Where would you create an export policy?

Export policies are created within a Storage Virtual Machine (SVM), formerly known as a Vserver. An export policy is a named set of export rules that define access permissions for NFS clients to data on the SVM. Once created at the SVM level, this policy can be applied to one or more volumes or qtrees within that same SVM to control access. The SVM provides the logical, multi-tenant container for data and its associated access policies.

A. in a FlexVol volume: An export policy is applied to a FlexVol volume to control access, but it is not created within the volume itself.

B. in a RAID group: A RAID group is a low-level physical storage construct that has no awareness of logical access control policies like export policies.

D. in an aggregate: An aggregate is a collection of RAID groups that provides a pool of storage for volumes; it is not a logical entity where access policies are created.

1. NetApp ONTAP Documentation, NFS management, "Create an export policy": This official guide explicitly shows that creating an export policy is an SVM-level operation. The first parameter in the CLI command vserver export-policy create is -vserver , confirming that the policy is created in the context of a specific SVM.

Source: NetApp ONTAP 9 Documentation Center, "NFS management," section on "Create an export policy."

2. NetApp ONTAP Documentation, ONTAP concepts, "How export policies work": This document describes the architecture and states, "An export policy is a set of export rules that can be applied to a volume or qtree to govern client access. You can create multiple export policies on the storage virtual machine (SVM)."

Source: NetApp ONTAP 9 Documentation Center, "ONTAP concepts," section on "How export policies work."

3. NetApp ONTAP Documentation, Command-Line Interface (CLI) Reference, vserver export-policy create: The manual page for this command details its function: "The vserver export-policy create command creates an export policy for a Vserver." The Vserver (now SVM) is the mandatory context for the command.

Source: NetApp ONTAP 9 Command Reference, vserver export-policy create man page.