Question 50
An infrastructure administrator receives the following incident: A contractor uses an all-powerful shared BMC account during a GPU rack installation, and later no one can determine who performed a remote power cycle. Which measured result most directly proves that this specific problem is resolved?
Explanation
Correct Answer
This is the measurable acceptance result for the described case: A test technician can execute only permitted BMC tasks and each administrative action is attributable to a distinct authorized principal. It validates the corrective operation (Replace shared privileged access with named role-scoped identities and centralized authentication and audit logging where supported.) rather than a related but different system check.
Incorrect Answers
This observation would help verify a different incident: An AI appliance is deployed with measured boot enabled but platform ownership and TPM-backed trust measurements were never recorded. It does not directly establish the required result for the current case: A test technician can execute only permitted BMC tasks and each administrative action is attributable to a distinct authorized principal.
This observation would help verify a different incident: A rack has a functioning GPU data fabric but its remote operators cannot reach the BMC after a workload network outage. It does not directly establish the required result for the current case: A test technician can execute only permitted BMC tasks and each administrative action is attributable to a distinct authorized principal.
This observation would help verify a different incident: A GPU server presents PCIe link-width degradation immediately after a platform firmware change, but technicians plan to replace the accelerator first. It does not directly establish the required result for the current case: A test technician can execute only permitted BMC tasks and each administrative action is attributable to a distinct authorized principal.