Free Practice Questions for MongoDB C100DBA Exam

The documented mongosh helper is db.revokeRolesFromUser(), and its second argument is an array of roles to revoke. MongoDB permits each role in that array to be expressed either as an explicit document { role: < roleName > , db: < database > } or, when the role belongs to the database in which the command is run, as a simple role-name string. Option C uses the explicit role-document form and is therefore valid for a role named specialRole defined in myDB. Option E uses the shorthand string form and is valid when specialRole is in the current database context. Option A reverses the required document structure and does not supply the mandatory role and db keys. Options B and D use a singular helper, db.revokeRoleFromUser(), which is not the documented MongoDB method. The plural method name reflects that multiple roles can be revoked in a single operation. Administrators should also remember that revoking a directly assigned role does not necessarily remove privileges inherited through other roles. Among the choices, C and E are the syntactically valid revocation forms.

Study Guide reference/topic:Security, Networking, and Encryption - RBAC, user administration, and revokeRolesFromUser().

===========