Discuss Features Like Multifactor Authentication (MFA) and Role-Based Access Control (RBAC) Restrict Access to Server Management Tools POWEREDGE-FOUNDATIONS-V2 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of a second verification factor used in MFA for server management access?

   • AThe server's hostname
   • BA user's assigned role in the management tool
   • CA time-based one-time password (TOTP) generated by an authenticator app
   • DThe user's password
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has a security policy that requires MFA for all administrative access to server management tools. However, a legacy monitoring system uses a service account that cannot support MFA. The monitoring system only needs read-only access to server health data. How should the company handle this conflict?

   • ACreate a dedicated RBAC role with read-only permissions for the service account and exempt it from MFA, documenting the exception.
   • BDisable the monitoring system to enforce the MFA policy strictly.
   • CUse the same service account for all administrative tasks to avoid MFA.
   • DGrant the service account full administrative permissions and enable MFA for all other users.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a team of 5 database administrators who need to manage the database servers, and a team of 3 security auditors who need to view security logs but not make changes. Which RBAC configuration is the most appropriate?

   • ACreate a single 'Admin' role with full permissions for both teams.
   • BConfigure permissions individually for each user.
   • CCreate a 'Database Admin' role with full permissions for the DBAs and a 'Security Auditor' role with read-only permissions for the auditors.
   • DAssign the DBAs to the 'Security Auditor' role and the auditors to the 'Database Admin' role.
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   A company wants to ensure that administrators cannot access the iDRAC interface using only a username and password. Which feature should be enabled?

   • ARBAC
   • BIP filtering
   • CMFA
   • DPassword expiration
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A financial firm has three teams: server administrators, backup operators, and auditors. The server administrators must be able to change firmware and BIOS settings; backup operators must only start and stop backup jobs; auditors must have read-only access to logs. Which RBAC approach meets these requirements with the least administrative overhead?

   • AConfigure individual permissions for each user directly on the management tool.
   • BCreate one role with all permissions and assign it to every user.
   • CAssign all users the Administrator role and rely on training to prevent misuse.
   • DCreate three custom roles with the exact permissions needed by each team and assign users to the appropriate role.
   Reveal Solution Discussion Select an answer first