A NetApp administrator is setting up access control for a new ONTAP cluster. The administrator wants to grant a group of storage operators the ability to view cluster health and performance metrics, but not modify any configuration. Which IAM approach should the administrator use?

Create a local user for each operator and grant them the 'readonly' role.

Create a custom role with read-only access to the 'system' and 'statistics' command directories.

Assign the built-in 'admin' role to the storage operators.

Use LDAP to authenticate and assign the 'vsadmin' role.

A company is integrating its NetApp ONTAP clusters with Azure AD for identity management. The security team requires that all administrative access use MFA. The administrator has configured SAML authentication with Azure AD. What additional configuration is necessary to ensure MFA is enforced?

Enable MFA in Azure AD and assign the appropriate conditional access policy.

Create local ONTAP users with MFA enabled.

Use LDAP with MFA extensions to enforce MFA.

Configure MFA directly in ONTAP for all SAML users.

A NetApp administrator is configuring MFA for the ONTAP CLI. The company uses a smart card authentication system. The administrator needs to ensure that administrators can authenticate to the CLI using their smart cards. What should the administrator configure?

Enable certificate-based authentication for the CLI.

Configure SMS-based MFA for the CLI.

Use TOTP for CLI authentication.

What is the benefit of integrating IAM with MFA for management access?

It provides layered security by combining authentication and authorization controls

It automatically encrypts all data

It eliminates the need for user accounts

NetAppCertified Cyber Resiliency Expert

Domain 7Objective 5

Deploy and Configure IAM and MFA for Management CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 4)

Part of the Cybersecurity Identity and Access Management and Authentication domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

13%of the exam

Questions 16–20

16application · medium
A NetApp administrator is setting up access control for a new ONTAP cluster. The administrator wants to grant a group of storage operators the ability to view cluster health and performance metrics, but not modify any configuration. Which IAM approach should the administrator use?
Select an answer first
17application · medium
A company is integrating its NetApp ONTAP clusters with Azure AD for identity management. The security team requires that all administrative access use MFA. The administrator has configured SAML authentication with Azure AD. What additional configuration is necessary to ensure MFA is enforced?
Select an answer first
18application · medium
A NetApp administrator is configuring MFA for the ONTAP CLI. The company uses a smart card authentication system. The administrator needs to ensure that administrators can authenticate to the CLI using their smart cards. What should the administrator configure?
Select an answer first
19foundation · easy
Which IAM component is used to group users for the purpose of applying common permissions?
Select an answer first
20foundation · easy
What is the benefit of integrating IAM with MFA for management access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.