Differentiate Between Different Security Features and Their Proper Use Cases for Data Governance and Compliance POWERSCALE-DESIGN-V2 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of secure deletion in PowerScale?

   • ATo ensure deleted data cannot be recovered
   • BTo encrypt data before deletion
   • CTo speed up the deletion process
   • DTo move data to a different storage tier
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A government agency is decommissioning a PowerScale cluster that stored classified documents. The drives will be returned to the hardware vendor. The agency requires that data be unrecoverable after the drives leave their possession. What is the most appropriate method to ensure data sanitization?

   • AOverwrite the drives with zeros once
   • BDelete all files and reformat the drives
   • CPerform a cryptographic erase on the self-encrypting drives
   • DUse the 'rm' command to remove all data
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to eliminate NTLM authentication for SMB traffic to their PowerScale cluster to improve security. They have configured Kerberos for authentication. What additional configuration is required to ensure NTLM is not used?

   • AConfigure ACLs to restrict NTLM users
   • BUse LDAPS for authentication
   • CEnable SMB encryption on all shares
   • DDisable NTLM authentication on the PowerScale cluster
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A financial services firm must retain trade records for 7 years per SEC Rule 17a-4. They have configured SmartLock on the archive directory. During a routine audit, an administrator discovers that a compliance officer can still delete files older than 7 years by using the 'SmartLock delete' privilege. What must be configured to ensure the retention period is strictly enforced?

   • AEnable audit logging on the directory
   • BRemove the compliance officer from the SmartLock administrators group
   • CSet the retention period to 'infinite' on the directory
   • DEnable SmartLock compliance mode on the directory
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company uses self-encrypting drives in their PowerScale cluster. The security policy requires that encryption keys be rotated annually and that a copy of the keys be stored offsite in case of emergency. What should be configured to meet this requirement?

   • AEnable automatic key rotation and configure an external key management server (KMS)
   • BManually rotate keys and store them on the cluster
   • CDisable key rotation and use a single key for all drives
   • DUse software-based encryption instead of SEDs
   Reveal Solution Discussion Select an answer first