An organization wants to use WebAuthn security keys for MFA when administrators access System Manager. They have a mix of local users and users who authenticate via Active Directory. The security policy requires MFA for all administrative actions, but not for read-only monitoring. What should the administrator configure?

Enable WebAuthn for local users only, and require AD users to use a separate MFA method.

Configure an MFA policy that requires MFA for all users, and then disable read-only access for all users.

Enable WebAuthn and require MFA for all users, but allow a bypass for users on the corporate network.

Enable WebAuthn for all users and configure an MFA policy that requires MFA for administrative actions only.

What is the purpose of the SAML metadata exchange when configuring System Manager with an external identity provider?

To configure which MFA methods are available to users

To exchange certificates and endpoints so both sides can trust and route SAML messages

To establish a shared secret for encrypting all user passwords

To synchronize user accounts between System Manager and the IdP

Which scenario would an MFA enforcement policy typically be used to address?

Encrypting all data stored on the cluster

Requiring administrators to use MFA for every System Manager login

Automatically resetting a user's password after a failed login attempt

Blocking all users from logging in after business hours

In WebAuthn-based MFA for System Manager, what is the role of a security key during user registration?

It creates a public/private key pair and stores the private key on the device

It stores the user's password for automatic login

It sends an SMS code to the user's phone

It generates a time-based one-time password (TOTP) that the user enters each time

After configuring WebAuthn for MFA, a user reports that they are not prompted for MFA when logging in to System Manager. The user has registered a security key. What is the most likely cause?

The System Manager server is not configured to support WebAuthn.

The MFA policy is not configured to require MFA for the user's role.

The user is accessing System Manager from a trusted network, so MFA is bypassed.

The user's security key is not recognized by the browser.

NetAppCertified Cyber Resiliency Expert

Domain 7Objective 2

Configure MFA for System Manager with SAML or WebAuthn CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Part of the Cybersecurity Identity and Access Management and Authentication domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 12 practice questions to prepare you well beyond it. (estimate)

12questions here

3free pages

4concepts

13%of the exam

Questions 1–5

1application · medium
An organization wants to use WebAuthn security keys for MFA when administrators access System Manager. They have a mix of local users and users who authenticate via Active Directory. The security policy requires MFA for all administrative actions, but not for read-only monitoring. What should the administrator configure?
Select an answer first
2foundation · easy
What is the purpose of the SAML metadata exchange when configuring System Manager with an external identity provider?
Select an answer first
3foundation · easy
Which scenario would an MFA enforcement policy typically be used to address?
Select an answer first
4foundation · easy
In WebAuthn-based MFA for System Manager, what is the role of a security key during user registration?
Select an answer first
5expert · hard
After configuring WebAuthn for MFA, a user reports that they are not prompted for MFA when logging in to System Manager. The user has registered a security key. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.