Use Active IQ to Find and Remediate CVEs CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11application · easy

   A new administrator needs to find all CVEs that affect a specific ONTAP cluster. The administrator has access to the Active IQ portal but is unfamiliar with the layout. What is the most direct way to locate CVE information for the cluster?

   • ACheck the cluster's CLI for a command that lists CVEs.
   • BUse the 'Security' or 'Vulnerability' section in Active IQ for the selected cluster to view a list of CVEs.
   • CContact NetApp support to request a CVE report for the cluster.
   • DSearch the internet for the cluster's serial number to find related CVEs.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When prioritizing CVE remediation, which factor is most important to consider?

   • AThe CVE's severity score and its relevance to the environment
   • BThe number of systems in the environment
   • CThe cost of the remediation
   • DThe CVE's publication date
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An administrator applied a configuration change recommended by Active IQ to remediate a CVE. After the change, the administrator wants to confirm that the system is no longer vulnerable. What is the most reliable way to verify this?

   • AWait for the next AutoSupport report to see if the CVE is mentioned.
   • BCheck Active IQ to see if the CVE is no longer listed for the system.
   • CReview the system logs to see if the configuration change was applied.
   • DRun a vulnerability scan with an external scanner to confirm the fix.
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   A managed service provider (MSP) wants to use Active IQ to proactively identify security issues across multiple customer clusters. The MSP's goal is to reduce the time between CVE disclosure and remediation. What is the primary capability of Active IQ that supports this goal?

   • AIntegration with external vulnerability scanners to replace them.
   • BReal-time packet inspection to detect exploitation attempts.
   • CContinuous monitoring and proactive alerts for CVEs and other risks.
   • DAutomatic remediation of CVEs without administrator intervention.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which statement best describes the primary purpose of NetApp Active IQ?

   • AIt is an on-premises tool that manually collects logs and requires the administrator to interpret all alerts without automated analysis.
   • BIt is a cloud-based service that uses telemetry and analytics to provide proactive monitoring, predictive insights, and recommendations for NetApp systems.
   • CIt is a security information and event management (SIEM) system that ingests logs from all network devices for compliance reporting.
   • DIt is a backup and disaster recovery solution that replicates data to a secondary site for business continuity.
   Reveal Solution Discussion Select an answer first