NetApp Hybrid Cloud Control Planes CERTIFIED-HYBRID-CLOUD-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which task is typically performed by a control plane when managing Cloud Volumes ONTAP?

   • AInstalling physical disks into cloud data centers.
   • BConfiguring the cloud provider's physical network switches.
   • CCreating and managing volumes and snapshots.
   • DBilling for cloud usage.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization uses NetApp Cloud Manager to manage both on-premises ONTAP clusters and Cloud Volumes ONTAP instances in AWS. The security policy mandates that user authentication be centralized in the corporate identity provider (IdP) and that multi-factor authentication (MFA) be enforced for all administrative access. The architect needs to configure Cloud Manager to meet this policy. What should the architect do?

   • AUse the cloud provider's IAM service to authenticate users and map those identities to Cloud Manager roles.
   • BCreate local user accounts in Cloud Manager and enable the built-in MFA option for each account.
   • CEnable LDAP authentication in Cloud Manager and require users to connect through a VPN to reach the Cloud Manager endpoint.
   • DConfigure Cloud Manager to use the corporate IdP via SAML 2.0 and enforce MFA at the IdP level.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which capability is provided by NetApp Cloud Manager as a control plane?

   • AReal-time data replication between on-premises and cloud storage.
   • BAutomated provisioning of Cloud Volumes ONTAP instances in public clouds.
   • CNetwork traffic routing between cloud VPCs and on-premises networks.
   • DPhysical installation of storage hardware in on-premises data centers.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which reporting capability is typically provided by a control plane?

   • ACreating financial invoices for cloud services.
   • BGenerating reports on storage capacity usage and trends.
   • CTracking employee attendance.
   • DProviding a map of the physical data center layout.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A startup is deploying Cloud Volumes ONTAP in Google Cloud for the first time. The architect wants to use NetApp Cloud Manager to provision the instance. The security team requires that the Cloud Volumes ONTAP instance's data be encrypted at rest using customer-managed keys (CMEK). What must the architect configure during provisioning?

   • ADeploy Cloud Volumes ONTAP without encryption and use a separate encryption gateway to encrypt data in transit only.
   • BSelect a Cloud Volumes ONTAP instance type that supports encryption and provide a customer-managed key from Google Cloud KMS.
   • CProvision the instance with default encryption and then enable encryption at rest after deployment using ONTAP CLI.
   • DUse the cloud provider's default encryption and rely on Cloud Manager's encryption feature to encrypt the data.
   Reveal Solution Discussion Select an answer first