ONTAP ships with several built-in security roles that control the commands a login account may issue. For cluster-level administration the predefined roles are admin, autosupport, backup, readonly and diag. Of the answer choices, only “backup” corresponds to one of these predefined roles; it allows execution of commands required for tape and NDMP backup operations but denies most configuration changes. The other listed strings (“provision”, “support”, “recovery”) are not delivered as predefined roles in any ONTAP 9 release, and would have to be created manually if required.

A. provision – No predefined role named “provision” exists; storage provisioning tasks are covered by the admin role.

B. support – The predefined role is called “autosupport,” not “support.”

D. recovery – No role called “recovery” is delivered with ONTAP; disaster-recovery tasks are performed under admin or custom roles.

1. NetApp, ONTAP 9 Security Hardening Guide, “Predefined roles for cluster administrators,” Table 2-1, p. 11.

2. NetApp, ONTAP 9 Command Reference, security login role show (Example output lists admin, autosupport, backup, readonly, diag).

3. NetApp, ONTAP 9 System Administration Guide, sec. “Cluster administrator accounts and roles,” p. 101-102.

NetApp ONTAP software is the correct solution for this requirement. ONTAP is a unified data management platform that supports a wide range of storage protocols on the same system. It provides robust support for traditional SAN protocols like iSCSI and Fibre Channel, while also being NetApp's flagship platform for modern SAN modernization with NVMe-over-Fabrics, including NVMe-over-TCP. This allows customers to run existing iSCSI workloads and seamlessly transition or add new, performance-sensitive workloads using NVMe/TCP on the same storage infrastructure, fulfilling the customer's modernization goal.

A. StorageGRID: This is an object storage solution designed for unstructured data using protocols like S3, not a block-based SAN platform.

B. SANtricity OS: This OS powers E-Series/EF-Series arrays. While it supports NVMe over other fabrics (like FC and RoCE), ONTAP is the primary platform for NVMe/TCP.

C. Element software: This is the OS for NetApp SolidFire and HCI systems, which is a scale-out block storage platform primarily focused on the iSCSI protocol.

1. NetApp, Inc. (2023). TR-4982: NVMe/TCP Deployment and Configuration Guide for NetApp ONTAP.

Section: Introduction, Page 5.

Content: "NetApp ONTAP 9.10.1 was the first enterprise storage OS to support the NVMe/TCP protocol... NVMe/TCP can be used in parallel with other SAN protocols such as iSCSI and FC/FCoE on the same ONTAP cluster." This directly confirms ONTAP's capability to handle both iSCSI and the transition to NVMe/TCP.

2. NetApp, Inc. (2023). ONTAP 9 SAN Administration Guide.

Section: Part 1: SAN administration overview, Chapter: SAN protocols supported by ONTAP.

Content: This guide details the configuration and management of multiple SAN protocols within ONTAP, including dedicated chapters for iSCSI, FC/FCoE, and NVMe. This demonstrates that ONTAP is the unified platform for managing these diverse SAN environments.

3. NetApp, Inc. (2023). NetApp ONTAP Datasheet.

Section: Protocol Support.

Content: The official datasheet lists the supported protocols for ONTAP systems (AFF and FAS), explicitly including "iSCSI" and "NVMe/TCP," confirming its suitability for the described scenario.

In the context of data storage systems, "data types" often refer to the primary methods of organizing and accessing data. File and object are two of the three primary data access methods, the third being block. File-based storage (e.g., NAS) organizes data in a familiar hierarchy of directories and files. Object-based storage manages data as discrete units called objects, each containing data, metadata, and a globally unique identifier. NetApp ONTAP is a unified system that supports both file (NFS/SMB) and object (S3) protocols, treating them as distinct data types.

C. disk: A disk is the physical or logical medium where data is stored; it is not a data access method or type.

D. LAN: A Local Area Network (LAN) is a communication infrastructure used to connect devices; it is not a type of data.

E. RAID: RAID (Redundant Array of Independent Disks) is a data protection and storage virtualization technology, not a data access type.

