Architectural Components CERTIFIED-HYBRID-CLOUD-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the role of a VPN in a hybrid cloud architecture?

   • ATo load balance traffic between multiple cloud regions
   • BTo replace the need for any network security
   • CTo create a secure, encrypted tunnel over the public internet between on-premises and cloud networks
   • DTo provide a dedicated physical connection to the cloud provider
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A global enterprise is designing a hybrid cloud architecture that includes on-premises ONTAP systems in three regions and Cloud Volumes ONTAP instances in multiple AWS regions. The architecture must support workload mobility between any on-premises site and any cloud region. The network team wants to avoid complex point-to-point VPN configurations. Which networking approach should the architect recommend?

   • ACreate a full mesh of VPN tunnels between every on-premises site and every AWS VPC.
   • BUse a single AWS Direct Connect connection from one on-premises site and route traffic from other sites through the public internet.
   • CUse AWS Transit Gateway to connect all VPCs and establish AWS Direct Connect connections from each on-premises site to the transit gateway.
   • DDeploy a software-defined WAN (SD-WAN) appliance in each on-premises site and connect directly to each AWS VPC.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has an on-premises ONTAP cluster and a Cloud Volumes ONTAP instance in a cloud environment. They want to use Cloud Manager to automate the creation of a new volume on the cloud instance and then replicate it back to the on-premises cluster. The team also wants to schedule this replication to run every hour. Which Cloud Manager feature should they use?

   • ACreate a volume on the on-premises cluster and use SnapMirror to replicate it to the cloud instance, then schedule the reverse replication.
   • BManually create the volume in the Cloud Manager UI and then use the built-in scheduler to set up hourly SnapMirror replication.
   • CUse Cloud Manager's REST API to create the volume and then configure a SnapMirror relationship with an hourly schedule using the API.
   • DUse the cloud provider's CLI to create the volume and then use Cloud Manager to set up replication.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A large enterprise has a hybrid cloud environment with hundreds of ONTAP systems, including on-premises clusters and Cloud Volumes ONTAP instances across multiple cloud providers. The operations team wants to implement a centralized monitoring and alerting solution that can provide a single pane of glass for all storage resources. They also want to automate the remediation of common issues, such as volume capacity reaching a threshold. Which approach should the architect recommend?

   • AUse ONTAP's built-in event management system and configure email alerts for all systems.
   • BDeploy a separate monitoring agent on each ONTAP system and use a configuration management tool to push remediation scripts.
   • CUse Cloud Manager to monitor all systems and integrate its REST API with a third-party automation platform to trigger remediation workflows.
   • DUse the cloud provider's native monitoring tools for Cloud Volumes ONTAP and a separate tool for on-premises systems.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which security component is responsible for verifying the identity of users and controlling their access to resources?

   • AVPN gateway
   • BStorage virtualization
   • CIdentity and access management (IAM)
   • DLoad balancer
   Reveal Solution Discussion Select an answer first