Introduction xxviii Chapter 1 Security 3 "Do I Know This Already?" Quiz 3 Foundation Topics 6 Objective 1.1-Confi gure and Administer Role-based Access Control 6 Compare and Contrast Propagated and Explicit Permission Assignments 6 View/Sort/Export User and Group Lists 6 Add/Modify/Remove Permissions for Users and Groups on vCenter Server Inventory Objects 7 Determine How Permissions Are Applied and Inherited in vCenter Server 10 Create/Clone/Edit vCenter Server Roles 14 Confi gure VMware Directory Service 15 Apply a Role to a User/Group and to an Object or a Group of Objects 16 Change Permission Validation Settings 17 Determine the Appropriate Set of Privileges for Common Tasks in vCenter Server 18 Compare and Contrast Default System/Sample Roles 20 Determine the Correct Permissions Needed to Integrate vCenter Server with Other VMware Products 21 Objective 1.2-Secure ESXi, vCenter Server, and vSphere Virtual Machines 23 Harden Virtual Machine Access 23 Control VMware Tools Installation 24 Control VM Data Access 27 Configure Virtual Machine Security Policies 28 Harden a Virtual Machine Against Denial-of-Service Attacks 29 Control VM--VM Communications 29 Control VM Device Connections 29 Configure Network Security Policies 29 Harden ESXi Hosts 30 Enable/Configure/Disable Services in the ESXi Firewall 31 Change Default Account Access 34 Add an ESXi Host to a Directory Service 35 Apply Permissions to ESXi Hosts Using Host Profiles 36 Enable Lockdown Mode 37 Control Access to Hosts (DCUI/Shell/SSH/MOB) 38 Harden vCenter Server 39 Control Datastore Browser Access 39 Create/Manage vCenter Server Security Certificates 39 Control MOB Access 40 Change Default Account Access 40 Restrict Administrative Privileges 40 Understand the Implications of Securing a vSphere Environment 40 Objective 1.3-Enable SSO and Active Directory Integration 41 Describe SSO Architecture and Components 41 Differentiate Available Authentication Methods with VMware vCenter 42 Perform a Multi-site SSO Installation 42 Confi gure/Manage Active Directory Authentication 45 Confi gure/Manage Platform Services Controller (PSC) 48 Confi gure/Manage VMware Certifi cate Authority (VMCA) 50 Enable/Disable Single Sign-On (SSO) Users 51 Upgrade a Single/Multi-site SSO Installation 53 Confi gure SSO Policies 54 Add/Edit/Remove SSO Identity Sources 55 Add an ESXi Host to an AD Domain 55 Summary 56 Exam Preparation Tasks 56 Review All the Key Topics 56 Complete the Tables and Lists from Memory 56 Defi nitions of Key Terms 56 Answer Review Questions 57 Chapter 2 Networking, Part 1 61 "Do I Know This Already?" Quiz 61 Foundation Topics 65 Objective 2.1-Confi gure Advanced Policies/Features and Verify Network Virtualization Implementation 65 Compare and Contrast vSphere Distributed Switch (vDS) Capabilities 65 Create/Delete a vSphere Distributed Switch 68 Add/Remove ESXi Hosts from a vSphere Distributed Switch 72 Add/Confi gure/Remove dvPort Groups 82 Add/Remove Uplink Adapters to dvUplink Groups 86 Confi gure vSphere Distributed Switch General and dvPort Group Settings 90 Create/Confi gure/Remove Virtual Adapters 93 Migrate Virtual Machines to/from a vSphere Distributed Switch 98 Migrating Virtual Machines Individually 98 Migrating Multiple Virtual Machines 100 Confi gure LACP on dvUplink and dvPort Groups 101 Describe vDS Security Policies/Settings 109 Confi gure dvPort Group Blocking Policies 111 Confi gure Load Balancing and Failover Policies 113 Confi gure VLAN/PVLAN Settings for VMs Given Communication Requirements 114 Confi gure Traffi c Shaping Policies 119 Enable TCP Segmentation Offl oad Support for a Virtual Machine 122 Enable Jumbo Frames Support on Appropriate Components 123 Determine Appropriate VLAN Confi guration for a vSphere Implementation 127 Recognize Behavior of vDS Auto-Rollback 127 Confi gure vDS Across Multiple vCenter Servers to Support Long-Distance vMotion 129 Summary 131 Exam Preparation Tasks 131 Review All the Key Topics 131 Comp.