Set up Onboard or External Key Manager CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A NetApp admin is troubleshooting an issue where encrypted volumes become inaccessible after a key manager failover. The external key manager has two nodes in an active-passive configuration. The admin notices that the NetApp cluster is configured with only the active node's IP address. What is the likely cause of the issue?

   • AThe passive node does not have the same keys as the active node.
   • BThe encrypted volumes are not configured for automatic recovery.
   • CThe NetApp cluster cannot fail over to the passive node because it is not registered.
   • DThe NetApp cluster is using the wrong KMIP version.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A NetApp admin is troubleshooting a KMIP connection issue. The admin can ping the key manager from the storage system, but the KMIP service is not responding. What should the admin check next?

   • ACheck if the storage system has the correct KMIP version configured.
   • BCheck if the KMIP port is open on the key manager firewall.
   • CCheck if the onboard key manager is enabled.
   • DCheck if the encrypted volumes are online.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is using the onboard key manager on a NetApp system. They want to ensure that if the storage system is stolen, the encrypted data cannot be accessed. What should they do?

   • AEnable FIPS compliance mode on the storage system.
   • BBack up the onboard key manager database to an external location.
   • CEnsure that the onboard key manager is protected by a strong passphrase.
   • DUse an external key manager instead of the onboard one.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a common protocol used by external key managers to communicate with NetApp storage?

   • AKMIP
   • BiSCSI
   • CSMTP
   • DNFS
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the main advantage of integrating an external key manager with NetApp storage?

   • AIt speeds up data access by caching keys locally
   • BIt eliminates the need for any encryption on the storage system
   • CIt increases the storage capacity of the NetApp system
   • DIt provides centralized key management across multiple storage systems and complies with organizational security policies
   Reveal Solution Discussion Select an answer first