Configure Data Infrastructure Insights SWS CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which configuration in Data Infrastructure Insights SWS allows administrators to control which events trigger alerts?

   • AThe number of concurrent users accessing the SWS portal
   • BThe data collection interval for performance metrics
   • CThe storage system's hostname resolution settings
   • DAlert rules that define conditions and thresholds
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An administrator is configuring Data Infrastructure Insights SWS for a NetApp environment. The administrator wants to ensure that SWS collects data from both ONTAP and Cloud Volumes ONTAP systems. The administrator also wants to set up alerts for suspicious activity on both types of systems. What should the administrator do to ensure SWS can monitor both types of systems?

   • AAdd only the ONTAP systems to SWS, as Cloud Volumes ONTAP is not supported.
   • BInstall a separate SWS instance for each type of system.
   • CAdd only the Cloud Volumes ONTAP systems to SWS, as ONTAP is not supported.
   • DAdd both ONTAP and Cloud Volumes ONTAP systems as data sources in SWS.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When interpreting an SWS report, which pattern would most likely indicate a ransomware attack?

   • AA consistent pattern of read-only access from a single user account
   • BA steady, gradual increase in storage capacity usage over several months
   • CA sudden, widespread increase in file modifications or deletions across multiple volumes
   • DA periodic spike in CPU usage on the storage controller
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In Data Infrastructure Insights SWS, what is the purpose of setting up an alert for 'unusual data deletion activity'?

   • ATo generate a report of all deleted files for compliance purposes
   • BTo block all delete operations on the storage system
   • CTo notify administrators when deletion rates exceed normal baselines, which could indicate ransomware encryption or destruction
   • DTo automatically restore deleted files from backup
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst is reviewing a SWS report for a NetApp environment and notices a high number of file encryption events on a volume. The analyst wants to determine if this is a ransomware attack or a legitimate encryption process. Which report data should the analyst examine to make this determination?

   • AThe report's summary of total file encryption events.
   • BThe report's list of alerts triggered during the time period.
   • CThe report's performance metrics for the volume.
   • DThe report's breakdown of file encryption events by user and file path.
   Reveal Solution Discussion Select an answer first