NS0-077 NetApp StorageGRID Administrator Exam Question and Answers

When an existing StorageGRID deployment is expanded with nodes whose Grid Network IP addresses are on a subnet that has not previously been used, that subnet must be added to the Grid Network subnet list before the expansion is started. StorageGRID maintains this list so that every grid node can correctly route internal Grid Network traffic to the other participating subnets. NetApp StorageGRID 12.0 documentation explicitly states that if any new node uses a new Grid Network subnet, the administrator must add that subnet first; otherwise, the expansion must be cancelled, the subnet added, and the expansion restarted.

The configuration is performed in Grid Manager → Maintenance → Network → Grid Network, where the administrator selects Add another subnet and enters the network in CIDR notation. StorageGRID then distributes the routing configuration throughout the grid.

Option A is incorrect because routes do not need to be configured manually on every node. Option B is incorrect because a StorageGRID Gateway Node provides client load-balancing functions and is not an IP router between Grid Network subnets. Option D is also incorrect; StorageGRID explicitly supports multiple Grid Network subnets, provided they are routable through the configured Grid Network gateway.

Reference topics: StorageGRID Expansion → Grid Network → Grid Network Subnet List → Adding Nodes on New Subnets → Grid Network Routing

Under the legacy strong-global consistency behavior represented by these answer choices, writes use a quorum of metadata replicas at every site, while reads require a quorum of metadata replicas at the local site. Consequently, B and D are the intended answers. This architecture provides read-after-write consistency across all sites while allowing a client to perform reads using the metadata replicas available locally rather than waiting for responses from every remote site. NetApp defines strong-global as guaranteeing read-after-write consistency for client requests across all sites.

There is an important StorageGRID 12.0 qualification. New StorageGRID 12.0 installations use Quorum strong-global semantics by default. In a three-site grid containing three metadata replicas per site, the write requirement becomes a grid-wide quorum of five of the nine metadata replicas, with no more than three replicas contributed by one site. This improves site-failure tolerance. Systems upgraded from StorageGRID 11.9 or earlier retain the legacy strong-global behavior unless explicitly changed.

Therefore, B and D are the certification-key answer for the semantics assumed by this question, but B should not be generalized to a newly installed StorageGRID 12.0 grid using Quorum strong-global.

Reference topics: S3 Consistency → Strong-global → Metadata Replicas → Local Read Quorum → Legacy vs Quorum Strong-global

The correct action is to create a custom alert rule that evaluates the storagegrid_platform_services_failed_kafka_notifications Prometheus metric. StorageGRID collects operational metrics through Prometheus, and NetApp explicitly supports using those metrics as expressions in custom alert rules. When the configured expression crosses the defined threshold, StorageGRID generates an alert at the selected severity level.

For example, the administrator can create a rule under Alerts > Rules > Create custom rule and define an expression based on an increase or nonzero value for the failed Kafka notification metric. The alert can be configured with an appropriate duration and severity. Once triggered, StorageGRID can display the alert in Grid Manager and, when notification services are configured, send email or SNMP notifications to administrators.

Option B is incorrect because Grafana provides visualization of time-series metrics but does not itself establish StorageGRID alert notification logic. Option D allows an administrator to inspect or test the Prometheus metric, but merely querying it does not generate administrative notifications. Option A concerns HTTP/audit information and has no role in metric-based failure alerting.

Therefore, C is the required method for converting the Kafka failure metric into an actionable StorageGRID notification.

Reference topics: Grid Manager → Alerts → Custom Alert Rules → Prometheus Metrics → Platform Services → Kafka Notification Monitoring

To delete a specific version of an S3 object, the user must have the appropriate S3 permission, specifically s3:DeleteObjectVersion. In StorageGRID, permissions granted to tenant users are commonly defined through group policies, which control which S3 actions members of the group are authorized to perform against specified bucket and object resources. NetApp explicitly maps s3:DeleteObjectVersion to the S3 operation that deletes a specific object version.

Therefore, the user should verify the group policy associated with their tenant account and confirm that it allows s3:DeleteObjectVersion for the required bucket or object ARN. An explicit Deny for this action would override an Allow. NetApp even provides policy examples that specifically restrict users from deleting versioned objects by denying s3:DeleteObjectVersion.

