NS0-594 Practice Tests - NetApp Support Engineer, ONTAP Exam

Prévia do material em texto

1 / 7
Exam : NS0-594
Title :
https://www.passcert.com/NS0-594.html
NetApp Support Engineer,
ONTAP Exam
2 / 7
1.A volume uses mixed security style. A directory in the volume previously had NTFS effective security
after an SMB administrator applied an NTFS ACL. An NFSv3 administrator then changed the mode bits
on that same directory. SMB users who had access through the NTFS ACL can no longer open files in
the directory.
What explains the change in access?
A. The export policy superseded the SMB share and file ACLs.
B. The directory now uses UNIX effective security.
C. ONTAP converted the entire volume from mixed security style to UNIX security style.
D. The SMB server stopped applying file-level authorization checks to that directory.
Answer: B
Explanation:
On a mixed-security-style volume, the effective security style is determined at the file or directory level.
When an NFSv3 client modifies permissions, the affected object uses UNIX mode bits and therefore has
UNIX effective security. The volume itself remains mixed, so option C is incorrect. Export policy
evaluation does not replace SMB share or file-level authorization, which eliminates option A. SMB clients
can access data with UNIX effective security when authentication, name mapping, and UNIX
permissions allow it; ONTAP does not stop performing file-level authorization as described in option D.
Reference: Learn about ONTAP NAS security styles
2.An NFS client mounted a volume successfully while its export policy rule used the client's IP address in
-clientmatch. After the rule was changed to use the client's hostname, new mount attempts are
denied. Restoring the IP address immediately restores access. A DNS query initiated from the data SVM
cannot resolve the client hostname.
What should the support engineer do first?
A. Restore DNS service for the data SVM and verify resolution of the client hostname.
B. Replace the rule with a netgroup and configure an NIS domain on the data SVM.
C. Move the NFS data LIF to a port on the node that owns the volume's aggregate.
D. Add a local UNIX user with a UID matching the account presented by the NFS client.
Answer: A
Explanation:
ONTAP uses the DNS configuration of the data SVM when it must resolve certain hostname-based client
matches. The IP-based rule works, the hostname-based rule fails, and name resolution from the SVM is
unsuccessful, so DNS service for the SVM is the first issue to correct. A netgroup would change the
matching design without resolving the demonstrated DNS failure. Data LIF placement relative to the
aggregate owner does not determine whether a hostname matches an export rule. UNIX user lookup
occurs after the client has matched the rule and does not explain why changing only -clientmatch
caused the failure.
Reference: Add a rule to an ONTAP NFS export policy
3.An NFS user named analytics is denied access to a directory in a mixed-security-style volume. The
client matches an export policy rule that permits read-write access, and the directory's UNIX mode bits
permit the requested operation. Storage-Level Access Guard is also applied to the volume and grants
access to CORP\analytics. A name-mapping check shows that the UNIX user analytics does not
map to a Windows identity.
3 / 7
What should the support engineer correct?
A. Repair the UNIX-to-Windows mapping so analytics maps to the permitted CORP identity.
B. Change the volume from mixed to NTFS security style before allowing NFS access.
C. Remove Storage-Level Access Guard because it is evaluated only for SMB sessions.
D. Modify the export rule to grant superuser access to the address of the NFS client.
Answer: A
Explanation:
Storage-Level Access Guard is an additional authorization layer that applies to NAS access, including
NFS. Because it uses NTFS permissions, a UNIX user must map to a Windows identity before ONTAP
can evaluate the user against the Storage-Level Access Guard ACL. Repairing the mapping to the
permitted CORP identity addresses the failed authorization. Converting the volume to NTFS security
style is unnecessary. Storage-Level Access Guard is not limited to SMB, and export-policy superuser
handling does not replace the required identity mapping or the Storage-Level Access Guard check.
Reference: Learn about secure ONTAP SMB file access by using Storage-Level Access Guard
4.The system health status show command reports a degraded state. A support engineer needs
to identify the active alert, the affected resource, the probable cause, and the corrective actions recorded
by ONTAP.
Which command provides the required details?
A. system health config show -instance
B. system health alert definition show -instance
C. system health alert show -instance
D. system health subsystem show -instance
Answer: C
Explanation:
system health alert show -instance displays detailed information about generated alerts,
including the node, resource, severity, probable cause, possible effect, and corrective actions. system
health config show -instance describes health-monitor configuration and status. system
health alert definition show -instance displays alert definitions that the health monitors can
generate, not the currently active alert instances. system health subsystem show -instance
reports aggregated subsystem health and outstanding-alert counts but does not provide the full active-
alert details requested.
