Configure Tamperproof Snapshots CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An administrator is setting up a new volume for a project that requires tamperproof snapshots. The administrator has already installed the SnapLock license. What is the next step to enable tamperproof snapshots on the volume?

   • AReboot the storage node to activate the SnapLock license.
   • BEnable SnapLock on the volume using the 'volume modify' command.
   • CCreate a snapshot policy with a SnapLock retention period and apply it to the volume.
   • DCreate a snapshot manually and then lock it using the 'snapshot lock' command.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company wants to protect against ransomware that encrypts data and deletes snapshots. The company needs to ensure that snapshots are retained for at least 14 days and cannot be deleted by an attacker. Which solution provides the required protection?

   • AEnable SnapLock compliance mode on the volume with a 14-day retention period.
   • BConfigure SnapMirror to replicate snapshots to a secondary site.
   • CUse a standard snapshot policy with a 14-day retention and restrict access to the volume.
   • DEnable volume encryption and rely on the encryption key to protect snapshots.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What happens to a tamperproof snapshot when its retention period expires?

   • AIt becomes eligible for deletion by an administrator
   • BIt is automatically deleted by the system
   • CIt becomes permanently locked and cannot be deleted
   • DIt is automatically converted to a regular snapshot
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security team needs to regularly confirm that tamperproof snapshots on a critical volume are still intact and have not been modified or deleted. Which monitoring approach is most effective?

   • AConfigure a script to run 'snapshot show -fields snaplock-expiry-time' and alert if any snapshot's expiry is missing or in the past.
   • BVerify that the volume is still online and accessible via NFS.
   • CCheck the SnapMirror relationship status to ensure replication is still active.
   • DReview the volume's performance metrics to check for unusual I/O activity.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What type of information should be reviewed when monitoring tamperproof snapshots for compliance?

   • AThe network throughput of the storage system
   • BThe number of active NFS clients
   • CThe total storage capacity of the aggregate
   • DThe lock status and remaining retention time of each snapshot
   Reveal Solution Discussion Select an answer first