2V0-41.24 Question 221
Select 3A network administrator is tasked with configuring Role-Based Access Control (RBAC) in VMware NSX to ensure that a junior administrator can only monitor network configurations, while a senior administrator has full administrative privileges. Which steps should the network administrator take to correctly configure RBAC for these requirements?
- A
Create a custom role with read-only permissions and assign it to the junior administrator.
- B
Assign the 'Enterprise Administrator' role to the senior administrator.
- C
Assign the 'Auditor' role to the junior administrator.
- D
Create a custom role with full permissions and assign it to the senior administrator.
- E
Modify the default 'NSX Administrator' role to restrict permissions for the junior administrator.
Show answer and explanation
Correct answers: A, B, C
Explanation
RBAC in VMware NSX allows administrators to create or assign roles with specific permissions to control access. To meet the scenario's requirements, the junior administrator needs a role with read-only permissions (e.g., 'Auditor' or a custom role), while the senior administrator requires full permissions (e.g., 'Enterprise Administrator'). Modifying default roles is not recommended, and existing roles should be leveraged whenever possible.
- A. Correct.
This is a valid step. The custom role with read-only permissions ensures the junior administrator can only monitor configurations without making changes.
- B. Correct.
This is a valid step. The 'Enterprise Administrator' role provides full administrative privileges to the senior administrator, meeting the requirement.
- C. Correct.
This is a valid step. The 'Auditor' role is a pre-defined role in NSX that provides read-only access, which fulfills the junior administrator's needs for monitoring.
- D. Incorrect.
This is incorrect. A custom role with full permissions is unnecessary since the 'Enterprise Administrator' role already exists and covers full administrative privileges.
- E. Incorrect.
This is incorrect. Modifying default roles is not recommended as it can impact other users and is not aligned with best practices for RBAC configuration.