Security Considerations for a NetApp Hybrid Cloud Environment CERTIFIED-HYBRID-CLOUD-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which requirement ensures that data remains unchanged and uncorrupted during transfer between on-premises and cloud?

   • AAvailability
   • BIntegrity
   • CNon-repudiation
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which NetApp feature provides secure multi-tenancy by isolating tenant data and management?

   • AONTAP SVM (Storage Virtual Machine)
   • BONTAP FlexGroup
   • CONTAP Cloud Tiering
   • DONTAP SnapVault
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which protocol is specifically designed to secure data in transit over IP networks?

   • ASMB
   • BIPsec
   • CNFS
   • DiSCSI
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company runs a NetApp ONTAP cluster on-premises and uses Azure NetApp Files for a DR site. They need to replicate data between the two sites over the public internet. Security policy requires that replication traffic be protected from eavesdropping and that only the ONTAP cluster and the Azure NetApp Files service can communicate. What should you configure?

   • AUse Azure ExpressRoute with private peering and disable public internet access for the ONTAP cluster.
   • BEnable SnapMirror network compression and configure a VPN gateway between the on-premises network and Azure.
   • CEnable TLS on the SnapMirror relationship and restrict the source and destination IP addresses in the network security group (NSG) to the ONTAP cluster and Azure NetApp Files subnet.
   • DConfigure an IPsec tunnel between the ONTAP cluster and Azure NetApp Files and allow all traffic from the on-premises public IP range in the NSG.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A financial services firm must store customer records in an ONTAP-based storage system. Regulatory requirements mandate that data at rest be encrypted with customer-managed keys. The firm also wants to maintain the ability to revoke access to the data immediately if a key is compromised. What should you implement?

   • AUse platform-managed encryption keys in the cloud provider's key vault and enable audit logging on the vault.
   • BEnable NetApp Aggregate Encryption (NAE) and store the keys in the ONTAP cluster's onboard key manager.
   • CEnable NetApp Volume Encryption (NVE) and use an external Key Management Server (KMS) with the keys stored in a hardware security module (HSM).
   • DEnable NetApp SnapLock and configure a retention period for the customer records.
   Reveal Solution Discussion Select an answer first