NS0-164: NetApp Certified Data Administrator, ONTAP ProfessionalDemo

Self-encrypting drives provide hardware-based encryption for data at rest. Their encrypted contents cannot be read without the drive’s encryption key, protecting the data if the storage device is repurposed, returned, misplaced, or stolen.

The Automated Workload Analyzer models Flash Pool cache for an aggregate and estimates the workload working set, which supports Flash Pool sizing decisions. It does not report snapshot schedules, aggregate encryption settings, or SnapMirror throughput.

ONTAP configures MTU on the broadcast domain. The broadcast-domain MTU value is applied to the ports assigned to that domain.

The ONTAP Antivirus Connector is NetApp-provided software installed on the Vscan server to enable communication between the ONTAP system and the Vscan server. Antivirus software scans files; scanner pools and scanner policies control Vscan-server connections and activation.

Active IQ Unified Manager monitors ONTAP cluster performance and generates events when performance counters breach defined thresholds. It supports configurable alerts for those events, enabling investigation of latency and other workload-performance problems.

MirrorAndVault is the unified SnapMirror mirror-vault policy: it mirrors the latest active file system and transfers source Snapshot copies that have labels matching its configured rules. The default policy includes rules for labeled daily and weekly Snapshot copies.

The API log records the ONTAP REST API calls that System Manager issues, including the HTTP requests used to perform administrative tasks. It can be used to review the nature and sequence of those calls.

A Broken-off SnapMirror relationship must be reestablished with snapmirror resync; successful resynchronization returns the destination to a data-protection mirror. The snapmirror resync command must be run from the destination cluster or destination SVM.

NetApp Volume Encryption supports storage efficiencies at the volume level, including volume deduplication and data compaction. Because NVE assigns a unique encryption key to each volume, aggregate-level background deduplication and cross-volume inline deduplication are not available for NVE volumes. Learn about ONTAP NetApp volume and aggregate encryption

SnapMirror S3 replicates objects from a source ONTAP S3 bucket to a destination bucket and supports bucket relationships between storage VMs on different clusters.

The NetApp FAS70 has an NVMe SSD Flash Cache module carrier and supports 2 TB Flash Cache caching modules.

A Connector is the NetApp management component required to deploy, manage, monitor, and perform ongoing operations for Cloud Volumes ONTAP. NetApp documentation states that Connectors are fundamental to the service architecture and must be kept operational and accessible.

Self-encrypting drives (SEDs) provide hardware-based full-disk encryption, encrypting data as it is written to the drive. NAE and NVE are software-based encryption technologies, and IPsec protects data in transit. NetApp ONTAP encryption documentation

ONTAP IPspaces create distinct IP address spaces and routing domains, allowing overlapping IP address subnet ranges to be kept separate. Custom IPspaces can also be used for cluster-peering connectivity, so they resolve a conflict between the secondary cluster’s subnet and a local subnet.

NetApp Hardware Universe (HWU) provides NetApp platform lifecycle information, including end-of-support dates for equipment. Customers select the relevant AFF platform and model and review its support information there.

An NVMe subsystem defines host access to NVMe namespaces in ONTAP. The server’s host NQN is added to that subsystem, which associates the authorized host with the NVMe storage resources.

Amazon FSx for NetApp ONTAP supports multiprotocol access through NFS and SMB; CIFS is the commonly used name for SMB file sharing. iSCSI and NVMe/TCP provide block access rather than the applicable file-protocol access.

NetApp Storage Encryption uses hardware-based self-encrypting drives that provide AES 256-bit transparent disk encryption and are validated to FIPS 140-2 Level 2. These are data-at-rest encryption capabilities of NSE; Kerberos V5 is an authentication protocol, and FIPS 140-3 is not the stated NSE drive validation standard.

SnapMirror SVM supports SVM disaster recovery by replicating an SVM configuration and its associated data to a destination SVM. Following a primary-site disaster, the destination SVM can be activated to serve client data.

SnapMirror policy rules use SnapMirror labels to select which source Snapshot copies are replicated in vault and mirror-vault relationships. An hourly Snapshot copy whose label does not match a policy rule is not transferred to the destination.

An igroup defines the FC host initiators (WWPNs) that are permitted to access mapped LUNs. Configuring an FC igroup and mapping the existing LUN-based storage units to it enables Fibre Channel host access.

UTA2 ports can be configured for Fibre Channel or CNA/Ethernet operation. When the relevant UTA2 ports are configured in FC mode, they cannot serve as Ethernet network ports for NAS LIFs; NAS requires CNA/Ethernet mode.

ONTAP deduplication detects duplicate blocks in a volume and replaces redundant physical copies with shared references to a single stored block, reducing physical storage use.

The aggr-list parameter assigns a confined list of aggregates to an SVM, limiting where its volumes can be created. Giving each SVM distinct aggregates isolates their data onto separate physical storage tiers. NetApp ONTAP: Assign local tiers to SVMs