Refer to the exhibit. A network engineer is implementing an RBAC on the Cisco Nexus 9000 Series Switch. The role called Host A fails to clear LACP counters on the port channel 20. Which…

Question

Exhibits

Options

• APermit rule number 3 and read-write L3 operation.
• BDelete rule 3 and create new rule 3 to allow the permit command.
• CChange the sequence of rule 2 and rule 3.
• DDelete rule 2 and create a new rule 4

• A
  4% (1)
• B
  85% (23)
• C
  4% (1)
• D
  7% (2)

Explanation

Option B is correct because in Cisco Nexus RBAC, rule 3 is misconfigured - it either explicitly denies the clear command or has the wrong operation type, which prevents the role from executing clear lacp counters on port-channel 20. Deleting rule 3 and recreating it with the correct permit configuration for that specific command/resource properly grants the privilege.

Why the distractors are wrong:

• A is wrong because adding read-write for L3 operations doesn't help - LACP is a Layer 2 protocol, so granting L3 permissions doesn't address port-channel counter clearing.
• C is wrong because swapping the sequence of rules 2 and 3 doesn't fix the underlying misconfiguration of rule 3 itself; if rule 3 still has the wrong operation type or an explicit deny, reordering it still won't grant the needed permission.
• D is wrong because deleting rule 2 and appending rule 4 at the end leaves the problematic rule 3 intact, so the deny/misconfiguration still hits first and blocks the clear command.

Memory tip: On Nexus RBAC, think "wrong rule = delete and rebuild, not just reorder" - and always match the protocol layer to the operation (LACP = L2, not L3). If a rule is fundamentally broken, no amount of resequencing fixes it.

No community discussion yet for this question.