5V0-22.23 Questions and Answers

To view the resynchronizing metrics, the vSAN administrator should open the Backend performance category. This category shows the performance of vSAN data components, such as read/write latency, IOPS, throughput, congestion, and resync traffic. The other categories are not relevant for this task. Disks shows the performance of physical disks in the cluster, Host Network shows the network performance of vSAN hosts, and Resvnc Latency shows the latency of resynchronization operations. References: 1, page 23; 3, section 6.4

The three actions that the vSAN administrator should perform on the staging cluster prior to moving the vSAN nodes to the production cluster are:

• Disable vSAN Services: This will stop any vSAN-related operations on the staging cluster, such as resynchronization, rebalancing, or repair. This will also prevent any new virtual machines from being created or migrated to the staging cluster.
• Delete all Disk Groups: This will remove all disks from the vSAN cluster and erase all data on them. This will also free up the disks for use in the production cluster.
• Delete all partitions from the capacity disks: This will ensure that there are no remnants of any previous vSAN configuration on the disks. This will also avoid any potential conflicts or errors when adding the disks to the production cluster.

Enabling File Services, marking the disks for partial reservation, and removing all capacity drives are not necessary or recommended actions for this scenario. Enabling File Services would add an unnecessary layer of complexity and overhead to the staging cluster. Marking the disks for partial reservation would reduce the available capacity for vSAN and potentially cause performance issues. Removing all capacity drives would leave only cache disks in the staging cluster, which would not be compatible with vSAN. References:

• VMware vSAN Specialist v2 Exam Preparation Guide, page 10

To ensure that a single rack failure is not going to affect the data availability, while minimizing the number of racks used, the administrator has to do the following:

• Distribute servers across at least three different racks. This is because vSAN supports up to three fault domains per cluster, which can be used to tolerate one or two failures. If only two racks are used, then only one failure can be tolerated4
• Configure three fault domains. A fault domain is a logical grouping of hosts that share a common failure point, such as a rack or a power supply. By configuring fault domains, vSAN can place replicas of an object across different fault domains, so that a failure within one fault domain does not result in data loss orunavailability4 References: 4: VMware vSAN Specialist v2 Exam Preparation Guide, page 13

The two prerequisites for using the TRIM and UNMAP capability of vSAN are:

• B. The vSAN cluster is an all-flash architecture. TRIM and UNMAP are only supported on all-flash vSAN clusters, as they can reclaim space from flash devices that use thin provisioning. TRIM and UNMAP are not supported on hybrid vSAN clusters, as they cannot reclaim space from magnetic disks that use thick provisioning1.
• D. TRIM and UNMAP is enabled. TRIM and UNMAP are disabled by default in vSAN, as they might have a performance impact on some workloads. To enable TRIM and UNMAP on a vSAN cluster, the administrator must use the following RVC command: vsan.unmap_support –enable2. After enabling TRIM and UNMAP, the administrator must power off and then power on all VMs that use the vSAN datastore.

To shut down the vSAN cluster using the Shutdown Cluster Wizard, the administrator needs to turn off High Availability (HA) before starting the wizard. This is because HA monitors the cluster for host failures and attempts to restart the affected VMs on other hosts. If HA is not turned off, the cluster might register host shutdowns as failures and trigger unnecessary VM restarts, which can interfere with the graceful shutdown process. Therefore, the administrator should disable HA from the Configure tab of the cluster before using the Shutdown Cluster Wizard12 References: 1: Shut Down the vSAN Cluster Using the Shutdown Cluster Wizard 3 2: Manually Shut Down and Restart the vSAN Cluster 4

To build a vSAN ESA cluster with RAID-5/FTT 1 adaptive storage policy, the absolute minimum number of hosts that need to be part of that vSAN ESA cluster is 3. This is because the vSAN ESA supports a new RAID-5 erasure coding scheme in a 2+1 configuration, which writes the data in a VM as a stripe consisting of 2 data bits and 1 parity bit, across a minimum of 3 hosts. This scheme can tolerate a single host failure (FTT=1) while consuming 1.5x the capacity of the primary data. This scheme is suitable for smaller vSAN clusters that want to reduce capacity usage without compromising performance12 References: 1: VMware vSAN Specialist v2 ExamPreparation Guide, page 15 2: Adaptive RAID-5 Erasure Coding with the Express Storage Architecture in vSAN 8 3

The purpose of the TRIM/UNMAP process is to reclaim disk space that is no longer used by the guest operating system or the virtual machine. TRIM and UNMAP are commands that allow the guest operating system to inform the underlying storage layer that certain blocks are no longer in use and can be freed up. This process helps to improve storage efficiency and utilization,especially for thin-provisioned disks that grow dynamically as data is written to them. The other options are not correct. The TRIM/UNMAP process does not collect vSAN log files, repair internal cache errors, or delete orphaned snapshots. These are different tasks that are performed by other tools or processes. References: Enabling TRIM/UNMAP Commands for VMware Cloud on AWS Clusters; Reclaiming guest OS storage in VMware vSAN 6.7 U1 with TRIM/UNMAP process

