Question 1

ONTAP's Autonomous Anti-ransomware engine reports a potential ransomware attack. The
administrator finds the majority of the files appear encrypted and disables the share.
What should the administrator do to minimize data loss?

Accepted Answer

B

Explanation: Upon confirming a ransomware attack, the primary goal is to restore data to a clean, pre-attack state. The standard ONTAP recovery procedure involves using the SnapRestore feature to revert the entire volume to a known-good Snapshot copy created before the attack occurred. This action effectively undoes the encryption performed by the ransomware, minimizing data loss to only the changes made between the time the snapshot was taken and the time of the attack. The Autonomous Ransomware Protection (ARP) feature is designed to facilitate this by identifying the last known good recovery points.

Question 2

An administrator wants to use BlueXP Observability to generate notifications whenever a volume in a FlexGroup on a GCP CVO system is nearing capacity. Which option should the administrator use?

Accepted Answer

C

Explanation: BlueXP Observability ingests Event Management System (EMS) events from ONTAP systems as log data. To generate a notification when a FlexGroup volume is nearing capacity, an administrator can configure a Log Monitor. This monitor can be set to query the incoming log data for specific EMS events, such as space.fg.nearly.full or space.volume.nearly.full. When the monitor detects a matching log entry, it triggers a pre-configured notification, directly fulfilling the requirement.

Question 3

An administrator needs to set up a FlexCache volume on a Cloud Volumes ONTAP HA pair. The origin
cluster is an AFF HA pair at a company data center.
How many intercluster LIFs are required at each site?

Accepted Answer

C

Explanation: For intercluster relationships such as cluster peering for FlexCache, NetApp best practices require at least one intercluster logical interface (LIF) on each node that will participate in the communication. The scenario describes two sites, each with an HA pair (two nodes). Therefore, to establish a resilient and highly available peering connection, each site must have a minimum of two intercluster LIFs—one for each node in the respective HA pair. This ensures that if one node fails, the other can maintain the intercluster connection.

Question 4

An administrator must configure a fan-out SnapMirror architecture from an on-premises, four-node
cluster to highly available instances of Cloud Volumes ONTAP (CVO) in both Azure and GCP.
How many Intercluster LIFs are required to connect the three clusters?

Accepted Answer

C

Explanation: This scenario describes a fan-out replication topology from one source cluster to two separate destination clusters in different public clouds. For robust network design, security, and routing isolation between distinct cloud environments, it is a best practice to use a dedicated set of intercluster LIFs on the source cluster for each peer relationship. On-premises cluster (4 nodes): Requires 4 intercluster LIFs for the Azure peer relationship and another 4 intercluster LIFs for the GCP peer relationship. Total = 8 LIFs. Azure CVO HA (2 nodes): Requires 2 intercluster LIFs. GCP CVO HA (2 nodes): Requires 2 intercluster LIFs. The total number of required intercluster LIFs is the sum from all clusters: 8 (on-prem) + 2 (Azure) + 2 (GCP) = 12.

Question 5

Which two network connections are required by the Connector to enable Cloud Tiering from on- premises to a public cloud? (Choose two.)

Accepted Answer

A, D

Explanation: The Cloud Manager Connector requires two primary network connections to enable Cloud Tiering from an on-premises ONTAP cluster. First, it needs an HTTPS connection (port 443) to the on-premises ONTAP cluster's management LIF. This allows the Connector to discover the cluster and use ONTAP APIs to manage tiering policies and operations. Second, the Connector requires an outbound Internet connection to communicate with NetApp's cloud services, including the Cloud Tiering service. This outbound connection is essential for orchestration, licensing, and reporting tiering status back to Cloud Manager.

Question 6

An administrator deploys FSx for ONTAP as a storage solution in their cloud environment. The
administrator cannot mount the file system to their cloud instances in the same VPC.
What should the administrator do?

Accepted Answer

B

Explanation: When an Amazon FSx for NetApp ONTAP file system and the client cloud instances are in the same Virtual Private Cloud (VPC), connectivity issues are most commonly caused by network access control configurations. Security Groups in AWS act as stateful firewalls for resources like EC2 instances and FSx file systems. A failure to mount indicates that the network traffic, likely over NFS (port 2049) or SMB (port 445) protocols, is being blocked. Verifying that the security group associated with the FSx file system has the correct inbound rules to allow traffic from the client instances is the essential first troubleshooting step.

Question 7

An administrator is configuring an iSCSI LUN for use on a CVO HA instance in AWS. Before the LUN
goes into production, the administrator needs to do failover testing for host access.
Which type of IP address must the administrator use?

Accepted Answer

B

Explanation: In a Cloud Volumes ONTAP (CVO) High-Availability (HA) configuration in AWS, client data access for protocols like iSCSI relies on floating IP addresses. A floating IP is a virtual IP address assigned to a data Logical Interface (LIF) that is not permanently bound to a single node's network interface. During a failover event, Cloud Manager automatically updates the AWS VPC route tables to direct traffic destined for the floating IP to the network interface of the surviving node. This mechanism ensures that the host maintains a persistent connection to the iSCSI LUN using the same IP address, enabling seamless failover without requiring host-side reconfiguration.

Question 8

A local ONTAP system has FabricPool configured to a public cloud. Storage use has grown
exponentially due to end-of-year activities. After a few weeks, tiering to the cloud stops.
What should the administrator do?

