Configure Domain Access Tunnel for AD Accounts CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is planning to use a domain access tunnel for AD authentication. The security team wants to ensure that the tunnel does not expose the storage system to the entire corporate network. What is a key characteristic of a domain access tunnel that addresses this concern?

   • AIt creates a secure, point-to-point connection only to the AD domain controllers
   • BIt uses a public IP address for the storage system
   • CIt requires the storage system to be joined to the domain
   • DIt uses a VPN to connect the storage network to the corporate network
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company wants to enable Active Directory authentication for its NetApp ONTAP storage systems. The storage network is isolated from the corporate network, and the AD domain controllers are only reachable through a secure channel. The administrator needs to allow AD account authentication without exposing the storage systems directly to the corporate network. What should the administrator configure?

   • AA firewall rule that allows LDAP traffic from the storage systems to the domain controllers
   • BA DNS zone transfer from the corporate DNS to the storage network
   • CA VPN connection between the storage network and the corporate network
   • DA domain access tunnel that establishes a secure connection from the storage system to the AD domain controllers
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator is preparing to configure a domain access tunnel for a NetApp cluster. The cluster is in a DMZ, and the AD domain controllers are in the internal network. The administrator has verified network connectivity and DNS resolution. However, the tunnel creation fails. Which prerequisite is most likely missing?

   • AA static IP address for the storage system
   • BA DNS server that supports SRV records
   • CA firewall rule that allows outbound HTTPS from the storage system
   • DA valid AD account with sufficient privileges to join the domain
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What information is typically required when creating a domain access tunnel for AD account authentication?

   • AThe MAC address of the storage system's network interface
   • BThe subnet mask of the management network
   • CThe IP address of the primary DNS server and the AD domain name
   • DThe serial number of the storage system
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What Active Directory requirement must be met before a domain access tunnel can be configured?

   • AThe storage system must have a computer account in the AD domain
   • BThe AD domain must be in Windows Server 2016 functional level or higher
   • CThe AD domain must have at least two domain controllers
   • DAll domain controllers must run the same operating system version
   Reveal Solution Discussion Select an answer first