To implement HCI mesh between two clusters on vSAN that are located in geographically separate sites, the vSAN administrator should consider the following requirements:

• Either Layer 2 or Layer 3 communications can be used. HCI mesh supports both Layer 2 and Layer 3 network configurations, as long as the network latency and bandwidth requirements are met3
• The configuration must meet the same latency and bandwidth requirement as local vSAN. HCI mesh requires a network latency of less than or equal to 5 ms RTT between any two hosts in the participating clusters, and a network bandwidth of at least 10 Gbps for the vSAN network vmkernel port3 References: 3: VMware vSAN Specialist v2 Exam Preparation Guide, page 15

When adding a disk to a host that was previously used in a decommissioned vSAN cluster, the disk may still have some vSAN metadata partitions that prevent it from being recognized by disk management. To resolve this issue, the disk partitions need to be deleted using either ESXCLI or partedUtil commands. This will erase all data on the disk and make it available for use in disk management. References: VMware vSAN Specialist v2 EXAM 5V0-22.23, page 21

To create a Kerberos secured NFS v4.1 file share, the administrator needs to provide the following information during the configuration of the File Service:

• Active Directory Domain: The domain name of the Active Directory server that provides Kerberos authentication service for the NFS server and clients. For example, example.com.
• User Account: The user name of the Active Directory account that has permissions to join the NFS server to the domain and create service principal names (SPNs) for the NFS server. For example, administrator@example.com.
• Password: The password of the Active Directory account that is used for authentication. For example, P@ssw0rd.

These information are required to enable Kerberos security for NFS 4.1 and allow the NFS server to obtain a Kerberos ticket from the Active Directory server. The administrator also needs to specify the NFS share name, path, and access permissions1 References: 1: VMware vSphere Storage Guide, page 118

 If vSAN is able to locate a full replica of 55% of the votes for the noncompliant objects of a virtual machine, vSAN will mark the virtual machine as compliant and automatically recover the noncompliant objects. This is because vSAN uses a quorum-based algorithm to determine object availability and compliance. An object is considered available if more than 50% of its votes are accessible, and compliant if it meets its assigned storage policy requirements. In this case, since 55% of the votes are accessible, vSAN can access a full replica of each object and restore its compliance state by rebuilding any missing or corrupted components. The other options are not correct. vSAN will not power off, mark as inaccessible, or mark as orphaned a virtual machine that has more than 50% of its votes accessible, as these actions would result in unnecessary downtime or data loss. References: Object States That Indicate Problems in vSAN; Accessibility of Virtual Machines Upon a Failure in vSAN

Two characteristics of the vSAN Data-At-Rest Encryption (DARE) are that it is Software Defined and works independently of the Cache or Capacity drives installed on the Nodes, and that it continues to operate unaffected during downtime on vCenter Server. DARE is a feature that encrypts all data stored on vSAN disks using AES-256 XTS mode. It does not require Self-Encrypting Drives (SEDs) to work, as it uses software-based encryption keys that are generated by an external Key Management Server (KMS) or a vSphere Native Key Provider. DARE also does not depend on the type or size of the disks used in the vSAN cluster, as it encrypts data after all other processing, such as deduplication and compression, is performed. DARE can function even when the vCenter Server is offline or unavailable, as it uses key persistence to store the encryption keys on the ESXi hosts or in a Trusted Platform Module (TPM). The hosts can access the keys without contacting the KMS or the vCenter Server. The other options are notcorrect, as they do not describe DARE accurately. DARE does not need to be enabled together with the vSAN Data-In-Transit encryption, as they are independent features that can be enabled or disabled separately. Data-In-Transit encryption encrypts data that is transmitted between hosts in a vSAN cluster using secure sockets layer (SSL) certificates. DARE is supported on Stretched Cluster environments, as it can encrypt data across multiple sites using site affinity rules. 

To achieve the best performance for the database virtual machines and tolerate two host failures in a vSAN OSA cluster, the administrator must use RAID-1 as the RAID configuration in the storage policy. RAID-1 is a mirroring technique that creates multiple replicas of each object across different hosts. RAID-1 provides the best performance among the available RAID configurations, as it does not involve any parity calculations or stripe splitting. To tolerate two host failures, the administrator must set the Failures to Tolerate (FTT) policy to 2, which means that each object will have three replicas. The other options are not correct. RAID-5 and RAID-6 are erasure coding techniques that split each object into data segments and parity segments across different hosts. RAID-5 can tolerate one host failure, while RAID-6 can tolerate two host failures. However, both RAID-5 and RAID-6 have lower performance than RAID-1, as they involve more complex calculations and network traffic. RAID-0 is a striping technique that splits each object into multiple stripes across different hosts. RAID-0 does not provide any data redundancy or fault tolerance, and therefore cannot tolerate any host failure. References: RAID Configurations, FTT, and Host Requirements; RAID 5 or RAID 6 Design Considerations

