Discuss VMware 3V0-24.25 Exam Topic 3 Question 11

Which object type does the Kubernetes RBAC API declare?

AClusterRole and ClusterRoleBinding

BClusterObject and ClusterNode

CValidatingAdmissionPolicy and ResourceQuotas

DContainer and Deployment

Suggested Answer: A

Kubernetes Role-Based Access Control (RBAC) is implemented through theRBAC API group(rbac.authorization.k8s.io) and defines the core authorization primitives used to grant permissions to users, groups, and service accounts. The cluster-scoped objects declared by the RBAC API areClusterRoleandClusterRoleBinding. AClusterRoledefines a set of permissions (verbs such as get/list/watch/create/update/delete) over resources at thecluster scope(including cluster-wide resources and optionally namespaced resources across namespaces). AClusterRoleBindingthenbindsthat ClusterRole to a subject (user/group/serviceaccount), making those permissions effective cluster-wide.

This differs from namespace-scoped RBAC objects (RoleandRoleBinding) which apply only within a single namespace. The other options are incorrect becauseClusterObject/ClusterNodeare not RBAC API objects,ValidatingAdmissionPolicybelongs to the admission control API surface (policy enforcement),ResourceQuotais a namespace resource governance object, andContainer/Deploymentare workload/runtime concepts defined in the core/apps APIs rather than authorization primitives.

Get Premium 3V0-24.25 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Mila 2 months ago

Definitely A. The others don't fit RBAC at all.

Kasandra 2 months ago

I agree! RBAC is all about roles and bindings.

Vicki 2 months ago

I'm leaning towards A. ClusterRole and ClusterRoleBinding seem right.

Noel 2 months ago

Are you sure about that? Seems a bit off to me.

Teri 2 months ago

Definitely A, no doubt about it!

Merilyn 2 months ago

Wow, I didn't know there were so many object types!

Ressie 3 months ago

I thought it was B, but I guess not.

Jaclyn 3 months ago

A) ClusterRole and ClusterRoleBinding is correct!

Justine 3 months ago

I'm pretty confident that ValidatingAdmissionPolicy and ResourceQuotas are not part of RBAC, so I would rule out C.

Latanya 3 months ago

ClusterObject and ClusterNode sound familiar, but I don't think they relate to RBAC. Could it be B?

Trinidad 3 months ago

I remember practicing a question about roles and bindings, which makes me lean towards A as well.

Kallie 4 months ago

I think the RBAC API is related to roles, so maybe it's A? But I'm not completely sure.

VMware 3V0-24.25 Exam - Topic 3 Question 11 Discussion