In a NetApp snapshot policy, which setting is used to enable tamperproof retention for a snapshot?

The 'snapshot-lock' parameter set to 'true'

The 'tamperproof' parameter set to 'enabled'

The 'snapmirror-label' parameter set to a value that matches a SnapLock retention rule

The 'retention' parameter set to 'locked'

A company is designing a ransomware recovery strategy and wants to ensure that snapshots cannot be deleted by an attacker who compromises the storage administrator account. The company also needs to retain snapshots for 60 days. Which combination of features provides the required protection?

SnapMirror replication to a secondary site with a 60-day retention.

SnapLock enterprise mode with a 60-day retention period.

Standard snapshot policy with a 60-day retention and volume encryption.

SnapLock compliance mode with a 60-day retention period.

An administrator has enabled SnapLock on a new volume and created a snapshot policy with a 7-day retention. After the first scheduled snapshot is created, the administrator wants to confirm that the snapshot is actually protected from deletion. Which verification step is most appropriate?

Attempt to delete the snapshot and observe whether the operation is rejected.

Use 'snapshot show -fields snapmirror-label' to confirm the snapshot has a valid label.

Run 'snapmirror show' to check the replication status of the volume.

Run 'snapshot show -fields snaplock-expiry-time' to confirm the expiry time is set and in the future.

Which ONTAP command displays the lock status and retention period of a snapshot?

snapshot show -vserver ... -volume ... -fields lock,retention

volume show -vserver ... -volume ... -fields snapshot-lock

volume snapshot show -fields lock-status,retention

volume snapshot show -vserver ... -volume ... -fields lock-status,retention

A financial services firm must retain nightly snapshots of a critical volume for 30 days in a way that prevents an attacker with administrative credentials from deleting them. The volume currently uses a standard snapshot policy with a 30-day retention. Which configuration change meets the requirement?

Enable the volume's built-in snapshot lock feature and set the retention to 30 days in the existing policy.

Apply a SnapLock enterprise mode policy to the volume with a 30-day retention period.

Modify the existing snapshot policy to set the retention period to 30 days and enable the 'tamperproof' flag on the volume.

Create a new snapshot policy with SnapLock compliance mode and a retention period of 30 days, then apply it to the volume.

NetAppCertified Cyber Resiliency Expert

Domain 1Objective 5

Configure Tamperproof Snapshots CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 5)

Part of the Ransomware Protection and Detection domain, which accounts for 18% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

18%of the exam

8 Concepts in This Objective

Tamperproof snapshot fundamentals
Snapshot locking mechanisms
Configuring snapshot policies for tamperproofing
Enabling tamperproof snapshots on volumes
Verifying tamperproof snapshot configuration
Managing tamperproof snapshot retention
Monitoring tamperproof snapshots
Troubleshooting tamperproof snapshot issues

Questions 21–25

21foundation · easy
In a NetApp snapshot policy, which setting is used to enable tamperproof retention for a snapshot?
Select an answer first
22application · medium
A company is designing a ransomware recovery strategy and wants to ensure that snapshots cannot be deleted by an attacker who compromises the storage administrator account. The company also needs to retain snapshots for 60 days. Which combination of features provides the required protection?
Select an answer first
23application · medium
An administrator has enabled SnapLock on a new volume and created a snapshot policy with a 7-day retention. After the first scheduled snapshot is created, the administrator wants to confirm that the snapshot is actually protected from deletion. Which verification step is most appropriate?
Select an answer first
24foundation · easy
Which ONTAP command displays the lock status and retention period of a snapshot?
Select an answer first
25application · medium
A financial services firm must retain nightly snapshots of a critical volume for 30 days in a way that prevents an attacker with administrative credentials from deleting them. The volume currently uses a standard snapshot policy with a 30-day retention. Which configuration change meets the requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.