Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Pure Storage FlashArray-Implementation-Specialist Exam - Topic 4 Question 22 Discussion

A customer would like to reduce SafeMode settings for retention and eradication with their current policy. How is authorization obtained to make the requested changes?
B) Two SafeMode approvers need to acknowledge via Pure1 step-up authentication before any changes can be made.
A) A Pure1 Admin needs to approve any changes for Pure Support to proceed.
C) The local account on FlashArray needs to permit any local changes.

Pure Storage FlashArray-Implementation-Specialist Exam - Topic 4 Question 22 Discussion

Actual exam question for Pure Storage's FlashArray-Implementation-Specialist exam
Question #: 22
Topic #: 4
[All FlashArray-Implementation-Specialist Questions]

A customer would like to reduce SafeMode settings for retention and eradication with their current policy. How is authorization obtained to make the requested changes?

Show Suggested Answer Hide Answer
Suggested Answer: B

To reduce SafeMode protections (such as shortening the retention period or disabling the eradication timer), two authorized SafeMode approvers must authenticate and approve the request via Pure1 step-up authentication.

SafeMode is a ransomware protection feature designed to prevent the accidental or malicious deletion of snapshots. Because reducing these protections weakens the array's security posture, Pure Storage enforces a strict 'Ratchet' authorization process.

The Process: Unlike standard support requests, a single admin or local user cannot authorize this change (making Option C incorrect). The customer must have previously designated specific individuals as 'SafeMode Approvers' in their Pure1 portal.

Authorization: When a request to weaken the policy is made, Pure Support triggers a verification workflow. Two of these designated approvers must log into Pure1 and perform a secondary authentication (often involving a PIN or TOTP) to explicitly 'sign off' on the reduction. This 'two-person rule' ensures that a compromised credential or a rogue insider cannot unilaterally expose the organization's backup data to destruction.


Contribute your Thoughts:

0/2000 characters
Peggy
1 day ago
Plus, it’s a standard practice in security.
upvoted 0 times
...
Rebbeca
6 days ago
Exactly! B covers that concern.
upvoted 0 times
...
Tom
12 days ago
But A lacks the necessary security layers.
upvoted 0 times
...
Garry
17 days ago
I’m leaning towards A. Quick approval process.
upvoted 0 times
...
Sueann
22 days ago
Yes, B ensures accountability. Good choice!
upvoted 0 times
...
Jody
27 days ago
I feel B is best. Protects against mistakes.
upvoted 0 times
...
Rosann
1 month ago
C doesn’t fit. Local changes aren’t enough.
upvoted 0 times
...
Iluminada
1 month ago
A is too simple. We need more checks.
upvoted 0 times
...
Peggy
1 month ago
Agreed, B makes sense. Safety first!
upvoted 0 times
...
Rebbeca
2 months ago
I think B is the right answer. Two approvals seem secure.
upvoted 0 times
...
Earlean
2 months ago
C doesn't apply here, it's all about the approvers.
upvoted 0 times
...
Abraham
2 months ago
Wait, is it really B? That sounds a bit excessive.
upvoted 0 times
...
Marion
2 months ago
Seems like a hassle to get two approvals.
upvoted 0 times
...
Charlena
2 months ago
I thought A was enough, but I guess not!
upvoted 0 times
...
Malcolm
2 months ago
B is the correct answer, two approvers are needed.
upvoted 0 times
...
Roy
3 months ago
I vaguely recall that Pure Support needs an admin's approval, but I can't remember if that's for all changes or just specific ones.
upvoted 0 times
...
Nieves
3 months ago
I’m a bit confused about the local account aspect. Does that really affect the SafeMode settings, or is it more about the Pure1 approvals?
upvoted 0 times
...
Leatha
3 months ago
I practiced a similar question where it mentioned Pure1 step-up authentication, so I feel like option B could be the right choice here.
upvoted 0 times
...
Frederica
3 months ago
I think I remember something about needing multiple approvals for changes in SafeMode, but I'm not entirely sure if it's two or just one.
upvoted 0 times
...

Save Cancel