Deploy and Configure IAM and MFA for Management CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a common MFA deployment method for securing management access?

   • AUsing a hardware token that generates one-time passcodes
   • BUsing a shared secret stored in the browser
   • CUsing a simple CAPTCHA
   • DUsing a static password
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security administrator is configuring MFA for a NetApp ONTAP cluster that is accessed by both on-premises administrators and remote administrators. The remote administrators connect through a VPN. The security team wants to enforce MFA for all administrative access, but the VPN is not always available. What should the administrator do to ensure MFA is enforced without relying on VPN availability?

   • AConfigure MFA at the identity provider level and require it for all authentication attempts.
   • BRequire MFA only for remote administrators connecting through the VPN.
   • CUse a separate MFA solution for remote access and on-premises access.
   • DDisable MFA when the VPN is not available.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security auditor is reviewing the MFA implementation for NetApp management interfaces. The auditor notes that administrators are using SMS-based one-time codes. The security policy requires a more secure method that is not susceptible to SIM-swapping attacks. Which MFA method should the administrator recommend?

   • APush notifications to a mobile app
   • BTOTP using an authenticator app
   • CEmail-based verification codes
   • DSMS-based one-time codes
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is deploying MFA for administrative access to NetApp Cloud Volumes ONTAP. The security team requires that MFA be enforced for all users, but also wants to support single sign-on (SSO) for user convenience. The administrator needs to configure MFA and SSO together. What should the administrator do?

   • ARequire MFA only for initial login and not for SSO sessions.
   • BUse separate MFA and SSO solutions that are not integrated.
   • CEnable SSO and disable MFA for SSO sessions.
   • DConfigure SSO with an identity provider that supports MFA.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A NetApp administrator is configuring role-based access control (RBAC) for a new ONTAP cluster. The company policy requires that storage administrators can manage volumes and snapshots but cannot modify cluster configuration or security settings. The administrator needs to create a custom role that enforces this policy. What should the administrator do?

   • ACreate a custom role with access to the 'volume' and 'snapshot' command directories only.
   • BUse the built-in 'readonly' role and grant additional commands as needed.
   • CAssign the built-in 'admin' role to the storage administrators.
   • DAssign the 'vsadmin' role to the storage administrators.
   Reveal Solution Discussion Select an answer first