5V0-22.23 Exam Dumps : VMware vSAN Specialist v2

The impact to any virtual machine that was running on the failed host using vSANPolicy1 is that each virtual machine will be restarted on another vSAN host using vSphere HA. This is because vSANPolicy1 has a Failures to Tolerate setting of 1 failure - RAID-5 (Erasure Coding), which means that each object has four components (three data and one parity) distributed across four hosts. If one host fails, the object can still be accessed with the remaining three components,and vSphere HA will restart the virtual machine on another host. vSAN will also try to rebuild the missing component on another host, if there is enough capacity and resources. The other options are incorrect because they either assume that the object is unavailable or that the recovery process is delayed or impossible. References: [VMware vSAN Specialist v2 EXAM 5V0-22.23], page 16

Two characteristics of the vSAN Data-At-Rest Encryption (DARE) are that it is Software Defined and works independently of the Cache or Capacity drives installed on the Nodes, and that it continues to operate unaffected during downtime on vCenter Server. DARE is a feature that encrypts all data stored on vSAN disks using AES-256 XTS mode. It does not require Self-Encrypting Drives (SEDs) to work, as it uses software-based encryption keys that are generated by an external Key Management Server (KMS) or a vSphere Native Key Provider. DARE also does not depend on the type or size of the disks used in the vSAN cluster, as it encrypts data after all other processing, such as deduplication and compression, is performed. DARE can function even when the vCenter Server is offline or unavailable, as it uses key persistence to store the encryption keys on the ESXi hosts or in a Trusted Platform Module (TPM). The hosts can access the keys without contacting the KMS or the vCenter Server. The other options are notcorrect, as they do not describe DARE accurately. DARE does not need to be enabled together with the vSAN Data-In-Transit encryption, as they are independent features that can be enabled or disabled separately. Data-In-Transit encryption encrypts data that is transmitted between hosts in a vSAN cluster using secure sockets layer (SSL) certificates. DARE is supported on Stretched Cluster environments, as it can encrypt data across multiple sites using site affinity rules. 

The Capacity Reserve feature in vSAN 8.0 OSA reduces the amount of capacity reserved for transient and rebuild operations by using a slack space threshold. This threshold is calculated based on the size of the largest component in the cluster and the number of failures to tolerate. If the used space on vSAN datastore exceeds the suggested slack space threshold, the feature will not operate properly and vSAN will revert to using the host rebuild reserve threshold. The other scenarios will not affect the Capacity Reserve feature. References: [VMware vSAN Specialist v2 EXAM 5V0-22.23], page 28