nerdexam
Broadcom-VMware

2V0-621 · Question #2

Which two roles can be modified? (Choose two.)

The correct answer is B. Network Administrator C. Datastore Consumer. In vCenter Server, system roles like Administrator and Read-Only are locked and cannot be modified, while sample roles like Network Administrator and Datastore Consumer can be edited.

Section 1 – Configure and Administer vSphere 6.x Security

Question

Which two roles can be modified? (Choose two.)

Options

  • AAdministrator
  • BNetwork Administrator
  • CDatastore Consumer
  • DRead-Only

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    92% (45)
  • D
    6% (3)

Why each option

In vCenter Server, system roles like Administrator and Read-Only are locked and cannot be modified, while sample roles like Network Administrator and Datastore Consumer can be edited.

AAdministrator

The Administrator role is a built-in system role in vCenter Server and is locked - it cannot be modified or deleted to protect system integrity.

BNetwork AdministratorCorrect

Network Administrator is a sample role in vCenter, not a protected system role, so it can be cloned or modified by an administrator to adjust its privilege set.

CDatastore ConsumerCorrect

Datastore Consumer is also a sample role provided by vCenter as a starting point, meaning its privileges can be changed or removed by an administrator.

DRead-Only

The Read-Only role is a built-in system role in vCenter Server and is also locked, preventing any modification to its defined set of privileges.

Concept tested: vCenter Server modifiable vs. system roles

Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-18071E7A-EF16-4D64-8AC5-11E5AFA60204.html

Topics

#vCenter Server roles#default roles#role modification#role management

Community Discussion

No community discussion yet for this question.

Full 2V0-621 Practice