Deploy and Configure IAM and MFA for Management CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is deploying NetApp Cloud Volumes ONTAP in a hybrid cloud environment. The security team requires that all management access be authenticated through the corporate identity provider (IdP) using SAML. The administrator needs to configure the management interface to use SAML. What should the administrator do?

   • AConfigure the Cloud Volumes ONTAP system to use SAML with the corporate IdP.
   • BEnable LDAP authentication to the corporate directory.
   • CUse local user accounts with strong passwords.
   • DUse SSH keys for all management access.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A NetApp administrator is configuring RBAC for a large enterprise with multiple teams. The storage team needs full access to volume and snapshot management, the backup team needs read-only access to volume and snapshot information, and the security team needs access to security and audit logs. The administrator needs to create roles that meet these requirements while minimizing administrative overhead. What should the administrator do?

   • AUse the built-in 'vsadmin' role for all teams.
   • BAssign the 'admin' role to the storage team and the 'readonly' role to the backup and security teams.
   • CCreate three custom roles, one for each team, with the appropriate command directories.
   • DCreate one custom role with full access and assign it to all teams.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of Multi-Factor Authentication (MFA)?

   • ATo simplify the login process for users
   • BTo add an extra layer of security by requiring multiple forms of verification
   • CTo replace passwords with biometric data
   • DTo encrypt all network traffic
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When deploying MFA for NetApp management interfaces, what is a typical first step?

   • ASelect an MFA provider and integrate it with the identity source
   • BDisable password authentication for all users
   • CCreate new user accounts for MFA
   • DConfigure MFA policies before selecting a provider
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In an integrated IAM and MFA environment, what happens after a user successfully completes MFA?

   • AThe user is logged out immediately
   • BThe user's password is reset
   • CThe user is authenticated and then subject to authorization policies
   • DThe user is automatically granted full administrative access
   Reveal Solution Discussion Select an answer first