What is the purpose of key rotation in key lifecycle management?

To create a backup copy of the key for disaster recovery

To change the encryption algorithm used for data at rest

To replace an existing key with a new one to limit the amount of data encrypted with a single key

To permanently delete old keys and make data unrecoverable

What is the first step in troubleshooting a key manager issue on a NetApp system?

Check the key manager status and logs

Delete and recreate the encryption keys

A company is using an external KMIP key manager to manage keys for NetApp encrypted volumes. The security team requires that encryption keys be rotated every 90 days. The storage admin needs to automate this process. What should the admin do?

Schedule a script on the NetApp system to rotate keys.

Recreate the encrypted volumes every 90 days to force new keys.

Manually rotate keys every 90 days using ONTAP commands.

Use the key manager's automated key rotation feature and configure the rotation period.

What is the primary role of KMIP in a NetApp storage environment?

To authenticate users accessing the storage system

To standardize communication between NetApp storage and external key managers

To provide a backup of encryption keys

To encrypt data as it is written to disk

A NetApp admin is performing key lifecycle management for a volume that is no longer needed. The volume is encrypted and will be deleted. What should the admin do with the encryption key?

Move the encryption key to a different key manager.

Keep the encryption key in the key manager for future use.

Delete the encryption key from the key manager after the volume is deleted.

Rotate the encryption key before deleting the volume.

NetAppCertified Cyber Resiliency Expert

Domain 6Objective 1

Set up Onboard or External Key Manager CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 5)

Part of the Cybersecurity Encryption domain, which accounts for 13% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

13%of the exam

Questions 21–25

21foundation · easy
What is the purpose of key rotation in key lifecycle management?
Select an answer first
22foundation · easy
What is the first step in troubleshooting a key manager issue on a NetApp system?
Select an answer first
23application · medium
A company is using an external KMIP key manager to manage keys for NetApp encrypted volumes. The security team requires that encryption keys be rotated every 90 days. The storage admin needs to automate this process. What should the admin do?
Select an answer first
24foundation · easy
What is the primary role of KMIP in a NetApp storage environment?
Select an answer first
25application · medium
A NetApp admin is performing key lifecycle management for a volume that is no longer needed. The volume is encrypted and will be deleted. What should the admin do with the encryption key?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.