A ransomware attack has compromised all files on a CIFS share. The volume had a retention policy of five daily Snapshot copies, but unfortunately, no Snapshot copies were available. It was confirmed that the cybercriminal accessed only the share and did not gain access to the NetApp ONTAP cluster.
What command should be executed to prevent the quick restore strategy from being compromised?
Answer : C
Setting snapdir-access to false prevents users accessing the CIFS/NFS share from viewing or deleting Snapshot copies via the .snapshot directory. This secures the Snapshot restore mechanism from being exposed or tampered with in case of another attack through file shares.
Your customer wants their existing iSCSI datastore running on NetApp ONTAP AFF cluster Cluster01 to continue operating even through a complete site failure. They already have another ONTAP AFF cluster Cluster02 in a different data center on their company site. You successfully implemented a SnapMirror active sync relationship between the two clusters. The LUN is replicated and the relationship is healthy.
Which two steps must you take next? (Choose two.)
Answer : A, C
After setting up a SnapMirror active sync relationship, to ensure automatic failover in case of site failure, you must:
Map the LUNs on the secondary site, so they are accessible during a failover.
Change the service policy on the SAN LIFs to enable multipathing and ALUA support, ensuring paths are correctly managed between primary and secondary sites.
A customer wants to replicate between their two NetApp ONTAP clusters but is concerned that replication traffic might slow down normal data traffic. They still have two unused network ports on every node. You recommend using dedicated ports for the Intercluster LIFs, and you are tasked with creating the Intercluster LIFs so that they are on dedicated ports at all times.
Which command must you use before creating InterCluster LIFs?
Answer : D
To ensure Intercluster LIFs are bound to dedicated ports and used only for replication traffic, you must first create a service policy that defines the LIF's role (e.g., intercluster). The network interface service-policy create command allows you to specify that the LIF is intended strictly for intercluster services, ensuring it's isolated from data traffic.
An administrator is setting up SnapMirror SVM replication. One of the source data volumes uses cloud tiering with the snapshot-only tiering policy.
Which cloud tiering policy is supported on the destination volume?
Answer : D
When using SnapMirror SVM replication, the cloud tiering policy on the destination volume must match the source if tiering is to be preserved. The only supported tiering policy in this context is snapshot-only, which moves cold Snapshot blocks to cloud tier. This ensures compatibility during replication.
What are the two modes for Autonomous Ransomware Protection (ARP)? (Choose two.)
Answer : A, D
Autonomous Ransomware Protection (ARP) operates in two modes:
Learning mode: ARP observes and learns baseline workload behaviors to distinguish between normal and abnormal activity.
Active mode: ARP actively monitors and can automatically respond to ransomware-like behavior by alerting or taking protective actions.
As the administrator of a NetApp cluster with multi-admin approval enabled for volume deletes, you have been tasked with deleting a volume. No other administrator is available to approve this request.
What do you need to do to disable multi-admin approval?
Answer : B
When multi-admin approval (MAA) is enabled in ONTAP, it cannot be disabled by a single administrator through standard commands or GUI actions to maintain security integrity. To disable MAA without the required approvals, you must open a NetApp support case to request assistance.
Before you use SnapMirror active sync, which NetApp tool must be used to add the NetApp ONTAP Mediator service?
Answer : D
Before using SnapMirror active sync, the NetApp ONTAP Mediator must be registered and added to the cluster. This is done directly through the ONTAP System Manager, which provides a guided interface to configure and verify the Mediator service integration required for automatic failover.