What is the purpose of defining a 'snapmirror-label' in a snapshot policy when configuring tamperproofing?

To identify the owner of the snapshot for auditing purposes

To determine the frequency of snapshot creation

To specify the storage tier where the snapshot should be placed

To link snapshots to a SnapLock retention rule that enforces the lock

A company uses SnapLock enterprise mode on a volume with a 30-day retention. A ransomware attack occurs, and the company needs to restore data from a snapshot that is 20 days old. However, the administrator accidentally deleted the snapshot. What is the most likely reason the deletion was allowed?

The snapshot policy was not applied to the volume.

Enterprise mode allows administrators to delete locked snapshots before expiry.

The SnapLock license expired, disabling the lock feature.

The snapshot was not yet locked because the retention period had not started.

A storage administrator is explaining SnapLock to a new team member. The administrator needs to describe the key difference between compliance mode and enterprise mode. Which statement is accurate?

Compliance mode prevents deletion before expiry even by administrators, while enterprise mode allows administrative override.

Enterprise mode is used for regulatory compliance, while compliance mode is used for internal protection.

Compliance mode allows administrators to delete locked snapshots before expiry, while enterprise mode does not.

Both modes provide identical protection, but compliance mode requires a separate license.

After configuring SnapLock on a volume, an administrator wants to verify that the configuration is correct and that future snapshots will be automatically locked. Which command or check provides the most comprehensive verification?

Run 'snapshot policy show' to confirm the policy includes a SnapLock retention period and is applied to the volume.

Run 'snapmirror show' to confirm the volume is replicated to a secondary site.

Run 'volume show -fields snaplock-type' to confirm the volume is in compliance or enterprise mode.

Run 'snapshot show' and check that the 'snaplock-expiry-time' field is populated for existing snapshots.

A legal team requires that a specific snapshot be retained for 5 years for a lawsuit. The volume uses SnapLock compliance mode with a 30-day retention. The administrator needs to extend the retention of this single snapshot to 5 years. What is the correct action?

Delete the snapshot and recreate it with a 5-year retention policy.

Convert the volume to enterprise mode, extend the retention, and convert back to compliance mode.

Modify the snapshot policy to a 5-year retention and apply it to the volume.

Use the 'snapshot modify' command to set the snaplock-expiry-time to 5 years from now.

NetAppCertified Cyber Resiliency Expert

Domain 1Objective 5

Configure Tamperproof Snapshots CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Part of the Ransomware Protection and Detection domain, which accounts for 18% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

18%of the exam

8 Concepts in This Objective

Tamperproof snapshot fundamentals
Snapshot locking mechanisms
Configuring snapshot policies for tamperproofing
Enabling tamperproof snapshots on volumes
Verifying tamperproof snapshot configuration
Managing tamperproof snapshot retention
Monitoring tamperproof snapshots
Troubleshooting tamperproof snapshot issues

Questions 11–15

11foundation · easy
What is the purpose of defining a 'snapmirror-label' in a snapshot policy when configuring tamperproofing?
Select an answer first
12expert · hard
A company uses SnapLock enterprise mode on a volume with a 30-day retention. A ransomware attack occurs, and the company needs to restore data from a snapshot that is 20 days old. However, the administrator accidentally deleted the snapshot. What is the most likely reason the deletion was allowed?
Select an answer first
13application · medium
A storage administrator is explaining SnapLock to a new team member. The administrator needs to describe the key difference between compliance mode and enterprise mode. Which statement is accurate?
Select an answer first
14application · medium
After configuring SnapLock on a volume, an administrator wants to verify that the configuration is correct and that future snapshots will be automatically locked. Which command or check provides the most comprehensive verification?
Select an answer first
15expert · hard
A legal team requires that a specific snapshot be retained for 5 years for a lawsuit. The volume uses SnapLock compliance mode with a 30-day retention. The administrator needs to extend the retention of this single snapshot to 5 years. What is the correct action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.