Drive Encryption Features CERTIFIED-IMPLEMENTATION-ENGINEER-SAN-E-SERIES Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A storage administrator is planning to enable drive encryption on an E-Series system that hosts a mix of workloads, including a high-transaction-rate database and a file server with large sequential reads. The administrator is concerned about the performance impact on the database. What should the administrator do to minimize the impact?

   • AMove the database to a separate storage system without encryption.
   • BEnable encryption and monitor the performance; the impact is expected to be minimal.
   • CEnable encryption only on the volumes that contain the file server data.
   • DUse a higher-performance drive tier for the database volumes.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of drive encryption in an E-Series storage system?

   • ATo protect data at rest from unauthorized access if drives are removed or stolen
   • BTo improve read and write performance by compressing data on the drives
   • CTo reduce the physical space required for storing data on the drives
   • DTo prevent unauthorized access to data over the network
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the main advantage of using cryptographic erase for secure data disposal?

   • AIt reduces the cost of the storage system
   • BIt is faster and more reliable than physical destruction or overwriting
   • CIt allows the drives to be reused without any further action
   • DIt increases the storage capacity of the drives
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization is implementing drive encryption on E-Series systems and wants to centralize key management to meet security policy requirements. The security team requires that encryption keys be stored outside the storage system. Which key management option should the administrator use?

   • ADisable encryption and rely on the data center's physical security.
   • BUse an external key management server (KMS) that supports the E-Series system.
   • CUse the system's internal key management and store the key file on a network share.
   • DUse a passphrase that is manually entered each time the system boots.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a key benefit of using drive encryption in an E-Series system?

   • AIt allows for secure data disposal by cryptographic erase
   • BIt eliminates the need for any backup or disaster recovery procedures
   • CIt automatically encrypts data during transmission over the network
   • DIt increases the storage capacity of the drives by removing redundant data
   Reveal Solution Discussion Select an answer first