The supported NetApp HCI compute-node cabling methods are the 2-cable and 6-cable configurations. The 2-cable design is a simplified topology that reduces cabling while still supporting required network connectivity. The 6-cable configuration provides greater physical separation and bandwidth for management, storage, vMotion, and VM traffic depending on the validated design. A 1-cable configuration does not provide the required redundancy and traffic separation for supported HCI compute-node deployment. A 4-cable configuration is not one of the supported compute-node cabling methods in this exam context. NetApp HCI cabling must follow validated architecture because incorrect port use or switch design can prevent the NetApp Deployment Engine from validating the environment and can create performance or availability issues. The engineer should always compare the physical cabling with the deployment guide before running or rerunning the NetApp Deployment Engine. References/topics: NetApp HCI compute-node cabling, deployment prerequisites, 2-cable topology, 6-cable topology, and validated HCI network design.

On AFF systems, compaction, deduplication, and compression are enabled by default as core storage efficiency features. AFF platforms are designed around flash media and ONTAP inline efficiencies, so ONTAP applies these efficiencies automatically to reduce physical space consumption while preserving performance. Reallocation is not a default data-reduction technology in this context; it is associated with layout optimization and is not part of the standard AFF default efficiency set. Encryption may be enabled in some environments depending on configuration, NVE, NAE, or self-encrypting drives, but it is a security feature rather than a default space efficiency feature. The correct choices are the technologies that reduce physical storage footprint inside ONTAP volumes and aggregates on AFF. A support engineer should distinguish default AFF efficiency behavior from optional security and layout functions. References/topics: AFF storage efficiency defaults, inline deduplication, inline compression, data compaction, and ONTAP capacity efficiency.

The exhibit is a performance breakdown that separates latency by subsystem, including network, cluster, data, disk, QoS, NVRAM, and cloud columns. When disk latency appears in the path and the workload view indicates delay associated with storage media access, the disk layer must be examined. In systems that use external shelves, SAS connectivity is the transport path between controller and disks, so the SAS adapter is also a logical component to investigate. Cluster switches and network interface cards would be primary suspects if network or cluster latency dominated the output, but the relevant symptom in this type of support workflow points toward back-end storage access rather than client or cluster front-end connectivity. A support engineer should correlate the QoS latency center with physical topology: high disk latency can be caused by a failing disk, shelf pathing, SAS adapter, cable, or shelf module. Therefore, the two strongest components to examine are the SAS adapter and disk. References/topics: ONTAP QoS latency centers, disk latency troubleshooting, SAS path analysis, and storage back-end diagnostics.

The QoS latency output indicates the problem is associated with the HA interconnect/NVRAM mirroring path rather than ordinary disk latency. In ONTAP HA pairs, writes are protected by logging them locally and mirroring the write log to the partner. If the HA interconnect path is impaired, write acknowledgement latency can rise even when front-end network latency and disk latency do not dominate the workload. Increasing SMB read sizes would not address the observed write-path protection delay. Replacing NVRAM is too aggressive without evidence of a failed NVRAM device, and a disk bottleneck would show disk latency as the dominant center. The support engineer should interpret the QoS columns as latency centers and then correlate them with HA architecture. When NVRAM-related latency is elevated in an HA pair, HA interconnect health, cabling, ports, and partner connectivity must be reviewed before assuming a media or protocol issue. References/topics: ONTAP QoS latency centers, HA interconnect, NVRAM mirroring, SMB workload troubleshooting, and write-path latency analysis.

The NetApp Deployment Engine for NetApp HCI requires a minimum of two compute nodes. NetApp HCI is built around independent compute and storage resources, and the deployment engine validates the minimum configuration before allowing an installation workflow to proceed. One compute node is not sufficient because the platform is designed to provide a resilient hypervisor environment and to separate compute lifecycle operations from storage resource provisioning. Three or four compute nodes may be common in larger deployments, but they are not the minimum requirement for the deployment engine. The exam wording asks for compute nodes, not total nodes in the HCI environment, so the answer must focus only on the compute-node requirement. The support engineer should distinguish this from the storage-node minimum and from general vSphere cluster sizing. References/topics: NetApp HCI deployment prerequisites, NetApp Deployment Engine validation, minimum compute-node requirements, and HCI installation planning.

