Use Active IQ to Find and Remediate CVEs CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   Besides software updates, what other type of remediation might Active IQ recommend for a CVE?

   • AIncreasing the system's memory
   • BRenaming the storage volumes
   • CConfiguration changes to mitigate the vulnerability
   • DChanging the system's time zone
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company's ONTAP cluster is affected by a CVE that Active IQ indicates can be remediated by either upgrading ONTAP or applying a specific configuration change. The cluster is running a version that is end-of-life, and the configuration change would disable a feature that the business relies on. The administrator wants to remediate the CVE with minimal business impact. What should the administrator do?

   • AUpgrade ONTAP to a version that includes the fix, after verifying compatibility with the business feature.
   • BApply the configuration change to disable the feature, as it is the quickest remediation.
   • CLeave the CVE unaddressed because the feature is critical and the risk is acceptable.
   • DApply a workaround from Active IQ that does not require an upgrade or disabling the feature.
   Reveal Solution Discussion Select an answer first
4. 28application · easy

   A company wants to ensure that its ONTAP clusters are protected against known vulnerabilities. The security team wants a single tool that can provide an overview of security posture across all clusters. What is the primary benefit of using Active IQ for this purpose?

   • AIt provides a centralized view of CVEs and security risks for all connected systems.
   • BIt replaces the need for any other security monitoring tools.
   • CIt provides real-time alerts for any security incident.
   • DIt automatically patches all clusters without requiring manual intervention.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   An administrator is reviewing Active IQ for a cluster that is running ONTAP 9.7 and is used for a research environment with no internet access. Active IQ lists a CVE with a CVSS score of 9.0 that affects a service that is enabled and used by internal applications. The administrator has a maintenance window next week. What is the best course of action?

   • ADisable the affected service to reduce the attack surface, even though it will break internal applications.
   • BApply a configuration workaround if Active IQ provides one, and then plan for an upgrade in the future.
   • CDo nothing because the cluster is not internet-connected, so the risk is low.
   • DUpgrade to the latest ONTAP version that fixes the CVE, even though it may require additional testing.
   Reveal Solution Discussion Select an answer first