A storage administrator needs to enforce MFA for SSH access to a NetApp ONTAP cluster. The organization already uses an external RADIUS server for network authentication. The administrator wants to minimize changes to the existing authentication infrastructure while ensuring that SSH logins require both a password and a one-time code. What should the administrator configure?

Set up a new LDAP server dedicated to SSH authentication and require a smart card

Enable SSH MFA in ONTAP and configure the external RADIUS server as the primary authentication method

Disable password authentication and rely solely on SSH keys for all admin access

Configure SSH to use local user accounts with a one-time password generated by ONTAP

A storage administrator is explaining MFA for SSH and SP access to a new team member. The administrator wants to clarify the difference between SSH and SP access in the context of MFA. What is the key difference?

SSH is used for management access, while SP is used for storage protocol access; MFA can be configured independently for each

SSH MFA requires a hardware token, while SP MFA uses a mobile app

SSH uses RADIUS for MFA, while SP uses LDAP

SSH MFA is enabled by default, while SP MFA must be manually configured

Which components are typically involved in a multifactor authentication (MFA) solution for SSH access to a NetApp storage system?

IP address, MAC address, and hostname of the client

Username, password, and the storage system's serial number

Username, password, and a one-time passcode generated by an authenticator app

SSH key, certificate, and a password

When configuring MFA for SSH access on a NetApp storage system, which administrative interface is used to enable the MFA settings?

The storage array's out-of-band management controller (e.g., BMC)

The system's BIOS setup utility

The ONTAP command-line interface (CLI) or System Manager

The Windows Active Directory Users and Computers console

When troubleshooting MFA for SP access, which step should you take first if the SP login fails?

Verify that the SP is reachable over the network

NetAppCertified Cyber Resiliency Expert

Domain 7Objective 1

Configure Multifactor Authentication (MFA) for SSH/SP CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 4)

Part of the Cybersecurity Identity and Access Management and Authentication domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

13%of the exam

Questions 16–20

16application · medium
A storage administrator needs to enforce MFA for SSH access to a NetApp ONTAP cluster. The organization already uses an external RADIUS server for network authentication. The administrator wants to minimize changes to the existing authentication infrastructure while ensuring that SSH logins require both a password and a one-time code. What should the administrator configure?
Select an answer first
17application · medium
A storage administrator is explaining MFA for SSH and SP access to a new team member. The administrator wants to clarify the difference between SSH and SP access in the context of MFA. What is the key difference?
Select an answer first
18foundation · easy
Which components are typically involved in a multifactor authentication (MFA) solution for SSH access to a NetApp storage system?
Select an answer first
19foundation · easy
When configuring MFA for SSH access on a NetApp storage system, which administrative interface is used to enable the MFA settings?
Select an answer first
20foundation · easy
When troubleshooting MFA for SP access, which step should you take first if the SP login fails?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.