During a design workshop, the security team provides the following requirement for the VMware Cloud
Foundation (VCF) Automation deployment:
All Virtual Machine images must be reviewed and vetted by the security team prior to consumption.
Which Content Library type supports the requirement?
Answer
- A. Subscribed Content Library
- B. Tenant-managed Content Library
- C. Local Content Library
- D. Provider-managed Content Library Correct
Explanation
A Provider-managed Content Library is curated and controlled centrally by the VCF administrator orprovider. It enables vetting and version control over VM templates and OVFs, ensuring compliance with
organizational policies, including security reviews. This directly supports the requirement that all images
must be reviewed and approved before being used in deployments.
Reference: VMware Cloud Foundation 9.0 Planning and Preparation Guide – Content Library
Management VMware Aria Automation Content Management Best Practices