Question 1

Your company uses a cryptographic key system to encrypt tapes. After several years of use and thousands of tapes shipped to off-site locations, an IT audit reveals that encryption keys have been inadvertently stored as ciphertext on file shares to which everyone in the company has read permissions. Which response reflects industry best practice?
A) All data encrypted with the keys exposed as ciphertext should be considered safe.
B) All data encrypted with the keys exposed as ciphertext and not yet sent off-site as an encrypted tape should be re-keyed (decrypted and re-encrypted using a new key).
C) All data encrypted with the keys exposed as ciphertext should be re-keyed (decrypted and re-encrypted using a new key).
D) All data encrypted with the keys exposed as ciphertext should be considered safe as ciphertext is very difficult to use.

Accepted Answer

All data encrypted with the exposed keys should be re-keyed because the keys are compromised, making the encrypted data vulnerable.

Question 2

You have been asked to secure your FC switches in the data center. Unsecure protocols have already been disabled but you also need to restrict access to the switches only from specific IP addresses located on the production network. What should be used?
A) Roles
B) VSAN
C) ACL
D) Zone

Accepted Answer

Access Control Lists (ACLs) are used to restrict access to network devices by specifying which IP addresses are allowed to communicate with the device, making them suitable for securing FC switches by allowing only specific IP addresses from the production network.

Question 3

Your company asks you to increase restore speeds. What should you do?
A) Upgrade existing LTO3 drives to LTO5 drives to take advantage of faster read/write speeds and larger tape cartridge sizes.
B) Add a mirrored disk based backup target that can be used for backups that support point-in-time recovery.
C) Attach the existing tape libraries to a backup server with local drives configured with RAID 5.
D) Attach a JBOD drive array to the backup media server to improve the read performance of the backup catalog.

Accepted Answer

The answer of Your company asks you to increase restore...

Question 4

You have been asked to create a LUN on a storage array that is comprised of 7,200 rpm SATA drives. Each drive is rated at 100 IOPS. The LUN should provide a minimum of 1100 IOPS and withstand multiple drive failures using the least number of drives. How many drives and which RAID level should you use to create this LUN?
A) 11 drives and RAID 0
B) 12 drives and RAID 5
C) 13 drives and RAID 6
D) 22 drives and RAID 1

Accepted Answer

RAID 6 can withstand multiple drive failures and provides redundancy. With 13 drives, RAID 6 uses 2 drives for parity, leaving 11 drives for data. Each drive provides 100 IOPS, so 11 drives provide 1100 IOPS, meeting the requirement.

Question 5

You have completed installing your FC SAN. When everything is powered on, numerous devices are not available. You need to verify that the devices appear within the FC fabric by accessing the appropriate FC service that provides a list of devices and their respective function. Which server within the Fibre Channel fabric would be used to do this?
A) Fabric Login server
B) Name server
C) Management server
D) Fabric Controller

Accepted Answer

The Name server in a Fibre Channel fabric is responsible for maintaining a database of all devices connected to the fabric, allowing you to verify the presence and function of devices.

Question 6

After the storage administrator merged two multi-vendor FC SANs, an error indicates that two ports have become isolated causing a segmentation to exist in the fabric. Which two events would cause this? (Choose two.)
A) Overlapping zones
B) Different port names
C) Unsupported routing protocols
D) Different link speeds

Accepted Answer

Overlapping zones can cause segmentation as they can lead to conflicts in the fabric. Unsupported routing protocols can also cause segmentation because the devices may not be able to communicate properly if they do not support the same protocols.

Question 7

Click the Exhibit button.  The customer configuration shown in the exhibit is not meeting the throughput needs of a newly installed application. The application's I/O profile consists of 100% 4 kilobyte reads and all servers require a sustained bandwidth of 150 MBps. Which location within the configuration presents a performance bottleneck?
A) Links between hosts and Switch A
B) Inter-switch link between Switch A and Switch B
C) Inter-switch link between Switch B and Switch C
D) Links between Switch C and storage subsystem

Accepted Answer

The answer of Click the Exhibit button.  The customer...