Accepted Answer

D

Explanation: FabricPool automatically tiers cold data from a performance tier (SSD aggregate) to a cloud tier when the aggregate's used capacity reaches a specific threshold. By default, this tiering-fullness-threshold is 50%. If tiering has stopped, it is most likely because the aggregate's used space has fallen below this threshold after some data was tiered, or the threshold is set too high. The administrator should investigate and, if necessary, adjust the aggregate's tiering fullness threshold to a more appropriate value to resume tiering and manage the space on the performance tier effectively.

Question 9

Refer to the exhibit. An administrator needs to review the IAM role being provisioned for Cloud Data Sense in order to scan S3 buckets. Which two permissions are missing? (Choose two.)

Accepted Answer

C, E

Explanation: The IAM policy in the exhibit is too restrictive for Cloud Data Sense to perform a comprehensive scan of S3 buckets. The official NetApp-recommended policy for the Data Sense IAM role uses wildcards to ensure all necessary read-only permissions are granted. The s3:List permission is required to discover all buckets (e.g., s3:ListAllMyBuckets), and the s3:Get permission is needed to read object data and metadata, including ACLs (s3:GetObjectAcl, s3:GetBucketAcl), bucket policies (s3:GetBucketPolicy), and encryption configurations (s3:GetEncryptionConfiguration). The permissions shown in the exhibit are insufficient and are covered by these two broader, required permissions.

Question 10

An administrator needs to back up their VMware virtual machines from on-premises AFF to AWS S3
using SnapCenter. Which two requirements must be met to enable use of the SnapCenter Plug-in?
(Choose two.)

Accepted Answer

B, C

Explanation: To back up VMware virtual machines from an on-premises AFF system to AWS S3 using SnapCenter, two primary components are required. First, the SnapCenter Plug-in for VMware vSphere must be deployed as a virtual appliance and registered with the vCenter Server (C). This enables SnapCenter to interact with the VMware environment for application-consistent snapshots. Second, to facilitate backups to a cloud destination like AWS S3, the SnapCenter server must be connected to a NetApp BlueXP account (B). BlueXP Cloud Backup service acts as the orchestration layer, managing the S3 bucket and the data transfer from the on-premises SnapVault secondary destination to the cloud object storage.

Question 11

How many VPCs are required to deploy CVO in Google Cloud?

Accepted Answer

C

Explanation: A standard deployment of NetApp Cloud Volumes ONTAP (CVO) in Google Cloud requires two Virtual Private Clouds (VPCs). The first VPC is for the Cloud Manager instance, which serves as the management and orchestration plane for CVO. The second VPC is dedicated to the Cloud Volumes ONTAP instance itself, which handles the data plane operations. This separation is a documented best practice that provides essential network isolation and security between the management and data traffic, ensuring a robust and secure cloud storage environment.

Question 12

Which networking component must be configured to provision volumes from Cloud Volume Service in Google Cloud?

Accepted Answer

C

Explanation: NetApp Cloud Volumes Service (CVS) for Google Cloud is deployed within a dedicated, NetApp-managed Virtual Private Cloud (VPC). To allow Google Compute Engine instances and other resources within a customer's VPC to access and mount the provisioned volumes, a direct, private network connection is required. This is achieved by establishing a VPC Peering connection between the customer's VPC and the NetApp service VPC. This peering allows the two networks to communicate using internal, private IP addresses as if they were part of the same network, which is a mandatory step for service provisioning and access.

Question 13

A company is setting up FlexCache in CVO to scale-out an on-premises system. What should the administrator do on the on-premises system?

Accepted Answer

B

Explanation: To enable FlexCache between two separate clusters, such as an on-premises system and a Cloud Volumes ONTAP (CVO) instance, a secure communication channel must be established. This is achieved by creating a cluster peer relationship. A fundamental step in this process is generating a passphrase on one cluster, which is then used by the second cluster to authenticate and complete the peering connection. This action is a primary prerequisite before a FlexCache volume can be created on the CVO instance to cache data from the on-premises origin volume.

Question 14

An administrator needs to monitor their storage and compute resources in their hyperscaler and their private data center. Which tool meets this requirement?

Accepted Answer

C

Explanation: BlueXP observability provides a unified, single-pane-of-glass view for monitoring and troubleshooting a complete hybrid multicloud environment. It is designed to collect and analyze telemetry data from both on-premises private data centers and public cloud hyperscalers. This service allows administrators to monitor the health, performance, and utilization of both storage (e.g., ONTAP systems) and compute resources (e.g., VMs, containers) across their entire estate, directly addressing the requirement in the question. It integrates the capabilities formerly known as NetApp Cloud Insights.

Question 15

An administrator is preparing to automate firmware updates with the help of Active IQ Digital Advisor. Which automation tool should the administrator use?

Accepted Answer

C

Explanation: Active IQ Digital Advisor is designed to provide actionable intelligence to simplify the administration of NetApp environments. For operational tasks such as firmware updates (disk, shelf, Service Processor), Active IQ identifies systems that require updates and directly generates downloadable Ansible playbooks. Administrators can then execute these playbooks to automate the remediation process, ensuring consistency and reducing manual effort. This tight integration makes Ansible the designated automation tool for implementing recommendations from Active IQ.

Free NetApp NS0-304 Actual Exam Questions