Describe Solutions to Secure Storage for AI Workloads CERTIFIED-AI-EXPERT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of role-based access control (RBAC) in an AI storage environment?

   • ATo provide a backup of all AI datasets.
   • BTo encrypt all data stored in the AI storage system.
   • CTo grant permissions based on the user's job function, ensuring they have only the access necessary for their role.
   • DTo monitor network traffic for suspicious activity.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company must delete AI training data that contains personal information after a retention period ends, but they must also prove to auditors that the data was securely deleted. They use NetApp storage. Which approach should they take?

   • AMove the data to an archive tier and leave it there.
   • BSimply delete the files and empty the recycle bin.
   • CUse NetApp SnapDelete to permanently remove the data and generate a deletion certificate.
   • DOverwrite the data with zeros using a third-party tool.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A financial regulator requires that AI model training data be retained for 7 years and cannot be altered. The company also needs to be able to prove that the data has not been tampered with. They use NetApp storage. Which combination of features should they use?

   • AEnable SnapLock Compliance mode and generate checksums for the data.
   • BEnable NetApp Volume Encryption and use SnapVault.
   • CEnable SnapLock Enterprise mode and use SnapMirror.
   • DUse NetApp auditing and rely on the audit log.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A university research lab uses NetApp storage for AI datasets. They want to allow students to access the data for coursework but prevent them from modifying or deleting it. The lab also wants to ensure that access is only possible from the campus network. What should they configure?

   • AGive students modify permissions and rely on the firewall.
   • BSet NTFS permissions to give students read-only access and use a firewall to restrict access to the campus network.
   • CUse Kerberos authentication but do not set file permissions.
   • DEnable SMB encryption and allow access from anywhere.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A healthcare AI team stores sensitive patient imaging data in an on-premises NetApp storage system. They need to ensure the data is encrypted both at rest and during transfer to GPU servers for model training. The team also wants to centralize key management to meet compliance requirements. Which solution should they implement?

   • AEnable NetApp Volume Encryption with an external KMIP server and use TLS for data transfers.
   • BUse SMB encryption and rely on the storage system's built-in key management.
   • CEnable NetApp Aggregate Encryption and use NFSv3 for data transfers.
   • DImplement application-level encryption and use FTP for data transfers.
   Reveal Solution Discussion Select an answer first