Question 8

When troubleshooting an issue on a host, you discover that the existing file system partition has been corrupted after you provisioned a LUN to another host connected to the same FC fabric. What is the cause of this problem?
A) Incorrect zoning
B) Incorrect LUN masking
C) Incorrect multipathing policy
D) Incorrect LUN size

Accepted Answer

Incorrect LUN masking can lead to a situation where multiple hosts have access to the same LUN, causing data corruption if they are not properly isolated.

Question 9

A security audit reveals deficiencies in your company's FC zoning practices. Your manager asks you to make a recommendation to implement the most secure FC zoning possible. Your company is using switches from a single vendor. What do you recommend?
A) All zones should use frame-based hardware enforcement using pWWN identification exclusively for all configurations.
B) All zones should use software-based enforcement using pWWN identification exclusively for all configurations.
C) All zones should use frame-based hardware enforcement using destination port identification exclusively for all configurations.
D) All zones should use software-based enforcement using destination port identification exclusively for all configurations.

Accepted Answer

Frame-based hardware enforcement using pWWN identification is the most secure method for FC zoning as it ensures that only authorized devices can communicate, reducing the risk of unauthorized access.

Question 10

Click the Exhibit button.  The customer application requires a 50/50 R/W ratio with 100 MBps throughput requirements for each direction of the link. The application servers will simultaneously sustain these data rates across all LUNs in parallel. Referring to the exhibit, where will the oversubscribed link(s) occur?
A) Links between hosts and Switch A
B) Inter-switch link between Switch A and Switch B
C) Inter-switch link between Switch B and Switch C
D) Links between Switch C and storage

Accepted Answer

The answer of Click the Exhibit button.  The customer...

Question 11

Click the Exhibit button.  Which RAID level is shown in the exhibit?
A) RAID 4
B) RAID 5
C) RAID 0
D) RAID 6

Accepted Answer

The answer of Click the Exhibit button.  Which RAID...

Question 12

A storage networking device has experienced a failure that has "phone home" and opened a service request for a part that can be a customer replaceable unit (CRU). Your support vendor has dispatched a replacement part using a secure courier service. According to SNIA Storage Security Best Current Practices, which statement is correct about the repair process?
A) The support vendor's parts courier should have access to the secure data center to facilitate an unattended part swap-out bringing the fastest resolution to the failure.
B) The data center operations staff should accept the part and place it in a secure staging area awaiting a qualified administrator to perform the installation.
C) Any data center operator on-site should perform the part installation bringing the fastest resolution to the failure.
D) The support vendors parts courier should coordinate with a field service staff person from your support vender; both should have access to the secure data center to facilitate an unattended part swap-out.

Accepted Answer

The data center operations staff should accept the part and place it in a secure staging area awaiting a qualified administrator to perform the installation, ensuring security and proper handling.

Question 13

What is the storage protocol used between initiators and targets connected to an FCoE fabric?
A) SATA
B) SCSI
C) SAS
D) FCoE

Accepted Answer

SCSI is the storage protocol used between initiators and targets connected to an FCoE fabric.

Question 14

Some business critical database applications have been suffering from slowly increasing performance issues with one enterprise SAN-attached storage system. In particular, the applications are showing higher than normal read response times. What should the storage administrator monitor to determine the root cause?
A) Storage utilization
B) Available free space
C) Write response time
D) Cache hit rate

Accepted Answer

Monitoring the cache hit rate can help determine if the storage system is effectively using its cache to speed up read operations. A low cache hit rate could lead to higher read response times.