1. NetApp Official Documentation, "What is network-attached storage (NAS)?": This document defines NAS as a "file-level (as opposed to block-level) data storage architecture." This establishes "file" as a primary data storage type. (Source: NetApp, "What is Network-Attached Storage (NAS)?", retrieved from https://www.netapp.com/data-storage/nas/what-is-nas/)

2. NetApp Official Documentation, "What is object storage?": This resource describes object storage as a distinct "data storage architecture for handling large amounts of unstructured data," contrasting it with file and block storage. This confirms "object" as a fundamental data type. (Source: NetApp, "What is Object Storage?", retrieved from https://www.netapp.com/data-storage/object-storage/what-is-object-storage/)

3. NetApp ONTAP Documentation, "ONTAP S3 configuration overview": "You can use the ONTAP S3 object storage service to store and manage your object data on your ONTAP cluster." This section explicitly refers to managing "object data," reinforcing its status as a data type. (Source: NetApp Docs, "ONTAP S3 configuration overview", Section: "ONTAP S3 object storage", retrieved from https://docs.netapp.com/us-en/ontap/s3-config/index.html)

4. NetApp ONTAP Documentation, "NAS file access overview": "ONTAP provides Network Attached Storage (NAS) access to files for clients through a variety of protocols..." This documentation clearly delineates "file access" as a core capability, separate from other data access methods. (Source: NetApp Docs, "NAS file access overview", retrieved from https://docs.netapp.com/us-en/ontap/nas-config/index.html)

NetApp SnapMirror Business Continuity (SMBC) is the solution specifically designed to meet the requirements of zero Recovery Point Objective (RPO) and near-zero Recovery Time Objective (RTO). It achieves a zero RPO through synchronous data replication between two sites. For a near-zero RTO, SMBC provides automated, application-transparent failover, which is crucial for mission-critical NAS workloads. In the event of a primary site failure, the application can continue operating on the secondary site with minimal to no disruption, directly fulfilling the customer's needs for continuous availability.

A. storage VM disaster recovery (SVM DR): SVM DR uses asynchronous SnapMirror replication, which results in an RPO greater than zero. The failover process is also manual, leading to a much higher RTO than "near-zero."

B. MetroCluster over IP: While MetroCluster provides a zero RPO and a very low RTO, SMBC is a more modern and granular solution designed for application-transparent failover, which more precisely fits the "near-zero RTO" requirement.

D. SnapMirror Synchronous (SM-S): SM-S provides a zero RPO by replicating data synchronously. However, it requires manual intervention to failover, resulting in an RTO that is significantly longer than "near-zero."

1. NetApp Technical Report 4742: SnapMirror Business Continuity (SM-BC) for ONTAP.

Section: Introduction, Page 4.

Quote: "SnapMirror Business Continuity (SM-BC) is a feature in ONTAP 9.8 and later releases that provides a zero RPO and near-zero RTO business continuity solution for mission-critical applications." This document explicitly states that SMBC is designed for the exact requirements mentioned in the question.

2. NetApp ONTAP Documentation: "What SnapMirror Business Continuity is"

Section: Overview.

Quote: "SnapMirror Business Continuity (SM-BC) protects data at the volume level, providing a business continuity solution with zero data loss (RPO=0) and near-zero downtime (near-zero RTO) for business-critical applications." This confirms the RPO and RTO capabilities.

3. NetApp ONTAP Documentation: "Comparison of MetroCluster and SnapMirror Business Continuity solutions"

Section: Feature Comparison Table.

Details: This table shows that while both solutions offer RPO=0 and an RTO of seconds, SMBC provides "Application transparent" failover, whereas MetroCluster provides "Automatic" failover. The application transparency of SMBC is key to achieving a truly near-zero RTO from the application's perspective.

4. NetApp ONTAP 9 Data Protection Power Guide (Legacy Document for context on other technologies)

Section: SnapMirror Synchronous, Page 18.

Quote: "You must manually initiate a failover from the source to the destination." This confirms the manual nature of SM-S failover, making its RTO non-zero. For SVM DR, the guide details a multi-step manual failover process.

NetApp offers both hardware-based and software-based data-at-rest encryption. Hardware encryption offloads the cryptographic operations to dedicated hardware, typically the storage drives themselves.

NetApp Storage Encryption (NSE) is the solution name for NetApp's hardware-based, full-disk encryption, which uses self-encrypting drives (SEDs). NVMe self-encrypting drives (SEDs) are a specific type of drive where the encryption engine is a hardware component of the drive itself, performing continuous encryption without impacting host performance. Both represent hardware-level encryption offerings from NetApp.