Option B is incorrect because an S3 lifecycle policy automates object expiration and version-management behavior; it does not grant interactive user permissions. Option C governs where and how StorageGRID stores and protects object data, not S3 authorization. Option D refers to administrative privileges and is not the standard mechanism controlling a tenant user's object-level S3 operations.

Therefore, A. group policy is correct.

Reference topics: Tenant Manager → Groups → S3 Group Policies → s3:DeleteObjectVersion → Versioned Object Permissions → Explicit Deny/Allow Evaluation

For the SG5860, which uses the SG5800 controller, StorageGRID supports both Fixed and Aggregate port-bond configurations. In Fixed mode, ports 2 and 4 are paired for the Grid Network and ports 1 and 3 for the Client Network. Active-Backup is the default network bond mode, and VLAN tagging is optional; therefore, the two-port Active-Backup configuration in A is supported.

In Aggregate port bond mode, all four 10/25-GbE ports form a single LACP (802.3ad) bond carrying both Grid and Client Network traffic. Because both networks share the aggregate, StorageGRID requires a unique VLAN tag for each network, making C the supported aggregate configuration. A four-port Active-Backup aggregate is not supported, eliminating B.

Verification note: the current NetApp SG5800 appliance documentation also permits two-port LACP bonds in Fixed mode, with VLAN tagging optional. Consequently, option D is technically supported as written, making this question ambiguous against current documentation. If restricted to the intended two-answer certification key representing the standard Fixed Active-Backup and Aggregate LACP configurations, A and C are the expected selections.

Reference topics: SG5800/SG5860 Appliance Networking → Fixed Port Bond Mode → Aggregate Port Bond Mode → Active-Backup → LACP → VLAN Tagging

The SGF6112 is specifically suited to this requirement because StorageGRID supports configuring this appliance to operate as a Gateway Node with caching. NetApp documents the SGF6112 as a compact 1U all-flash appliance containing 12 NVMe SSDs, and explicitly lists its ability to operate as a Gateway Node with caching. This enables frequently accessed S3 objects to be cached close to the application without deploying a complete StorageGRID site containing multiple Storage Nodes.

This architecture is particularly appropriate for a small office with restricted rack space and power. The caching Gateway serves repeatedly accessed objects locally, reducing retrieval latency and WAN traffic while the authoritative object data continues to reside on the existing StorageGRID Storage Nodes.

Options A and C create entirely new StorageGRID sites. A production site requires at least three Storage Nodes, which significantly increases equipment, power, cooling, and rack requirements. C additionally deploys multiple high-performance appliances when only local read acceleration is required.

Option B is invalid because the SG5812 is a Storage Node appliance and does not provide the SGF6112's supported caching-Gateway operating mode.

Therefore, D provides the required local-read performance with the smallest practical physical footprint.

Reference topics: StorageGRID 12.0 → Load Balancer Caching → SGF6112 → Gateway Node with Caching → Edge/Remote-Site Read Acceleration

For regulatory retention in StorageGRID, the required mechanisms are S3 Object Lock and a compliant default ILM rule. StorageGRID implements write-once-read-many protection through S3 Object Lock. NetApp states that the global S3 Object Lock setting must be enabled before tenants can create buckets with S3 Object Lock enabled. Once enabled globally, the setting cannot be disabled.

There is also a mandatory ILM dependency. NetApp explicitly requires the default rule in every active ILM policy to be compliant before global S3 Object Lock can be enabled. A compliant default rule must maintain at least two replicated copies or one erasure-coded copy on Storage Nodes, must begin protection at day 0 using Ingest time, cannot place the protected copies in a Cloud Storage Pool, and must include a placement extending forever.

Option A is incorrect because SnapLock is an ONTAP WORM technology and is not the StorageGRID compliance mechanism. Option B is also incorrect: StorageGRID regulatory retention does not require an administrator-configured “Compliance Clock.” Object retention is enforced through S3 Object Lock retain-until dates, retention modes, legal holds, and compliant ILM placement.

