A MongoDB database administrator is asked to add the privilege find to a role named...

The grantPrivilegesToRole command requires privileges to be an array of privilege documents. Each privilege document must contain a resource document and an actions array. Option A uses exactly that structure: the resource targets testDB with an empty collection name, which represents the database-level collection scope used by MongoDB ' s privilege model, and the actions list contains " find " . Option B omits the required resource wrapper and incorrectly places db and collection directly in the privilege document. Option C supplies privileges as a single document rather than as the required array. Option D has the correct resource structure but supplies actions as a scalar string instead of an array. The find action grants the ability to perform supported read operations on the specified resource scope, subject to the role ' s other inherited privileges. The shown writeConcern and comment fields are legitimate command options and do not change the structural requirement. Consequently, option A is the only choice that conforms to MongoDB ' s documented privilege document format.

Study Guide reference/topic:Security, Networking, and Encryption - user-defined roles, privilege documents, resources, actions, and grantPrivilegesToRole.

===========