Compare and Contrast Between Uses of RBAC and ZRBAC POWERSCALE-DEPLOY Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company runs a PowerScale cluster with multiple access zones for different business units. The security team wants to enforce a uniform password policy across all zones, but also wants to allow each business unit's local IT to manage their own zone's users. Which approach best meets these requirements?

   • ACreate a single ZRBAC role that includes all zones and assign it to all administrators.
   • BUse only ZRBAC for all administrators.
   • CUse only global RBAC for all administrators.
   • DUse global RBAC for the security team to enforce the password policy, and ZRBAC for each business unit's IT to manage their own zone's users.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary benefit of using RBAC over assigning permissions directly to each user?

   • AIt ensures that every user has the same level of access.
   • BIt allows permissions to be managed centrally by grouping users into roles.
   • CIt eliminates the need for user authentication.
   • DIt automatically grants permissions based on the user's department.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In which scenario is global RBAC most appropriate?

   • AA cluster where users from different departments need different access levels.
   • BA multi-tenant cluster where each tenant requires isolated access control.
   • CA single-zone cluster with uniform access policies for all users.
   • DA cluster with multiple zones that each need different administrator roles.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When comparing RBAC and ZRBAC, which statement is true regarding administration?

   • AZRBAC requires more administrative effort when all zones need the same access policies.
   • BRBAC is always easier to administer than ZRBAC.
   • CBoth RBAC and ZRBAC require the same administrative effort.
   • DZRBAC is always easier to administer than RBAC.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A small company has a single PowerScale cluster with one access zone. They want to grant backup administrators the ability to manage backup jobs and view storage usage, but not modify user accounts. Which access control approach should they use?

   • AAssign the default 'admin' role to the backup administrators.
   • BCreate a global RBAC role with backup-related permissions and assign it to the backup administrators.
   • CCreate individual user accounts and grant permissions directly to each backup administrator.
   • DCreate a ZRBAC role for backup administrators scoped to the single zone.
   Reveal Solution Discussion Select an answer first