2V0-41.24 Question 219
Select 3An organization has implemented VMware NSX and wants to provide granular access to different teams for managing their networking infrastructure. The network administrator needs to create a role that allows the Operations team to view firewall rules but restricts them from modifying or deleting any configurations. Which of the following steps should the administrator take to achieve this?
- A
Create a custom role in NSX Manager with 'Read-Only' permissions for the Firewall section.
- B
Assign the pre-defined 'Enterprise Admin' role to the Operations team to give them access to all configurations.
- C
Create a user group for the Operations team and assign the custom 'Read-Only' role to it.
- D
Grant the Operations team the 'Security Administrator' role to allow them full control over firewall configurations.
- E
Test the assigned role by logging in as a user from the Operations team and verifying access permissions.
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the requirement of allowing the Operations team to view firewall rules without modifying or deleting configurations, the administrator must create a custom role with 'Read-Only' permissions for the Firewall section. This role should then be assigned to a user group that includes all Operations team members. Finally, testing the configuration ensures that the RBAC settings are correctly implemented and functioning as expected.
- A. Correct.
Correct: Creating a custom role with 'Read-Only' permissions for the Firewall section ensures the Operations team can view firewall rules without making changes.
- B. Incorrect.
Incorrect: The 'Enterprise Admin' role provides full administrative access, which is not aligned with the requirement to restrict modification and deletion.
- C. Correct.
Correct: Assigning the custom 'Read-Only' role to a user group ensures that access permissions can be managed efficiently for all Operations team members.
- D. Incorrect.
Incorrect: The 'Security Administrator' role provides control over security configurations, including modifying and deleting firewall rules, which does not meet the requirement.
- E. Correct.
Correct: Testing the assigned role ensures that the implemented RBAC (Role-Based Access Control) configuration is working as intended.