An administrator wants to provide security against ransomware attacks in Files.

Nutanix Files, part of Nutanix Unified Storage (NUS), can be protected against ransomware attacks using integrated tools. The administrator’s requirement to scan files for ransomware in real time and provide notifications involves a component that can monitor file activity, detect anomalies, and alert administrators.

Analysis of Options:

Option A (Protection Domain): Incorrect. Protection Domains in Nutanix are used for disaster recovery (DR) of VMs and Volume Groups, not for ransomware protection in Nutanix Files. Files uses replication policies (e.g., NearSync) for DR, and Protection Domains are not relevant for real-time ransomware scanning or notifications.

Option B (File Analytics): Correct. Nutanix File Analytics, integrated with Nutanix Files, provides real-time monitoring and anomaly detection for ransomware protection. It scans file activity, uses machine learning to detect unusual patterns (e.g., mass file deletions, encryption), and sends notifications to administrators in the event of a potential ransomware attack. This meets the requirement for real-time scanning and notification (as seen in Question 7, where anomaly alerts were configured in File Analytics).

Option C (Syslog Server): Incorrect. A Syslog Server can receive logs from Nutanix Files (as noted in Question 9), including alerts, but it is not a component that scans files for ransomware in real time. It is a passive logging tool and does not provide active ransomware detection or notification capabilities.

Option D (Files Console): Incorrect. The Files Console is the management interface for Nutanix Files, used for configuring shares, FSVMs, and policies. While it can display alerts, it does not perform real-time ransomware scanning or detection—that functionality is provided by File Analytics.

Why Option B?

File Analytics is specifically designed for data analytics and security in Nutanix Files, including real-time ransomware detection. It monitors file operations, detects anomalies indicative of ransomware (e.g., rapid file modifications, deletions), and sends notifications to administrators, meeting the requirement for real-time scanning and alerts.

Exact Extract from Nutanix Documentation:

From the Nutanix File Analytics Administration Guide (available on the Nutanix Portal):

“Nutanix File Analytics provides real-time protection against ransomware by monitoring file operations and detecting anomalies, such as rapid file modifications or deletions. In the event of a potential ransomware attack, File Analytics sends notifications to administrators, allowing for quick response and mitigation.”