A financial services firm is subject to a regulation that requires retaining transaction records for seven years and then securely deleting them. The firm uses ONTAP SnapVault for backup and SnapMirror for replication. What is the most appropriate way to implement the retention and deletion requirement?

Use SnapLock Compliance mode with a retention period of seven years, and after the period expires, use a secure erase process to delete the data.

Use ONTAP SnapLock to create a Compliance clock and apply a retention period of seven years, then rely on SnapLock's automatic deletion after the retention period.

Configure a NetApp Snapshot policy to take daily snapshots and retain them for seven years, then use a script to delete snapshots older than seven years.

Set a SnapVault retention policy to keep backups for seven years, then manually delete the SnapVault volumes.

A compliance requirement states that users should only have the minimum permissions necessary to perform their job functions. Which principle does this describe?

Role-based access control (RBAC)

A hospital must ensure that only authorized personnel can access patient health records, and that all access attempts are logged. The hospital uses ONTAP with RBAC and audit logging. The compliance team wants to minimize the risk of unauthorized access while ensuring logs are available. What is the best approach?

Create a custom RBAC role with least-privilege access to patient data and enable audit logging for file access.

Enable audit logging only for failed access attempts.

Assign the built-in 'admin' role to all staff and enable audit logging.

Use export policies to restrict access by IP address and enable audit logging.

A government agency requires that only a specific group of administrators can modify backup retention settings, and that all changes to retention settings be logged. The agency uses ONTAP with RBAC. What should the administrator configure?

Use NetApp FPolicy to monitor changes to retention settings and restrict access via export policies.

Enable ONTAP audit logging for administrative actions and create a custom RBAC role with access to retention-related commands.

Assign the built-in 'admin' role to the backup administrators and rely on the default audit log.

Create a custom RBAC role with access to the 'snapshot' command directory and assign it to the backup administrators.

NetAppCertified Hybrid Cloud Administrator Professional (NCHC-Admin)

Domain 4Objective 3

Compliance Requirements CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR Practice Questions (Page 2)

Part of the Secure and Protect domain, which makes up ~27% of our current practice bank. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

6concepts

Questions 6–10

6application · medium
A financial services firm is subject to a regulation that requires retaining transaction records for seven years and then securely deleting them. The firm uses ONTAP SnapVault for backup and SnapMirror for replication. What is the most appropriate way to implement the retention and deletion requirement?
Select an answer first
7foundation · easy
A compliance requirement states that users should only have the minimum permissions necessary to perform their job functions. Which principle does this describe?
Select an answer first
8expert · hard
A hospital must ensure that only authorized personnel can access patient health records, and that all access attempts are logged. The hospital uses ONTAP with RBAC and audit logging. The compliance team wants to minimize the risk of unauthorized access while ensuring logs are available. What is the best approach?
Select an answer first
9application · medium
A government agency requires that only a specific group of administrators can modify backup retention settings, and that all changes to retention settings be logged. The agency uses ONTAP with RBAC. What should the administrator configure?
Select an answer first
10foundation · easy
An administrator needs to demonstrate compliance with a regulation that requires a record of who accessed sensitive data and when. Which feature should the administrator use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Compliance Requirements CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

A compliance requirement states that users should only have the minimum permissions necessary to perform their job functions. Which principle does this describe?

A government agency requires that only a specific group of administrators can modify backup retention settings, and that all changes to retention settings be logged. The agency uses ONTAP with RBAC. What should the administrator configure?

An administrator needs to demonstrate compliance with a regulation that requires a record of who accessed sensitive data and when. Which feature should the administrator use?

Keep studying — Secure and Protect