nerdexam
Broadcom-VMware

1V0-21.20 · Question #37

Refer to the exhibit. Which statement Is true about the access privileges of User 2?

The correct answer is A. User 2 has virtual machine power user privileges to Prod04-3.. User 2 has 'Virtual Machine Power User' privileges specifically applied to Prod04-3, according to the permissions inheritance and assignment that would be shown in the exhibit.

Explain Security Concepts in vSphere

Question

Refer to the exhibit. Which statement Is true about the access privileges of User 2?

Exhibit

1V0-21.20 question #37 exhibit

Options

  • AUser 2 has virtual machine power user privileges to Prod04-3.
  • BUser 2 has no access to all objects in the Production folder and Test and Dev folder.
  • CUser 2 has virtual machine power user privileges to all VMs In the Production folder.
  • DUser 2 has access to all objects in the Production folder and no access to Dev01, Dev02, and

How the community answered

(57 responses)
  • A
    65% (37)
  • B
    19% (11)
  • C
    11% (6)
  • D
    5% (3)

Why each option

User 2 has 'Virtual Machine Power User' privileges specifically applied to Prod04-3, according to the permissions inheritance and assignment that would be shown in the exhibit.

AUser 2 has virtual machine power user privileges to Prod04-3.Correct

Based on a typical vSphere permissions structure, User 2 would have the 'Virtual Machine Power User' role assigned directly or through inheritance to the Prod04-3 virtual machine, granting specific control actions like power on/off and connecting devices. This granular assignment ensures access is limited to that particular VM, overriding broader folder-level permissions if present.

BUser 2 has no access to all objects in the Production folder and Test and Dev folder.

This statement implies a complete lack of access, which contradicts having specific 'power user privileges' as described in the correct answer.

CUser 2 has virtual machine power user privileges to all VMs In the Production folder.

If User 2 had 'virtual machine power user privileges to all VMs in the Production folder,' it would be a broader permission than what is specified for a single VM, and the correct answer implies a more specific assignment.

DUser 2 has access to all objects in the Production folder and no access to Dev01, Dev02, and

This choice contradicts the idea of specific power user privileges to Prod04-3 and suggests a blanket access or denial that doesn't align with the detailed permission implied by the correct answer.

Concept tested: vSphere permissions inheritance and roles

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vcenterhost.doc/GUID-9D34F969-959D-494E-8C97-88C08A892790.html

Topics

#vSphere permissions#access control#RBAC#security policy

Community Discussion

No community discussion yet for this question.

Full 1V0-21.20 Practice