NS0-304 flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Cluster LIF purpose

Cluster LIFs carry intra-cluster traffic such as SnapMirror replication, cluster peering, and SVM peering. They are not used for client data access and must reside on the same subnet.

Vserver definition

A Vserver (SVM) is a logical data server within an ONTAP cluster. It has its own namespace, LIFs, security style, and administrative boundaries, isolating data and clients.

Epsilon in ONTAP

Epsilon is the node holding the cluster-wide management lock. It is elected automatically and can be reassigned; loss of epsilon can halt configuration changes until a new holder is elected.

RAID-TEC tolerance

RAID-TEC uses three parity disks per RAID group and tolerates up to three simultaneous disk failures without data loss, offering higher protection than RAID-DP.

Aggregate relocation

Aggregate relocation (ARL) moves an entire aggregate from one HA pair to another non-disruptively. It requires sufficient free space on the destination and compatible ONTAP versions.

FabricPool tiering

FabricPool moves cold data from a performance tier (all-flash or SSD aggregate) to a capacity tier such as cloud object storage, reducing cost while keeping hot data on fast media.

Junction path

A junction path mounts a flexible volume into the SVM namespace at a specified directory. Clients access the volume through this path using NFS or SMB.

Thin provisioning

Thin provisioning allocates storage on demand rather than reserving full volume capacity. Space guarantee is set to none; overcommitment requires monitoring to avoid aggregate full conditions.

LUN igroup mapping

An igroup (initiator group) lists host initiators (WWPNs or IQNs) allowed to access a LUN. A LUN must be mapped to an igroup for SAN clients to see it.

QoS policy group

A QoS policy group sets throughput ceilings (IOPS and MB/s) for assigned volumes or LUNs. It prevents noisy neighbors from consuming shared cluster resources.

NFSv4 Kerberos flavors

NFSv4 supports Kerberos authentication flavors: krb5 (authentication), krb5i (integrity), and krb5p (privacy/encryption). Each increases security and overhead.

SMB share permissions

SMB share permissions are set on the share and combine with NTFS file permissions. The most restrictive effective permission wins for a given user or group.

iSCSI target port

iSCSI uses TCP port 3260 for target portals. Initiators connect to a LIF's IP address on that port; LUNs are then discovered and mapped via igroups.

LIF failover policy

A LIF failover policy defines which ports a data LIF can move to if its home port fails. System-defined policies typically use the HA partner's ports.

Export policy rule

An NFS export policy contains ordered rules matching client IPs and specifying access (ro/rw), root squash, and security flavors. Rules are evaluated top-down.

Snapshot copy

A Snapshot copy is a point-in-time, space-efficient image of a volume. It consumes space only for changed blocks and is used for backups and rapid recovery.

SnapMirror async

Asynchronous SnapMirror replicates Snapshot copies on a schedule, providing a recovery point objective (RPO) equal to the replication interval. It tolerates WAN latency.

SnapVault relationship

SnapVault is a SnapMirror policy type for backup retention. It creates a vault relationship where the destination retains Snapshot copies longer than the source.

SnapMirror break

The snapmirror break command makes a destination volume writable and stops replication. It is used for disaster recovery or testing; resync re-establishes the relationship.

SnapLock compliance

SnapLock compliance mode enforces WORM protection on files and Snapshot copies until retention expires. It cannot be disabled or shortened by administrators.

statistics show-periodic

The statistics show-periodic command samples performance counters over a specified interval, showing trends such as IOPS and latency for troubleshooting.

Adaptive QoS

Adaptive QoS scales throughput limits with the used capacity of a volume. As the volume grows, its allowed IOPS and MB/s increase proportionally.

AutoSupport

AutoSupport sends telemetry and event notifications to NetApp support. It can be configured for weekly and event-triggered messages and verified with system node autosupport show.

Active IQ

Active IQ is a cloud-based analytics service that ingests AutoSupport data to provide health checks, risk alerts, and optimization recommendations for ONTAP clusters.

RBAC role

Role-Based Access Control assigns a role (admin, operator, readonly, or custom) to a user. The role determines which CLI commands and API endpoints are permitted.

NVE encryption

NetApp Volume Encryption (NVE) encrypts volume data with keys managed by the Onboard Key Manager or an external KMIP server, protecting data at rest.

Audit logging

ONTAP audit logging records file access events on an SVM. Logs can be written to a volume or sent to a syslog server for compliance and forensic analysis.

Security login

The security login create command binds a user name, authentication method (password, publickey, certificate), and role to control access to the cluster or SVM.

ONTAP REST API

The ONTAP REST API exposes cluster resources over HTTPS using JSON. Authentication supports basic auth, OAuth 2.0, and certificates; it is preferred for new automation.

Ansible ONTAP collection

The netapp.ontap Ansible collection provides idempotent modules to manage volumes, LUNs, SVMs, and SnapMirror relationships across on-premises and cloud ONTAP.

Cloud Volumes ONTAP

Cloud Volumes ONTAP (CVO) is a software-defined ONTAP instance running in AWS, Azure, or GCP. It uses cloud disks and supports FabricPool to object storage.

BlueXP

BlueXP (formerly Cloud Manager) is NetApp's SaaS platform for orchestrating ONTAP deployments, data services, and protection across on-premises and cloud environments.