What else can the user do?

A user has been given access to vCenter using the vSphere Client to administer virtual machines. What else can the user do?

A.
log on to the vCenter server if an administrator grants the Permit Web Access privilege

B.
log on to any ESX Server managed by VirtualCenter

C.
log on to the vCenter server

D.
log on to the vCenter server and any ESX Server managed by vCenter

Explanation:
Since the user has been given access to vCenter using the vSphere Client then as a minimum they must be allowed to log on to vCenter server, since this is required to manage virtual machines. Once logged on, they may then manage virtual machines, (C above). Access to vCenter does not grant any access directly to ESX hosts, so B and D are incorrect. Permit Web Access is not required when accessing vCenter, so A is incorrect..