Identify ECS D@RE Features and Functionality and Active Directory Integration with ECS ECS-DEPLOY Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   A company has integrated ECS with Active Directory. They have a group of temporary contractors who need access to ECS for a limited time. They want to ensure that when a contractor leaves, their access is revoked promptly. What is the best approach?

   • ACreate individual ECS users for each contractor and delete them when they leave.
   • BPlace contractors in a dedicated AD group and map that group to an ECS role with limited permissions.
   • CMap contractors to the same AD group as regular employees.
   • DUse a temporary password for contractors and change it when they leave.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes the high-level functionality of D@RE in an ECS environment?

   • AIt requires clients to encrypt data before sending it to ECS
   • BIt provides transparent encryption of data as it is written to disk and decryption as it is read
   • CIt encrypts only the metadata of objects, leaving the object data unencrypted
   • DIt only encrypts data on external storage arrays, not on internal ECS drives
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does D@RE manage the encryption keys used to encrypt and decrypt data?

   • AIt uses a key encryption key (KEK) to encrypt data encryption keys (DEKs), which are stored separately
   • BIt relies on the customer to provide and manage all encryption keys externally
   • CIt uses the same key for all objects and never rotates keys
   • DIt uses a single master key that is stored in plaintext on every node
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of key rotation in D@RE?

   • ATo allow multiple users to access the same encrypted data
   • BTo periodically replace encryption keys to reduce the risk of key compromise
   • CTo change the encryption algorithm used for data at rest
   • DTo re-encrypt all data with a new algorithm for better performance
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is integrating ECS with Active Directory. They need to ensure that authentication traffic between ECS and the domain controllers is secure. Which protocol should they use?

   • ANTLM
   • BPlain LDAP
   • CKerberos without encryption
   • DLDAP over SSL/TLS (LDAPS)
   Reveal Solution Discussion Select an answer first