Security Considerations for a NetApp Hybrid Cloud Environment CERTIFIED-HYBRID-CLOUD-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is migrating a large dataset from on-premises NetApp storage to a cloud object store. The data is sensitive and must be encrypted at rest and in transit. The migration must be completed within a tight deadline. The company has a high-bandwidth connection to the cloud provider. What is the most efficient way to ensure data is encrypted during the migration?

   • AUse a migration tool that supports TLS encryption and enable server-side encryption on the target object store.
   • BUse a VPN connection and rely on the VPN's encryption for both in-transit and at-rest protection.
   • CUse a physical data transfer device and encrypt the data with hardware encryption.
   • DEncrypt the data with a third-party encryption tool before transferring it, and then decrypt it after the transfer.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which attack vector is particularly relevant when extending an on-premises network to a cloud environment?

   • AInsider threat from a disgruntled employee
   • BPhysical damage to on-premises hardware
   • CPower outage in the cloud provider's data center
   • DExposure of management interfaces to the internet
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which cloud service is used to manage user identities and access to cloud resources?

   • AGoogle Cloud Storage
   • BAWS Identity and Access Management (IAM)
   • CAmazon S3
   • DAzure Virtual Network
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security operations center (SOC) is monitoring a NetApp hybrid cloud environment. They have set up audit logging on ONTAP and are forwarding logs to a SIEM. They notice that there are many failed login attempts from a specific IP address, but no successful logins. The SOC wants to automatically block this IP address to prevent further attempts. What is the best approach?

   • AConfigure ONTAP to automatically lock out the IP address after a certain number of failed attempts.
   • BIgnore the failed attempts because they are not successful and do not pose a threat.
   • CCreate a security policy in the SIEM that automatically updates the firewall rules to block the IP address.
   • DManually add the IP address to the ONTAP export policy to deny access.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which NetApp feature provides encryption for data at rest on ONTAP systems?

   • ANetApp Active IQ
   • BNetApp Volume Encryption (NVE)
   • CNetApp FlexClone
   • DNetApp SnapMirror
   Reveal Solution Discussion Select an answer first