How does Active IQ help identify CVEs affecting a customer's environment?

It requires the customer to manually enter all installed software versions

It scans the customer's network for open ports and services

It subscribes to external threat feeds and alerts the customer in real time

It compares the installed software versions and configurations against known vulnerability databases

Which tool or feature in Active IQ can help confirm that a CVE has been remediated?

The 'Security Advisories' list showing the CVE as resolved

The 'Performance Explorer' chart

After applying a recommended ONTAP upgrade to remediate a CVE, an administrator checks Active IQ and sees that the CVE is still listed as 'affected' for the cluster. The administrator confirms the upgrade was successful and the cluster is running the new version. What should the administrator do next?

Assume the upgrade did not work and revert to the previous version.

Manually edit the Active IQ database to remove the CVE from the cluster's list.

Open a support case immediately, as the CVE should have been cleared.

Wait for Active IQ to refresh its data, as it may take some time to reflect the new version.

Which data source does Active IQ use to determine if a CVE affects a specific system?

The system's performance metrics and capacity utilization

The system's physical location and network topology

The system's current software version and configuration

The system's serial number and warranty status

After upgrading an ONTAP cluster to remediate a CVE, an administrator checks Active IQ and sees that the CVE is no longer listed. However, the administrator wants to be extra sure that the system is not vulnerable. What additional step can the administrator take?

Revert the upgrade because the CVE is no longer listed, which might indicate a problem.

Review the Active IQ risk assessment report for the cluster.

Run a packet capture on the network to look for exploit attempts.

Check the ONTAP CLI for a command that shows CVE status.

NetAppCertified Cyber Resiliency Expert

Domain 5Objective 3

Use Active IQ to Find and Remediate CVEs CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Part of the Cybersecurity Common Issues domain, which accounts for 18% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

18%of the exam

Questions 1–5

1foundation · easy
How does Active IQ help identify CVEs affecting a customer's environment?
Select an answer first
2foundation · easy
Which tool or feature in Active IQ can help confirm that a CVE has been remediated?
Select an answer first
3application · medium
After applying a recommended ONTAP upgrade to remediate a CVE, an administrator checks Active IQ and sees that the CVE is still listed as 'affected' for the cluster. The administrator confirms the upgrade was successful and the cluster is running the new version. What should the administrator do next?
Select an answer first
4foundation · easy
Which data source does Active IQ use to determine if a CVE affects a specific system?
Select an answer first
5application · medium
After upgrading an ONTAP cluster to remediate a CVE, an administrator checks Active IQ and sees that the CVE is no longer listed. However, the administrator wants to be extra sure that the system is not vulnerable. What additional step can the administrator take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.