Implement Security Hardening CERTIFIED-STORAGE-INSTALLATION-ENGINEER-ONTAP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a common threat that ONTAP security hardening aims to mitigate?

   • AHardware failure of disk drives
   • BSlow network performance
   • CInsufficient storage capacity
   • DUnauthorized administrative access to the storage system
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of ONTAP security hardening?

   • ATo reduce the attack surface by applying configuration best practices that mitigate common threats
   • BTo ensure all data is backed up daily to an external site
   • CTo automatically patch all software vulnerabilities without administrator intervention
   • DTo increase the performance of the storage system by optimizing network settings
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a multi-tenant ONTAP cluster where each tenant has its own SVM. They need to ensure that tenants cannot access each other's data, and that all data traffic is encrypted. What should they implement?

   • AUse separate aggregates for each tenant and enable NVE on each volume.
   • BUse RBAC to restrict access to each SVM and enable SMB encryption.
   • CUse VLANs to isolate each SVM's network traffic and enable IPsec for all data traffic.
   • DUse firewall rules to block inter-tenant traffic and enable TLS for all data protocols.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a recommended practice for reviewing audit logs?

   • ADelete logs after 24 hours to save storage space
   • BOnly review logs when a security breach is suspected
   • CRegularly review logs for anomalies and unauthorized access attempts
   • DAllow all users to modify audit logs
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of RBAC (Role-Based Access Control) in ONTAP?

   • ATo monitor network traffic for suspicious activity
   • BTo encrypt data at rest on the storage system
   • CTo grant users only the permissions necessary for their job functions
   • DTo provide a backup of configuration files
   Reveal Solution Discussion Select an answer first