A vSphere administrator manages a cluster which includes critical and non-critical virtual machines. The cluster
requires different permissions for contractors and non-contractors.
How can the administrator exclude the contractor group from some of the critical VMs?
A.
Apply permission for both contractors and non-contractors on the cluster level.
B.
Apply permission for both contractors and non-contractors on the cluster level. Remove permission on the
critical VMs for contractors.
C.
Remove permission for contractors on the cluster level. Apply permission on the critical VMs for noncontractors.
D.
Apply permission for both contractors and non-contractors on the VMs. Remove permission on the critical
VMs for contractors.
Isn’t it B, as it says that both contractors and non-contractors manage the cluster and what they need is exclusion from the critical VMs?
Explanation: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-9E7486ED-7ABF-46F7-B450-1A8ABD313CD8.html
Actually – not B.
Only D will work from the given options.
The correct solution would be
– Add “Administrator” or whatever role for contractors and non-contractors on cluster level
– Change role to “No access” on critical VMs
You cannot remove permission which is inherited from parent object.
Anyway, the question itself, again, is a bit vague; what is meant by “apply permission”…???
I meant change role for contractors…
I considered the “apply permission” as the configuration inside the role (which are defined as permissions), so you would add a permission on the cluster level role (applying an admin role as an example) and a no access role, thereby taking off the permissions, on VM lvl (as you explained in your reply) – that’s why I suppose B is the correct one.
Answer is B.
I agree with B being the correct answer. By adding a more restrictive permission to Contractors on the VM level you are effectively “removing permissions” that were assigned at a higher level in vCenter.
For D to be correct, I would remove the following:
“Remove permission on the critical VMs for contractors”
Since you are applying permissions on the VM level, you would only give Contractors access to the VMs they need. What’s more, why would you apply permissions on the VM level when doing that on the cluster level is a much simpler solution, still achieving the requirement?
B
New 2V0-622PSE Exam Questions and Answers Updated Recently (18/Sep/2017):
NEW QUESTION 3
An administrator has decided to use Auto Deploy in the environment. Which two considerations must be taken into account before configuring Auto Deploy? (Choose two.)
A. Hosts in a cluster must be connected to a Distributed Switch.
B. Host profiles are not supported when using Auto Deploy.
C. DHCP must be configured to support PXE boot.
D. Storage DRS must be enabled.
E. A TFTP server must be setup and running.
Answer: CE
NEW QUESTION 4
Which two permissions are required to migrate a virtual machine with Storage vMotion? (Choose two.)
A. Network > Move Network
B. VirtualMachine > Inventory > Move
C. Resource > Migrate powered on virtual machine
D. Datastore > Allocate Space
Answer: CD
NEW QUESTION 5
Which are two vCenter Server two-factor authentication methods? (Choose two.)
A. RSA SecurID
B. Smart Card
C. SAML
D. Symantec VIP
Answer: AB
NEW QUESTION 6
Which is the block size on the VMFS6 datastore?
A. All small and large file blocks are 8MB.
B. All small and large file blocks are 1MB.
C. Small file blocks are 512KB, large file blocks are 64MB.
D. Small file blocks are 1MB, large fileblocks are 512MB.
Answer: B
NEW QUESTION 7
An administrator would like to configure vSphere HA to use two isolation addresses. How would this affect the behavior of HA?
A. If both isolation addresses are not reachable, the host will be restarted by the HA agent.
B. If both isolation addresses are not reachable, the host will use the vCenter Server IP address as a final isolation address before being marked isolated.
C. If only one of the isolation addresses is reachable, the host will not be marked isolated by HA.
D. If only one of the isolation addresses is reachable, the host will be considered in an isolated by HA.
Answer: C
NEW QUESTION 8
An administrator notices that a virtual machine running SQL Server is not performing as expected:
vmware.log> vmx| W110: NUMA and VCPU hot add are incompatible. Forcing UMA
How can the administrator resolve this issue?
A. Power off the virtual machineand disable vCPU hot plug.
B. Reinstall VMware Tools.
C. Modify the .vmx file to force NUMA and vCPU hot add to function.
D. Installation third party plug-in to enable NUMA and vCPU hot add to function.
Answer: A
NEW QUESTION 9
……
P.S. These New 2V0-622PSE Exam Questions Were Just Updated From The Real 2V0-622PSE Exam, You Can Get The Newest 2V0-622PSE Dumps In PDF And VCE From — https://www.passleader.com/2v0-622pse.html (125q VCE and PDF)
Good Luck!
Besides, part of new 125Q 2V0-622PSE dumps are available here:
https://drive.google.com/open?id=0B-ob6L_QjGLpaXhnQWQ4S2Ffc1k
Best Regards!