Determine When to Use Encryption with FabricPool CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which compliance standard commonly requires encryption of data at rest, which would drive the need for FabricPool encryption?

   • APCI DSS
   • BSOC 2
   • CGDPR
   • DISO 27001
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the recommended approach for encrypting data that is tiered to object storage in FabricPool?

   • AEncrypt data after it is tiered using a separate encryption tool
   • BRely on the object store's native encryption
   • CUse network encryption (TLS) to protect data in transit only
   • DEnable encryption on the ONTAP volume or aggregate before tiering
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Why is encryption particularly important for data tiered to object storage in FabricPool?

   • ABecause object storage is slower than block storage
   • BBecause object storage cannot be backed up
   • CBecause object storage uses a different file system
   • DBecause the object store may be outside the secure data center environment
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company stores sensitive customer data on an ONTAP cluster with FabricPool tiering to a public cloud object store. The data is subject to a regulation that requires encryption at rest, but the company also has a policy to minimize the use of external key management services. The administrator needs to meet both requirements. What should the administrator do?

   • AEnable NetApp Aggregate Encryption (NAE) and use the ONTAP onboard Key Management (OKM) service to manage the keys locally.
   • BDisable FabricPool tiering for the sensitive data and store it locally, since encryption is not supported for tiered data.
   • CEnable NetApp Volume Encryption (NVE) and use an external KMS to manage the keys, which provides better security.
   • DConfigure encryption on the public cloud object store provider, which manages the keys internally and does not require external key management.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is deploying FabricPool with NetApp Volume Encryption (NVE) to meet a security policy that requires encryption keys to be stored on a dedicated external appliance. The administrator has configured an external KMS, but the security team is concerned about the availability of the KMS. What should the administrator do to ensure that the cluster can continue to operate if the KMS becomes temporarily unavailable?

   • AUse the ONTAP onboard Key Management (OKM) service instead, which does not require an external KMS and is always available.
   • BEnable NetApp Aggregate Encryption (NAE) instead, which does not require a KMS for key management.
   • CDisable NVE on the volumes and rely on the object store provider's encryption, which does not require a KMS.
   • DConfigure a secondary KMS for redundancy and ensure that the cluster has cached keys to continue operations during a KMS outage.
   Reveal Solution Discussion Select an answer first