QuestionQ54

ONTAP SAN implementation testing and troubleshooting

A customer has a 10GB volume containing an 8GB LUN that uses 7GB. The Snapshot policy runs hourly and retains 48 snapshots. Following a ransomware attack that encrypts every file on the LUN, the customer observes that all snapshots have disappeared.

What could have caused this behavior?

  • A Aggregate overcommitted
  • B Snapshot autodelete
  • C Volume thinly provisioned
  • D Autonomous Ransomware Protection
Explanation

Overwriting the LUN’s data causes Snapshot copies to retain the original blocks, which can rapidly exhaust Snapshot-reserve or volume space. When enabled and triggered by low available volume space or a nearly full Snapshot reserve, ONTAP Snapshot autodelete automatically removes snapshots, typically beginning with the oldest, to reclaim capacity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!