Configure Immutable or Indelible Backups CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 5)

Questions 21–22

1. 21expert · hard

   A security analyst suspects that a backup file on a SnapLock volume may have been tampered with, despite the volume being in compliance mode. What is the most likely explanation?

   • AThe file was modified by a privileged administrator using a backdoor.
   • BThe volume was accidentally set to enterprise mode instead of compliance mode.
   • CThe file was never committed to WORM state, so it remained mutable.
   • DThe retention period had expired, allowing modification.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team wants to monitor the immutability status of their SnapLock volumes to ensure that no backups have been tampered with. Which approach provides the most comprehensive monitoring?

   • AUse the 'volume show' command to check if the volume is online.
   • BUse NetApp Active IQ to monitor SnapLock volume health and receive alerts on any WORM violations.
   • CEnable SnapMirror to a second SnapLock volume and compare the data.
   • DPeriodically run 'snap lock show' manually and review the output.
   Reveal Solution Discussion Select an answer first