2V0-41.24 Question 407
Select 3An administrator at your organization has been tasked with modifying an existing custom role in NSX to allow specific users to manage firewall rules but restrict their ability to modify edge gateway configurations. After modifying the role, the administrator needs to validate the role permissions. Which of the following steps must the administrator take to achieve this?
- A
Edit the custom role and ensure the 'Firewall Administrator' permission is enabled.
- B
Validate the role by logging in as a user assigned to the new role and attempting to manage firewall rules.
- C
Use the 'User Role Mapping' tool to check which permissions are granted to the custom role.
- D
Check the NSX audit logs to verify if the role changes have been applied successfully.
- E
Verify that permissions at the NSX-T Manager level align with the updated custom role.
Show answer and explanation
Correct answers: A, B, E
Explanation
To modify and validate an existing role in NSX, the administrator must ensure the required permissions, like 'Firewall Administrator,' are enabled. Validating the role involves testing it by logging in as a user with the role assigned and ensuring that NSX-T Manager permissions reflect the changes. This ensures the role functions as intended while adhering to organizational security policies.
- A. Correct.
The 'Firewall Administrator' permission must be explicitly enabled for users to manage firewall rules, aligning with the task requirements.
- B. Correct.
Testing the role by logging in as a user assigned to it is a direct way to validate the permissions assigned to the custom role.
- C. Incorrect.
The 'User Role Mapping' tool is used to map roles to users but does not provide visibility into specific permissions within the role, making it irrelevant in this case.
- D. Incorrect.
Checking audit logs confirms whether changes have been made but does not directly verify the permissions or their functionality.
- E. Correct.
Ensuring that the NSX-T Manager permissions align with the custom role is necessary for the role to function as expected.