Access Control and Security VCP-DCV Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the default behavior of permissions assigned to a parent object in the vCenter Server inventory?

   • AThey apply only to the parent object itself.
   • BThey are automatically overridden by any permissions on child objects.
   • CThey propagate to all child objects unless propagation is explicitly disabled.
   • DThey require confirmation before applying to child objects.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A vSphere administrator is configuring permissions for a multi-team environment. The 'dev-team' group has the 'VM power user' role on the 'Development' folder with propagation. The 'qa-team' group has the 'ReadOnly' role on the 'QA' folder with propagation. A user 'john' is a member of both groups. What is the effective permission for 'john' on a VM in the 'QA' folder?

   • AReadOnly, because the 'ReadOnly' role is more restrictive than 'VM power user'.
   • BVM power user, because the 'VM power user' role is more permissive than 'ReadOnly'.
   • CNo access, because the user is a member of two groups with conflicting roles.
   • DThe union of both roles, meaning the user has the combined privileges of 'VM power user' and 'ReadOnly'.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Where do you configure global permissions in the vSphere Client?

   • AIn the 'Roles' section by selecting the 'Global' checkbox when creating a role.
   • BIn the 'Global Permissions' section under the vCenter Server's 'Permissions' tab.
   • CIn the 'Users and Groups' section by assigning a role to a user.
   • DIn the 'Advanced Settings' of the vCenter Server.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A vSphere administrator needs to create a custom role for the 'storage-admins' group that allows them to manage datastores, including creating, deleting, and renaming them, but NOT to manage virtual machines. The administrator wants to base this on an existing role. Which existing role should be cloned and modified?

   • AAdministrator
   • BDatastore consumer
   • CNo existing role is suitable; the administrator must create the role from scratch.
   • DVirtual machine administrator
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is required to create a permission in vCenter Server?

   • AA user or group, a role, and an inventory object to which the permission applies.
   • BA role, a privilege, and an inventory object.
   • CA group, a datacenter, and a cluster.
   • DA user, a password, and a role.
   Reveal Solution Discussion Select an answer first