EMEA OneFS System Administration

You can FTP log files up to support from OneFS without SRS configured?

• True

• False

A customer requires management interface to be only available on a single IP address on each node - without this function the deal will not proceed - do you make the sale?

• No

• Yes

You do not wish to set compliance on a cluster but the customer wants to deny root access to the cluster via SSH - can you do this.

• No

• Yes

It is possible to add system specific sysctls to a cluster using the override file - where is this located

• /etc/mcp/override/

• /ifs/.ifsvar/mcp/overide

It is possible to add system specific sysctls to a cluster using the override file - how would you do this if you only wanted a single node to be affected?

• /etc/local/

• /ifs/.ifsvar/<nodeID>/etc/local/

What roles should you ensure you place at least one user in if you are going to remove root login via ssh?

• SystemAdmin, SecurityAdmin

• SystemAdmin, IsiAdmin

• ClusterAdmin, ClusterSecurity

Where would you go to provide a Log Scrubber tool for your customer to clean a logset before sending it from a dark site to support

• support.dell.com

• https://central.dell.com/solutions/Log-Scrubber

• scrubbersrus.com/downloads

From a security perspective; How would you prevent an externally provided identity from overriding the system provided identies?

• You don’t need to worry, it is automatically managed

• ensure only 'System' is selected under 'Access>Membership&roles><users> or <groups> FILE:System

• Ensure only 'system' is listed in the output of: #isi auth users list --provider='lsa-file-provider:System'

• Use a third party tool to manage access to the cluster

The default behavior for Mountd allows remote hosts to see that mounts exist and view the mount points, even when they do not have authorization to access the export. Can I hide the export path from an unauthorized host?

• Yes

• No

Can I prevent a client from viewing all exports on the cluster in the access zone?

• Yes

• No