Reference: Commands for monitoring the health of your ONTAP system
5.A node has rebooted after a panic. Technical support wants to determine whether the core dump is still
being saved and, if so, review the number of blocks already written.
Which command should the support engineer run?
A. system node coredump config show
B. system node coredump reports show
C. system node coredump show -instance
D. system node coredump status
Answer: D
Explanation:
system node coredump status reports the status of core dumps. When ONTAP is saving a dump
4 / 7
to a core file, the output includes the core file name, the total number of blocks to save, and the number
already saved. The configuration command shows core-dump settings, while the reports command
manages application core reports. system node coredump show provides basic information about
core dump files but is not the command that reports the active save progress described in the scenario.
Reference: system node coredump status
6.A synchronous SnapMirror relationship is operating in Sync mode. A network outage places the
relationship in the OutofSync state, but client I/O continues on the source volume. No administrator has
quiesced or broken the relationship.
After replication connectivity is restored, what should the support engineer expect?
A. The destination must be initialized from a new baseline before replication can continue.
B. Source I/O must be stopped manually before ONTAP permits a resynchronization.
C. ONTAP automatically attempts to return the relationship to the InSync state.
D. The relationship remains out of sync until an administrator issues a break operation.
Answer: C
Explanation:
In Sync mode, source I/O is allowed to continue when a synchronous SnapMirror relationship becomes
OutofSync. When the failure was caused by an event such as a network outage, ONTAP automatically
initiates resynchronization after the underlying condition is corrected. A new baseline initialization is not
normally required, and manually stopping source I/O is not part of Sync-mode recovery. Administrator-
initiated snapmirror quiesce or snapmirror break operations do not trigger automatic
resynchronization, but neither operation occurred in this scenario.
Reference: Learn about ONTAP SnapMirror synchronous disaster recovery
7.ONTAP reports that a disk shelf is online but does not have redundant paths to a controller. A support
engineer wants to see the initiator and target path information between each node and the shelf.
Which command should the engineer use?
A. storage shelf show -errors
B. storage shelf show -connectivity
C. storage shelf show -coolingD. storage shelf show -power
Answer: B
Explanation:
storage shelf show -connectivity displays connectivity from the nodes to each storage shelf,
including controller, initiator, and target path information. This is the relevant view for confirming whether
redundant shelf paths are present. The -errors option lists unresolved customer-actionable shelf
errors but does not provide the requested path layout. The -cooling and -power options report
environmental and power-component information rather than controller-to-shelf connectivity.
Reference: ONTAP commands for displaying information about storage shelves
8.A node is serving data normally, but its BMC cannot be reached over the management network. The
support engineer needs to verify whether the BMC network interface is enabled and review its link state,
IP address, netmask, gateway, and setup status.
Which command provides this information?
5 / 7
A. system service-processor network show -instance
B. system service-processor image show -instance
C. system service-processor image update-progress show
D. system service-processor network auto-configuration show
Answer: A
Explanation:
system service-processor network show -instance displays detailed SP or BMC network
information, including whether the interface is enabled, link status, IP addressing, gateway, setup status,
and a setup failure reason when applicable. The image commands report firmware image or update
information. The automatic-configuration command reports the cluster-wide automatic network
configuration but does not provide all of the node-specific interface and setup details required by the
scenario.
Reference: ONTAP commands for Service Processor management
9.A support engineer suspects a problem with the HA interconnect between two nodes. The engineer
needs to view the status of each HA interconnect link and the interconnect RDMA status.
Which command should the engineer run?
A. network port show -ipspace Cluster -instance
B. network interface show -vserver Cluster -instance
C. storage failover show -instance
D. system ha interconnect status show -instance
Answer: D
Explanation:
system ha interconnect status show -instance reports HA interconnect link state and
RDMA status, with the exact fields varying by controller model. The Cluster IPspace commands display
cluster-network ports or cluster LIFs, which are separate from the HA interconnect being investigated.
storage failover show -instance reports storage-failover state and interconnect availability but
does not provide the requested HA interconnect RDMA detail.
Reference: system ha interconnect status show
10.A support engineer needs a live view of the IOPS, throughput, and latency currently achieved by each
QoS workload in the cluster.
Which command provides this view?
