A university IT team is configuring NVE on their ONTAP cluster. They have an external key management server (KMS) that supports KMIP. The security policy requires that encryption keys be stored outside the storage system and that the cluster cannot boot without contacting the KMS. What must the administrator configure to meet this requirement?

Store the keys on a USB drive attached to the controller

Use ONTAP's onboard key management (OKM)

Configure the cluster to use the external KMIP server for key management

Enable NSE on the drives and use the drive's internal key

A company is configuring NAE on their ONTAP cluster. They have two KMIP servers for redundancy. The security policy requires that the cluster be able to access encrypted data even if one KMIP server fails. What should the administrator configure?

Configure both KMIP servers in the cluster's key management configuration

Configure only one KMIP server to avoid complexity

Use ONTAP's onboard key management (OKM) as a backup

Store a copy of the keys on a local disk

What is a potential performance implication of using software-based encryption like NVE or NAE compared to hardware-based NSE?

Software-based encryption is always faster than hardware-based encryption.

Software-based encryption can increase CPU usage on the storage controller.

Hardware-based encryption always reduces performance.

Software-based encryption has no performance impact.

An administrator needs to enable encryption for all data at rest on a new aggregate. Which NetApp feature is designed to encrypt data at the aggregate level?

NetApp Aggregate Encryption (NAE)

NetApp Storage Encryption (NSE)

NetAppCertified Cyber Resiliency Expert

Domain 6Objective 2

Configure NAE, NVE, and NSE (SEDs) for Encryption at Rest CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Part of the Cybersecurity Encryption domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

5concepts

13%of the exam

Questions 11–15

11application · medium
A university IT team is configuring NVE on their ONTAP cluster. They have an external key management server (KMS) that supports KMIP. The security policy requires that encryption keys be stored outside the storage system and that the cluster cannot boot without contacting the KMS. What must the administrator configure to meet this requirement?
Select an answer first
12application · medium
A company is configuring NAE on their ONTAP cluster. They have two KMIP servers for redundancy. The security policy requires that the cluster be able to access encrypted data even if one KMIP server fails. What should the administrator configure?
Select an answer first
13foundation · easy
What is a potential performance implication of using software-based encryption like NVE or NAE compared to hardware-based NSE?
Select an answer first
14foundation · easy
An administrator needs to enable encryption for all data at rest on a new aggregate. Which NetApp feature is designed to encrypt data at the aggregate level?
Select an answer first
15foundation · easy
Which protocol is commonly used by NetApp ONTAP to communicate with an external key management server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.

Configure NAE, NVE, and NSE (SEDs) for Encryption at Rest CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

A company is configuring NAE on their ONTAP cluster. They have two KMIP servers for redundancy. The security policy requires that the cluster be able to access encrypted data even if one KMIP server fails. What should the administrator configure?

What is a potential performance implication of using software-based encryption like NVE or NAE compared to hardware-based NSE?

An administrator needs to enable encryption for all data at rest on a new aggregate. Which NetApp feature is designed to encrypt data at the aggregate level?

Which protocol is commonly used by NetApp ONTAP to communicate with an external key management server?

Keep studying — Cybersecurity Encryption