An organization wants to enforce MFA for Storage Protocol (SP) access to its NetApp systems. The storage team uses a RADIUS server for network authentication. The security policy requires that all SP access, including from management workstations, be protected by MFA. What should the administrator configure?

Use SSH keys for SP access and require a passphrase

Disable SP access and use only SSH for management

Restrict SP access to a specific IP range and use a strong password

Enable MFA for SP access and configure the RADIUS server as the authentication source

An organization has configured MFA for SSH and SP access on its NetApp systems. After a recent network change, some users can log in via SSH with MFA, but SP access fails with MFA. The administrator has verified that the RADIUS server is reachable from the SP. What is the most likely cause of this issue?

The SP is configured with a different RADIUS server or shared secret than SSH

The SP is not reachable from the RADIUS server

The SP access method is not supported by the RADIUS server

The SSH MFA configuration is interfering with SP MFA

What is a practical way to verify that MFA is enforced for SSH access to a NetApp system?

Ping the storage system's IP address

Attempt an SSH login and confirm that a second authentication factor is requested

A company is implementing MFA for SSH access to its NetApp storage systems. The security team requires that administrators use a hardware token that generates a one-time code. The storage team wants to avoid deploying a separate RADIUS server. What is the most appropriate way to meet both requirements?

Use ONTAP's built-in MFA support with a RADIUS server that the hardware token vendor provides

Use a local user account with a one-time password generated by ONTAP

Configure SSH keys for each administrator and require the hardware token for initial login

Enable MFA in ONTAP and use the hardware token directly as the SSH authentication method

NetAppCertified Cyber Resiliency Expert

Domain 7Objective 1

Configure Multifactor Authentication (MFA) for SSH/SP CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Part of the Cybersecurity Identity and Access Management and Authentication domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

13%of the exam

Questions 11–15

11foundation · easy
Which ONTAP command can be used to verify that MFA is enabled for SSH access?
Select an answer first
12application · medium
An organization wants to enforce MFA for Storage Protocol (SP) access to its NetApp systems. The storage team uses a RADIUS server for network authentication. The security policy requires that all SP access, including from management workstations, be protected by MFA. What should the administrator configure?
Select an answer first
13expert · hard
An organization has configured MFA for SSH and SP access on its NetApp systems. After a recent network change, some users can log in via SSH with MFA, but SP access fails with MFA. The administrator has verified that the RADIUS server is reachable from the SP. What is the most likely cause of this issue?
Select an answer first
14foundation · easy
What is a practical way to verify that MFA is enforced for SSH access to a NetApp system?
Select an answer first
15application · medium
A company is implementing MFA for SSH access to its NetApp storage systems. The security team requires that administrators use a hardware token that generates a one-time code. The storage team wants to avoid deploying a separate RADIUS server. What is the most appropriate way to meet both requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.

Configure Multifactor Authentication (MFA) for SSH/SP CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

Which ONTAP command can be used to verify that MFA is enabled for SSH access?

What is a practical way to verify that MFA is enforced for SSH access to a NetApp system?

Keep studying — Cybersecurity Identity and Access Management and Authentication