Use Active IQ to Find and Remediate CVEs CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   An administrator is reviewing Active IQ for a cluster that is running a version of ONTAP that is no longer supported. Active IQ lists a CVE that affects this version, but the CVE is rated as 'low' severity. The administrator is planning to upgrade the cluster in six months. What should the administrator do?

   • AApply a configuration workaround if available, and monitor the CVE status until the upgrade.
   • BDisable the affected service to eliminate the vulnerability.
   • CIgnore the CVE because it is low severity and the upgrade is planned.
   • DUpgrade immediately to the latest ONTAP version to eliminate the CVE.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   An administrator is reviewing Active IQ for a cluster that runs a legacy ONTAP version. Active IQ lists three CVEs: CVE-A has a CVSS of 7.5 and affects a service that is disabled on the cluster; CVE-B has a CVSS of 5.0 and affects a service that is enabled and accessible only from the internal management network; CVE-C has a CVSS of 9.8 and affects a service that is enabled and exposed to the internet. The administrator has a single maintenance window and must remediate the highest risk first. Which CVE should be remediated first?

   • ACVE-B, because it is on the internal network and could be exploited by insiders.
   • BAll three at once, because they all need remediation eventually.
   • CCVE-A, because it has a high CVSS score and the service is disabled, making it safe to upgrade.
   • DCVE-C, because it has the highest CVSS score and is exposed to the internet, making it the most exploitable.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which navigation step is required to access the Active IQ portal?

   • ALog in with a valid NetApp Support account at the Active IQ web portal
   • BRun a local script on the storage system to generate a report
   • CInstall the Active IQ mobile app and scan a QR code from the storage system
   • DUse SSH to connect to the cluster management IP and type 'active-iq'
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which action is a common remediation step recommended by Active IQ for addressing a CVE?

   • ADisabling the system's network interfaces
   • BRebooting the system to clear the vulnerability
   • CApplying the appropriate software update or patch
   • DChanging the system's hostname
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An administrator is remediating a CVE by upgrading ONTAP. The upgrade is successful, but the administrator notices that Active IQ still shows the CVE as 'affected' for a few hours. What is the most likely reason?

   • AThe upgrade did not actually fix the CVE.
   • BThe administrator needs to manually refresh the Active IQ page.
   • CThe CVE is a false positive that will never be removed.
   • DActive IQ has not yet collected new data from the cluster after the upgrade.
   Reveal Solution Discussion Select an answer first