VMware Advanced VMware Cloud Foundation 9.0 Storage - 3V0-23.25 Exam Practice Test
An architect is presented with the following requirements for the storage solution in a VMware Cloud Foundation (VCF) Workload Domain.
The solution must:
* Allow for rapid recovery in case of an availability zone failure.
* Provide an extremely high amount of IOPS to all applications.
* Allow for additional storage to be added as application needs grow.
* Provide the lowest latency possible for configured applications.
* Provide recovery in case of datastore failure.
* Encrypt data in transit and at rest.
What two vSAN advanced technologies must be deployed to meet these requirements? (Choose two.)
The solution must:
* Allow for rapid recovery in case of an availability zone failure.
* Provide an extremely high amount of IOPS to all applications.
* Allow for additional storage to be added as application needs grow.
* Provide the lowest latency possible for configured applications.
* Provide recovery in case of datastore failure.
* Encrypt data in transit and at rest.
What two vSAN advanced technologies must be deployed to meet these requirements? (Choose two.)
Correct Answer: A,B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An administrator has been presented with the following requirements from an application owner:
* The application is distributed across multiple data centers.
* The application currently uses NFSv4.1 for mounting data volumes.
* The application requires Kerberos encryption.
Drag and drop the three correct options from the Options list on the left and place them into the Required Options on the right to properly configure the storage solution to meet the requirements in any order. (Choose three.)
* The application is distributed across multiple data centers.
* The application currently uses NFSv4.1 for mounting data volumes.
* The application requires Kerberos encryption.
Drag and drop the three correct options from the Options list on the left and place them into the Required Options on the right to properly configure the storage solution to meet the requirements in any order. (Choose three.)
Correct Answer:
Explanation:
The user account used by the application.
The Active Directory used by the application.
The password used by the application.
NFSv4.1 with Kerberos requires identity integration through Active Directory and a valid Kerberos- capable user credential. In vSphere, Kerberos authentication for NFS 4.1 uses Active Directory credentials so ESX can authenticate securely when mounting Kerberos-protected NFS datastores. The required inputs are the Active Directory domain, the user account, and the password associated with that account. The storage guide also states that when several ESX hosts access the same NFS 4.1 datastore, all hosts must use the same Active Directory credentials to ensure consistent access. The Organizational Unit is not the required credential element for datastore mounting. The DNS name of a Kerberos server may be resolved through Active Directory and DNS infrastructure, but it is not one of the required configuration values selected here. A "Kerberos Key Management Server" is not part of the vSphere NFSv4.1 Kerberos datastore configuration model. Therefore, the required options are the application's user account, its Active Directory, and the account password. Reference topics: NFSv4.1 Datastores, Kerberos Authentication, Active Directory Credentials, Kerberos Security for NFS.
An administrator is tasked with enabling vSAN Data Protection.
Which action is required to enable vSAN Data Protection?
Which action is required to enable vSAN Data Protection?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
A VMware Cloud Foundation (VCF) Workload Domain is requested to be deployed with the following information:
. 6 blade style hosts with no local storage beyond the operating system.
. 4 25 Gb networking cards installed in each host.
. A 30 TB external array configured to support NVMe/TCP only.
. 2 dVS switches, one configured for storage isolation and one for all other traffic.
. NVMe/TCP multi-path configuration required.
. Existing Management Domain is deployed with VCF.
Place the steps for importing VCF on to this configuration.
. 6 blade style hosts with no local storage beyond the operating system.
. 4 25 Gb networking cards installed in each host.
. A 30 TB external array configured to support NVMe/TCP only.
. 2 dVS switches, one configured for storage isolation and one for all other traffic.
. NVMe/TCP multi-path configuration required.
. Existing Management Domain is deployed with VCF.
Place the steps for importing VCF on to this configuration.
Correct Answer:
Explanation:
Deploy ESX at 9.x
Deploy vCenter 9.x
Create Storage and General dvS
Configure VMkernel Binding for the NVMe over TCP Adapter
Add Software NVMe over TCP Adapters
Import the workload domain to VCF
The correct sequence starts by preparing the vSphere environment that will later be imported into VMware Cloud Foundation. ESX 9.x must be deployed first on the six blade hosts because the hosts provide the compute foundation for the workload domain. After the hosts are available, vCenter 9.x is deployed to manage the cluster and provide the required vSphere inventory. The two distributed switches are then created: one for storage isolation and one for general host and workload traffic.
Because the external array supports NVMe/TCP only and multipathing is required, VMkernel binding must be configured for the NVMe over TCP adapter before the software NVMe over TCP adapters are added. This ensures the NVMe/TCP storage paths are correctly associated with the intended storage network. After the software NVMe over TCP adapters are created and the hosts can access the external storage, the prepared workload domain can be imported into the existing VCF environment. Reference topics: NVMe over TCP Configuration, VMkernel Binding, Software NVMe/TCP Adapters, Existing vCenter Import, VCF Workload Domain Import.
As part of standard operating procedures, when an administrator leaves the organization, a shallow rekey operation must be performed on a vSAN ESA cluster with vSAN Data-at-Rest Encryption enabled.
Which key is rotated during a shallow rekey operation?
Which key is rotated during a shallow rekey operation?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An agency is designing its secure private cloud on VMware Cloud Foundation with the following requirements:
* Strict data segregation between the management and workload domains.
* Company policy prevents using vSAN as a storage solution.
* Data encryption at rest is mandatory for both the management and workload domains.
* Data encryption in transit is mandatory for the workload domains.
* Data-at-rest encryption must be performed by the storage array and not rely on VMware native or vSAN- specific mechanisms.
* Allow for automated VM placement, operational integrity with VCF Operations, and assurance that file- based workloads scale efficiently.
Which storage architecture fulfills these technical and regulatory requirements?
* Strict data segregation between the management and workload domains.
* Company policy prevents using vSAN as a storage solution.
* Data encryption at rest is mandatory for both the management and workload domains.
* Data encryption in transit is mandatory for the workload domains.
* Data-at-rest encryption must be performed by the storage array and not rely on VMware native or vSAN- specific mechanisms.
* Allow for automated VM placement, operational integrity with VCF Operations, and assurance that file- based workloads scale efficiently.
Which storage architecture fulfills these technical and regulatory requirements?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An administrator notices alerts triggering IOPS and Disk Throughput storage performance problems in the Fibre Channel datastore in a VMware Cloud Foundation (VCF) Workload Domain.
What can the administrator review to identify which Virtual Machines (VMs) may be experiencing storage IOPS and disk throughput performance issues?
What can the administrator review to identify which Virtual Machines (VMs) may be experiencing storage IOPS and disk throughput performance issues?
Correct Answer: C
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An administrator is using an external Key Management Server (KMS) with a vSAN Data-at-Rest Encryption cluster.
The KMS becomes temporarily unavailable.
What happens if a host without a Trusted Platform Module in the cluster is rebooted during this outage?
The KMS becomes temporarily unavailable.
What happens if a host without a Trusted Platform Module in the cluster is rebooted during this outage?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).