VMware 2V0-33.22 Practice Test - Questions Answers, Page 6

The Workspace ONE Access connector is used to synchronize groups and users from the internal Active Directory to the VMware Cloud Services Console. Additionally, the administrator should configure a SAML 2.0 Identity Provider to enable single sign-on (SSO) capability and secure access to the VMware Cloud Services Console.

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-BF536EEF- 7AC3-47D0-B4E6-E24B591530AA.html

vCenter Mapping Mapping vCenters in a DR plan consists of selecting source vCenters that are registered to the protected site. Choosing a target vCenter for a Failover SDDC is simple; each SDDC contains a single vCenter instance. For VMware Cloud Disaster Recovery, keep in mind that a protected site can have multiple registered vCenters, but you can only map one vCenter on VMwareCloud on AWS per-DR plan. https://vmc.techzone.vmware.com/resource/introduction-vmware- cloud-disaster-recovery#inventory-and-resource-mapping https://vmc.techzone.vmware.com/resource/protection-groups-and-recovery-plans-vcdr#create-a- disaster-recovery-plan

Incident and Problem Management: VMware will provide incident and problem management services (e.g., detection, severity classification, recording, escalation, and return to service) pertaining to availability of the Service Offering.

VMware is responsible for incident and problem management (e.g., detection, severity classification, recording, escalation, and return to service) pertaining to all virtual machines that you have deployed in your SDDC.

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/vmw-cloud-aws- service-description.pdf

VMware Cloud on AWS GovCloud supports three types of network segments: routed, extended and disconnected.

Routed networks: Routed networks allow you to route traffic between the on-premises data center and the VMware Cloud on AWS environment using a VPN or AWS Direct Connect.Extended networks: Extended networks allow you to extend the on-premises network to the VMware Cloud on AWS environment using VXLAN. This type of network allows you to extend the on-premises VLANs to the cloud environment, providing a seamless network extension.Disconnected networks: Disconnected networks are used when there is no direct connectivity between the on-premises data center and the VMware Cloud on AWS environment. This type of network allows you to create isolated networks in the cloud environment for specific use cases, such as disaster recovery or testing.https://docs.vmware.com/en/VMware-Cloud-on-AWS-GovCloud-(US)/services/vmc-govcloud- networking-security/GUID-7E79585B-1487-454A-90FE-BA82D3122C0E.html

To connect the workload network segment to their on-premises data center and multiple company Amazon VPCs running in US-East-2, the customer can use VMware Transit Connect. VMware Transit Connect is a service that provides secure connectivity between AWS and on-premises data centers or other clouds. It allows customers to connect and extend their networks to the AWS cloud with minimal effort and cost.

https://docs.vmware.com/en/VMware-Cloud-Disaster-Recovery/services/vmware-cloud-disaster- recovery/GUID-11C83D2A-A478-4823-B9B3-275AF6DD31CC.htmlA protection group in VMware Cloud Disaster Recovery (VCDR) consists of members (virtual machines or VMs) and policies for snapshots. These policies define the consistent point-in-time copies of the VMs, which are used for disaster recovery. The protection group also includes virtual machine file system (VMFS) datastores, which are used to store the copies of the VMs, and VM customizations, which are used to customize the VMs. Clusters are not part of a protection group in VCDR.

https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws- operations/GUID-ED8B84E8-BF1C-47EE-BB60-8D5741351822.html By default, the management gateway firewall is set to deny all traffic between the internet and vCenter Server. Verify that the appropriate firewall rules are in place.The administrator can create an NSX firewall rule in the VMware Cloud data center that allows access to the vCenter from the on-premises data center. This would allow the VPN connection to connect to the vCenter, allowing the administrator to access and manage the VMware Cloud environment.

The prerequisite step to adding additional users to a Google Cloud VMware Engine's vCenter (GCVE) is to add a user in Google Cloud Platform Identity and Access Management. This will allow for the user to be added to the vCenter and properly authenticated.