An organization has a backup solution that covers most of its data sources. However, the security team wants to identify which data sources are under-protected, meaning they have backups but not frequent enough to meet recovery point objectives (RPOs). Which approach should they use?

Ask data owners to confirm that their data is backed up.

Review the backup logs for any failed backup jobs.

Compare the backup frequency of each data source against the required RPO for that data.

Check which data sources have no backup at all.

A security team has identified several unprotected data sources, including a database with financial records, a file share with employee HR data, and a development environment with test data. The team needs to report these findings to the IT director, who will decide which data sources to protect first. Which report format would be most effective?

An email that simply states that some data sources are unprotected.

A prioritized report that ranks the data sources by business criticality and regulatory impact.

A technical report with detailed logs and error messages for each data source.

A list of all unprotected data sources with their storage locations and last backup date.

What is the primary goal of reporting findings on unprotected data to stakeholders?

To document the data sources for regulatory compliance only

To replace the need for a data inventory

To enable stakeholders to take informed action to protect the data

To assign blame for the lack of protection

A company recently discovered that a department had been storing sensitive files on a network-attached storage (NAS) device that was not included in the corporate backup policy. The IT team wants to prevent this from happening again. Which action should the IT team take first?

Create a new backup policy for the NAS device and assign it to the device immediately.

Conduct a comprehensive data source discovery to identify all storage systems, including NAS, cloud, and edge devices.

Review the backup logs to see if the NAS device ever attempted a backup.

Implement a data classification tool to label sensitive files on the NAS.

A backup administrator is investigating why a critical database has not been backed up for several days. The backup logs show that the job has been failing with an authentication error. The administrator has verified that the backup credentials are correct. Which action should the administrator take next?

Create a new backup policy for the database.

Check if the database service account has been locked out or its permissions changed.

Restart the backup service and retry the backup job.

Remove the database from the backup policy and add it again.

NetAppCertified Cyber Resiliency Expert

Domain 4Objective 1

Determine How to Find Unprotected Data CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Part of the Governance and Compliance domain, which accounts for 12% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

12%of the exam

Questions 1–5

1application · medium
An organization has a backup solution that covers most of its data sources. However, the security team wants to identify which data sources are under-protected, meaning they have backups but not frequent enough to meet recovery point objectives (RPOs). Which approach should they use?
Select an answer first
2application · medium
A security team has identified several unprotected data sources, including a database with financial records, a file share with employee HR data, and a development environment with test data. The team needs to report these findings to the IT director, who will decide which data sources to protect first. Which report format would be most effective?
Select an answer first
3foundation · easy
What is the primary goal of reporting findings on unprotected data to stakeholders?
Select an answer first
4application · medium
A company recently discovered that a department had been storing sensitive files on a network-attached storage (NAS) device that was not included in the corporate backup policy. The IT team wants to prevent this from happening again. Which action should the IT team take first?
Select an answer first
5expert · hard
A backup administrator is investigating why a critical database has not been backed up for several days. The backup logs show that the job has been failing with an authentication error. The administrator has verified that the backup credentials are correct. Which action should the administrator take next?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.

Determine How to Find Unprotected Data CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

An organization has a backup solution that covers most of its data sources. However, the security team wants to identify which data sources are under-protected, meaning they have backups but not frequent enough to meet recovery point objectives (RPOs). Which approach should they use?

What is the primary goal of reporting findings on unprotected data to stakeholders?

A company recently discovered that a department had been storing sensitive files on a network-attached storage (NAS) device that was not included in the corporate backup policy. The IT team wants to prevent this from happening again. Which action should the IT team take first?

Keep studying — Governance and Compliance