Harden the Storage System CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A financial services company is deploying a new storage array to hold sensitive customer data. The compliance team requires that all data at rest be encrypted. The storage administrator must ensure that the encryption keys are managed securely and that the encryption does not impact performance significantly. What should the administrator do?

   • AEnable encryption at rest and rely on the storage array's built-in key management without external integration.
   • BEnable software-based encryption on the storage array and store the encryption keys on the array's local disk.
   • CEnable encryption at rest and use the same key for all volumes to simplify management.
   • DEnable hardware-based encryption on the storage array and use a dedicated key management server (KMS) to store and manage encryption keys.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which network security measure is used to separate storage traffic from general corporate traffic?

   • AStorage tiering
   • BData deduplication
   • CNetwork segmentation
   • DSnapshot scheduling
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a key component of effective monitoring for security incidents on a storage system?

   • AReviewing logs only after an incident occurs
   • BDisabling logging to save storage space
   • CStoring logs only on the storage system itself
   • DReal-time alerting on suspicious events
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A data center is being designed to house a new storage system. The security team wants to ensure that the storage hardware is protected from unauthorized physical access and environmental hazards. Which two measures should be implemented?

   • APlace the storage system in a locked rack and use a standard HVAC system without monitoring.
   • BUse video surveillance and rely on the building's general fire alarm system.
   • CImplement a badge access system and use a portable air conditioner for cooling.
   • DInstall biometric access controls on the data center doors and deploy fire suppression and temperature monitoring systems.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common method for managing encryption keys for storage systems?

   • ASharing keys with all administrators
   • BStoring keys in plain text on the storage system
   • CEmbedding keys in the firmware of the storage controller
   • DUsing an external key management server (KMS)
   Reveal Solution Discussion Select an answer first