Use Active IQ to Find and Remediate CVEs CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Where in the Active IQ portal would a user typically navigate to find CVE-related information for their NetApp systems?

   • AThe 'Hardware' tab under 'Inventory'
   • BThe 'Security Advisories' section under the 'Compliance' tab
   • CThe 'Performance' tab under 'Cluster Metrics'
   • DThe 'Backup' section under 'Data Protection'
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   After applying a remediation for a CVE, how can you verify that the system is no longer vulnerable?

   • AVerify that the system's performance has improved
   • BCheck that the system's uptime is greater than 30 days
   • CEnsure that the system's hostname has been changed
   • DConfirm that the system's software version is now above the vulnerable version
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator reviews the Active IQ dashboard and sees two CVEs affecting the cluster: CVE-1 has a CVSS score of 9.8 but only affects a management interface that is not exposed to the network, and CVE-2 has a CVSS score of 6.5 but affects a data-serving protocol that is exposed to the internet. The administrator has limited maintenance windows and must prioritize remediation. Which CVE should be remediated first?

   • ACVE-1, because it has a higher CVSS score.
   • BNeither, because Active IQ's CVSS scores are not reliable for prioritization.
   • CBoth at the same time, because both are vulnerabilities that need remediation.
   • DCVE-2, because it affects an internet-exposed protocol, making it more likely to be exploited.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which capability is provided by NetApp Active IQ?

   • AAutomated firmware installation on all NetApp devices without administrator approval
   • BReal-time packet capture and analysis of all network traffic
   • CProactive detection of potential issues and recommended actions to avoid them
   • DDirect integration with third-party cloud providers to manage their infrastructure
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An administrator is managing a cluster that is running an ONTAP version that is not the latest but is still supported. Active IQ lists a CVE that affects this version, but the CVE is not listed as 'critical' or 'high'. The administrator has limited resources and must decide whether to remediate now or wait for the next scheduled upgrade. What is the best decision?

   • ADisable the affected service to eliminate the vulnerability.
   • BUpgrade immediately to the latest ONTAP version to fix the CVE.
   • CRemediate now using a configuration workaround if available, because even low-severity CVEs can be exploited.
   • DWait for the next scheduled upgrade, because the CVE is not high severity.
   Reveal Solution Discussion Select an answer first