After setting up a new cluster peering relationship between a production site and a new DR site, the customer mentions that the communication for this peer needs to be secured to help deter "man in the middle" attacks.What can you do on the NetApp end to secure the existing cluster peering?
Answer(s): C
To secure an existing cluster peering relationship, you can modify it to enable encryption by using the -encryption-protocol-proposed option. This ensures that intercluster SnapMirror traffic is encrypted, helping protect against man-in-the-middle attacks.
An administrator wants to automatically prevent volumes that are used in a SnapMirror relationship from running out of space.Which of the following volume snapshot autodelete modify parameters would ensure that this goal can be accomplished?
Setting -commitment try on the volume snapshot autodelete modify command allows ONTAP to automatically delete eligible Snapshot copies when a volume is running low on space, but only if it can do so without violating SnapMirror or retention policies. This ensures volumes in SnapMirror relationships stay healthy and do not run out of space unexpectedly.
Which two of the following need to be enabled to use tamper-proof Snapshot copies? (Choose two.)
Answer(s): A,D
To use tamper-proof Snapshot copies (e.g., SnapLock-based WORM Snapshots):The Compliance Clock must be initialized to enforce retention periods that cannot be bypassed.A NetApp ONTAP One license includes the SnapLock feature, which enables tamper-proof snapshot functionality.
Your IT company is using NetApp FlexClone on a two node AFF cluster with 20TB of data to rapidly provision environments for each developer.Each environment is replicated to an eight node AFF C-Series cluster at a DR site using SnapMirror. You notice that the environments are consuming significantly more disk space on the destination cluster than on the source cluster.In this scenario, which action will minimize the disk usage on the destination cluster?
Answer(s): D
FlexClone volumes are space-efficient on the source cluster because they share blocks with the parent. However, SnapMirror transfers them as full physical copies by default unless you re-create them as FlexClone volumes on the DR site.Enabling FlexClone copies on the destination will preserve their space efficiency and minimize disk usage on the DR cluster.
A customer wants to enable tamper-proof Snapshot copies on volume LockingVolume, which is hosted on SVM LockingSVM. They have created the Snapshot policy, including the required retention set. However, when they apply the policy to a volume, the Snapshot copies are not locked.Which command must the customer issue before tamper-proof Snapshot copies can be enabled?
To enable tamper-proof (locked) Snapshot copies using SnapLock, the SnapLock Compliance Clock must be initialized on all nodes in the cluster. Without initializing this clock, locked Snapshots cannot be created, even if the policy and retention settings are configured.
Post your Comments and Discuss Network Appliance NS0-528 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NS0-528 content, but please register or login to continue.