Describe Cluster Dependencies on NTP, LDAP, Active Directory, and Access Zones POWERSCALE-DEPLOY Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A PowerScale cluster is joined to an Active Directory domain. The domain controllers are configured to use the domain's PDC emulator as the NTP source. The PowerScale cluster is configured to use an external NTP server. Users report that they can authenticate but occasionally receive 'clock skew' errors when accessing SMB shares. The cluster and the DCs are in the same time zone. What is the most likely cause?

   • AThe external NTP server is not reachable from the cluster, causing the cluster clock to drift.
   • BThe cluster and the domain controllers are using different NTP sources, leading to time drift between them.
   • CThe AD domain has a policy that requires all devices to use the PDC emulator as NTP, and the cluster is violating this policy.
   • DThe cluster's NTP configuration is set to use the wrong time zone, causing a fixed offset.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is deploying a PowerScale cluster in a new data center. They plan to use LDAP for user authentication. The security team requires that all authentication events be logged with accurate timestamps for compliance auditing. During initial configuration, the cluster's NTP settings are left at the default. What is the most likely impact of this oversight?

   • AThere will be no impact because NTP only affects file access, not authentication or logging.
   • BAuthentication events will have incorrect timestamps, making compliance audits unreliable, and time-sensitive protocols like Kerberos may fail if the skew exceeds limits.
   • CThe cluster will not be able to join the LDAP domain because NTP is a prerequisite for all directory services.
   • DLDAP authentication will fail because the cluster cannot contact the LDAP server without synchronized time.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How do access zones depend on authentication providers like LDAP or Active Directory?

   • AAccess zones are used to configure the authentication providers themselves
   • BAccess zones replace the need for authentication providers by using local users only
   • CAccess zones are independent of authentication providers and do not rely on them
   • DAccess zones require authentication providers to be configured to authenticate users and map them to file access permissions
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which type of information does PowerScale typically retrieve from an LDAP server during user authentication?

   • AThe user's SMB session encryption keys
   • BThe user's group memberships and home directory path
   • CThe user's recent login history
   • DThe user's password in plain text
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why does a PowerScale cluster require synchronized time across all nodes via NTP?

   • ATo synchronize the cluster's internal database with external DNS servers
   • BTo support Kerberos authentication and ensure that log entries have accurate timestamps
   • CTo ensure that all nodes report the same time to the OneFS web administration interface
   • DTo ensure that file access timestamps are consistent across all nodes
   Reveal Solution Discussion Select an answer first