Identify ECS D@RE Features and Functionality and Active Directory Integration with ECS ECS-OPERATE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An ECS administrator is configuring Active Directory integration for a multi-tenant environment. The administrator needs to ensure that users from different AD domains can access their respective tenants without cross-tenant access. Which configuration should be used?

   • AUse a single AD provider and assign all users to the same tenant.
   • BDisable AD integration and use local users for each tenant.
   • CConfigure multiple AD providers and map each to a specific tenant.
   • DConfigure AD integration but rely on object-level permissions to prevent cross-tenant access.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is integrating ECS with Active Directory. The administrator needs to ensure that users from a specific AD group have read-only access to a bucket, while users from another group have write access. Which configuration should be used?

   • ADisable AD integration and use local users with different permissions.
   • BAssign permissions directly to individual AD users.
   • CMap each AD group to a different ECS role with the appropriate permissions.
   • DUse a single ECS role for all AD users and rely on object-level permissions.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is deploying ECS and wants to integrate it with Active Directory for user authentication. The administrator needs to ensure that AD users can access ECS using their existing credentials. Which configuration is required?

   • ACreate local ECS users with the same passwords as AD.
   • BConfigure ECS to use AD as the authentication source.
   • CUse LDAP for authentication but require users to re-enter credentials.
   • DEnable SSO but keep ECS authentication separate from AD.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A storage administrator is preparing to enable D@RE on a new ECS cluster. The administrator wants to ensure that the encryption keys are protected and rotated regularly. Which operational practice should be implemented?

   • ADisable key rotation to avoid operational overhead.
   • BUse external key management and avoid rotation to simplify management.
   • CUse ECS's built-in key management and schedule regular key rotation.
   • DStore encryption keys on the same disks as the encrypted data.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A large enterprise is integrating ECS with Active Directory. The security team requires that ECS administrators be authenticated via AD, but also wants to ensure that if the AD server is unavailable, administrators can still access ECS for emergency maintenance. Which configuration should be used?

   • AConfigure a local ECS administrator account as a fallback for emergency access.
   • BUse a second AD server as a backup.
   • CRely solely on AD authentication without any fallback.
   • DDisable AD integration and use only local users.
   Reveal Solution Discussion Select an answer first