nerdexam
Network_Appliance

NS0-157 · Question #135

Functionalities supported for Asynchronous FPolicy management. (choose TWO)

The correct answer is C. File-access and auditing F. Storage resource management. Tests knowledge of which use cases are valid for asynchronous FPolicy mode versus those requiring synchronous FPolicy in clustered ONTAP.

Performance, Troubleshooting, and Security

Question

Functionalities supported for Asynchronous FPolicy management. (choose TWO)

Options

  • AFile-access blocking
  • BFile archiving and hierarchical storage management
  • CFile-access and auditing
  • DEncryption and decryption services
  • ECompression and decompression services
  • FStorage resource management

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    93% (50)
  • D
    2% (1)

Why each option

Tests knowledge of which use cases are valid for asynchronous FPolicy mode versus those requiring synchronous FPolicy in clustered ONTAP.

AFile-access blocking

File-access blocking requires synchronous FPolicy because the ONTAP node must hold the client's file request open and await a permit or deny response from the FPolicy server before the operation can proceed.

BFile archiving and hierarchical storage management

File archiving and hierarchical storage management in this context require synchronous FPolicy because the server must intercept operations and redirect or stage data before the operation completes, which asynchronous mode cannot enforce.

CFile-access and auditingCorrect

Asynchronous FPolicy supports file-access auditing because notifications are sent to the external FPolicy server after the client operation has already completed, making it well-suited for generating audit trails and access logs without blocking file operations.

DEncryption and decryption services

Encryption and decryption are not FPolicy functions at all; they are handled by ONTAP's native storage encryption features such as NetApp Volume Encryption and NetApp Storage Encryption.

ECompression and decompression services

Compression and decompression are storage efficiency operations managed by ONTAP's data reduction engine, not by FPolicy, and cannot be delegated to an external FPolicy server in either mode.

FStorage resource managementCorrect

Storage resource management is supported in asynchronous mode because it involves monitoring and classifying file system activity after the fact, and does not require the FPolicy server to intervene before an operation is allowed to complete.

Concept tested: Asynchronous FPolicy supported use cases in ONTAP

Source: https://docs.netapp.com/us-en/ontap/nas-audit/two-parts-fpolicy-solution-concept.html

Topics

#FPolicy#asynchronous mode#file auditing#storage resource management

Community Discussion

No community discussion yet for this question.

Full NS0-157 Practice