VCP-DCV vSphere Security Practice Question
An administrator wants to ensure that no user can view or modify VMs in a particular folder except the folder owner. What is the proper method to achieve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
On the folder, assign permissions to the folder owner with the desired role and ensure propagation is set to 'All children'.
Assigning the folder owner the desired role on the folder with propagation set to 'All children' grants permissions to the folder and all VMs within it, while other users without explicit permissions cannot view or modify the VMs. Option A is incorrect because 'No Access' on the folder for all other users would block their access but does not grant the folder owner access unless also assigned. Option B is incorrect because the Administrator role is too broad and grants full administrative rights beyond the folder. Option C is incorrect because a global role applies across the entire vCenter, not just a specific folder, and cannot be limited to a single folder owner.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the No Access permission on the folder for all other users.
Why it's wrong here
Incorrect. Applying 'No Access' on the folder for all other users would block their access but does not grant the folder owner any permissions unless explicitly assigned.
- ✗
Assign the folder owner with Administrator role on the folder.
Why it's wrong here
Incorrect. The Administrator role provides full administrative rights across the vCenter, which is too broad and goes beyond controlling access to a single folder.
- ✗
Create a global role that denies access to all VMs except the folder owner.
Why it's wrong here
Incorrect. A global role applies across the entire vCenter, not just a specific folder, and cannot be limited to a single folder owner.
- ✓
On the folder, assign permissions to the folder owner with the desired role and ensure propagation is set to 'All children'.
Why this is correct
Correct. Assigning the folder owner the desired role on the folder with propagation set to 'All children' ensures the owner has the necessary permissions on the folder and all VMs within it, while other users, lacking explicit permissions, cannot view or modify the VMs.
Go deeper
Related to this question
About these practice questions
This VCP-DCV question is part of Courseiva's 498-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.