An Architect is designing a VMware Cloud Foundation (VCF)-based private cloud solution for a customer.
During the requirements gathering workshop, the customer stated the following:
* All users must only have access to the solution components to fulfill their defined role.
* All administrative users must be authenticated to a separate approved identity source for administrator accounts only.
* All service users must be authenticated to the central approved identity source.
* All service account passwords must be stored centrally in an approved secrets management platform.
When creating the design, how should the Architect classify all the stated requirements?
Correct Answer: A
VCF design classifies requirements into qualities like Security, Manageability, Availability, and Recoverability based on their focus. The listed requirements all pertain to access control, authentication, and data protection: role-based access limits user privileges, separate identity sources for admins enhance security, centralized authentication for service users ensures consistency, and a secrets management platform protects credentials. These align with the Security design quality in VCF, which encompasses identity and access management (IAM), encryption, and compliance-key aspects of VCF's integration with tools like vSphere's SSO and third-party identity providers. Manageability (B) focuses on operational ease, Recoverability (C) on data restoration, and Availability (D) on uptime-none of which directly match these requirements. Security is the encompassing classification per VCF's methodology.
Reference: VMware Cloud Foundation 5.2 Architect Study Guide, Chapter 3: Design Qualities, Section on Security Requirements; VMware Validated Design 6.2 (applicable to 5.2), Security Architecture.