IAM Policies CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which statement best describes the role of IAM policies in a NetApp hybrid cloud?

   • AThey provide a way to grant or deny permissions to identities for specific actions on resources
   • BThey act as a firewall to block unauthorized network traffic
   • CThey manage the lifecycle of virtual machines
   • DThey automatically back up data to a secondary site
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary difference between a managed policy and an inline policy?

   • AManaged policies are only for cloud resources; inline policies are only for on-premises resources
   • BManaged policies are standalone and can be attached to multiple identities; inline policies are embedded directly into a single identity
   • CManaged policies cannot be edited; inline policies can be edited at any time
   • DManaged policies are automatically created by NetApp; inline policies are created by users
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A NetApp hybrid cloud administrator is migrating from inline policies to managed policies to improve maintainability. They have hundreds of users with unique inline policies. What is the best strategy to migrate without disrupting access?

   • ARemove all inline policies first, then create managed policies for users who report issues.
   • BCreate a single managed policy that grants all permissions and attach it to all users.
   • CLeave the inline policies in place and create managed policies for new users only.
   • DCreate managed policies that replicate the inline policies, attach them to the users, and then remove the inline policies.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of an IAM policy in a NetApp hybrid cloud environment?

   • ATo encrypt data at rest and in transit
   • BTo define the network routing rules between on-premises and cloud resources
   • CTo control access to NetApp hybrid cloud resources by defining permissions
   • DTo monitor and log all user activities for compliance
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A NetApp hybrid cloud administrator is designing IAM policies for a new application that will be used by multiple teams. The security team requires that permissions be granted based on the principle of least privilege, but also wants to minimize the number of policies to manage. Which approach best balances these requirements?

   • ACreate a single managed policy that grants all permissions needed by all teams, and attach it to all users.
   • BCreate a role for each team and have users assume the role when needed.
   • CCreate inline policies for each user, granting only the permissions they need.
   • DCreate separate managed policies for each team, each granting only the permissions needed for that team's role.
   Reveal Solution Discussion Select an answer first