Configure Immutable or Indelible Backups CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does NetApp SnapLock enforce data immutability on a volume?

   • ABy using a filesystem that marks files as read-only after they are committed
   • BBy replicating data to a separate cluster that is isolated from the production network
   • CBy encrypting all data at rest with a customer-managed key
   • DBy preventing any write operations after the initial data is stored
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A storage administrator is explaining the difference between SnapLock and other immutability features to a colleague. Which statement correctly contrasts SnapLock with other methods?

   • ASnapLock provides WORM protection at the file level, while other methods like access control lists only restrict access.
   • BSnapLock provides encryption, while other methods like checksums provide integrity.
   • CSnapLock provides immutability at the volume level, while other methods like SnapVault provide immutability at the file level.
   • DSnapLock provides immutability only for snapshots, while other methods like SnapMirror provide immutability for all data.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which NetApp technology provides data immutability by enforcing WORM (write-once-read-many) behavior on volumes?

   • ASnapMirror
   • BSnapVault
   • CSnapCenter
   • DSnapLock
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of a legal hold on an immutable backup?

   • ATo replicate the backup to a different geographic region
   • BTo allow administrators to modify the backup data if needed
   • CTo compress the backup data to save storage space
   • DTo extend the retention period indefinitely to preserve data for legal or compliance requirements
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A healthcare organization uses SnapMirror to replicate backup data to a secondary site. They want to ensure that even if the primary site is compromised, the replicated copies cannot be altered or deleted by ransomware. Which configuration provides this protection?

   • AConfigure the source volume as a SnapLock volume and replicate to a standard destination volume.
   • BEnable SnapMirror's 'network compression' option on the destination volume.
   • CUse SnapMirror with a manual update schedule and no SnapLock on the destination.
   • DConfigure the destination volume as a SnapLock volume and use SnapMirror to replicate into it.
   Reveal Solution Discussion Select an answer first