Explanation:

The following is the correct answer for the drag and drop question:

– Administrator -> Performs all desktop, session, and pool-related operation.

– Inventory Administrator -> Performs all administrative functions and applies to an Access Group.

– Local Administrator -> No rights to manage Cloud Pod or the Global Data Layer.

Predefined Administrator Roles (vmware.com)

The predefined administrator roles in Horizon console are designed to provide different levels of access and control over the Horizon environment. Each role has a set of privileges that grant the ability to perform specific actions or view certain information. You can assign these roles to users or groups on the root access group, which gives them access to all inventory objects in the system, or on a specific access group or federation access group, which limits their scope to the objects within that group. You cannot modify the predefined roles, but you can create custom roles by selecting individual privileges.

The Administrator role is the most powerful role in Horizon console. It allows the user to perform all administrative operations, including creating and managing desktop pools, sessions, farms, applications, global settings, and other administrators. In a Cloud Pod Architecture environment, this role also enables the user to configure and manage a pod federation and manage remote pod sessions. The Administrator role on the root access group is equivalent to a super user role, as it gives full access to everything in the system. Therefore, you should assign this role to a limited number of users.

The Inventory Administrator role is similar to the Administrator role, but it applies only to an access group. This means that the user can perform all administrative functions on the inventory objects that belong to that access group, such as desktop pools, farms, applications, and sessions. However, the user cannot manage global settings or other administrators. This role is useful for delegating administration of specific resources to different users or groups.

The Local Administrator role is a restricted version of the Inventory Administrator role. It applies only to an access group and does not grant any rights to manage Cloud Pod Architecture features or the Global Data Layer. This means that the user can only manage local inventory objects within that access group, such as desktop pools, farms, applications, and sessions. This role is suitable for administrators who do not need to access or modify global settings or cross-pod resources.

The Help Desk Administrator role is a specialized role that allows the user to perform desktop and application actions for troubleshooting and support purposes. These actions include shutting down, resetting, restarting, logging off, disconnecting, and sending messages to users’ desktops or applications. The user can also perform remote assistance actions such as ending processes or viewing system information for a user’s desktop or application. The user cannot create or modify any inventory objects or settings with this role.

References: =

Some possible references are:

– Predefined Administrator Roles

– Assigning Administrator Roles

– Understanding Roles and Privileges

Explanation:

JPEG/PNG – Still images.

H.264: Rapidly moving content and motion graphics such as streaming video, video editing, and gaming.

HEVC: Rapidly moving content on a low bandwidth resource.

Proprietary Blast codec: Low-motion graphics, high-quality graphics such as Photoshop, and AutoCAD.

Explanation:

– SAML -> Connects the client to Workspace ONE Access

– Certificate Authority -> Issues certificates for vrm and Enrollment Server

– Connection Server -> Connects vrm to Active Directory

– Enrollment Server -> Connects Workspace ONE Access to vrm

You can find more information about the Simple True 5SO Architecture in the VMware Horizon 8.x Professional source documents or study guide1. This architecture is a simplified version of the True SSO Architecture, which allows users to log in to their virtual desktops and applications without entering credentials multiple times. The Simple True 5SO Architecture uses Workspace ONE Access as the identity provider, which authenticates users with SAML and issues SAML assertions. The Enrollment Server then uses the SAML assertions to request short-lived certificates from the Certificate Authority, which are used to authenticate users to the Connection Server. The Connection Server then connects users to their virtual desktops and applications through vrm, which is integrated with Active Directory2.

References:

– VMware Horizon 8.x Professional

– Simple True SSO Architecture