A government agency requires that access to its cyber vault be protected with multi-factor authentication (MFA) and that all access attempts be logged. Which configuration should be applied?

Use single sign-on (SSO) without MFA and rely on network security.

Enable MFA for all vault users and configure audit logging.

Implement RBAC but skip MFA for convenience.

Enable MFA but disable logging to reduce storage usage.

An organization has a cyber vault with immutable snapshots. A ransomware attack encrypts the production data. The recovery team needs to restore the latest clean snapshot, but the snapshot is from three days ago. The business requires minimal data loss. What should the recovery team do?

Restore the latest clean snapshot and accept the three-day data loss.

Restore a snapshot from before the attack, even if it is older.

Create a new snapshot of the encrypted data and restore that.

Attempt to decrypt the production data using the ransomware decryption tool.

An organization has a cyber vault with immutable snapshots. During a ransomware incident, the primary data is encrypted. The recovery team needs to restore the latest clean snapshot to a new location to continue operations. What is the first step in the recovery procedure?

Restore the snapshot to the original production volume immediately.

Delete all snapshots to free up space for the recovery.

Disable snapshot locking to allow modification of the snapshot.

Identify the most recent immutable snapshot that is known to be clean.

What is the defining characteristic of an immutable snapshot?

It cannot be modified or deleted until the retention period expires

It is stored on a different storage tier for cost efficiency

It is automatically replicated to a remote site

It can only be deleted by the storage administrator

A company's cyber vault uses immutable snapshots with a retention period of 90 days. An administrator accidentally deletes a snapshot that is 30 days old. What is the result?

The snapshot is deleted, and the data is lost.

The snapshot is moved to a recycle bin.

The snapshot is deleted, but a copy is kept in the vault.

The snapshot cannot be deleted because it is immutable.

NetAppCertified Cyber Resiliency Expert

Domain 2Objective 2

Configure a Cyber Vault CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Part of the Disaster Recovery domain, which accounts for 7% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

6concepts

7%of the exam

Questions 11–15

11application · medium
A government agency requires that access to its cyber vault be protected with multi-factor authentication (MFA) and that all access attempts be logged. Which configuration should be applied?
Select an answer first
12expert · hard
An organization has a cyber vault with immutable snapshots. A ransomware attack encrypts the production data. The recovery team needs to restore the latest clean snapshot, but the snapshot is from three days ago. The business requires minimal data loss. What should the recovery team do?
Select an answer first
13application · medium
An organization has a cyber vault with immutable snapshots. During a ransomware incident, the primary data is encrypted. The recovery team needs to restore the latest clean snapshot to a new location to continue operations. What is the first step in the recovery procedure?
Select an answer first
14foundation · easy
What is the defining characteristic of an immutable snapshot?
Select an answer first
15expert · medium
A company's cyber vault uses immutable snapshots with a retention period of 90 days. An administrator accidentally deletes a snapshot that is 30 days old. What is the result?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.