Differentiate Between Different Security Features and Their Proper Use Cases for Data Governance and Compliance POWERSCALE-DESIGN-V2 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company has a PowerScale cluster with multiple administrators. The security team wants to ensure that no single administrator can modify audit log settings without another administrator's approval. They have configured RBAC with separate roles for 'Audit Admin' and 'System Admin'. What additional configuration is required to enforce separation of duties?

   • AEnable audit logging for all administrative actions
   • BUse ACLs to restrict access to audit log files
   • CConfigure SmartLock on the audit log directory
   • DEnsure that no user is assigned both the 'Audit Admin' and 'System Admin' roles
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company's security policy requires that user accounts be locked after 5 failed login attempts and that passwords expire every 90 days. They use Active Directory for authentication. Where should these policies be configured?

   • AOn each PowerScale share's ACL settings
   • BOn the PowerScale cluster's local authentication settings
   • CIn the PowerScale RBAC role definitions
   • DIn the Active Directory domain policy
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the difference between authentication and authorization in PowerScale?

   • AAuthentication verifies identity; authorization determines what actions the identity can perform
   • BBoth are the same process
   • CAuthentication grants permissions; authorization verifies identity
   • DAuthentication is only for SMB, authorization is only for NFS
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A multinational company wants to centralize identity management for their PowerScale cluster. They currently use Active Directory for Windows users and OpenLDAP for Linux users. They want to enforce the same password policy across both identity sources. What should they configure?

   • AConfigure PowerScale to use only LDAP for all users
   • BConfigure both AD and LDAP as authentication providers and enforce password policy in each
   • CMigrate all users to Active Directory and disable LDAP
   • DUse Kerberos for both AD and LDAP authentication
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which statement accurately describes how ACLs differ from traditional POSIX permissions on PowerScale?

   • AACLs allow permissions for individual users and groups beyond the owner/group/others model
   • BACLs are stored only on the local file system and cannot be used with NFS
   • CACLs are only applicable to directories, not files
   • DACLs replace the need for authentication
   Reveal Solution Discussion Select an answer first