VCP4 VMware Exam Prep

Category - VMWare

Guy, a VMware administrator, has removed an administrator that is suspected of malpractice from a group that controls the ability to remove hosts from vCenter. Several days after Guy has completed this task, he receives a call from his manager stating that the administrator Guy removed from the group has been removing hosts from vCenter. Which of the following is the most likely reason for the administrator’s continued ability to remove hosts?
  1. Guy is incompetent and did not remove the permissions correctly.
  2. Permission changes take effect up to 10 days after being made.
  3. The rogue administrator was specifically granted permissions through his user account.
  4. The “no VMware remove” option was ticked in the rogue administrator’s AD account.
Explanation
Answer: C - The administrator is still able to remove the hosts because the permission was directly assigned to his account in addition to the group membership. Permissions assigned directly to a user are not removed when that user’s account is removed from a group granting the same permission set.
Was this helpful? Upvote!
Login to contribute your own answer or details

Top questions

Related questions

Most popular on PracticeQuiz