200-155 · Question #153
Which two statements about role-based access control on the Cisco Nexus 7000 switch are true? (Choose two.)
The correct answer is A. The default user roles are network-admin, network-operator, vdc-admin, and vdc operator. E. User roles can be distributed to other switches using Cisco Fabric Services.. Cisco Nexus 7000 switches include default role-based access control roles like network-admin, network-operator, vdc-admin, and vdc-operator, and these user roles can be distributed to other switches using Cisco Fabric Services.
Question
Which two statements about role-based access control on the Cisco Nexus 7000 switch are true? (Choose two.)
Options
- AThe default user roles are network-admin, network-operator, vdc-admin, and vdc operator.
- BUser roles needed if RADIUS is used for AAA.
- CNo user roles are provided by default. It is however, best practice is to configure separate roles for
- DEach user is assigned a unique role.
- EUser roles can be distributed to other switches using Cisco Fabric Services.
How the community answered
(17 responses)- A94% (16)
- B6% (1)
Why each option
Cisco Nexus 7000 switches include default role-based access control roles like network-admin, network-operator, vdc-admin, and vdc-operator, and these user roles can be distributed to other switches using Cisco Fabric Services.
Cisco Nexus 7000 switches come with several predefined system roles, including network-admin for full network configuration, network-operator for monitoring, and vdc-admin/vdc-operator for managing Virtual Device Contexts.
User roles are fundamental to role-based access control and are always used, regardless of whether authentication is performed locally or through a remote AAA server like RADIUS.
Cisco Nexus 7000 switches do provide default user roles, such as network-admin and network-operator, contradicting the statement that no roles are provided by default.
It is common for multiple users to be assigned the same role based on their job functions, and a single user can sometimes be assigned multiple roles, making the statement "each user is assigned a unique role" incorrect.
Cisco Fabric Services (CFS) is a control plane protocol used by Cisco Nexus devices to synchronize configuration data, including user roles and RBAC policies, across multiple switches in a fabric.
Concept tested: Cisco Nexus 7000 RBAC and CFS
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus7000/sw/security/config/guide/n7k_security_config/sec_rbacl.html
Topics
Community Discussion
No community discussion yet for this question.