Reference topics: S3 Object Lock → Regulatory Compliance → Compliant ILM Rules → Default ILM Rule → Retention and Legal Hold

The appropriate consistency level is strong-global because the requirement explicitly applies to clients and object metadata across multiple StorageGRID sites. NetApp defines strong-global as providing read-after-write consistency for all client requests across all sites. Therefore, after an object is created or its metadata is changed, subsequent requests from any site receive a consistent view of that change.

strong-site is insufficient because its consistency guarantee applies only to client requests within a single site. A client accessing the bucket from another StorageGRID site could therefore fall outside the required site-wide consistency guarantee. read-after-new-write, which is the default and generally recommended setting, guarantees consistency for newly created objects but provides eventual consistency for object updates. Because the scenario requires immediate consistency following both new writes and changes, it does not meet the stated requirement. available provides eventual consistency for both new objects and updates and prioritizes availability rather than cross-site consistency.

Thus, among the available options, strong-global is specifically designed for workloads requiring globally consistent object and metadata visibility across a multisite StorageGRID deployment.

Reference topics: S3 Buckets → Bucket Consistency → Strong-global → Strong-site → Read-after-new-write → Metadata Distribution Across Sites

The correct feature is health checks. When a third-party load balancer is placed in front of StorageGRID nodes, it must continuously determine which backend nodes are healthy enough to accept S3 client traffic. NetApp specifically recommends configuring a health-check mechanism so the load balancer can test each node and remove an unhealthy or unresponsive node from the active pool.

For StorageGRID, NetApp recommends using an HTTP OPTIONS request as a health probe. The load balancer sends the request directly to each Storage Node and expects an HTTP 200 response. If a node repeatedly fails to return the expected response, the third-party load balancer marks that node offline and stops directing new client connections to it. NetApp's guidance gives an example polling interval of once per second and marking a node offline after three failed checks.

Option A, GSLB, distributes traffic between geographically separate sites or data centers rather than determining the health of an individual backend node. Option C, SSL offloading, handles TLS processing. Option D, session persistence, keeps a client's requests associated with a selected backend and does not detect failed nodes.

Therefore, B. health checks directly satisfies the requirement.

Reference topics: Third-Party Load Balancers → Backend Node Health Checks → HTTP OPTIONS Probe → Node Pool Availability → S3 Client Connectivity

NetApp defines a specific workflow for migrating a Linux-based StorageGRID node between hosts. The source node must first be shut down cleanly using storagegrid node stop. After the node has stopped, the administrator runs storagegrid node export on the source host. The export output identifies the /var/local storage volume and provides the corresponding import command to use on the target host.

On Host-B, the administrator runs storagegrid node import against the exported node storage. NetApp then requires the imported configuration to be checked with storagegrid node validate. After successful validation, the migrated node is started with storagegrid node start, and Grid Manager is used to confirm that the node returns to a green operational state with no alerts.

Therefore, C represents the required migration sequence. Although the option summarizes the final validation/start phase, its stop → export → import → verify ordering matches NetApp's prescribed procedure.

Option A is incorrect because Grid Manager does not automatically migrate Linux containers. Option B reverses the export/import sequence. Option D incorrectly treats migration as a new StorageGRID installation and node reconfiguration.

Reference topics: StorageGRID Maintenance → Linux Host Migration → Node Stop → Node Export → Node Import → Validate → Start → Grid Manager Verification

StorageGRID diagnostic information requested by NetApp Support can be collected through the Grid Manager log-collection interface . NetApp documents SUPPORT > Tools > Log collection as the standard StorageGRID mechanism for gathering logs, configuration data, system information, and other diagnostic content from selected grid nodes. The resulting .tar.gz archive can be downloaded or sent to NetApp Technical Support.

NetApp Active IQ OneCollect is also a NetApp diagnostic collection framework that supports StorageGRID environments and can collect consolidated support information for troubleshooting. NetApp documentation identifies OneCollect as a mechanism for gathering diagnostic data from supported NetApp systems, including StorageGRID, and making that information available for support analysis.

Lumberjack is a StorageGRID node-level troubleshooting utility and remains useful for specialized log collection, but for this question's wording—specifically generating and uploading support data through the NetApp support workflow—the intended choices are OneCollect and Grid Manager log collection .

The failure is caused by the strong-global metadata consistency requirement, not by the Strict ILM placement requirement. StorageGRID stores object metadata in Cassandra, normally maintaining three metadata replicas per site. With three Storage Nodes at Site-2, taking one node down for maintenance and then losing another leaves only one metadata replica available at that site. The required metadata quorum can no longer be achieved for strong-global operations. NetApp documents that strong-global guarantees read-after-write consistency across all sites and requires sufficient metadata replicas to complete the operation.