C. NetApp Aggregate Encryption (NAE): This is a software-based encryption feature that encrypts an entire aggregate. The encryption process is handled by the storage controller's CPU, not by the drive hardware.

D. NetApp Volume Encryption (NVE): This is a software-based encryption feature that provides granular, per-volume encryption. Like NAE, it relies on the storage controller's CPU for cryptographic operations.

1. NetApp, Inc. (2023). TR-4567: In-Band and Out-of-Band Key Management for NetApp Storage Encryption.

Page 5, Section "NetApp Storage Encryption": "NetApp Storage Encryption (NSE) is NetApp’s implementation of full-disk encryption (FDE) using self-encrypting drives (SEDs). The encryption engine is a hardware component of the drive, and the drive performs encryption and decryption of data as it is written to and read from the magnetic media." This supports answers A and B.

2. NetApp, Inc. (2023). ONTAP 9.13.1 Security and data encryption overview.

Section "Data-at-rest encryption": This document explicitly distinguishes between the two types of encryption. It states, "ONTAP supports two types of data-at-rest encryption: NetApp Volume Encryption (NVE) and NetApp Aggregate Encryption (NAE) are software-based... NetApp Storage Encryption (NSE) is hardware-based encryption." This confirms that NAE and NVE are software-based and thus incorrect options.

Amazon FSx for NetApp ONTAP (FSxN) and Azure NetApp Files (ANF) are first-party, fully managed file storage services delivered natively on AWS and Microsoft Azure, respectively. Both solutions are billed on a metered, pay-as-you-go basis, charging for consumed resources like storage capacity, performance tiers, and data protection features. They are designed as cloud-native services to provide high-performance, scalable NAS (NFS and SMB) volumes without requiring the customer to manage the underlying storage infrastructure, perfectly fitting the description of a metered, cloud-native file storage solution.

A. NetApp AFF systems: These are on-premises, all-flash hardware appliances purchased as a capital expense, not a metered, cloud-native service.

B. NetApp ONTAP Select software: This is a software-defined storage solution deployed on commodity hardware, typically in a private cloud or on-premises data center, and is not a metered public cloud service.

C. NetApp Cloud Volumes ONTAP: While this is a metered cloud solution, it is a customer-managed software instance running on IaaS, not a fully managed service like ANF and FSxN.

1. Amazon Web Services Documentation: On the pricing model for FSx for NetApp ONTAP, it states, "With Amazon FSx for NetApp ONTAP, you pay only for the resources you use with no minimum fees or set-up charges." This confirms its metered nature.

Source: AWS, "Amazon FSx for NetApp ONTAP pricing," Section: "Pay only for what you use."

2. Microsoft Azure Documentation: The pricing overview for Azure NetApp Files explains its billing model: "Billing for Azure NetApp Files is based on provisioned storage capacity... The cost is based on a per-GiB-per-hour basis." This is a clear example of metered storage.

Source: Microsoft, "Pricing - Azure NetApp Files," Main pricing description.

3. NetApp Official Product Page: NetApp's documentation distinguishes between its cloud offerings. It explicitly categorizes Amazon FSx for NetApp ONTAP and Azure NetApp Files as "Fully managed services," while Cloud Volumes ONTAP is described as "Customer-managed software." This supports the grouping of FSxN and ANF as the intended answer for fully managed, metered solutions.

Source: NetApp, "NetApp Cloud Storage," Product category descriptions.

The customer's key requirements are a disaster recovery solution using SnapMirror where the destination is fully managed by the cloud provider. Amazon FSx for NetApp ONTAP is a first-party, native AWS service. This means AWS fully manages the ONTAP software and underlying infrastructure, abstracting the operational burden from the customer. It provides the full feature set of ONTAP, including native SnapMirror capabilities, making it an ideal DR target for on-premises ONTAP systems. This service directly aligns with the customer's request for a cloud-provider-managed SnapMirror destination.

A. Azure NetApp Files: While this is a service managed by the cloud provider (Microsoft), it is a file service that abstracts the underlying ONTAP, offering a subset of features through the Azure portal. FSx for ONTAP provides the full ONTAP experience.

