You want to configure Active Directory domain controller access for NetApp ONTAP cluster administration. In this scenario, which two actions would accomplish this task? (Choose two.)
A.
Configure an authentication tunnel through an admin SVM
B.
Use the vserver active-directory create command to create a computer account on the domain for a CIFS SVM
C.
Configure an authentication tunnel through an existing CIFS SVM
D.
Use the vserver active-directory create command to create a computer account on the domain for a non-CIFS SVM
Configure Active Directory domain controller access overview
You must configure AD domain controller access to the cluster or SVM before an AD
account can access the SVM. If you have already configured a SMB server for a data
SVM, you can configure the SVM as a gateway, or tunnel, for AD access to the cluster. If
you have not configured a SMB server, you can create a computer account for the SVM
on the AD domain.
Create an SVM computer account on the domain
If you have not configured a CIFS server for a data SVM, you can use the
"vserver active-directory create" command to create a computer account for the SVM on
the domain.
https://docs.netapp.com/us-en/ontap/pdfs/sidebar/Configure_Active_Directory_domain_controller_access.pdf
cluster1::> vserver active-directory create -vserver svm2_cluster1 -account-name cluster1 -domain demo.netapp.com
Error: command failed: A CIFS server for this Vserver already exists. Having
both a CIFS server and an Active Directory account for the same Vserver
is not supported. Use the "vserver cifs delete" command to delete the
existing CIFS server and try the command again.
cluster1::>
C & D:
cluster1::> vserver active-directory create -vserver svm2_cluster1 -account-name cluster1 -domain demo.netapp.com
Error: command failed: A CIFS server for this Vserver already exists. Having
both a CIFS server and an Active Directory account for the same Vserver
is not supported. Use the "vserver cifs delete" command to delete the
existing CIFS server and try the command again.
cluster1::>
https://docs.netapp.com/us-en/ontap/authentication/create-svm-computer-account-domain-task.html
- You have an SVM with SMB configured already, tunnel through it
-If you don't have an existing SMB SVM use the vserver active-directory create command
Read Caerfully https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.pow-adm-auth-rbac%2FGUID-BC7B1934-DDE6-4AFB-A319-6C85D1ADACB6.html it should be C and D
should be C, D
https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.pow-adm-auth-rbac%2FGUID-BC7B1934-DDE6-4AFB-A319-6C85D1ADACB6.html
Configuring an authentication tunnel
If you have already configured a CIFS server for a data SVM, you can use the security login domain-tunnel create command to configure the SVM as a gateway, or tunnel, for AD access to the cluster.
Creating an SVM computer account on the domain
If you have not configured a CIFS server for a data SVM, you can use the vserver active-directory create command to create a computer account for the SVM on the domain.
upvoted 4 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Joocey
Highly Voted 2 years, 10 months agokamadopeter
Most Recent 11 months, 3 weeks agokamadopeter
11 months, 3 weeks agoCoreancowboy
1 year, 1 month agoganaarya
1 year, 9 months agoganaarya
1 year, 9 months agoOriIre
2 years, 2 months agorestrepode
2 years, 6 months agophilwoko
3 years, 1 month agomatthew18
3 years, 1 month ago