VCP-VMC 2024 Question 156
Select 3An organization is deploying a VMware Cloud on AWS SDDC and wants to ensure proper access management for its team members. The organization has the following requirements:
- The vSphere Administrator should have full administrative access to the SDDC.
- The Network Administrator should be able to manage networking and firewall configurations.
- The Security Specialist should only have read-only access to audit the system configuration and logs.
Which of the following roles and permissions are required to meet these requirements?
- A
Assign the 'CloudAdmin' role to the vSphere Administrator.
- B
Assign the 'NSX Cloud Admin' role to the Network Administrator.
- C
Assign the 'CloudAdmin' role to the Security Specialist.
- D
Assign the 'NSX Auditor' role to the Security Specialist.
- E
Assign the 'CloudGlobalAdmin' role to the Network Administrator.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the organization's requirements, the vSphere Administrator needs the 'CloudAdmin' role for full administrative access to the SDDC. The Network Administrator requires the 'NSX Cloud Admin' role to manage networking and firewall configurations. The Security Specialist, who only needs read-only access for auditing purposes, should be assigned the 'NSX Auditor' role. These roles and permissions ensure proper access control and segregation of duties for the team members.
- A. Correct.
The 'CloudAdmin' role provides full administrative access to the SDDC, which is suitable for the vSphere Administrator. This role allows complete control over vSphere resources but not NSX networking configurations.
- B. Correct.
The 'NSX Cloud Admin' role provides the ability to manage networking and firewall configurations in VMware Cloud on AWS, which is appropriate for the Network Administrator.
- C. Incorrect.
The 'CloudAdmin' role gives full administrative access to the SDDC, but the Security Specialist only requires read-only access. This role would provide too many permissions.
- D. Correct.
The 'NSX Auditor' role provides read-only access to NSX networking configurations and logs, making it suitable for the Security Specialist's auditing requirements.
- E. Incorrect.
The 'CloudGlobalAdmin' role is not relevant in this scenario as it provides administrative access to organization-level settings rather than SDDC-level configurations.