Security Considerations for a NetApp Hybrid Cloud Environment CERTIFIED-HYBRID-CLOUD-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which industry standard is specifically designed for organizations that handle payment card data?

   • AGDPR
   • BPCI DSS
   • CISO 27001
   • DNIST SP 800-53
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A healthcare organization is migrating patient records from an on-premises NetApp storage system to a cloud provider. The data is sensitive and must be encrypted both at rest and in transit. The migration must also maintain an audit trail of who accessed the data during the transfer. What should you do?

   • AUse NetApp Cloud Sync with TLS encryption and enable Cloud Sync audit logging to track user activities during the migration.
   • BUse NetApp SnapMirror to replicate the data to the cloud and enable SnapMirror encryption.
   • CUse a physical data transfer device and encrypt the data with BitLocker before shipping.
   • DUse a VPN tunnel and rely on the cloud provider's default encryption for data at rest.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A multinational company is designing a hybrid cloud solution with NetApp storage. They must comply with GDPR, which requires that personal data of EU citizens be protected. The company wants to use a public cloud provider for some workloads. What is the most important security consideration when selecting a cloud region?

   • AEnsure the cloud provider offers encryption at rest and in transit for all data.
   • BEnsure the cloud provider offers a private connection option like Azure ExpressRoute or AWS Direct Connect.
   • CEnsure the cloud region is located within the EU to meet data residency requirements.
   • DEnsure the cloud provider has a SOC 2 Type II certification.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A large enterprise uses ONTAP for storage and has a complex Active Directory (AD) environment with multiple domains. They want to implement role-based access control (RBAC) for storage administrators, but they also want to use their existing AD groups to manage permissions. The security team is concerned about the risk of a single compromised AD account granting broad access. What is the best approach?

   • ACreate separate ONTAP local users for each storage administrator and assign roles individually.
   • BUse a single AD group for all storage administrators and assign them the 'admin' role.
   • CDisable AD integration and use ONTAP's built-in authentication only.
   • DUse ONTAP's built-in RBAC and map AD groups to ONTAP roles, but also enforce multi-factor authentication (MFA) for all storage administrators.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which NetApp feature can be used to securely replicate data to the cloud with encryption in transit?

   • ACompression
   • BFlexClone
   • CDeduplication
   • DSnapMirror to cloud
   Reveal Solution Discussion Select an answer first