Exam 350-601 topic 1 question 323 discussion

All users and user groups must be configured using Active Directory. --> RADIUS cannot be used for authentication with AD, LDAP must be used for this purpose. User1 must have full access to the Fabric Interconnect infrastructure and network security operations. --> The built-in "Network Administrator" role can be used for this. User1 must have full access to the storage operations configuration --> The built-in "Storage Administrator" role can be used for this. Therefore, answer B is correct.

I agree w/ Annielover007 that built-in roles exist but one would need to assign *both* roles to User1. Answer B reads "a built-in role", singular. No *single* built-in role exists that grant the required access so going with C.

C. Create a custom role for the user and LDAP for the role-mapping for Active Directory: Provides precise control over permissions, ensuring that User1 has full access to the required areas. B. Execute a built-in role for the user and LDAP for the role-mapping for Active Directory: Provides general access but may not meet the specific detailed access requirements.

B is correct!