Configure Multifactor Authentication (MFA) for SSH/SP CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A user reports that they cannot complete SSH login with MFA enabled. The user enters their password and then the one-time code, but the login fails. The administrator has verified that the RADIUS server is reachable and the shared secret is correct. What is the most likely cause of the failure?

   • AThe user's one-time code has expired or was already used
   • BThe user's SSH client does not support MFA
   • CThe user's account is locked due to multiple failed attempts
   • DThe RADIUS server is configured with the wrong authentication protocol
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   An organization is implementing MFA for SP access to its NetApp systems. The security team requires that MFA be enforced for all SP access, but the storage team wants to allow monitoring tools to access the SP without MFA for automated checks. What is the best way to achieve this?

   • AConfigure the monitoring tools to use a different authentication method that bypasses MFA
   • BCreate a separate role for the monitoring tools that does not have MFA enabled
   • CUse a shared service account with MFA disabled
   • DDisable MFA for SP access and rely on network segmentation
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security auditor is reviewing the authentication mechanisms for a NetApp storage environment. The auditor notes that SSH and SP access currently require only a password. The auditor recommends implementing MFA to meet compliance requirements. What is the primary purpose of implementing MFA for SSH and SP access?

   • ATo replace password authentication with a more secure method
   • BTo enable single sign-on across multiple storage systems
   • CTo add a second authentication factor, reducing the risk of unauthorized access if a password is compromised
   • DTo simplify the login process for administrators
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is planning to enforce MFA for SSH access to its NetApp storage systems. The security team requires that MFA be enforced for all administrative users, but the storage team wants to allow a break-glass account to bypass MFA in case of an emergency. How should the administrator configure this?

   • ACreate a separate role for the break-glass account that does not have MFA enabled
   • BUse a local user account for the break-glass account and enable MFA for all other users
   • CConfigure the break-glass account to use a different RADIUS server that does not require MFA
   • DDisable MFA globally and rely on strong passwords for all accounts
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   After enabling MFA for SP access on a NetApp system, an administrator notices that some users are still able to access the SP without being prompted for a second factor. The administrator has confirmed that the RADIUS server is functioning correctly. What should the administrator check next?

   • ACheck if the users are using a supported SSH client
   • BVerify that the users are assigned to a role that has MFA enabled
   • CConfirm that the SP is not in a maintenance mode
   • DEnsure that the SP is configured to use LDAP instead of RADIUS
   Reveal Solution Discussion Select an answer first