Configure Tamperproof Snapshots CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is implementing ransomware protection and wants to ensure that an attacker who gains access to the storage administrator account cannot delete or modify snapshots used for recovery. Which characteristic of tamperproof snapshots addresses this concern?

   • ASnapshots are stored on a separate physical disk from the active data.
   • BSnapshots are automatically replicated to a different cluster for redundancy.
   • CSnapshots are locked using SnapLock, which prevents deletion or modification until the retention period expires.
   • DSnapshots are encrypted with a key that only the security team holds.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An administrator cannot delete a snapshot that has expired its retention period. What is the most likely reason?

   • AThe administrator does not have the 'snapshot delete' privilege
   • BThe compliance clock has not yet released the lock
   • CThe snapshot is on a read-only volume
   • DThe snapshot is still being accessed by a client
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of a tamperproof snapshot in a NetApp ransomware protection strategy?

   • ATo provide a read-only, immutable point-in-time copy that cannot be altered or deleted by an attacker
   • BTo compress data to reduce storage consumption on the volume
   • CTo automatically replicate data to an offsite location for disaster recovery
   • DTo provide a writable copy of the volume for testing and development
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which ONTAP feature can be used to monitor tamperproof snapshots for integrity and compliance?

   • AAutoSupport
   • BSnapCenter
   • CSnapMirror
   • DSnapLock Compliance Clock
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A hospital uses SnapLock compliance mode on a volume containing patient records, with a 90-day retention. A legitimate data correction requires deleting a snapshot that is 60 days old. The compliance officer confirms the data is no longer needed. What is the correct action?

   • AUse the 'snapshot delete' command with the '-force' flag to remove the snapshot immediately.
   • BConvert the volume to enterprise mode, delete the snapshot, then convert back to compliance mode.
   • CContact NetApp support to request an emergency deletion of the snapshot.
   • DWait until the 90-day retention period expires, then delete the snapshot normally.
   Reveal Solution Discussion Select an answer first