Security Policies CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A company has an export policy with multiple rules. The first rule allows read-write access to a specific IP, and the second rule denies access to a broader subnet that includes that IP. A client from the specific IP is unable to mount the volume. What is the most likely cause?

   • AThe client's IP is not exactly matching the allow rule due to a typo.
   • BThe export policy is not assigned to the volume.
   • CThe allow rule is not enabled, so it is not being enforced.
   • DThe deny rule has a higher priority than the allow rule, so it is evaluated first.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses ONTAP with a security policy that restricts NFS access to a specific subnet. After a recent network change, clients from that subnet can no longer mount the NFS export. You need to determine whether the security policy is enforcing the intended rule or if the issue is elsewhere. What should you do first?

   • ACheck the export policy rule's client match and compare it with the current subnet of the clients.
   • BVerify that the clients have the correct NFS version and mount options.
   • CReboot the ONTAP node to refresh the security policy cache.
   • DReview the ONTAP audit logs for NFS access attempts from the affected clients.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which method is commonly used to audit policy compliance?

   • ADisabling security features
   • BRemoving all policies
   • CReviewing audit logs and reports
   • DIncreasing user permissions
   Reveal Solution Discussion Select an answer first
5. 9expert · medium

   A company is designing a security policy for a new ONTAP cluster that will be used for both production and development workloads. The policy must ensure that development clients cannot access production volumes, but production clients can access development volumes for testing. What is the best way to implement this?

   • ACreate separate export policies for production and development volumes, with rules that allow the appropriate clients.
   • BUse a single export policy that allows all clients, and rely on network segmentation to separate the environments.
   • CUse SVM-level security policies to differentiate between production and development.
   • DUse different SVMs for production and development, and assign different export policies to the SVMs.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the first step in creating a security policy?

   • ADisable auditing
   • BReboot the storage system
   • CDefine the policy's rules and conditions
   • DDelete any existing policies
   Reveal Solution Discussion Select an answer first