Use Active IQ to Find and Remediate CVEs CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A cluster is affected by a CVE that Active IQ says can be remediated by upgrading to ONTAP 9.11.1 or later. The cluster is currently running ONTAP 9.10P2. The administrator wants to minimize downtime and avoid a major upgrade. Active IQ also lists a configuration workaround that involves disabling a protocol that is used by a few applications. The administrator has verified that the applications can be migrated to a different protocol. What is the best course of action?

   • ADo nothing because the CVE is not critical.
   • BApply the configuration workaround to disable the protocol, then migrate the applications to the new protocol.
   • CUpgrade to ONTAP 9.11.1 to get the fix, even though it requires a longer maintenance window.
   • DUpgrade to the latest ONTAP version available, not just 9.11.1, to ensure future-proofing.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A storage administrator at a financial services firm is reviewing the Active IQ portal for a cluster running ONTAP 9.8. The administrator sees a CVE listed with a CVSS score of 9.8 and a note that the cluster is 'potentially affected'. The administrator wants to determine if the cluster is actually vulnerable before scheduling a maintenance window. What should the administrator do first?

   • AReview the CVE details in Active IQ to see the specific conditions and ONTAP versions that are affected, then compare them with the cluster's current configuration.
   • BOpen a support case with NetApp to ask if the CVE applies, without checking the CVE details in Active IQ.
   • CCheck the cluster's AutoSupport logs to see if any suspicious activity has occurred related to the CVE.
   • DImmediately upgrade the cluster to the latest ONTAP version recommended by Active IQ to eliminate the vulnerability.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An administrator is remediating a CVE on an ONTAP cluster by applying a configuration change recommended by Active IQ. After applying the change, the administrator wants to ensure that the change does not introduce new issues. What is the best practice?

   • ASchedule a full cluster reboot to ensure the change takes effect.
   • BDo nothing else because the change is recommended by Active IQ.
   • CRevert the change immediately if any alert appears.
   • DMonitor the cluster's health and performance in Active IQ after the change.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What does the severity score of a CVE indicate?

   • AThe likelihood that the vulnerability will be exploited
   • BThe potential impact of the vulnerability on the system
   • CThe time required to remediate the vulnerability
   • DThe number of systems affected by the vulnerability
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   An administrator is using Active IQ to assess the security posture of a cluster. The administrator wants to see a list of all CVEs that affect the cluster, sorted by severity. Where should the administrator look?

   • AThe 'Configuration' section, because CVEs are configuration issues.
   • BThe 'Security' or 'Vulnerabilities' section of the cluster's dashboard.
   • CThe 'AutoSupport' section, because it contains all system logs.
   • DThe 'Performance' section, because CVEs affect performance.
   Reveal Solution Discussion Select an answer first