VMware 2V0-621 Exam Questions

Question 6 of 243

What is the highest object level from which a virtual machine can inherit privileges?

Host Folder

Data Center

Data Center Folder

VM Folder

Correct Answer: C

Reference:
http://pubs.vmware.com/vsphere-4-esx-vcenter/index.jsp?topic=/com.vmware.vsphere.dcadmin.doc_41/vsp_dc_admin_guide/ managing_users_groups_roles_and_permissions/c_hierarchical_inheritance_of_permissions.html C

Question 7 of 243

Which three Authorization types are valid in vSphere? (Choose three.)

Group Membership in vsphere.local

Global

Forest

vCenter Server

Group Membership in system-domain

Correct Answer: A, B, D

The primary way of authorizing a user or group in vSphere is the vCenter Server permissions. Depending on the task you want to perform, you might require other authorization. vSphere 6.0 and later allows privileged users to give other users permissions to perform tasks in the following ways. These approaches are, for the most part, mutually exclusive; however, you can assign use global permissions to authorize certain users for all solution, and local vCenter Server permissions to authorize other users for individual vCenter Server systems.
Exam 2V0-621: Question 7 - Image 1

Reference:
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-74F53189-EF41-4AC1-A78E-D25621855800.html

Global Permissions -
Groups in the vsphere.local Domain ABD

Question 8 of 243

Which three components should an administrator select when configuring vSphere permissions? (Choose three.)

Inventory Object

Role

User/Group

Privilege

Password

Correct Answer: B, C, D

To manage permissions from the vSphere Web Client, you need to understand the following concepts:
Exam 2V0-621: Question 8 - Image 1

Reference:
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-3B78EEB3-23E2-4CEB-9FBD-E432B606011A.html BCD

Question 9 of 243

In which two vsphere.local groups should an administrator avoid adding members? (Choose two.)

SolutionUsers

Administrators

DCAdmins

ExternalPDUsers

Correct Answer: A, B

Reference:
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-87DA2F34-DCC9-4DAB-8900-1BA35837D07E.html AB

Question 10 of 243

An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments.

Which statement best describes how the administrator would accomplish this?

Assign a Global Permission to the user.

Assign a vCenter Permission to the user.

Assign vsphere.local membership to the user.

Assign an ESXi Permission to the user.

Correct Answer: A

Global Permissions -
Global permissions are applied to a global root object that spans solutions, for example, both vCenter Server and vCenter Orchestrator. Use global permissions to give a user or group privileges for all objects in all object hierarchies.
Each solution has a root object in its own object hierarchy. The global root object acts as a parent object to each solution object. You can assign global permissions to users or groups, and decide on the role for each user or group. The role determines the set of privileges. You can assign a predefined role or create custom roles. See
Using Roles to Assign Privileges
. It is important to distinguish between vCenter Server permissions and global permissions.
Exam 2V0-621: Question 10 - Image 1

Reference:
https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-C7702E31-1623-4189-89CB-E1136AA27972.html A