HPE7-A01 practice question 2 of 25

Your Director of Security asks you to assign AOS-CX switch management roles to new employees based on their specific job requirements After the…

Choose your answer, then check it against the explanation.

Your Director of Security asks you to assign AOS-CX switch management roles to new employees based on their specific job requirements After the configuration was complete, it was noted that a user assigned with the administrators role did not have the appropriate level of access on the switch. The user was not limited to viewing nonsensitive configuration information and a level of 1 was not assigned to their role Which default management role should have been assigned for the user?

Answer options

Correct Answer:

Explanation

The question requires identifying the appropriate default management role for a user needing more than minimal read-only access but less than full administrative rights. In ArubaOS-CX, there are three pre-defined default roles: administrators, operators, and auditors.

The administrators role was deemed inappropriate, implying the user needed fewer privileges. The operators role grants access to all show commands, allowing full visibility of the switch configuration and operational state, which aligns with the requirement of not being "limited to viewing nonsensitive configuration information." This role is the standard choice for monitoring and initial troubleshooting without permitting configuration changes. The other options listed are not default roles in AOS-CX.

Why Incorrect

A. sysadmin: This is not a pre-defined default management role in the ArubaOS-CX operating system.

C. helpdesk: This is not a pre-defined default management role in the ArubaOS-CX operating system.

D. config: This is not a pre-defined default management role in the ArubaOS-CX operating system.

References

1. ArubaOS-CX 10.12 Security Guide

Page 101

Chapter: "Role-based access control"

Section: "Default roles".

This section explicitly lists and describes the three default roles. It states

"The operators group... Members of this group have access to all show commands and some clear commands

equivalent to privilege level 1." This confirms the capabilities of the operators role. The document also confirms that sysadmin

helpdesk

and config are not default roles.

2. ArubaOS-CX 10.10 Security Guide

Page 97

Chapter: "Role-based access control"

Section: "Default roles".

This document provides the same definitions for the default roles. It defines the administrators role as having "full access to all switch features" (privilege 15) and the operators role as having access to "all show commands" (privilege 1)

reinforcing that operators is the correct step-down role from administrators for comprehensive monitoring.

Question 2 of 25

Keep practicing

Take the free HPE7-A01 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test