After configuring MFA for SSH access, an administrator wants to verify that the configuration is working as expected. The administrator has already checked the MFA configuration and it appears correct. What is the next best step to verify that MFA is actually enforced?

Review the RADIUS server configuration to ensure it is correct

Check the ONTAP audit logs for MFA-related events

Perform a test SSH login with a user account that has MFA enabled and confirm that a second factor is prompted

Run the 'security login mfa show' command again to confirm the setting

A company is planning to implement MFA for SSH and SP access to its NetApp systems. The security team wants to understand the components involved. Which of the following components are required for MFA to work in a NetApp environment?

A local user database and a one-time password generator

A RADIUS server and a second-factor provider (e.g., a token or mobile app)

A certificate authority and SSH keys

An LDAP server and a smart card reader

Which ONTAP command is used to configure multifactor authentication for SSH access?

system services firewall policy create

An organization has configured MFA for both SSH and SP access on its NetApp systems. After a recent change to the RADIUS server, all MFA logins fail. The administrator has confirmed that the RADIUS server is reachable and the shared secret is correct. The administrator suspects that the RADIUS server is not sending the expected challenge response. What should the administrator do to resolve this issue?

Switch to a different RADIUS server that supports the required challenge type

Change the shared secret on the ONTAP cluster to match the RADIUS server

Disable and re-enable MFA on the ONTAP cluster to reset the configuration

Review the RADIUS server logs to see if the challenge response is being sent and check the ONTAP configuration for the correct challenge type

A user reports that SSH login fails after MFA was enabled. What is a common cause of this issue?

The user's SSH client does not support the MFA method (e.g., OTP prompt)

The storage system's IP address changed

The storage system is low on disk space

NetAppCertified Cyber Resiliency Expert

Domain 7Objective 1

Configure Multifactor Authentication (MFA) for SSH/SP CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 2)

Part of the Cybersecurity Identity and Access Management and Authentication domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

13%of the exam

Questions 6–10

6application · medium
After configuring MFA for SSH access, an administrator wants to verify that the configuration is working as expected. The administrator has already checked the MFA configuration and it appears correct. What is the next best step to verify that MFA is actually enforced?
Select an answer first
7application · medium
A company is planning to implement MFA for SSH and SP access to its NetApp systems. The security team wants to understand the components involved. Which of the following components are required for MFA to work in a NetApp environment?
Select an answer first
8foundation · easy
Which ONTAP command is used to configure multifactor authentication for SSH access?
Select an answer first
9expert · hard
An organization has configured MFA for both SSH and SP access on its NetApp systems. After a recent change to the RADIUS server, all MFA logins fail. The administrator has confirmed that the RADIUS server is reachable and the shared secret is correct. The administrator suspects that the RADIUS server is not sending the expected challenge response. What should the administrator do to resolve this issue?
Select an answer first
10foundation · easy
A user reports that SSH login fails after MFA was enabled. What is a common cause of this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.