2V0-41.24 Question 399
Single answerYou are a network administrator managing an NSX-T Data Center environment. The team has requested access for a new user who needs to monitor network traffic but should not have permissions to modify configurations. Which role should you assign to this user while adhering to the principle of least privilege?
- A
Enterprise Administrator
- B
NSX Administrator
- C
Auditor
- D
Security Administrator
Show answer and explanation
Correct answer: C
Explanation
The Auditor role is the most appropriate choice for a user who needs to monitor network traffic without the ability to modify configurations. This aligns with the principle of least privilege by only granting the necessary permissions for the task.
- A. Incorrect.
The Enterprise Administrator role provides full access to configure and manage all aspects of the NSX-T environment, which exceeds the required permissions for monitoring traffic.
- B. Incorrect.
The NSX Administrator role allows for full administrative control, including configuration changes, which is not suitable for a user who only needs to monitor traffic.
- C. Correct.
The Auditor role is specifically designed for users who need to monitor and view the environment without making any changes, making it the correct choice.
- D. Incorrect.
The Security Administrator role is focused on managing security policies and settings, which is unrelated to the requirement of monitoring network traffic.