An administrator is setting up a domain access tunnel for a NetApp SVM. The AD domain controllers are in a different subnet, and the administrator has confirmed that the SVM can ping the domain controllers. However, the tunnel creation fails with an error about 'DNS resolution'. What is the most likely cause?

The AD account used for the tunnel has insufficient privileges

The domain controllers are not reachable on the required ports

The SVM's DNS servers are not configured or are unreachable

The SVM does not have a valid time source

An administrator is configuring a domain access tunnel for a NetApp SVM. The SVM is in a network that uses a firewall that only allows specific ports. The administrator has verified that DNS is working. However, the tunnel creation fails. Which of the following is a likely cause?

The firewall is blocking the required ports for AD authentication (e.g., 389, 445, 88)

The SVM does not have a static IP address

The AD domain is not reachable via ping

The SVM's time is not synchronized

A domain access tunnel is configured, but AD users cannot authenticate. The tunnel status shows 'up'. The administrator has verified DNS, time synchronization, and the AD account. What is a possible cause that the administrator should investigate next?

The SVM's network interface is down

The SVM's DNS servers are not reachable

The SVM's time is not synchronized

The SVM's LDAP configuration is using an incorrect base DN

What is the primary purpose of a domain access tunnel in a NetApp storage environment?

To provide a direct physical connection between the storage system and each domain controller

To provide a secure, encrypted path for AD authentication traffic between the storage system and domain controllers

To create a dedicated VLAN for all storage data traffic

To replace the need for DNS resolution in the storage environment

An administrator is configuring a domain access tunnel and needs to ensure that the SVM can locate the AD domain controllers. What must be configured on the SVM?

A firewall rule to allow LDAP traffic

DNS servers that can resolve the AD domain

A time server for synchronization

A static route to the domain controllers

NetAppCertified Cyber Resiliency Expert

Domain 7Objective 4

Configure Domain Access Tunnel for AD Accounts CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Part of the Cybersecurity Identity and Access Management and Authentication domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

5concepts

13%of the exam

Questions 1–5

1application · medium
An administrator is setting up a domain access tunnel for a NetApp SVM. The AD domain controllers are in a different subnet, and the administrator has confirmed that the SVM can ping the domain controllers. However, the tunnel creation fails with an error about 'DNS resolution'. What is the most likely cause?
Select an answer first
2expert · hard
An administrator is configuring a domain access tunnel for a NetApp SVM. The SVM is in a network that uses a firewall that only allows specific ports. The administrator has verified that DNS is working. However, the tunnel creation fails. Which of the following is a likely cause?
Select an answer first
3expert · hard
A domain access tunnel is configured, but AD users cannot authenticate. The tunnel status shows 'up'. The administrator has verified DNS, time synchronization, and the AD account. What is a possible cause that the administrator should investigate next?
Select an answer first
4foundation · easy
What is the primary purpose of a domain access tunnel in a NetApp storage environment?
Select an answer first
5application · medium
An administrator is configuring a domain access tunnel and needs to ensure that the SVM can locate the AD domain controllers. What must be configured on the SVM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.