Refer to the exhibit. Why is user "EMEALevel2Support" unable to change the password for user "Operator"?

Question

Exhibits

Options

• AEMEALevel2Support's hierarchy level is not the same or higher than Operator.
• BEMEALevel2Support does not have the "Manage Directory Mapping" role.
• COperator can only be reset by the Master user.
• DEMEALevel2Support does not have rights to reset passwords for other users.

• A
  75% (24)
• B
  13% (4)
• C
  3% (1)
• D
  9% (3)

Explanation

Option A is correct because most enterprise management platforms (such as Cisco's administration systems) enforce hierarchy-based access control: a user can only perform administrative actions - including password resets - on accounts at the same or lower hierarchy level than their own. Since "Operator" sits at a hierarchy level equal to or above "EMEALevel2Support," the system blocks the action entirely.

Why the distractors are wrong:

• B is wrong because "Manage Directory Mapping" is an unrelated permission concerning how users are mapped to directories, not who can reset whose password.
• C is wrong because the Master user is not the exclusive authority for password resets; any sufficiently high-ranking user could perform the reset.
• D is misleading - EMEALevel2Support likely does have the general ability to reset passwords, just not for users at a higher or equal hierarchy tier. The restriction is relative, not absolute.

Memory tip: Think of it like military rank - a Sergeant cannot issue orders to a Lieutenant. You can only "manage down" (or sideways), never "manage up" the hierarchy chain.

No community discussion yet for this question.