Set up Onboard or External Key Manager CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common method to achieve high availability for an external key manager?

   • ADeploying multiple key manager instances in a cluster
   • BStoring keys on the NetApp storage system as a backup
   • CUsing a single key manager with a longer timeout
   • DDisabling key rotation to reduce load
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A NetApp admin recently configured an external KMIP key manager. After the configuration, encrypted volumes are inaccessible and the cluster reports a key manager connection failure. The admin verifies that the key manager is running and reachable from the storage system. What is the most likely cause of the connection failure?

   • AThe storage system's time is not synchronized with the key manager.
   • BThe KMIP server certificate is not trusted by the NetApp cluster.
   • CThe onboard key manager is still active.
   • DThe encrypted volumes are not yet mounted.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is using the onboard key manager on a NetApp cluster with two nodes. They are concerned about the availability of the key manager if one node fails. What should they do to ensure key manager high availability?

   • AUse an external key manager instead of the onboard one.
   • BEnable the onboard key manager on both nodes of the cluster.
   • CBack up the onboard key manager database regularly.
   • DConfigure a second onboard key manager on a separate cluster.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A startup is using NetApp ONTAP with the onboard key manager. They are about to decommission an old storage system and want to ensure that the encrypted data on that system cannot be recovered after the system is retired. What should they do?

   • AMove the encrypted volumes to another system before decommissioning.
   • BDelete the encryption keys from the onboard key manager.
   • CPerform a factory reset on the storage system.
   • DReformat the disks and reinstall ONTAP.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In the context of key lifecycle management, what does key deletion typically require?

   • AA reboot of the storage system to apply the change
   • BA new key to be created first
   • CA confirmation from the storage administrator to prevent accidental loss of data access
   • DA backup of the key to be stored on the system
   Reveal Solution Discussion Select an answer first