Harden the Storage System CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A storage administrator is hardening the management interface of a storage system. The system currently supports both HTTP and HTTPS for management, and the administrator wants to ensure that management traffic is encrypted and that only necessary services are exposed. What should the administrator do?

   • ADisable HTTP access and require HTTPS for all management connections.
   • BEnable both HTTP and HTTPS and rely on the firewall to restrict access to the management interface.
   • CDisable HTTPS and use HTTP with IPsec to encrypt management traffic.
   • DKeep HTTP enabled for legacy management tools and enable HTTPS for new tools.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A storage administrator is managing a storage system that has been in production for several years. The administrator notices that the vendor has released a new firmware version that addresses a critical security vulnerability. The administrator wants to apply the update but is concerned about potential downtime. What should the administrator do?

   • AWait for the next scheduled maintenance window, even if it is several months away.
   • BApply the firmware only to the storage systems that are not in production to avoid any risk.
   • CApply the firmware immediately to all storage systems to reduce the window of exposure.
   • DReview the release notes, test the firmware in a non-production environment, and apply it during a maintenance window.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Why is it important to regularly update firmware on a storage system?

   • ATo reduce the need for data backups
   • BTo fix security vulnerabilities and improve system stability
   • CTo automatically change user passwords
   • DTo increase the physical storage capacity of the disks
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A storage administrator is configuring access to a storage system that contains confidential project data. The administrator wants to ensure that users can only access the data they need for their job functions. The company uses Active Directory for authentication. What should the administrator do?

   • AUse Active Directory groups to grant access, but give all groups the same level of access to simplify management.
   • BCreate individual user accounts and grant each user full access to the storage system.
   • CGrant all users full access to the storage system and rely on the Active Directory group policies to restrict access.
   • DCreate role-based access control (RBAC) roles that map to job functions and assign users to the appropriate roles.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A storage administrator is configuring a new storage system that will be accessed by servers in a different subnet. The administrator wants to ensure that only the application servers can access the storage system and that all storage traffic is encrypted. What should the administrator do?

   • AConfigure the storage system to use a private IP address and rely on the router's access control list (ACL).
   • BConfigure a firewall to allow only the application servers' IP addresses to reach the storage system and enable IPsec for storage traffic.
   • CPlace the storage system on the same subnet as the application servers and rely on the network switch's security features.
   • DEnable VLAN segmentation and use HTTPS for storage traffic.
   Reveal Solution Discussion Select an answer first