Compliance Requirements CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A global manufacturing company must comply with the EU General Data Protection Regulation (GDPR) for its European employees' HR data. The company stores this data in a NetApp ONTAP cluster in Germany and replicates it to a second site in the Netherlands. The company also has a disaster recovery site in the United States. What is the primary compliance consideration?

   • AThe data must be retained for a specific period, so configure SnapLock retention policies.
   • BThe data must remain within the EU, so replication to the US is not allowed without additional safeguards.
   • CThe data must be accessible only to HR administrators, so configure RBAC.
   • DThe data must be encrypted at rest, so enable NetApp Volume Encryption on both clusters.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A government agency requires that all citizen data be stored on servers physically located within the country's borders. Which compliance concept does this requirement illustrate?

   • AData residency
   • BData protection
   • CData sovereignty
   • DData localization
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which access control model assigns permissions to users based on their role within an organization?

   • AMandatory access control (MAC)
   • BDiscretionary access control (DAC)
   • CRole-based access control (RBAC)
   • DAttribute-based access control (ABAC)
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of configuring audit logging in a hybrid cloud environment?

   • ATo provide a record of activities for compliance and security analysis
   • BTo improve data transfer speeds
   • CTo automatically encrypt data at rest
   • DTo reduce storage costs by compressing data
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A healthcare organization must demonstrate to auditors that only authorized administrators have accessed patient records stored on a NetApp FAS system. The organization uses ONTAP and has a Security Information and Event Management (SIEM) system. Which action should the administrator take to meet the audit requirement?

   • AConfigure role-based access control (RBAC) to restrict administrator access and rely on that for compliance.
   • BEnable ONTAP audit logging for file access and configure the SIEM to receive the audit logs.
   • CEnable NetApp FPolicy for real-time file blocking and log all blocked access attempts.
   • DUse ONTAP System Manager to generate a one-time report of current administrator roles.
   Reveal Solution Discussion Select an answer first