B. NetApp Cloud Volumes Service: This service is managed by NetApp, not by the cloud provider (AWS or GCP). This contradicts the core requirement of the destination being managed by the cloud provider.

C. NetApp Cloud Volumes ONTAP: This is a customer-managed solution. The customer is responsible for deploying, managing, and maintaining the ONTAP software on cloud infrastructure, which is the opposite of the stated requirement.

1. Amazon FSx for NetApp ONTAP Documentation: "Amazon FSx for NetApp ONTAP is a storage service that allows customers to launch and run fully managed ONTAP file systems in the AWS Cloud... You can use NetApp SnapMirror to replicate data from an on-premises NetApp file system to an Amazon FSx for NetApp ONTAP file system."

Source: AWS Documentation, "What is Amazon FSx for NetApp ONTAP?", and "Accessing data from on-premises using SnapMirror".

2. NetApp Cloud Portfolio Documentation: NetApp's official documentation distinguishes the management models. It describes Amazon FSx for NetApp ONTAP and Azure NetApp Files as first-party services managed by the respective cloud provider. In contrast, it defines Cloud Volumes ONTAP as customer-managed and Cloud Volumes Service as NetApp-managed.

Source: NetApp, "TR-4799: Azure NetApp Files Disaster Recovery with NetApp Cloud Backup Service", Section 1.1 "NetApp Cloud Portfolio". This technical report outlines the different management responsibilities for each cloud service.

3. NetApp Cloud Volumes ONTAP Documentation: "Cloud Volumes ONTAP is a software-only storage appliance that runs the ONTAP data management software in an AWS, Azure, or Google Cloud environment. You have full control of the ONTAP software and the underlying cloud infrastructure."

Source: NetApp Cloud Volumes ONTAP Documentation, "Learn about Cloud Volumes ONTAP". This confirms the customer-managed nature of the service.

The objective is to add cost-effective nearline storage for archiving to an existing high-performance All-Flash FAS (AFF) cluster. NetApp ONTAP supports heterogeneous clusters, which allows for the combination of different node types within a single cluster. By adding a new FAS system, which can be populated with high-capacity, lower-cost SAS or SATA HDDs, the administrator can create a distinct storage tier optimized for archiving. This approach leverages the existing cluster management framework while introducing a capacity-focused tier that is more economical for infrequently accessed data, directly fulfilling the requirement without altering the high-performance AFF tier.

A. Upgrade the AFF controllers to a higher system.

This increases the performance and potential scale of the existing flash tier but does not add cost-effective nearline storage.

C. Expand the cluster with a new AFF system.

This adds more high-performance, expensive flash storage, which is contrary to the goal of adding cost-effective storage for archiving.

D. Add SSDs to the existing AFF cluster.

This expands the capacity of the existing high-performance tier, not adding a separate, cost-effective nearline tier for archiving.

1. NetApp ONTAP 9 Documentation, Cluster and SVM administration, "Rules for clusters": "A cluster can contain a mix of different controller models... You can mix AFF and FAS systems in the same cluster, which enables you to move data to the class of storage that is appropriate for your needs." This source directly confirms that AFF and FAS systems can be combined in a single cluster to create different storage tiers.

(Reference: NetApp ONTAP 9.10.1 Documentation Center -> Cluster and SVM administration -> Concepts -> Rules for clusters)

2. NetApp Technical Report 4684, "All-Flash FAS Design and Implementation Guide": Section 2, "AFF Models," describes AFF systems as being designed for the highest performance with all-flash media. In contrast, other NetApp documents position FAS systems for a balance of performance and capacity, often utilizing HDDs. This distinction supports using FAS for a cost-effective capacity tier.

(Reference: NetApp TR-4684, Section 2, Page 6)

3. NetApp Product Datasheet, "FAS Storage Systems": This document describes FAS systems as hybrid storage that unifies SAN and NAS workloads, with configurations that can be optimized for capacity using HDDs. This positioning validates the FAS platform as the appropriate choice for a cost-effective, nearline storage expansion for an archive use case.

(Reference: NetApp DS-4388-0322, "FAS Storage Systems," Page 2, "Meet your storage requirements")

BlueXP tiering is the NetApp service specifically designed to address this scenario. It automatically identifies and moves inactive ("cold") data blocks from a high-performance on-premises ONTAP system, such as an AFF, to a lower-cost object storage tier in the cloud or on-premises (NetApp StorageGRID). This process frees up valuable space on the primary flash storage for active data. The tiered data remains transparently accessible to users and applications, as ONTAP maintains pointers to the data's new location in the object store. This provides a cost-effective solution for managing data across its lifecycle without disrupting access.

