Exam 350-601 topic 1 question 188 discussion

Actual exam question from Cisco's 350-601

Question #: 188
Topic #: 1

A company is running a pair of Cisco Nexus 7706 Series Switches as part of a data center segment. All network engineers have restricted read-write access to the core switches. A network engineer must add a new FCoE VLAN to allow traffic from servers toward FCoE storage. Which set of actions must be taken to meet these requirements?

A. 1. Assign the network-admin role to a user. 2. Commit the role to the switch to the active user database.
B. 1. Modify a network-operator role and add the required privileges. 2. Assign a VDC-operator role to a user.
C. 1. Create a user-defined role and add the required privileges. 2. Assign a role to a user.
D. 1. Add the required privilege to the VDC-admin role. 2. Commit the changes to the active user database.

Show Suggested Answer

Suggested Answer: C 🗳️

by Tamunt at Oct. 24, 2021, 2:19 p.m.

Comments

Submit Cancel

Tamunt

Highly Voted 2 years, 7 months ago

its must be C

upvoted 10 times

...

groblok

Most Recent 6 months ago

Selected Answer: C

Option C is the most appropriate because it allows for customization of privileges while maintaining security by not assigning overly permissive roles. The other options either suggest roles that might have too many privileges or do not emphasize the creation of a specific user-defined role.

upvoted 1 times

...

vladdar

1 year, 2 months ago

user needs vdc-admin for FCoE VDC sooo I don't know. C ?

upvoted 1 times

vladdar

1 year, 2 months ago

I was wrong. you allocate vlans for FCoE VDC from the default VDC, which means you need network-admin role. A is correct

upvoted 1 times

...

C4rlos

1 year, 5 months ago

Selected Answer: C

C is correct.

upvoted 1 times

...

GuyThatTakesDumps

1 year, 8 months ago

Selected Answer: C

C is the one

upvoted 1 times

...

Smoothey

2 years, 2 months ago

Selected Answer: C

Define the role, add priv e.g. role name User-role-A rule 3 permit read-write feature l2nac rule 2 permit read-write feature dot1x rule 1 deny command clear *

upvoted 1 times

...

Narbledeath

2 years, 4 months ago

I´d go for C. Too. User roles contain rules that define the operations allowed for the user who is assigned the role. Each user role can contain multiple rules and each user can have multiple roles. For example, if role1 allows access only to configuration operations, and role2 allows access only to debug operations, then users who belong to both role1 and role2 can access configuration and debug operations. You can also limit access to specific VLANs, virtual routing and forwarding instances (VRFs), and interfaces. The Cisco NX-OS software provides four default user roles: •network-admin—Complete read-and-write access to the entire NX-OS device (only available in the default VDC) •network-operator—Complete read access to the entire NX-OS device (only available in the default VDC) •vdc-admin—Read-and-write access limited to a VDC •vdc-operator—Read access limited to a VDC Note You cannot change the default user roles. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_rbac.html#wp1431408

upvoted 4 times

...