The distinction from Strict ingest is important. Strict controls object-data placement: all copies specified by the ILM rule must be created before StorageGRID returns success. Here, the ILM rule requires only one copy at each site. Because one Storage Node remains operational at Site-2, StorageGRID can potentially place the Site-2 object copy there. Therefore, the data-placement requirement itself is not necessarily violated.

However, with two of the three metadata-bearing Storage Nodes unavailable at Site-2, Cassandra cannot satisfy the strong-global metadata consistency requirement, causing client PUT operations to fail.

Reference topics: S3 Consistency → Strong-global → Cassandra Metadata Replicas → Metadata Quorum → Strict ILM Ingest Behavior

A healthy StorageGRID deployment requires one primary Admin Node and at least three Storage Nodes at each site. NetApp StorageGRID 12.0 documentation states that every grid requires a primary Admin Node to provide core management and configuration services, while every site requires a minimum of three Storage Nodes. Therefore, the smallest healthy single-site virtual test environment contains four nodes: one Admin Node plus three Storage Nodes.

The three-Storage-Node minimum is important because Storage Nodes host core distributed services such as Cassandra, DDS, and ADC. In particular, the ADC service is hosted on at least three Storage Nodes at a site, supporting grid topology information, authentication, and service discovery.

Option A lacks the required primary Admin Node and therefore cannot constitute a complete manageable StorageGRID grid. Option D contains an Admin Node but only one Storage Node, which does not satisfy the three-node minimum. Option C would work, but the Gateway Node is optional because Admin Nodes can also provide S3 load-balancing functionality for a small compatibility-test deployment.

Therefore, B is the minimum healthy virtual configuration.

Reference topics: StorageGRID Architecture → Grid Node Types → Primary Admin Node → Minimum Storage Nodes per Site → Virtual Deployment Requirements

StorageGRID's integrated S3 caching capability is designed to improve performance for workloads that repeatedly read a working subset of object data. NetApp states that load balancer caching can significantly improve performance when a workload operates on a subset of data and accesses objects multiple times. The cache is implemented on Gateway Nodes and allows frequently requested S3 objects to be served locally rather than repeatedly retrieving the data from upstream Storage Nodes. This reduces retrieval latency and backend traffic, which is particularly valuable when applications or compute resources are geographically separated from the primary object-storage location.

NetApp identifies data lakes, high-performance computing, AI/ML training, content distribution networks, media asset management, and video production as suitable caching workloads. StorageGRID 12.0 specifically highlights the S3 caching layer as a performance enhancement for AI/ML training.

Option B describes lifecycle-based cloud tiering, not S3 caching. Option C describes conventional durable object storage and, notably, NetApp lists backup applications among workloads that are generally poor candidates for caching. Option D describes ONTAP multiprotocol NAS/object functionality and is unrelated to StorageGRID's S3 cache.

Therefore, A precisely represents the intended caching use case.

Reference topics: StorageGRID 12.0 → Load Balancing → Load Balancer Caching → Gateway Nodes → Cacheable S3 Workloads → AI/ML and HPC Performance

StorageGRID requires an ADC service quorum at each site at all times. The ADC service maintains grid topology information and provides configuration services used throughout the grid. StorageGRID therefore prevents the decommissioning of a Storage Node if removing that node would violate the site's ADC quorum requirements.

StorageGRID 12.0 provides a supported Move ADC procedure specifically for situations where an administrator needs to decommission a Storage Node hosting ADC. The ADC service can be moved to another eligible Storage Node within the same site. The target must not already host ADC and must be either a combined Storage Node or metadata-only Storage Node. NetApp performs the operation through the Grid Management private API, using POST /private/move-adc/start; progress can be monitored with GET /private/move-adc. The dependent IDNT, ACCT, and RSM services move automatically with ADC.

Option B is invalid because ADC runs on eligible Storage Nodes, not Admin Nodes. Option C is incorrect because StorageGRID 12.0 documents the migration through the Grid Management API rather than a CLI relocation command. Option D is unsupported; administrators do not manually reinstall ADC.

Therefore, A is correct.

Reference topics: StorageGRID Maintenance → Move ADC → ADC Quorum → Storage Node Decommission → Grid Management API