Ensure default protection is configured at the array level and for every pod

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

From the CLI: ; Run the command purearray default-protection list to view the default protection group lists for the array root (denoted by - in the Container Name column) and all pods. ; Run the command purepgroup list --retention-lock to verify that the SafeMode status is ratcheted and manual eradication is disabled for the protection groups assigned as defaults.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

To align with the security recommendations, assign a ratcheted protection group to the array root and all pods so that newly provisioned data receives baseline SafeMode protection automatically. From the GUI: ; Navigate to Protection > Array. ; In the Default Protection panel, click the Edit (Set Default Protection) icon on the right of the appropriate row (the - row for the root of the array, or the row for a specific pod). ; In the Available Protection Groups column, select the protection groups to be added so they appear in the Selected Protection Groups column. ; Click Set. ; Navigate to Protection > Protection Groups and select your assigned default protection group.