B. Cloud Volumes ONTAP: This is a full ONTAP instance running in a public cloud, used for primary workloads or disaster recovery, not a service for tiering data from an on-premises system.

C. BlueXP backup and recovery: This service creates point-in-time backup copies of data for protection and recovery purposes. It does not provide transparent, live access to inactive data within the primary volume.

D. BlueXP edge caching: This solution (formerly Global File Cache) caches active data at remote offices to accelerate file access for distributed teams, rather than tiering inactive data off a central system.

1. NetApp BlueXP tiering documentation, "What is BlueXP tiering?": "BlueXP tiering frees up space on your high-performance on-premises ONTAP clusters by tiering inactive data to low-cost object storage. The data is still accessible from your cluster—you don't need to make any changes to your applications."

Source: NetApp Product Documentation. Retrieved from: https://docs.netapp.com/us-en/bluexp-tiering/concept-overview.html

2. NetApp BlueXP backup and recovery documentation, "What is BlueXP backup and recovery?": "BlueXP backup and recovery is a backup and restore service that's integrated with BlueXP. It delivers backup and restore capabilities for application-consistent data protection of your ONTAP and other data."

Source: NetApp Product Documentation. Retrieved from: https://docs.netapp.com/us-en/bluexp-backup-recovery/concept-overview.html

3. NetApp Cloud Volumes ONTAP documentation, "What is Cloud Volumes ONTAP?": "Cloud Volumes ONTAP is a software-only storage appliance that runs the ONTAP data management software in AWS, Azure, and Google Cloud."

Source: NetApp Product Documentation. Retrieved from: https://docs.netapp.com/us-en/bluexp-cloud-volumes-ontap/concept-overview.html

4. NetApp BlueXP edge caching documentation, "What is BlueXP edge caching?": "BlueXP edge caching provides a software-only solution that you deploy in your remote offices to enable real-time access to centralized data."

Source: NetApp Product Documentation. Retrieved from: https://docs.netapp.com/us-en/bluexp-edge-caching/concept-overview.html

NetApp Keystone is a Storage-as-a-Service (STaaS) offering that provides a flexible, pay-as-you-go subscription model. It is specifically designed to deliver a seamless hybrid cloud experience by allowing customers to consume storage on-premises, in the cloud, or in a hybrid combination, all under a single subscription. This model offers financial flexibility and operational simplicity, aligning storage costs with actual usage, which directly addresses the question's requirement for a flexible payment option across both on-premises and hybrid cloud solutions.

A. Cloud Volumes ONTAP PAYGO: This is a pay-as-you-go model, but it is exclusively for NetApp's software-defined storage solution within public cloud environments (AWS, Azure, Google Cloud), not on-premises.

B. ONTAP Select: This is a software-defined storage (SDS) product that runs on commodity hardware on-premises. It is a product, not a flexible payment or consumption model for hybrid cloud.

C. Cloud Volumes ONTAP BYOL: This "Bring Your Own License" model is for customers who have already purchased perpetual licenses for Cloud Volumes ONTAP. It applies only to public cloud deployments.

1. NetApp Keystone Solution Brief (SB-4115-0321): "NetApp Keystone is a portfolio of flexible consumption models for our data fabric products and services... available for on-premises and cloud environments, giving you the ultimate in hybrid cloud flexibility." (Page 2, "What Is NetApp Keystone?")

2. NetApp Product Documentation, "What is Cloud Volumes ONTAP?": "Cloud Volumes ONTAP is a software-only storage appliance that runs ONTAP data management software in AWS, Microsoft Azure, and Google Cloud." This document clarifies that Cloud Volumes ONTAP (both PAYGO and BYOL models) is a public cloud solution.

3. NetApp ONTAP Select Datasheet (DS-3849-0321): "NetApp ONTAP Select is a software-defined storage (SDS) solution... deployed on your choice of commodity servers and hypervisors in your own data center." This source defines ONTAP Select as an on-premises SDS product, not a hybrid cloud consumption model.