VLANs are used in ONTAP environments to create logical network segmentation, normally by function, tenant, or protocol. Isolating management traffic from data traffic is a valid design reason because management interfaces should remain on a protected administrative network, separate from NAS or SAN client paths. Isolating iSCSI traffic from NAS traffic is also valid because iSCSI carries block storage traffic and is commonly placed on dedicated networks or VLANs for predictable latency, security, and failure-domain control. VLANs do not isolate UDP from TCP; those are transport protocols and are handled by IP stack behavior, firewalling, or application design rather than VLAN design. FC is not ordinary IP traffic, so isolating FC from other IP traffic is not a correct VLAN use case for ONTAP Ethernet networking. The support decision is to select segmentation examples that match ONTAP IP networking. References/topics: ONTAP VLANs, broadcast domains, management network isolation, iSCSI network separation, and NAS/SAN traffic design.

HTTPS is preferred for AutoSupport delivery to Active IQ because it is encrypted and supports AutoSupport OnDemand. Encryption protects the support payload while it is transmitted to NetApp, which is important because AutoSupport contains configuration, telemetry, and diagnostic information. AutoSupport OnDemand allows NetApp support workflows and Active IQ services to request additional AutoSupport data when needed, and HTTPS is the transport that supports that capability. Compression is not exclusive to HTTPS, so that statement is not the deciding reason. HTTPS does use a standard port, TCP 443, so saying it does not use a standard port is incorrect. For support engineers, configuring AutoSupport transport correctly affects case automation, health analytics, risk detection, and NetApp's ability to provide proactive guidance. The selected reasons align with security and functionality. References/topics: AutoSupport delivery, Active IQ telemetry, HTTPS transport, AutoSupport OnDemand, and support data security.

The user must be granted Read Attributes access to the path. The security trace result states that access is denied because the requested permissions are not granted by the ACE while opening the existing file or directory, and it specifically identifies Read Attributes as the missing permission. Adding the user to BUILTIN groups would be a broad and imprecise change that may not match the file's intended NTFS ACL model. Granting Execute access does not solve the reported missing permission unless the access mask also includes the required attribute-read right, and the trace does not identify Execute as the failed permission. ONTAP security trace is designed to point directly to the permission, user mapping, security style, and access decision involved in a failed NAS request. The support engineer should remediate the exact ACL deficiency shown by the trace rather than guess at group membership. References/topics: ONTAP security trace results, NTFS ACE evaluation, Read Attributes permission, CIFS access denial troubleshooting, and NAS ACL remediation.

If a Cloud Volumes ONTAP instance loses connectivity to Cloud Manager for four or more days, the instance is stopped. Cloud Volumes ONTAP depends on the management plane for licensing, control, and operational management. Temporary communication interruptions do not immediately remove the working environment from inventory or require manual re-adding, but extended loss of connectivity has enforcement consequences. Sending an AutoSupport message alone would not be the consequence described by the scenario. Removing the instance from Cloud Manager inventory would be a management-plane display action, not the operational enforcement behavior of the instance. For support engineers, this is a cloud-control dependency question: Cloud Volumes ONTAP is ONTAP software running in cloud infrastructure, but it is managed and licensed through NetApp cloud services. When connectivity is lost beyond the permitted window, the instance is stopped to prevent unsupported operation. References/topics: Cloud Volumes ONTAP management, Cloud Manager/BlueXP connectivity, licensing enforcement, and cloud data services operational requirements.

Kerberos configuration should be reviewed when CIFS access issues occur only when clients access a data LIF on a specific node. Kerberos authentication relies on proper service principal names, DNS records, time synchronization, and node/LIF identity behavior. If the same share path works through other nodes or LIF locations, the issue is less likely to be the share path itself. Export policies apply primarily to NFS access and are not the correct focus for CIFS share troubleshooting. General cluster health may be checked, but it does not directly explain a node-specific CIFS authentication failure. The support engineer should investigate Kerberos and CIFS server dependencies such as DNS aliases, SPNs, domain controller communication, and the data LIF's node context. The key clue is node specificity with CIFS, which commonly points to Kerberos name or authentication path problems. References/topics: ONTAP SMB Kerberos authentication, CIFS data LIF behavior, SPN/DNS validation, node-specific CIFS access troubleshooting, and Active Directory integration.