2V0-41.24 Question 406
Select 3You are tasked with modifying an existing custom role in VMware NSX to provide a network administrator with additional permissions to manage firewall rules. After editing the role, how can you validate that the role permissions were successfully updated?
- A
Log in as a user assigned to the modified role and attempt to create, edit, or delete firewall rules.
- B
Review the modified role's permissions in the 'Roles & Permissions' section of the NSX Manager UI.
- C
Use the NSX REST API to query the permissions associated with the modified role.
- D
Restart the NSX Manager services to apply the updated role permissions.
- E
Check the NSX System Logs for any errors related to the role modification.
Show answer and explanation
Correct answers: A, B, C
Explanation
To validate that the role permissions were successfully updated, you can use a combination of testing the permissions by performing actions as a user with the updated role, reviewing the updated role in the NSX Manager UI, and querying the permissions using the REST API. These methods confirm both the accuracy of the role modifications and their application in the system. Restarting NSX Manager services or checking logs is not required for validation of role permissions.
- A. Correct.
Logging in as a user assigned to the modified role and performing actions tests the practical application of the updated permissions, which is a valid way to validate role changes.
- B. Correct.
Reviewing the modified role's permissions in the 'Roles & Permissions' section ensures the changes were saved and are accurately reflected in the NSX Manager UI.
- C. Correct.
Using the NSX REST API to query permissions directly confirms the changes programmatically and ensures they are updated in the system.
- D. Incorrect.
Restarting the NSX Manager services is unnecessary for role modifications to take effect, as changes are applied immediately without requiring a service restart.
- E. Incorrect.
Checking system logs is useful for troubleshooting errors but is not a primary method to validate role permissions.