Question 15

You receive a ticket from a database group which is complaining about slow access to storage on only one particular server, as compared to other servers in an active-active cluster. You verify zoning and LUN masking which are fine. On the FC switch, you verify link speed, errors, and throughput for the FC switch ports used by this server. There are no errors on the ports and the link speed is the same as on the switch ports used by other servers in the cluster. You notice that on one port on the FC switch used by this server, that there is no throughput at all. What is causing the problem?
A) The switch has obsolete firmware.
B) There are too many ports used on the FC switch.
C) Multipathing was not configured for load-balancing.
D) The switch is over-subscribed.

Accepted Answer

Multipathing not configured for load-balancing can cause one path to be used exclusively, leading to no throughput on other paths, which matches the observation of no throughput on one port.

Question 16

The enterprise storage system has the "call home" feature enabled and configured. However, the storage administrator has been told that "call home" is not working. Which two actions should you perform? (Choose two.)
A) Verify SMTP settings.
B) Verify SNMP thresholds.
C) Verify firewall rules.
D) Verify the SMI-S configuration.
E) Verify VSAN configuration.

Accepted Answer

Verify SMTP settings to ensure that the storage system can send emails. Verify firewall rules to ensure that the storage system can communicate with the "call home" server.

Question 17

A server with a dual-ported HBA loses access to storage during switch SFP replacement. You want to prevent this from happening in the future. Which action should you perform?
A) Use zoning
B) Enable trunking.
C) Use LUN masking
D) Configure multipathing

Accepted Answer

Configuring multipathing allows a server to maintain access to storage through multiple paths, ensuring redundancy and preventing loss of access if one path fails, such as during switch SFP replacement.

Question 18

Which protocol commonly uses CNA devices?
A) FCIP
B) iFCP
C) FCoE
D) FCR

Accepted Answer

FCoE (Fibre Channel over Ethernet) commonly uses Converged Network Adapters (CNAs) to consolidate Ethernet and Fibre Channel traffic onto a single network.

Question 19

Click the Exhibit button.  Referring to the exhibit, which three switch indicators will help you to determine the stability of a link? (Choose three.)
A) er_crc
B) er_toolong
C) er_enc_in
D) er_bad_eof
E) er_trunk

Accepted Answer

The answer of Click the Exhibit button.  Referring to...

Question 20

Which two high availability elements can be achieved by remote storage replication? (Choose two.)
A) Recoverability
B) Fault tolerance
C) Robustness
D) Redundancy
E) Serviceability

Accepted Answer

Remote storage replication provides redundancy and recoverability. Redundancy is achieved by having multiple copies of data stored in different locations. Recoverability is achieved by being able to restore data from a remote location in the event of a failure.

Exam 2: Storage Networking Management and Administration

You have been asked to secure your FC switches in the data center. Unsecure protocols have already been disabled but you also need to restrict access to the switches only from specific IP addresses located on the production network. What should be used?

Your company asks you to increase restore speeds. What should you do?

After the storage administrator merged two multi-vendor FC SANs, an error indicates that two ports have become isolated causing a segmentation to exist in the fabric. Which two events would cause this? (Choose two.)

When troubleshooting an issue on a host, you discover that the existing file system partition has been corrupted after you provisioned a LUN to another host connected to the same FC fabric. What is the cause of this problem?

A security audit reveals deficiencies in your company's FC zoning practices. Your manager asks you to make a recommendation to implement the most secure FC zoning possible. Your company is using switches from a single vendor. What do you recommend?

Click the Exhibit button. Which RAID level is shown in the exhibit?

What is the storage protocol used between initiators and targets connected to an FCoE fabric?

The enterprise storage system has the "call home" feature enabled and configured. However, the storage administrator has been told that "call home" is not working. Which two actions should you perform? (Choose two.)

A server with a dual-ported HBA loses access to storage during switch SFP replacement. You want to prevent this from happening in the future. Which action should you perform?

Which protocol commonly uses CNA devices?

Click the Exhibit button. Referring to the exhibit, which three switch indicators will help you to determine the stability of a link? (Choose three.)

Which two high availability elements can be achieved by remote storage replication? (Choose two.)