A. qos statistics workload characteristics show
B. qos statistics workload latency show
C. qos statistics workload performance show
D. qos statistics performance show
Answer: C
Explanation:
qos statistics workload performance show reports current IOPS, throughput, and latency for
each QoS workload. The characteristics command includes IOPS, throughput, request size, read
percentage, and concurrency, but not the requested latency view. The workload latency command
breaks latency down by ONTAP subsystem rather than providing the requested IOPS and throughput
columns. qos statistics performance show presents performance by QoS policy group, not by
6 / 7
individual QoS workload.
Reference: qos statistics workload performance show
11.Users report high latency for a volume.
The latency breakdown for its workload remains consistent across several samples:
Network 0.2 ms
Cluster 0.0 ms
Data 0.3 ms
Disk 0.6 ms
QoS Max 18.5 ms
NVRAM 0.0 ms
Which condition is the primary contributor to the latency?
A. Slow media in the aggregate
B. Enforcement of a QoS throughput ceiling
C. Congestion on the cluster interconnect
D. Delayed NVRAM replication between HA partners
Answer: B
Explanation:
The QoS Max component accounts for nearly all of the observed latency, showing that ONTAP is
delaying I/O to enforce a configured throughput ceiling. Disk latency is only 0.6 ms, so the data does not
indicate slow storage media. The cluster and NVRAM components are zero, and network latency is
minimal. A QoS ceiling directly throttles a workload when it reaches the configured maximum throughput.
Reference: qos statistics workload latency show
12.Two volumes are assigned to the same shared QoS policy group with a maximum throughput of
20,000 IOPS. Either volume can reach 15,000 IOPS when the other is idle. When both are busy, their
combined throughput remains near 20,000 IOPS. The customer wants each volume to have its own
20,000-IOPS ceiling.
What should the support engineer recommend?
A. Increase the shared policy group's ceiling to 40,000 IOPS.
B. Remove the policy group and monitor both volumes without QoS.
C. Configure a 20,000-IOPS throughput floor on each volume.
D. Assign the volumes to a non-shared policy group with a 20,000-IOPS ceiling.
Answer: D
Explanation:
Workloads in a shared QoS policy group share the group's total throughput ceiling, which explains why
the two volumes together remain near 20,000 IOPS. In a non-shared policy group, the defined ceiling
applies independently to each member workload. Raising the shared ceiling to 40,000 IOPS would
permit that total to be consumed unevenly and would not create an independent per-volume limit. A
throughput floor establishes a minimum service objective rather than the requested maximum, and
removing QoS would eliminate the ceilings entirely.
Reference: Set a throughput ceiling with ONTAP QoS policy groups
7 / 7
13.A FAS system uses a local-active SAN multipath configuration. A host has optimized paths to FCP
LIFs on the node that owns a LUN and non-optimized paths through its HA partner. All target ports on the
owning node become unavailable, but the host continues I/O through the partner.
What allowed access to continue?
A. Host MPIO used the ALUA path states to select a surviving non-optimized path through the HA
partner.
B. ONTAP migrated the failed FCP LIF and preserved its WWPN on the partner node.
C. The cluster-management LIF temporarily advertised the LUN until the target ports recovered.
D. SLM automatically added every node in the cluster as an optimized reporting node.
Answer: A
Explanation:
In a local-active SAN configuration, ALUA identifies paths through the LUN-owning node as optimized
and paths through its HA partner as non-optimized. Host multipathing software uses those path states to
select a surviving path when the optimized paths fail. FCP LIF migration is not what preserved access in
this scenario. Cluster-management LIFs do not provide LUN access, and SLM normally limits reporting
to the owning node and its HA partner rather than advertising optimized paths from every node.
Reference: Learn about ONTAP path failover management
14.A volume containing mapped LUNs will be moved to an aggregate owned by a node in a different HA
pair. Selective LUN Map is enabled, and the current LUN mappings report only through the source HA
pair.
What should be done before the volume move?
A. Migrate each SAN LIF to the destination HA pair and retain the existing LIF addresses.
B. Add the destination HA pair as reporting nodes and make the new paths available to the hosts.
C. Disable ALUA on the hosts so that all discovered paths remain equally preferred.
D. Unmap each LUN and remap it with a different LUN ID after the move completes.
Answer: B
Explanation:
With SLM, a newly created LUN is normally accessible through paths on the LUN-owning node and its
HA partner. Before moving a volume to a node in another HA pair, the destination HA pair should be
added as reporting nodes so that the host can discover and prepare to use the new paths. Migrating
SAN LIFs is not the required preparation for an inter-HA-pair volume move. Disabling ALUA would
interfere with path optimization, and unmapping theLUN would cause an unnecessary access
interruption and is not required by the move.
Reference: Learn about ONTAP path failover management