Compare and Contrast Between Uses of RBAC and ZRBAC POWERSCALE-DEPLOY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a typical use case for global RBAC?

   • AApplying a consistent set of administrator roles across all access zones.
   • BIsolating tenant data by defining separate roles for each tenant's zone.
   • CProviding different access permissions for each access zone in a multi-tenant cluster.
   • DAllowing each zone's administrator to define roles independently.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary difference between RBAC and ZRBAC?

   • ARBAC is only for administrators, while ZRBAC is for regular users.
   • BRBAC is a legacy model, while ZRBAC is the modern replacement.
   • CRBAC is used for authentication, while ZRBAC is used for authorization.
   • DRBAC applies roles globally across the cluster, while ZRBAC scopes roles to specific access zones.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A managed service provider (MSP) hosts a PowerScale cluster for several clients, each with its own access zone. The MSP's support team needs full access to all zones for maintenance, but client administrators should only manage their own zone. Additionally, the MSP wants to minimize the number of roles to manage. What is the most efficient approach?

   • ACreate a single ZRBAC role that includes all zones and assign it to both the MSP team and client administrators.
   • BCreate individual user accounts for each client administrator and assign permissions directly.
   • CCreate a single global RBAC role for the MSP support team and separate ZRBAC roles for each client.
   • DCreate a separate global RBAC role for each client and assign it to that client's administrators.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A hosting provider runs a PowerScale cluster with multiple access zones, one per customer. They need to allow each customer's administrators to manage their own zone's storage policies and user accounts, but not affect other customers. What is the most efficient way to achieve this?

   • AUse ZRBAC to create roles scoped to each customer's access zone.
   • BAssign all administrators the same global role and rely on firewall rules to restrict access.
   • CCreate a single ZRBAC role that includes all zones and assign it to all customer administrators.
   • DCreate a separate RBAC role for each customer and assign it to that customer's administrators.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A managed service provider (MSP) hosts a PowerScale cluster for three separate client companies. Each client must have its own administrators who can manage only their own data and cannot view or modify other clients' configurations. The MSP's own support team needs full access across all clients. Which access control approach should the MSP use?

   • AUse RBAC with custom roles that include zone-specific permissions in the role definition.
   • BAssign each client administrator a unique user account and rely on the default 'admin' role for all users.
   • CConfigure a single global RBAC role with all permissions and assign it to all administrators.
   • DCreate separate ZRBAC roles for each client, scoped to their respective access zones, and assign client administrators to those roles.
   Reveal Solution Discussion Select an answer first