Guy, a VMware administrator, has removed an administrator that is suspected of malpractice from a group that controls the ability to remove hosts from vCenter. Several days after Guy has completed this task, he receives a call from his manager stating that the administrator Guy removed from the group has been removing hosts from vCenter. Which of the following is the most likely reason for the administrator's continued ability to remove hosts?
A)Guy is incompetent and did not remove the permissions correctly.
B)Permission changes take effect up to 10 days after being made.
C)The rogue administrator was specifically granted permissions through his user account.
D)The "no VMware remove" option was ticked in the rogue administrator's AD account.

Question

Quizplus · Accepted Answer

The administrator is still able to remove the hosts because the permission was directly assigned to his account in addition to the group membership. Permissions assigned directly to a user are not removed when that user's account is removed from a group granting the same permission set.

Guy, a VMware Administrator, Has Removed an Administrator That Is