A company has a multi-tenancy ONTAP environment with multiple SVMs. They need to apply a security policy that allows NFS access from a shared subnet, but only for specific SVMs, and denies access to others. What is the best way to achieve this?

Use SVM-level security policies that apply to all volumes in the SVM.

Use network segmentation to separate the SVMs, so the shared subnet only reaches the allowed SVMs.

Create a single export policy and assign it to all SVMs, but use different rules for each SVM.

Create separate export policies for each SVM, with rules that allow or deny the shared subnet as needed.

A company has an ONTAP cluster with a volume that is accessed via NFS from both on-premises clients and a cloud VPC. The export policy currently allows the on-premises subnet. The cloud VPC is connected via a VPN, and the clients appear to come from the VPN gateway's IP, not the VPC subnet. The administrator needs to allow the cloud clients without exposing the volume to other VPN users. What should the administrator do?

Add the VPN gateway's IP to the export policy, allowing all VPN users.

Add the cloud VPC subnet to the export policy, assuming the VPN preserves the source IP.

Use a separate SVM for the cloud clients and apply a different export policy.

Configure the VPN to preserve the source IP of the cloud clients, then add the VPC subnet to the export policy.

A security auditor asks for evidence that the export policy on a critical NFS volume is being enforced and that no unauthorized clients have attempted to mount it. Which ONTAP feature should you use to provide this evidence?

The audit log for NFS access events

The 'security policy show' command

ONTAP System Manager's export policy editor

What is the primary purpose of monitoring security policies?

To verify that policies are working as intended

To replace the need for backups

A security team wants to monitor export policy compliance across multiple ONTAP clusters. They need to detect any unauthorized changes to export policies and be alerted in real time. Which approach best meets this requirement?

Use ONTAP's compliance reports, which are generated weekly.

Enable ONTAP audit logging and configure alerts for export policy change events.

Schedule a nightly script that compares current export policies to a baseline and emails a report.

Manually review export policies during monthly security audits.

NetAppCertified Hybrid Cloud Administrator Professional (NCHC-Admin)

Domain 4Objective 4

Security Policies CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR Practice Questions (Page 3)

Part of the Secure and Protect domain, which makes up ~27% of our current practice bank. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

Questions 11–15

11expert · medium
A company has a multi-tenancy ONTAP environment with multiple SVMs. They need to apply a security policy that allows NFS access from a shared subnet, but only for specific SVMs, and denies access to others. What is the best way to achieve this?
Select an answer first
12expert · medium
A company has an ONTAP cluster with a volume that is accessed via NFS from both on-premises clients and a cloud VPC. The export policy currently allows the on-premises subnet. The cloud VPC is connected via a VPN, and the clients appear to come from the VPN gateway's IP, not the VPC subnet. The administrator needs to allow the cloud clients without exposing the volume to other VPN users. What should the administrator do?
Select an answer first
13application · medium
A security auditor asks for evidence that the export policy on a critical NFS volume is being enforced and that no unauthorized clients have attempted to mount it. Which ONTAP feature should you use to provide this evidence?
Select an answer first
14foundation · easy
What is the primary purpose of monitoring security policies?
Select an answer first
15expert · medium
A security team wants to monitor export policy compliance across multiple ONTAP clusters. They need to detect any unauthorized changes to export policies and be alerted in real time. Which approach best meets this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-HYBRID-CLOUD-ADMINISTRATOR” is a trademark of its owner, used for identification only.