Implement Security Hardening CERTIFIED-STORAGE-INSTALLATION-ENGINEER-ONTAP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which ONTAP tool is used to assess the security configuration of the system?

   • APerformance Monitor
   • BSnapMirror
   • CAutoSupport
   • DSecurity Compliance Scanner
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security team suspects that a former employee may have accessed the ONTAP cluster using a compromised admin account. They need to determine what actions were taken and when. The audit log is enabled, but they are unsure if it captures all relevant events. What should they do?

   • AReview the audit log for the admin account's login and command history, and verify that the audit log includes all administrative operations.
   • BReview the cluster's event log for security-related events.
   • CCheck the system log for the admin account's activity.
   • DUse the 'security login show' command to see when the account was last used.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is deploying a new ONTAP cluster and wants to ensure that all data at rest is encrypted with minimal performance impact. They plan to use NetApp Volume Encryption (NVE). What is a key consideration when enabling NVE?

   • ANVE requires self-encrypting drives (SEDs) to function.
   • BNVE encrypts data at the aggregate level, not the volume level.
   • CNVE can only be enabled on new volumes, not existing ones.
   • DNVE requires an external key management server (KMS) to store encryption keys.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is preparing for a security audit. They need to demonstrate that their ONTAP cluster is compliant with internal policies, which include encryption of all data at rest and secure administration access. The auditor wants a single report that shows the status of these controls. What should the administrator provide?

   • AA custom script that runs 'security volume show' and 'security login show' and combines the output.
   • BThe ONTAP security compliance report, which includes encryption status and administrative access settings.
   • CThe audit log, which shows all administrative actions and encryption events.
   • DThe system log, which includes security-related messages.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team wants to regularly assess the ONTAP cluster's compliance with internal security policies, including checking for weak passwords, open network ports, and unencrypted volumes. What should they use?

   • ARun the ONTAP security compliance report and review the findings.
   • BUse the 'network port show' command to identify open ports.
   • CReview the audit log for failed login attempts.
   • DUse the 'security login show' command to check passwords and open ports.
   Reveal Solution Discussion Select an answer first