Exam 2V0-16.25 Topic 1 Question 6 Discussion
Actual exam question for VMware's 2V0-16.25 exam
Question #: 6
Topic #: 1
Question #: 6
Topic #: 1
During a recent audit, it was determined that a group of users may have been compromised. These users should not have access to any VMware vCenter resources while an investigation is underway. All the affected users have been placed into a SUSPECT_USERS group.
Which step is required to ensure that the suspect users will never have access to resources in vCenter?
Which step is required to ensure that the suspect users will never have access to resources in vCenter?
Suggested Answer: A Vote an answer
To ensurecompromised users cannot access vCenter resources:
* Assign theNo Accessrole at the vCenter level.
* Enable propagationso this restriction applies to all child objects.
* This guaranteeszero permissionsfor SUSPECT_USERS.
Other options:
* B. Administrator with uncheck propagate# Still gives dangerous access at root level.
* C. Disconnect Active Directory# Disrupts all AD users, not just suspect ones.
* D. Read-only role# Still grants access, not acceptable during investigation.
References:
VMware vSphere 9.0 -Roles and Permissions Best Practices
VMware KB 1025569 -Assigning the No Access Role in vCenter
* Assign theNo Accessrole at the vCenter level.
* Enable propagationso this restriction applies to all child objects.
* This guaranteeszero permissionsfor SUSPECT_USERS.
Other options:
* B. Administrator with uncheck propagate# Still gives dangerous access at root level.
* C. Disconnect Active Directory# Disrupts all AD users, not just suspect ones.
* D. Read-only role# Still grants access, not acceptable during investigation.
References:
VMware vSphere 9.0 -Roles and Permissions Best Practices
VMware KB 1025569 -Assigning the No Access Role in vCenter
by Debby at Sep 15, 2026, 10:35 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).