Configure Multi-Admin Verification (MAV) Groups and Rules CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   A security team wants to protect the 'volume create' command with MAV, but they also want to allow a specific set of administrators to create volumes without approval. They have created a MAV group named 'volume-creators' with a required approvers of 2 and assigned a rule that includes 'volume create'. What is the best way to allow the specific administrators to bypass MAV?

   • AUse a different command, such as 'volume create -vserver', to avoid MAV.
   • BRemove the specific administrators from the MAV group.
   • CMAV does not support per-user bypass; all administrators are subject to the rule.
   • DCreate a second MAV group with a required approvers of 1 and assign the rule to that group as well.
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   In the MAV approval workflow, what is the role of an approver?

   • ATo configure the MAV rules for the group.
   • BTo execute the operation immediately without any review.
   • CTo monitor system performance and alert on anomalies.
   • DTo review and approve or reject a pending MAV-protected operation.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company's security policy requires that any change to the cluster's SVM configuration be approved by at least two administrators. The storage team has five administrators, but the team lead wants to ensure that the two approvers are not from the same functional team to avoid collusion. What is the best way to achieve this with MAV?

   • ACreate a MAV rule that specifies the SVM commands and assign it to the group with the highest number of administrators.
   • BCreate a single MAV group with all five administrators and set the required approvers to 2.
   • CUse the 'security multi-admin-verify modify' command to require approvers from different IP addresses.
   • DCreate two MAV groups, each containing administrators from different functional teams, and assign the same rule to both groups.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An administrator attempts to delete a Snapshot copy, but the command is blocked because it is protected by a MAV rule. The administrator receives a request ID and a message indicating that approval is pending. What is the correct next step for the administrator to have the operation executed?

   • AUse the 'security multi-admin-verify request approve' command to self-approve the request.
   • BRe-run the command with the 'force' option to bypass MAV.
   • CDelete the MAV rule temporarily and then run the command.
   • DWait for the required number of approvers to approve the pending request, then re-run the original command.
   Reveal Solution Discussion Select an answer first
6. 15foundation · medium

   What is the primary purpose of a multi-admin verification (MAV) group in NetApp ONTAP?

   • ATo provide a single sign-on mechanism for administrators accessing ONTAP clusters.
   • BTo automatically replicate configuration changes across multiple clusters in a cluster peering relationship.
   • CTo define a set of administrators whose combined approval is required before certain administrative operations can be executed.
   • DTo group storage virtual machines (SVMs) for simplified management of data protection policies.
   Reveal Solution Discussion Select an answer first