nerdexam
Cisco

300-170 · Question #37

Which statement about RBAC user roles on a Cisco Nexus switch is true?

The correct answer is A. If a user belongs to two roles, a permit access in one role takes priority over a deny access in the. On Cisco Nexus switches, if a user is assigned multiple RBAC roles, a permit access rule from any assigned role will take precedence over a deny access rule from another role, following a 'permit wins' logic.

Cisco Nexus Switches

Question

Which statement about RBAC user roles on a Cisco Nexus switch is true?

Options

  • AIf a user belongs to two roles, a permit access in one role takes priority over a deny access in the
  • BThe predefined roles can be changed by the network-admin
  • CIf a user belongs to two roles, the user can execute only the commands that are permuted by
  • DOn a Cisco Nexus 7000 Series Switch, roles are shared between VOCs

How the community answered

(36 responses)
  • A
    92% (33)
  • B
    6% (2)
  • D
    3% (1)

Why each option

On Cisco Nexus switches, if a user is assigned multiple RBAC roles, a permit access rule from any assigned role will take precedence over a deny access rule from another role, following a 'permit wins' logic.

AIf a user belongs to two roles, a permit access in one role takes priority over a deny access in theCorrect

On Cisco Nexus switches utilizing RBAC, if a user is assigned to multiple roles, the system typically follows a 'permit wins' logic, meaning that if any of the assigned roles grants permission for an action or command, that permission takes precedence over a deny from another role.

BThe predefined roles can be changed by the network-admin

Predefined roles on Cisco Nexus switches are generally immutable to maintain system integrity and a baseline of operational security; only custom roles can be defined and modified.

CIf a user belongs to two roles, the user can execute only the commands that are permuted by

If a user belongs to two roles, they can execute commands permuted by either role, as permissions are typically additive, not limited to commands permuted by only one specific role.

DOn a Cisco Nexus 7000 Series Switch, roles are shared between VOCs

On a Cisco Nexus 7000 Series Switch, VDCs (Virtual Device Contexts) provide administrative and resource isolation, meaning that roles, users, and configurations are typically separate and not shared between VDCs.

Concept tested: Nexus RBAC Role Merging Logic

Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_rbac.html

Topics

#Cisco Nexus#RBAC#user roles#security#administration

Community Discussion

No community discussion yet for this question.

Full 300-170 Practice