What is a common method to enable encryption in-flight for NFS data transfers on a NetApp storage system?

Set the NFS export option 'secure'

Enable the 'encrypt' flag on the NFS export

Use FTP over SSL (FTPS) for NFS mounts

Enable Kerberos for NFS with privacy (krb5p) security

Which protocol is used to provide encryption in-flight for iSCSI traffic on NetApp storage systems?

IPsec (Internet Protocol Security)

Where should encryption keys be stored to ensure their security and availability?

On a USB drive kept with the storage administrator

In a dedicated key management server (KMS) with access controls and backups

In the system's memory cache for quick access

On the same storage system as the encrypted data, in a plain text file

A storage administrator is enabling NetApp Volume Encryption (NVE) on a cluster that uses an external key management server (KMS). The administrator wants to verify that the encryption is working correctly. Which command should be used to verify that a specific volume is encrypted?

security key-manager external show

volume encryption show -volume vol_name

storage aggregate show -fields encryption

What is the purpose of regularly rotating encryption keys in a storage system?

To improve the performance of encryption and decryption operations

To ensure that old keys are deleted immediately after rotation

To limit the amount of data encrypted with a single key, reducing the impact of a key compromise

To comply with the requirement that all keys be changed daily

NetAppCertified Cyber Resiliency Expert

Domain 5Objective 6

Deploy and Configure Encryption At-Rest and In-Flight Solutions CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 2)

Part of the Cybersecurity Common Issues domain, which accounts for 18% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

6concepts

18%of the exam

Questions 6–10

6foundation · medium
What is a common method to enable encryption in-flight for NFS data transfers on a NetApp storage system?
Select an answer first
7foundation · medium
Which protocol is used to provide encryption in-flight for iSCSI traffic on NetApp storage systems?
Select an answer first
8foundation · medium
Where should encryption keys be stored to ensure their security and availability?
Select an answer first
9expert · hard
A storage administrator is enabling NetApp Volume Encryption (NVE) on a cluster that uses an external key management server (KMS). The administrator wants to verify that the encryption is working correctly. Which command should be used to verify that a specific volume is encrypted?
Select an answer first
10foundation · medium
What is the purpose of regularly rotating encryption keys in a storage system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.