Exam 5V0-31.22 topic 1 question 121 discussion

Actual exam question from VMware's 5V0-31.22

Question #: 121
Topic #: 1

What are the correct steps to grant the DevOps team permissions to a vSphere Namespace in a VMware Cloud Foundation (VCF) developer-ready workload domain while following the principle of least privilege access?

A. At the Permissions setting, add the DevOps group and assign the “Editor” permission
B. At the Global Permissions setting, add the DevOps group and assign the vSphere Kubernetes Manager role
C. At the Global Permissions setting, add the DevOps group and assign the SupervisorService Cluster Operator role
D. At the Permissions setting, add the DevOps group and assign the “Can edit” permission

Show Suggested Answer

Suggested Answer: C 🗳️

by xniclas at Aug. 19, 2023, 6:45 p.m.

Comments

Submit Cancel

ShiVip

9 months, 2 weeks ago

Ans D - Role Permissions and RoleBindings TKG clusters on Supervisor support three roles: viewer, editor, and owner. Role permissions are assigned at and scoped to the vSphere Namespace. See Configuring vSphere Namespaces for TKG Clusters on Supervisor. A user/group granted the Can view role permission on a vSphere Namespace has read-only access to TKG clusters provisioned in that vSphere Namespace. A user/group granted the Can edit role permission on a vSphere Namespace can create, read, update, and delete TKG clusters in that vSphere Namespace. A user/group granted the Owner permission on a vSphere Namespace can administer TKG clusters in that vSphere Namespace, and can create and delete additional vSphere Namespaces using kubectl.

upvoted 1 times

...

ruan19812022

12 months ago

Selected Answer: D

there is no global permissions tab, and can edit is the correct term for permissions not edit

upvoted 2 times

...

imPranayK

1 year, 1 month ago

Option A and D are not specific to Kubernetes namespaces and may provide more access than necessary, similarly Option C is related to the overall management of the Supervisor Cluster but does not specifically address permissions within a vSphere Namespace in the context of Kubernetes workloads. So, option B should be the correct.

upvoted 1 times

...

xniclas

1 year, 3 months ago

correct is D

upvoted 3 times

ocaptnmycaptn

11 months, 2 weeks ago

Another vote for D. https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-with-tanzu-tkg/GUID-223D91FB-C4CB-4DA7-8B3F-24721ABDFBC7.html

upvoted 2 times

...

Exam 5V0-31.22 All Questions

View all questions & answers for the 5V0-31.22 exam