An employee is tasked with adding and removing BlackBerry device users to the BlackBerry Enterprise Server. What is the most restrictive role that can be assigned to this employee, which still…

Question

Options

• AServer Only Administrator
• BJunior Helpdesk Administrator
• CSenior Helpdesk Administrator
• DEnterprise Administrator
• ESecurity Administrator

• A
  5% (2)
• B
  8% (3)
• C
  84% (32)
• E
  3% (1)

Explanation

Senior Helpdesk Administrator is the most restrictive role that includes permission to add and remove BlackBerry device users on the BES, making it the principle-of-least-privilege answer here. Junior Helpdesk Administrator (B) is more restrictive but lacks user add/remove rights - it's typically limited to tasks like resending service books or viewing device info, so it cannot fulfill the requirement. Server Only Administrator (A) is scoped to server-level management and does not grant user account control. Enterprise Administrator (D) and Security Administrator (E) both have the capability, but they carry far broader permissions than necessary, violating least privilege.

Memory tip: Think of it as a ladder - Junior Helpdesk can look, Senior Helpdesk can touch users, and everything above can touch everything. The task requires "touching users," so the lowest rung that reaches that is Senior Helpdesk.

No community discussion yet for this question.