NS0-165: NetApp Certified Data Administrator, ONTAPDemo

SnapMirror SVM replication creates an SVM disaster-recovery relationship and allows the destination SVM to be activated after a disaster at the primary site, enabling it to serve data.

ONTAP Vscan provides on-access antivirus scanning for SMB files. It offloads scans to external servers running supported third-party antivirus software and can suspend file operations until the external server returns the file’s scan status.

Parallel NFS (pNFS) improves performance by allowing NFS clients to perform read/write operations directly and in parallel on storage devices, bypassing the NFS server as a potential bottleneck. NetApp: Enable or disable pNFS for ONTAP SVMs

Active IQ Unified Manager monitors ONTAP performance and provides detailed graphs of workload activity over time, together with performance-event analysis. Its event views and charts let administrators correlate performance peaks with events during the relevant time period.

SnapMirror S3 creates data-protection relationships between ONTAP S3 buckets and supports destination buckets in storage VMs on different clusters.

The ONTAP CLI provides the vserver object-store-server bucket snapshot restore start command to restore an entire S3 bucket from a selected ONTAP S3 snapshot. NetApp documents ONTAP S3 snapshots as unsupported in System Manager.

NetApp Harvest collects performance, capacity, and hardware metrics from ONTAP systems, exports them to a time-series database such as Prometheus or InfluxDB, and includes Grafana dashboards for visualizing those metrics.

A running NetApp Console agent is required to deploy and manage Cloud Volumes ONTAP in AWS. It provides the control-plane functionality that creates and manages the cloud resources and the Cloud Volumes ONTAP system.

Self-encrypting drives (SEDs) provide hardware-based encryption at rest. Their encrypted data cannot be read without the required encryption key, protecting data if the storage device is repurposed, returned, misplaced, or stolen.

SnapMirror S3 automatically resynchronizes bucket contents when a previously unavailable source bucket becomes available after takeover. Creating an ONTAP S3 mirror relationship requires CA certificates for both the source and destination SVMs. SnapMirror S3 does not replicate users, groups, or policies, and source and destination users may use the same access and secret keys.

FPolicy provides the ONTAP framework for third-party partner applications to monitor and manage file-access events. An external FPolicy server can screen file-access requests and return an allow or deny response, making it suitable for ransomware-protection integration.

The -aggr-list parameter confines an SVM’s volume creation to its assigned aggregates (local tiers). Using distinct aggregate assignments for the SVMs keeps their storage placement isolated from one another.

Access from the same VLAN confirms that the cluster management LIF and its Layer 2 VLAN connectivity are functioning. Clients on other subnets need a Layer 3 route, including a valid return path, for System Manager traffic to reach the management LIF and return to those clients. ONTAP routing configuration provides that inter-subnet connectivity.

For a NAS data LIF to return automatically to its available home port after startup or recovery, the -auto-revert setting must be enabled (true). The home-port setting identifies the preferred destination but does not itself enable automatic reversion.

An IPspace creates a distinct IP address space for each SVM, allowing clients in separate administrative network domains to access cluster data even when they use overlapping IP address ranges. NetApp ONTAP documentation

Moving some LIFs from the saturated e1a port to the underutilized e1b port balances client traffic across existing ports in the same broadcast domain and does not require a switch reconfiguration. A static multimode interface group requires switch link-aggregation configuration.

SnapMirror active sync provides continuous availability for SAN workloads across ASA r2 systems by replicating data to a secondary site and allowing host applications to fail over automatically and transparently during a failure.

Active IQ Unified Manager monitors ONTAP cluster performance and workload latency, identifies performance events, and lets administrators define performance thresholds and configure alerts when those thresholds are exceeded.

IPsec provides encryption for data in flight between the client and ONTAP, including iSCSI traffic. NetApp documents IPsec as the encryption-in-flight option for iSCSI; NSE and NVE protect stored data, and CHAP provides authentication rather than traffic encryption.

Active IQ Config Advisor performs ONTAP post-deployment validation by checking the cluster configuration and related cluster and storage-switch health for common configuration errors.

ONTAP can prepopulate a FlexCache volume with data from specified directory paths on the origin volume, reducing the time required for initial access to cached data. NetApp documents this through the volume flexcache prepopulate start operation.

NetApp AFX supports FlexCache to and from AFF and FAS systems running Unified ONTAP, with write-back mode excluded. It also supports bidirectional data replication with Unified ONTAP systems, subject to supported-version requirements and limited exceptions. AFX runs the separate AFX ONTAP personality, so its nodes cannot be combined with AFF nodes in the same cluster.

ONTAP HA-pair traffic encryption requires external key management to be configured before encryption can be enabled. The external key manager provides the key-management prerequisite for encrypting customer data and metadata transmitted between HA partner nodes.