5V0-22.23 Exam Dumps : VMware vSAN Specialist v2

To avoid storage policy non-compliance, the vSAN maintenance mode option that should be used is Full data migration. This option evacuates all data from the host to other hosts in the cluster and maintains the current object compliance state. This means that the VM objects will have access to all their replicas and will be compliant with their assigned storage policies. The other options might result in storage policy non-compliance, as they do not guarantee full data redundancy or policy adherence. Ensure accessibility only migrates the components that are essential for running the VMs, but might not have access to all their replicas. Partial maintenance mode is not a valid option for vSAN clusters. No data migration does not evacuate any data from the host and might result in VM unavailability or data loss. References: Working with Maintenance Mode; Place a Member of vSAN Cluster in Maintenance Mode

To deploy a new two-node vSAN cluster with a shared witness, the administrator must meet several requirements, one of which is that the ESXi hosts must have a minimum of 64 GBs of memory. This is because each host must have enough memory to run the VMs and also to support the vSAN metadata overhead. The other options are not requirements for a two-node vSAN cluster with a shared witness. The ESXi hosts do not need SSDs or NVMe for Virtual Flash File System, as they can use any supported storage devices for vSAN. The ESXi host’s controller cache and advanced features do not need to be disabled, as they can be used to improve performance and reliability. The ESXi host’s drives do not need to be configured in RAID 1, as vSAN uses its own software-defined RAID mechanism to provide Failures to Tolerate. References: Shared Witness for 2-Node vSAN Deployments; Two-Node Cluster Requirements

Two characteristics of the vSAN Data-At-Rest Encryption (DARE) are that it is Software Defined and works independently of the Cache or Capacity drives installed on the Nodes, and that it continues to operate unaffected during downtime on vCenter Server. DARE is a feature that encrypts all data stored on vSAN disks using AES-256 XTS mode. It does not require Self-Encrypting Drives (SEDs) to work, as it uses software-based encryption keys that are generated by an external Key Management Server (KMS) or a vSphere Native Key Provider. DARE also does not depend on the type or size of the disks used in the vSAN cluster, as it encrypts data after all other processing, such as deduplication and compression, is performed. DARE can function even when the vCenter Server is offline or unavailable, as it uses key persistence to store the encryption keys on the ESXi hosts or in a Trusted Platform Module (TPM). The hosts can access the keys without contacting the KMS or the vCenter Server. The other options are notcorrect, as they do not describe DARE accurately. DARE does not need to be enabled together with the vSAN Data-In-Transit encryption, as they are independent features that can be enabled or disabled separately. Data-In-Transit encryption encrypts data that is transmitted between hosts in a vSAN cluster using secure sockets layer (SSL) certificates. DARE is supported on Stretched Cluster environments, as it can encrypt data across multiple sites using site affinity rules.