Deploy and Configure Encryption At-Rest and In-Flight Solutions CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · medium

   In an encryption at-rest solution, what is the role of a key management system (KMS)?

   • ATo encrypt and decrypt data as it is written to and read from the storage medium
   • BTo generate, store, and manage the encryption keys used to encrypt and decrypt data
   • CTo monitor network traffic for unauthorized access attempts
   • DTo compress data before encryption to save storage space
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A financial services firm is deploying a new NetApp AFF system for a workload that must meet PCI-DSS requirements for encryption at-rest. The security team mandates that encryption keys be stored externally and that the storage system cannot access the key server if the key management appliance is offline. The storage administrator enables NetApp Volume Encryption (NVE) and configures an external key management server (KMS). During a maintenance window, the KMS is taken offline for an upgrade. What is the immediate impact on the encrypted volumes?

   • AThe volumes become completely inaccessible, and the cluster halts all I/O to prevent data exposure.
   • BThe volumes remain accessible for read/write operations, but new volume creation and key re-wrapping operations fail until the KMS is reachable.
   • CThe volumes remain fully accessible, and key management operations continue using a locally stored backup of the keys.
   • DThe volumes become read-only, and all write operations are blocked until the KMS is restored.
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   What is the purpose of compliance standards like PCI DSS in relation to encryption?

   • ATo provide a framework for IT service management
   • BTo ensure that all data is encrypted regardless of its sensitivity
   • CTo mandate encryption of cardholder data when stored or transmitted over public networks
   • DTo regulate the use of encryption algorithms in commercial software
   Reveal Solution Discussion Select an answer first
5. 14foundation · medium

   What is the first step to enable encryption at-rest on a NetApp storage system using NetApp Volume Encryption (NVE)?

   • ACreate a new volume and select the 'encrypt' option during creation
   • BEnable the 'encrypt' flag on the aggregate
   • CConfigure an external key management server (KMS) and add it to the cluster
   • DInstall a self-signed certificate on the storage system
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A multinational company must comply with GDPR, which requires appropriate technical measures to protect personal data. The company uses NetApp ONTAP storage. The security team is deciding between enabling NetApp Volume Encryption (NVE) and using TLS for data in transit. Which statement accurately reflects the compliance requirement?

   • AGDPR requires both encryption at-rest and in-flight for all personal data.
   • BGDPR requires that appropriate technical measures, such as encryption, be implemented based on the risk to personal data.
   • CGDPR requires encryption in-flight but not at-rest.
   • DGDPR requires encryption at-rest but not in-flight.
   Reveal Solution Discussion Select an answer first