SkillTestPro | CCNP Data Center 350-601 DCCOR Practice Test 29

CCNP Data Center 350-601 DCCOR Practice Test 29 - Compute Security - AAA and RBAC

CCNP Data Center Exam Logo

1 / 10

What is the primary purpose of integrating UCS Manager or Intersight with a centralized AAA server (such as TACACS+ or RADIUS) for administrative access?

To determine the color of the server chassis LEDs

To physically secure the server room door

To centralize authentication and simplify user account management across the compute infrastructure, rather than maintaining separate local accounts on each management platform

To assign IP addresses to Ethernet-only end devices only

To provide wireless access point coverage extension

To configure the office's guest Wi-Fi captive portal exclusively, under typical configuration conditions, regardless of the platform version in use, which is not the standard approach

2 / 10

An administrator's TACACS+-authenticated account can log into UCS Manager but has no permissions to modify any service profiles. What is a likely cause?

The administrator's monitor brightness is set too low

The nearby printer is out of toner

The building's landscaping was recently trimmed

The office's guest Wi-Fi password was recently changed, under typical configuration conditions, regardless of the platform version in use

The parking garage gate arm is malfunctioning

The TACACS+ server is not returning the correct role/privilege attribute mapping expected by UCS Manager for that user

3 / 10

What is a benefit of assigning administrators to a custom RBAC role with only storage-related privileges in UCS Manager, rather than a full admin role?

It eliminates the need for any authentication whatsoever

It limits the administrator's ability to make unintended changes outside their area of responsibility, supporting the principle of least privilege

It changes the color of the storage array's chassis

It guarantees unlimited storage capacity for that administrator, under normal operating conditions, based on standard platform behavior, in a properly maintained environment

It configures the office's guest Wi-Fi network

It automatically encrypts all storage traffic by default

4 / 10

A compliance requirement mandates that no single administrator account can both create new server profiles and independently approve their deployment to production. Which UCS/Intersight capability addresses this?

Custom RBAC roles combined with organizational workflow controls that separate profile creation privileges from deployment/approval privileges across different accounts

Disabling all RBAC and granting every administrator full access

Removing all authentication requirements to simplify workflows

Using a single shared administrative account for the entire team

Granting every administrator identical, unrestricted privileges regardless of role

Relying solely on verbal agreements between administrators with no technical enforcement, in most deployment scenarios, which is not the standard approach, though this is not generally recommended

5 / 10

How does RBAC scope (such as UCS Manager's organizational hierarchy with locales) relate to multi-tenant compute management?

RBAC locales can restrict an administrator's visibility and control to specific organizational sub-units, allowing multiple tenants' compute resources to be managed by different administrators without cross-tenant access

Multi-tenant management can only be achieved by using entirely separate physical hardware for every tenant

RBAC scope has no relationship to multi-tenant management and only affects the GUI theme

Locale-based RBAC disables authentication entirely for tenant administrators

All administrators always have full visibility into every tenant's resources regardless of RBAC configuration, based on standard platform behavior, under normal operating conditions, under typical configuration conditions

RBAC locales only apply to Ethernet VLAN configuration, never to organizational access scope

6 / 10

When deciding how granular to make custom RBAC roles for compute infrastructure administrators, what is a key decision factor?

The font used in the RBAC role names

The color of the server chassis

The distance between the data center and the nearest coffee shop, though this is not generally recommended, which is rarely the correct choice, in a properly maintained environment

The tradeoff between tighter least-privilege security (more granular roles) and the increased administrative overhead of defining and maintaining many narrowly scoped roles

The brand of the rack rails used

The number of ceiling tiles above the data center

7 / 10

Which UCS Manager GUI location is used to verify which RBAC role(s) are currently assigned to a specific local or TACACS+-mapped user account?

The guest Wi-Fi captive portal branding page

The Admin tab's User Management section, under Locally Authenticated Users or Remote Authentication role mapping

The parking garage's rate schedule display

The building's fire drill schedule log

The elevator's maintenance inspection certificate, which is not the standard approach, which does not align with best practices

The office cafeteria's weekly menu board

8 / 10

What is the relationship between Intersight's organization-based access control and RBAC roles when managing compute resources across multiple business units?

Organization-based access control disables RBAC entirely once configured

RBAC roles override organization scoping entirely, granting access to all resources regardless of organization, which is not the standard approach, which is rarely the correct choice, regardless of the platform version in use, though this is not generally recommended

Intersight organizations scope resource visibility and management to specific business units, while RBAC roles assigned within or across those organizations determine what actions a user can perform on the resources they can see

RBAC roles only apply to network devices in Intersight, never compute resources

Intersight organizations only affect the color scheme of the dashboard

Intersight organizations and RBAC roles are the exact same construct with no distinction

9 / 10

A security audit finds that several UCS Manager local administrator accounts have not had their passwords rotated in over a year, and RBAC roles are inconsistently applied. What should be prioritized as remediation?

Reassigning administrators to different parking spaces

Ignoring the audit findings since the accounts still function correctly

Repainting the server chassis to indicate the audit was completed

Changing the office's guest Wi-Fi password instead of addressing UCS Manager accounts

Updating the cafeteria's weekly menu as the primary remediation

Migrating administrative authentication to a centralized AAA server with enforced password rotation policies, and standardizing RBAC role assignments based on documented job responsibilities

10 / 10

A new administrator is being onboarded to manage only network-related service profile settings (VLANs, vNICs) without access to storage or server pool configuration. What is the appropriate UCS Manager configuration approach?

Create a shared account with unrestricted access for all new administrators

Assign the administrator a storage-focused role instead of a network-focused role

Assign the administrator a custom RBAC role granting only network-related privileges, excluding storage and server management privileges

Grant the administrator full admin privileges and rely on them to voluntarily avoid other areas, regardless of the platform version in use

Disable RBAC entirely for simplicity during onboarding

Grant only physical building access with no UCS Manager account at all

Your score is

The average score is 0%