The documented mongosh helper is db.revokeRolesFromUser(), and its second argument is an array of roles to revoke. MongoDB permits each role in that array to be expressed either as an explicit document { role: < roleName > , db: < database > } or, when the role belongs to the database in which the command is run, as a simple role-name string. Option C uses the explicit role-document form and is therefore valid for a role named specialRole defined in myDB. Option E uses the shorthand string form and is valid when specialRole is in the current database context. Option A reverses the required document structure and does not supply the mandatory role and db keys. Options B and D use a singular helper, db.revokeRoleFromUser(), which is not the documented MongoDB method. The plural method name reflects that multiple roles can be revoked in a single operation. Administrators should also remember that revoking a directly assigned role does not necessarily remove privileges inherited through other roles. Among the choices, C and E are the syntactically valid revocation forms.
Study Guide reference/topic:Security, Networking, and Encryption - RBAC, user administration, and revokeRolesFromUser().
===========
C100DBA PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 70% Discount on All Products,
Use Coupon: "coponace"