vSAN will use a 4+1 RAID-5 data placement scheme with parity will be used is the correct answer because vSAN 8 ESA uses adaptive RAID-5 erasure coding that depends on the number of hosts in the cluster. If the cluster has 6 or more hosts, vSAN will use a 4+1 RAID-5 scheme, where the data is written as a stripe of 4 data bits and 1 parity bit across 5 hosts. This provides a failure tolerance of 1 (FTT=1) and a space efficiency of 1.25x. If the cluster has less than 6 hosts (3 to 5), vSAN will use a 2+1 RAID-5 scheme, where the data is written as a stripe of 2 data bits and 1 parity bit across 3 hosts. This also provides a failure tolerance of 1 (FTT=1) but a space efficiency of 1.5x. In this case, the cluster has 5 hosts, so vSAN will use the 4+1 RAID-5 scheme.

The other options are incorrect for the following reasons:

• A, vSAN will use a 2+1 RAID-5 data placement scheme with parity will be used, is incorrect because vSAN will only use this scheme if the cluster has less than 6 hosts but more than 2 hosts. In this case, the cluster has 5 hosts, so vSAN will use the 4+1 RAID-5 scheme.
• B, RAID 5 will provide an FTT=2 level of protection in this case, is incorrect because RAID 5 can only provide an FTT=1 level of protection, regardless of the number of hosts or the data placement scheme. To achieve an FTT=2 level of protection, vSAN would need to use RAID 6 erasure coding, which requires at least 6 hosts in the cluster.
• D, vSAN will spread the components across all of the disk groups, is incorrect because vSAN will not necessarily spread the components across all of the disk groups in the cluster. vSAN will only spread the components across as many disk groups as needed to meet the storage policy requirements and to balance the load and capacity. In this case, vSAN will only need to spread the components across 5 disk groups for each stripe of RAID-5 data. References:
• VMware vSAN Specialist v2 Exam Preparation Guide, page 11
• Adaptive RAID-5 Erasure Coding with the Express Storage Architecture in vSAN 8

To introspect multiple performance metrics of a single virtual machine, such as latency, throughput, IOPS, and congestion, the feature that should be used is I/O Trip Analyzer. This feature allows the administrator to diagnose the virtual machine I/O latency issues by providing a breakdown of the latencies at each layer of the vSAN stack, such as VM, host, network, and disk group. The other options are not correct, as they do not provide multiple performance metrics of a single virtual machine. esxcli is a command-line tool that can be used to manage various aspects of ESXi hosts, but it does not provide detailed performance analysis of virtual machines. Skyline Health is a feature that provides proactive notifications and recommendations for software and hardware issues based on VMware Analytics Cloud, but it does not provide granular performance metrics of virtual machines. llOlnsiqht is not a valid feature name in vSAN. References: Use I/O Trip Analyzer; Monitoring vSAN Performance

To upgrade multiple vSAN Witness nodes with vLCM (single image management) that are used for vSAN Stretched and two-node Clusters, the administrator can upgrade two witness node types: appliance witness node and nested witness node. An appliance witness node is a virtual ESXi host that runs on a physical ESXi host and contains the witness components of VM objects stored in the vSAN cluster. A nested witness node is a virtual ESXi host that runs on another virtual ESXi host and contains the witness components of VM objects stored in the vSAN cluster. Both types of witness nodes can be managed by vLCM as independent nodes since vSphere 7.0 Update 3, as long as they are version 7.0 Update 2 or later. The other options are not correct. A shared witness node is a witness node that serves multiple vSAN clusters, which is not supported by vLCM. A dedicated witness node is a witness node that serves only one vSAN cluster, which is not a specific type of witness node. A physical witness node is aphysical ESXi host that contains the witness components of VM objects stored in the vSAN cluster, which cannot be upgraded by vLCM. References: vSphere Lifecycle Manager and the vSAN Witness Hosts; Shared Witness for 2-Node vSAN Deployments

The VMware solution that requires vSAN usage is VMware Cloud Foundation. VMware Cloud Foundation is an integrated software stack that bundles compute virtualization (VMware vSphere), storage virtualization (VMware vSAN), network virtualization (VMware NSX), and cloud management and monitoring (VMware vRealize Suite) into a single platform that can be deployed on premises or as a service within a public cloud. VMware Cloud Foundation relies on vSAN as the primary storage solution for its workload domains, which are logical pools of resources that can be used to run different types of workloads. The other options are not correct. VMware Horizon, VMware Telco Cloud Automation, and VMware Aria Automation are VMware solutions that do not require vSAN usage, although they can benefit from it. VMware Horizon is a platform that delivers virtual desktops and applications across a variety of devices and locations, and it can use any supported storage solution, including vSAN. VMware Telco Cloud Automation is a cloud-native orchestration and automation platform that enables communication service providers to accelerate the deployment and lifecycle management of network functions and services across any network and cloud. It can use any supported storage solution, including vSAN. VMware Aria Automation is not a valid VMware solution name. References: VMware Cloud Foundation Overview; VMware Horizon Overview; VMware Telco Cloud Automation Overview