Management Security Features in SANtricity System Manager and SANtricity Unified Manager CERTIFIED-IMPLEMENTATION-ENGINEER-SAN-E-SERIES Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of integrating SANtricity Unified Manager with Active Directory?

   • ATo provide a backup of the storage configuration
   • BTo replace the need for any local user accounts
   • CTo enable SNMP monitoring
   • DTo allow users to authenticate using their existing corporate credentials
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a best practice for securing the management interface of an E-Series storage system?

   • AEnable all available services for maximum functionality
   • BUse the default passwords for all accounts
   • CDisable unnecessary management services
   • DAllow management access from any IP address
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security auditor requires that all administrative actions on the SANtricity System Manager be recorded with the username, timestamp, and action details. The auditor also wants to know if any user attempted to perform an unauthorized action. What should you configure?

   • AEnable audit logging and review the audit log for failed login attempts and unauthorized actions.
   • BEnable password policy and account lockout.
   • CConfigure syslog forwarding to a central server.
   • DEnable SNMP traps to send alerts for all configuration changes.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A hospital is integrating its SANtricity System Manager with the existing Active Directory domain. The security team requires that storage administrators authenticate with their existing domain credentials, but the storage team must not be able to create or modify local accounts on the array. Which configuration should you implement?

   • AEnable RADIUS authentication and map all storage administrators to a single shared local account.
   • BConfigure LDAP/AD authentication and disable local user creation for non-root administrative accounts.
   • CConfigure AD authentication but leave local account creation enabled for all users.
   • DCreate local accounts for each storage administrator and synchronize passwords with AD using a scheduled script.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to use its existing Active Directory for authentication to SANtricity System Manager. The security team requires that password policies be enforced by AD, not by the array. What should you do?

   • AUse RADIUS for authentication instead of AD.
   • BConfigure AD authentication and disable local password policy enforcement for AD users.
   • CCreate local accounts for all users and synchronize passwords with AD.
   • DConfigure AD authentication but keep local password policies enabled.
   Reveal Solution Discussion Select an answer first