Deploy and Configure IAM and MFA for Management CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A storage administrator at a financial services firm is deploying NetApp ONTAP clusters for a new environment. The security team requires that all management access be authenticated through the corporate Active Directory, and that administrative actions be traceable to individual users. The administrator needs to configure ONTAP to meet this requirement. What should the administrator do?

   • ACreate local ONTAP users for each administrator and assign them to the admin role.
   • BConfigure ONTAP to use Active Directory for authentication and map AD groups to ONTAP roles.
   • CEnable LDAP only for authentication and keep authorization local to ONTAP.
   • DUse SSH keys for all administrators and disable password authentication.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of an authorization policy in IAM configuration?

   • ATo log user activity
   • BTo encrypt data in transit
   • CTo define what actions a user is allowed to perform on resources
   • DTo verify a user's identity through credentials
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of MFA enrollment in the configuration process?

   • ATo allow users to register their authentication devices or methods
   • BTo reset user passwords
   • CTo assign permissions to users
   • DTo create new user accounts
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is deploying MFA for all administrative access to its NetApp storage systems. The security policy requires that administrators use a one-time password generated by a hardware token in addition to their primary credentials. Which MFA method should the administrator configure?

   • ATOTP (Time-based One-Time Password)
   • BBiometric authentication
   • CEmail-based verification links
   • DSMS-based verification codes
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security administrator is configuring MFA for a NetApp ONTAP cluster that is accessed by administrators in different geographic regions. The security team wants to enforce MFA, but also wants to minimize latency for administrators in remote regions. What should the administrator do to balance security and performance?

   • AUse a cloud-based identity provider with MFA that has points of presence in multiple regions.
   • BUse a single on-premises MFA server for all regions.
   • CRequire MFA only for administrators in the headquarters region.
   • DDisable MFA for administrators in remote regions.
   Reveal Solution Discussion Select an answer first