Cyber Resiliency Solutions CERTIFIED-TECHNOLOGY-SOLUTIONS-PROFESSIONAL Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A government agency stores classified data on an ONTAP system. The agency requires that data be encrypted at rest and that access be restricted to authorized personnel only. The security team is concerned about insider threats. Which combination of controls provides the strongest protection against unauthorized access by insiders?

   • AEnable NVE and use RBAC to restrict administrative access
   • BImplement application-level encryption and use multi-factor authentication for all access
   • CEnable NetApp ransomware detection and set up audit logging
   • DUse NSE and configure firewall rules to block external access
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the purpose of an air-gapped backup in ransomware protection?

   • ATo compress backup data to save space
   • BTo provide faster backup performance
   • CTo physically or logically isolate backups from the production network
   • DTo automatically detect ransomware infections
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which method is commonly used to validate the effectiveness of backup and recovery procedures?

   • AChanging user passwords
   • BPerforming a test restore
   • CReviewing firewall logs
   • DUpdating antivirus signatures
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A healthcare provider must comply with data protection regulations that require encryption of patient data at rest and in transit. The storage team is configuring ONTAP for a new electronic health record (EHR) system. Which combination of features should the team implement to meet these requirements?

   • AEnable NVE for at-rest encryption and use IPsec for data-in-transit encryption
   • BUse SnapMirror with encryption to protect data in transit and enable SMB encryption
   • CEnable NSE for at-rest encryption and rely on the storage network's physical security
   • DEnable NVE and configure the storage to use HTTPS for management access only
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company's storage administrator is reviewing the cyber resiliency posture. The administrator notes that the company has robust backup and recovery procedures, but the security team has identified that phishing attacks are a common entry point for ransomware. What is the most important additional measure to improve cyber resiliency?

   • APurchase cyber insurance to cover potential losses
   • BImplement user awareness training and email filtering to reduce phishing success
   • CAdd more immutable snapshots to protect against ransomware
   • DIncrease the frequency of backups to reduce RPO
   Reveal Solution Discussion Select an answer first