Which command is used to enable encryption on a new cluster peering relationship in ONTAP?

security cluster-peer enable -encrypt

cluster peer create -encrypt-data true

cluster peer modify -encryption on

network interface create -encrypt true

How does ONTAP manage the encryption keys used for cluster peering encryption?

Keys are manually exchanged by administrators via secure out-of-band methods

Keys are derived from the cluster administrator's password

Keys are stored in an external key management server (KMS) and retrieved on demand

Keys are generated and exchanged automatically during cluster peering setup

An administrator is configuring cluster peering encryption and wants to ensure that the configuration is applied correctly. After enabling encryption on both clusters, what should the administrator do to confirm that the encryption is active?

Run 'network interface show' and check the 'Role' column for 'intercluster'.

Run 'cluster peer show' and check the 'Encryption' column for the peering relationship.

Run 'security key-manager show' and check the 'Key Manager' field.

Run 'cluster peer health show' and check the 'Health' column.

A security auditor is reviewing the configuration of cluster peering encryption in an ONTAP environment. The auditor wants to confirm that the encryption algorithm used is AES-256-GCM. Which command output would provide this information?

'security key-manager show' output showing the key type.

'version -v' output showing the ONTAP version.

'network interface show' output showing the 'Protocol' field.

'cluster peer show -instance' output showing the 'Encryption' field as 'AES-256-GCM'.

NetAppCertified Cyber Resiliency Expert

Domain 6Objective 5

Determine How to Use Cluster Peering Encryption CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 4)

Part of the Cybersecurity Encryption domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

5concepts

13%of the exam

Questions 16–19

16foundation · easy
Which command is used to enable encryption on a new cluster peering relationship in ONTAP?
Select an answer first
17foundation · easy
How does ONTAP manage the encryption keys used for cluster peering encryption?
Select an answer first
18application · medium
An administrator is configuring cluster peering encryption and wants to ensure that the configuration is applied correctly. After enabling encryption on both clusters, what should the administrator do to confirm that the encryption is active?
Select an answer first
19application · medium
A security auditor is reviewing the configuration of cluster peering encryption in an ONTAP environment. The auditor wants to confirm that the encryption algorithm used is AES-256-GCM. Which command output would provide this information?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.