300-415 Question 13
Single answerA network engineer is configuring a new Cisco SD-WAN deployment and must ensure the management plane is set up correctly. They want to enforce role-based access controls (RBAC) for different administrators managing the SD-WAN environment. Which feature of vManage should be configured to achieve this requirement?
- A
User Groups
- B
Device Templates
- C
Local Policy Configuration
- D
Real-Time Monitoring
Show answer and explanation
Correct answer: A
Explanation
Role-based access control (RBAC) is a critical feature for securing and managing the SD-WAN environment. In Cisco vManage, this is achieved through the 'User Groups' feature, which allows the creation of groups with specific permissions to control access for different administrators. This ensures that administrators only have access to the parts of the system relevant to their roles, enhancing security and operational efficiency.
- A. Correct.
User Groups in vManage allow administrators to define role-based access controls (RBAC) by assigning specific permissions to groups. This is the correct feature to enforce RBAC.
- B. Incorrect.
Device Templates are used to define configuration templates for devices in the SD-WAN fabric, not for managing administrator access or roles.
- C. Incorrect.
Local Policy Configuration is related to defining SD-WAN policies for traffic forwarding and other operational behaviors, not for administrator access control.
- D. Incorrect.
Real-Time Monitoring in vManage is used for monitoring network performance and device status, but it does not relate to configuring RBAC or administrator roles.