Implement Security Hardening CERTIFIED-STORAGE-INSTALLATION-ENGINEER-ONTAP Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is consolidating multiple ONTAP clusters into one. They have strict security requirements: administrative access must be restricted to a specific IP range, all management traffic must be encrypted, and only certain users should be able to create volumes. The administrator needs to implement these requirements with minimal disruption. What should they do?

   • AEnable IPsec for all traffic and use the built-in 'admin' role for volume creation.
   • BUse VLANs to isolate management traffic and assign the 'vsadmin' role to users who need to create volumes.
   • CConfigure firewall rules to restrict management access to the IP range, enable TLS for management, and create a custom RBAC role for volume creation.
   • DEnable SSH for management and use the 'security login' command to restrict access.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of ONTAP security compliance reports?

   • ATo provide a backup of the system configuration
   • BTo assess the system's compliance with security policies and identify vulnerabilities
   • CTo automatically fix all security vulnerabilities
   • DTo monitor real-time network traffic
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company wants to protect data in transit between its ONTAP cluster and remote offices over the internet. The data is accessed via SMB and NFS. What should the administrator implement?

   • AUse SSH tunneling for all data access.
   • BEnable SMB encryption and NFS Kerberos privacy.
   • CEnable TLS on the network interfaces.
   • DConfigure IPsec VPN between the remote offices and the cluster.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A hospital must encrypt all patient data at rest on its ONTAP cluster. The storage team wants to encrypt data on a per-volume basis to allow different encryption keys for different departments. What should they configure?

   • AEnable NetApp Aggregate Encryption (NAE) on the aggregate that holds the volumes.
   • BEnable self-encrypting drives (SEDs) on the storage shelves.
   • CUse ONTAP's built-in filesystem encryption for each volume.
   • DEnable NetApp Volume Encryption (NVE) on each volume that contains patient data.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the difference between NetApp Aggregate Encryption (NAE) and NetApp Volume Encryption (NVE)?

   • ANAE encrypts the entire aggregate, while NVE encrypts individual volumes
   • BNAE is used for data in transit, while NVE is used for data at rest
   • CNAE is a software feature, while NVE requires dedicated hardware
   • DNAE is only available on AFF systems, while NVE is available on all systems
   Reveal Solution Discussion Select an answer first