Module 8: Access Control

Question 1

What is a privilege?

Answer 1

The ability to perform a specific action or read a specific property.

Ex. Powering on a virtual machine or creating and alarm

Question 2

What is a role?

Answer 2

A collection if privileges.

Roles provide a way to aggregate all the individual privileges that are required to perform a high-level task, such as administering a virtual machine.

Question 3

What is an object?

Answer 3

An entity upon which actions are performed.

Question 4

What is a user or group?

Answer 4

A user or group who can perform the action.

Question 5

What is a permission?

Answer 5

A combination of a role, a user or group, and an object.

Question 6

If the vCenter Server system is not a

member of a domain, how does vCenter authenticate users?

Answer 6

It uses local Windows users and groups

Question 7

What role has the privileges to access the Direct Console User Interface (DCUI)?

Answer 7

Administrator

Question 8

Roles are not hierarchically organized. True or False

Answer 8

True

Question 9

To display the list of roles…

Answer 9

Home> Administration> Roles

Question 10

To assign a permission…

Answer 10

Select the object in the inventory and click the Permissions tab.

Question 11

What privileges does a Domain Admin have if vCenter is integrated with Active Directory?

Answer 11

Full administrator privileges

Question 12

What role will allow an Active Directory user to log into the DCUI?

Answer 12

Administrator role

Question 13

Where are Roles located in the vSphere Client?

Answer 13

Home > Administration > Roles

Question 14

A permission can ________ down the hierarchy to all ________ or it can apply only to an ________ ________.

Answer 14

A permission can propagate down the hierarchy to all subobjects or it can apply only to an immediate object.