Identify ECS D@RE Features and Functionality and Active Directory Integration with ECS ECS-DEPLOY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does ECS map Active Directory users and groups to ECS permissions?

   • ABy requiring each AD user to have a local ECS account with the same permissions
   • BBy assigning AD users and groups to ECS roles that define permissions
   • CBy creating a separate ECS account for each AD user
   • DBy using AD security descriptors directly on ECS objects
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An organization is deploying ECS and wants to use D@RE. They have a requirement that encryption keys must be backed up and recoverable in case of a disaster. What should they do?

   • AStore the encryption keys on the ECS nodes and back up the nodes.
   • BExport the keys to a plain text file and store it in a safe.
   • CBack up the key management system and store the backup in a secure offsite location.
   • DDo not back up keys; they can be regenerated if lost.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of Dell ECS Data-at-Rest Encryption (D@RE)?

   • ATo compress data to reduce storage capacity requirements
   • BTo encrypt data while it is being transmitted between clients and ECS nodes
   • CTo provide a backup and recovery mechanism for ECS object data
   • DTo protect stored data from unauthorized access if physical storage media is compromised
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator is configuring Active Directory integration with ECS. They have created a service account in AD for ECS to use. What is the next required step?

   • ACreate a local ECS user with the same name as the service account.
   • BConfigure the ECS node to join the AD domain.
   • CProvide the service account credentials and the AD domain information in the ECS configuration.
   • DInstall the AD domain controller on the ECS node.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An organization is using D@RE and needs to rotate encryption keys annually. They want to minimize the operational impact. What is the best approach?

   • ADisable D@RE and re-enable it with a new key.
   • BRotate the key encryption key and re-encrypt all data.
   • CRe-encrypt all data with a new data encryption key.
   • DUse a key hierarchy where the data encryption key is re-wrapped with a new key encryption key.
   Reveal Solution Discussion Select an answer first