A healthcare organization is deploying a new ONTAP cluster and has a compliance requirement to encrypt all data at rest. They plan to create multiple volumes for different departments and want to ensure that any volume created in the future is automatically encrypted without requiring per-volume configuration. What should the administrator do to meet this requirement?

Use a script to enable encryption on all volumes after creation.

Enable NetApp Volume Encryption (NVE) on each volume as it is created.

Enable NetApp Aggregate Encryption (NAE) on the aggregate that will host the volumes.

Configure a storage policy that automatically enables encryption on new volumes.

What is the role of an external key management server (KMS) in NetApp encryption solutions?

To monitor network traffic for security threats

To provide backup and recovery of encrypted data

To perform the encryption and decryption of data

To store and manage encryption keys used by ONTAP

Which NetApp technology provides data-at-rest encryption at the volume level in ONTAP?

NetApp Aggregate Encryption (NAE)

In ONTAP, how are encryption keys typically generated for data-at-rest encryption?

Copied from the external KMS and reused for all volumes

Generated by the storage system using a secure random number generator

Provided by the user at the time of volume creation

Derived from the volume name and creation time

NetAppCertified Cyber Resiliency Expert

Domain 6Objective 3

Configure Data-At-Rest Encryption CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Part of the Cybersecurity Encryption domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

7concepts

13%of the exam

Questions 1–5

1application · medium
A healthcare organization is deploying a new ONTAP cluster and has a compliance requirement to encrypt all data at rest. They plan to create multiple volumes for different departments and want to ensure that any volume created in the future is automatically encrypted without requiring per-volume configuration. What should the administrator do to meet this requirement?
Select an answer first
2foundation · easy
What is the role of an external key management server (KMS) in NetApp encryption solutions?
Select an answer first
3foundation · easy
Which NetApp technology provides data-at-rest encryption at the volume level in ONTAP?
Select an answer first
4foundation · easy
Which ONTAP command displays the encryption status of a volume?
Select an answer first
5foundation · easy
In ONTAP, how are encryption keys typically generated for data-at-rest encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.

Configure Data-At-Rest Encryption CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

What is the role of an external key management server (KMS) in NetApp encryption solutions?

Which NetApp technology provides data-at-rest encryption at the volume level in ONTAP?

Which ONTAP command displays the encryption status of a volume?

In ONTAP, how are encryption keys typically generated for data-at-rest encryption?

Keep studying — Cybersecurity Encryption