A vSphere administrator manages a cluster which includes critical and non-critical virtual machines. The cluster
requires different permissions for contractors and non-contractors.
How can the administrator exclude the contractor group from some of the critical VMs?

A.
Apply permission for both contractors and non-contractors on the cluster level.
B.
Apply permission for both contractors and non-contractors on the cluster level. Remove permission on the
critical VMs for contractors.
C.
Remove permission for contractors on the cluster level. Apply permission on the critical VMs for noncontractors.
D.
Apply permission for both contractors and non-contractors on the VMs. Remove permission on the critical
VMs for contractors.
Explanation:
To exclude the contractor group simple apply permission for both contractors and non-contrators on the cluster
level. After that, remove premission on the critical VMs for contractors.
Is correct the B option, the question reffers about cluster level
5
2
I think all the answers are bad, but the only one that would actually work is D. I don’t think it can be B because you cannot remove and inherited permission from an object.
1
0
After staring at this question on the actual exam, I ended up choosing A and scored 480 so I cannot guarantee if it is right or not. It does not say anything about which group needs access to critical/non-critical VMs. I think that is just there to throw us off, and applying permissions at the cluster level is definitely best practice vs applying to VMs individually.
0
0
B is wrong. I just tried in on my own Vsphere rig and if you assign permission on a cluster level then it is not possible to remove it on certain VM.
0
0