An administrator is working on a VMware Cloud Foundation (VCF) Workload Domain that was configured to use vSAN for principal storage. The administrator wishes to create and configure a datastore cluster to host tenant VMs using that vSAN backed storage across multiple clusters, mixed OSA and ESA, in the domain.
What should the administrator consider?

• A. When using vSAN as the underlying datastore, an administrator must create the datastore cluster via vCenter APIs, include the vSAN datastore(s) in it, enable Storage DRS, and ensure the VM Storage Policies reference the appropriate vSAN-capable datastore.
• B. vSAN OSA and ESA based datastores must be added to a datastore cluster tag and then selected as part of a single storage policy.
• C. A datastore cluster can combine different storage types, such as vSAN, FC, and NFS datastores, as long as they are in the same vCenter; Storage DRS will treat them uniformly.
• D. When using vSAN datastores, Datastore Clusters are not supported. Each VM must be placed manually on the vSAN datastore.

An agency is designing its secure private cloud on VMware Cloud Foundation with the following requirements:
* Strict data segregation between the management and workload domains.
* Company policy prevents using vSAN as a storage solution.
* Data encryption at rest is mandatory for both the management and workload domains.
* Data encryption in transit is mandatory for the workload domains.
* Data-at-rest encryption must be performed by the storage array and not rely on VMware native or vSAN- specific mechanisms.
* Allow for automated VM placement, operational integrity with VCF Operations, and assurance that file- based workloads scale efficiently.
Which storage architecture fulfills these technical and regulatory requirements?

• A. Configure dedicated VMFS datastores on separate Fibre Channel arrays for management and workloads, with array-based encryption enabled and SPBM storage policies assigned. Use NFS v4.1 shares with Kerberos-based encryption for in-transit data for file workloads in the workload domain, restricting cross-domain datastore access.
• B. Enable VMware VM-level encryption using vSphere Native Key Provider (NKP) on local VMFS disks for all environments, implementing manual file workload allocation through generic SMB shares.
• C. Deploy metro clusters backed by Self-Encrypting Disk (SED) using iSCSI for both domains and configure encrypted VLANs for data-in-transit between VCF Operations and hosts.
• D. Create a unified NAS platform offering both NFS and SMB exports shared across management and workload domains, then enable application-level encryption for sensitive workloads and restrict access via firewall rules.

After a planned power outage, an administrator decided to restart the vSAN cluster manually.
Drag and drop the three correct options from the Options list on the left and place them into the Required Options on the right in any order. (Choose three.)

vSAN encounters a noncompliant Virtual Machine and is able to locate a full replica of 55% of the votes for the noncompliant objects.
What action will vSAN do with the Virtual Machine?

• A. Power off the Virtual Machine.
• B. Mark the Virtual Machine as inaccessible as vSAN is not able to locate more than 60% of the votes for the objects.
• C. Automatically recover the noncompliant objects and mark the Virtual Machine as compliant.
• D. Mark the Virtual Machine as orphaned.