350-601 Question #558: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. A Cisco MDS 9000 Series Switch is configured with RBAC. The default role applies to all users. User A is also assigned to the role Custom-Role-B. Which set of features will user A be authorized to configure?

Options

• ANTP
• BSSH
• CDPVM
• Dhardware

Explanation

{"question_number": 6, "question": "On a Cisco MDS 9000 with RBAC, if User A has the default role plus Custom-Role-B, which feature can User A configure?", "correct_answer": "B (SSH)", "explanation": "In Cisco MDS RBAC, when a user is assigned multiple roles, the effective permissions are the union of all assigned roles. The default role on MDS provides a baseline set of permissions applied to all users (typically limited read or certain show commands). Based on the exhibit, Custom-Role-B grants permission to configure SSH but not NTP, DPVM, or hardware features. Those other features (NTP, DPVM, hardware) are either restricted to higher-privilege roles not assigned to User A, or explicitly not included in Custom-Role-B's rule set. Since the union of the default role and Custom-Role-B includes SSH configuration rights, SSH is the feature User A is authorized to configure. DPVM typically requires a Storage Admin or equivalent role, and hardware configuration requires an Administrator role.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.