operations. SOX is a federal law that regulates the financial reporting and auditing of public companies in the United States. SOX does not provide specific technical guidelines or benchmarks for securing IT systems and data4. The Common Vulnerabilities and Exposures (CVE) (option B) is not a regulatory, standards-based compliance pack that is available in vRealize Operations. CVE is a list of publicly known cybersecurity vulnerabilities and exposures that are assigned unique identifiers and descriptions. CVE does not provide specific security standards or recommendations for securing IT systems and data5. The General Data Protection Regulation (GDPR) (option D) is not a regulatory, standards-based compliance pack that is available in vRealize Operations. GDPR is a legal framework that regulates the collection, processing, and transfer of personal data of individuals in the European Union and the European Economic Area. GDPR does not provide specific technical guidelines or benchmarks for securing IT systems and data. References:

• 1: CIS Security Standards - cisecurity.org, CIS, 2021, [7].
• 2: vRealize Operations Compliance Pack for CIS - VMware Marketplace, VMware, 2021, 1.
• 3: vRealize Operations Manager User Guide, VMware, 2021, p. 237.
• 4: Sarbanes-Oxley Act (SOX) - investopedia.com, Investopedia, 2021, [8].
• 5: Common Vulnerabilities and Exposures (CVE) - cve.mitre.org, MITRE, 2021, [9].
• [6]: General Data Protection Regulation (GDPR) - ec.europa.eu, European Commission, 2021, [10].
• [7]: CIS Security Standards - cisecurity.org, CIS, 2021, [7].
• [8]: Sarbanes-Oxley Act (SOX) - investopedia.com, Investopedia, 2021, [8].
• [9]: Common Vulnerabilities and Exposures (CVE) - cve.mitre.org, MITRE, 2021, [9].
• [10]: General Data Protection Regulation (GDPR) - ec.europa.eu, European Commission, 2021, [10].

To get application-related data (metrics) from the VM that vRealize Operations doesn’t collect, the administrator can use the custom script feature of the End Point Operations Management agent. The custom script feature allows the administrator to run custom scripts in the end point VM and collect custom data which can then be consumed as a metric. The administrator needs to install the End Point Operations Management agent on the VM, place the appropriate script to the VM, and then configure the agent to call the script from the Manage Agent location for the VM in vRealize Operations. The script metrics are created under an object called Custom Script which is a single object per end point VM. The administrator can view the output for the specific metric in the All Metrics tab1. The Telegraf agent is not used for custom script monitoring, but for application monitoring using predefined plugins2. The script should not be placed in the vRealize Operation Manager, but in the end point VM. References: 1: Custom Script 2: Application Monitoring

Role is the attribute that should be defined to ensure that group members can access vRealize Operations objects when importing a group from Active Directory into vRealize Operations. Role is a set of permissions that defines what actions a user or a group can perform on vRealize Operations objects, such as dashboards, alerts, reports, and policies. By assigning a role to a group, the administrator can grant or restrict access to vRealize Operations objects for all the group members. Description, Group Members, and Type are not attributes that ensure that group members can access vRealize Operations objects when importing a group from Active Directory into vRealize Operations. Description is an optional field that provides additional information about the group. Group Members is a list of users that belong to the group. Type is a classification of the group based on the source, such as Local, LDAP, or Active Directory. References: Import User Groups From Source, section “Import User Groups From Source”. vRealize Operations Manager User Guide, section “Create and Configure Dashboards”.