Architectural Components CERTIFIED-HYBRID-CLOUD-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is deploying Cloud Volumes ONTAP in a VPC on AWS. The storage will be accessed by applications in a different VPC that is connected via VPC peering. The security team mandates that all traffic between the VPCs must be encrypted in transit, and the storage must not be accessible from the public internet. The architect also needs to ensure that the Cloud Volumes ONTAP high-availability (HA) pair can communicate for replication. Which configuration should the architect implement?

   • APlace Cloud Volumes ONTAP in a public subnet and use a security group to restrict access to the application VPC's CIDR.
   • BUse a VPN connection between the two VPCs and disable VPC peering to ensure encryption.
   • CEnable encryption in transit on the Cloud Volumes ONTAP HA pair and use VPC peering for application access, ensuring the HA pair's replication traffic is encrypted.
   • DUse AWS PrivateLink to connect the application VPC to the Cloud Volumes ONTAP VPC and rely on the default VPC peering encryption.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of data replication in a hybrid cloud?

   • ATo compress data to save storage space
   • BTo encrypt data before it is transmitted over the network
   • CTo reduce the total amount of data stored by removing duplicates
   • DTo create copies of data in multiple locations for availability and disaster recovery
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is designing a hybrid cloud architecture that includes on-premises ONTAP systems and Cloud Volumes ONTAP instances in a public cloud. The architecture must support both active-active and active-passive workload configurations, and the network must provide low-latency connectivity between the sites. The security team requires that all data in transit be encrypted. Which combination of components should the architect include?

   • AUse a software-defined WAN (SD-WAN) solution and rely on its encryption for all traffic.
   • BUse a dedicated private connection (e.g., AWS Direct Connect) for low-latency connectivity and enable encryption in transit on the ONTAP systems.
   • CUse a site-to-site VPN over the public internet for connectivity and rely on the VPN's built-in encryption.
   • DUse a public cloud load balancer to route traffic between the sites and enable encryption at the application layer.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of encryption in a hybrid cloud deployment?

   • ATo speed up data transfer between on-premises and cloud
   • BTo protect data confidentiality by making it unreadable without the proper keys
   • CTo reduce storage costs by compressing data
   • DTo ensure data is available even if a site fails
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is planning a lift-and-shift migration of a VMware-based application from an on-premises data center to Azure. The application currently runs on NFS datastores backed by ONTAP storage. The team wants to keep the on-premises ONTAP system as the primary copy for a few months and then fail over to Azure. They require the ability to move the storage between environments without reconfiguring the application, and they want to use a single replication mechanism. Which approach best satisfies these requirements?

   • ACopy the NFS datastore to Azure Managed Disks and attach them to Azure VMware Solution clusters, using Azure Site Recovery for ongoing replication.
   • BUse Azure NetApp Files as the target, replicate data from on-premises ONTAP using SnapMirror, and mount the volume as an NFS datastore in Azure VMware Solution.
   • CDeploy Cloud Volumes ONTAP in Azure, create a FlexVol volume, establish SnapMirror from the on-premises ONTAP system, and present the volume as an NFS datastore to Azure VMware Solution.
   • DExport the on-premises NFS datastore directly to Azure VMware Solution over a VPN and keep it mounted as the primary storage during the transition.
   Reveal Solution Discussion Select an answer first