nerdexam
Broadcom-VMware

2V0-621 · Question #4

An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?

The correct answer is A. Datastore.Allocate Space. Creating or managing VM snapshots requires the Datastore.Allocate Space privilege because snapshot delta files must be written to and allocated on the datastore.

Section 1 – Configure and Administer vSphere 6.x Security

Question

An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?

Options

  • ADatastore.Allocate Space
  • BVirtual machine.Configuration.create snapshot
  • CVirtual machine.Configuration.manage snapshot
  • DDatastore.Browse Datastore

How the community answered

(28 responses)
  • A
    86% (24)
  • B
    4% (1)
  • C
    7% (2)
  • D
    4% (1)

Why each option

Creating or managing VM snapshots requires the Datastore.Allocate Space privilege because snapshot delta files must be written to and allocated on the datastore.

ADatastore.Allocate SpaceCorrect

Datastore.Allocate Space is required for snapshot operations because each snapshot creates one or more delta disk files (.vmdk) on the datastore, and without permission to allocate that space, the snapshot operation will fail. This is a frequently overlooked dependency - the VM-level snapshot privilege alone is insufficient if the user cannot write snapshot data to the datastore.

BVirtual machine.Configuration.create snapshot

Virtual machine.Configuration.create snapshot is not the correct privilege path in vSphere; snapshot privileges fall under the Virtual machine.Snapshot management category, not Virtual machine.Configuration.

CVirtual machine.Configuration.manage snapshot

Virtual machine.Configuration.manage snapshot does not exist as a valid privilege in vSphere; manage snapshot operations are located under Virtual machine.Snapshot management, and this path is incorrect.

DDatastore.Browse Datastore

Datastore.Browse Datastore only allows a user to view files on a datastore and does not grant the ability to allocate or write snapshot delta files necessary for snapshot management.

Concept tested: Required privileges for VM snapshot management in vSphere

Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-C8D9D4F4-2F63-4CF3-82B5-4B5EB9D85C56.html

Topics

#snapshot privileges#Datastore.Allocate Space#privilege assignment#snapshot management

Community Discussion

No community discussion yet for this question.

Full 2V0-621 Practice