300-170 · Question #37
Which statement about RBAC user roles on a Cisco Nexus switch is true?
The correct answer is A. If a user belongs to two roles, a permit access in one role takes priority over a deny access in the. On Cisco Nexus switches, if a user is assigned multiple RBAC roles, a permit access rule from any assigned role will take precedence over a deny access rule from another role, following a 'permit wins' logic.
Question
Which statement about RBAC user roles on a Cisco Nexus switch is true?
Options
- AIf a user belongs to two roles, a permit access in one role takes priority over a deny access in the
- BThe predefined roles can be changed by the network-admin
- CIf a user belongs to two roles, the user can execute only the commands that are permuted by
- DOn a Cisco Nexus 7000 Series Switch, roles are shared between VOCs
How the community answered
(36 responses)- A92% (33)
- B6% (2)
- D3% (1)
Why each option
On Cisco Nexus switches, if a user is assigned multiple RBAC roles, a permit access rule from any assigned role will take precedence over a deny access rule from another role, following a 'permit wins' logic.
On Cisco Nexus switches utilizing RBAC, if a user is assigned to multiple roles, the system typically follows a 'permit wins' logic, meaning that if any of the assigned roles grants permission for an action or command, that permission takes precedence over a deny from another role.
Predefined roles on Cisco Nexus switches are generally immutable to maintain system integrity and a baseline of operational security; only custom roles can be defined and modified.
If a user belongs to two roles, they can execute commands permuted by either role, as permissions are typically additive, not limited to commands permuted by only one specific role.
On a Cisco Nexus 7000 Series Switch, VDCs (Virtual Device Contexts) provide administrative and resource isolation, meaning that roles, users, and configurations are typically separate and not shared between VDCs.
Concept tested: Nexus RBAC Role Merging Logic
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_rbac.html
Topics
Community Discussion
No community discussion yet for this question.