ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 33 - NS0-304 discussion

Report
Export

ONTAP's Autonomous Anti-ransomware engine reports a potential ransomware attack. The administrator finds the majority of the files appear encrypted and disables the share.

What should the administrator do to minimize data loss?

A.
Create a FlexClone using the locked snapshot and re-enable the share
Answers
A.
Create a FlexClone using the locked snapshot and re-enable the share
B.
Perform a SnapRestore using the weekly snapshot and re-enable the share
Answers
B.
Perform a SnapRestore using the weekly snapshot and re-enable the share
C.
Rehost the volume to a different SVM and create a new share
Answers
C.
Rehost the volume to a different SVM and create a new share
D.
Take a manual snapshot and re-enable the share
Answers
D.
Take a manual snapshot and re-enable the share
Suggested answer: B

Explanation:

When dealing with a potential ransomware attack where files appear encrypted, it is crucial to restore the affected data to a point before the corruption occurred. The best course of action in this scenario is to perform a SnapRestore using a known good weekly snapshot and then re-enable the share. Here's how:

Assess the Snapshots: Verify that you have snapshots that predate the ransomware attack. These snapshots should be intact and free from encryption or corruption.

Perform a SnapRestore: Use the SnapRestore operation to quickly revert the entire volume to the state captured in the selected weekly snapshot. SnapRestore is efficient because it does not involve data movement; it simply reverts pointers in the filesystem.

Re-enable the Share: After successfully reverting the volume to a good state, the share can be safely re-enabled, allowing users to access the clean, restored data.

Verify System Integrity and Security: Before re-enabling the share, ensure that all system vulnerabilities are addressed to prevent future attacks. Implement improved security measures as needed.

For more details on using SnapRestore in ONTAP systems, refer to the NetApp documentation on data protection and recovery: NetApp SnapRestore Documentation.

asked 23/09/2024
mohamed mamdouh
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first