To protect ONTAP storage from ransomware using an external process, and to create a Snapshot and block AD user access upon detection, which ONTAP feature enables this?

• A. TLS
• B. Vscan
• C. Ipsec
• D. Fpolicy

Answer: (D)

FPolicy is the ONTAP feature that allows an external policy server to enforce file-access policies and respond to events detected by that external process. In a ransomware scenario, the external detector can raise an alert to FPolicy, which can then trigger remediation actions such as creating a Snapshot to preserve a clean restore point and blocking the affected AD user’s access to prevent further damage. TLS and IPsec focus on securing data in transit, not on enforcing file policies or orchestrating automated responses. Vscan handles antivirus scanning, but it doesn’t provide the external policy enforcement and automated remediation workflow that includes taking a Snapshot and restricting user access.