VMware Advanced VMware Cloud Foundation 9.0 Storage 3V0-23.25 Exam Questions

Answer : B, C, E

When vertically scaling a vSAN ESA cluster, adding the same model and capacity drives helps preserve a balanced and predictable cluster design. vSAN works best when hosts use uniform storage configurations. The guidance states that unbalanced host configurations reduce predictability of storage performance because vSAN does not store the same number of components on each host, can introduce different maintenance procedures, and can reduce performance on hosts with smaller or different device types. In ESA, each storage device contributes both capacity and performance through the storage pool model, so mixing device models, endurance classes, or capacities can create uneven consumption and inconsistent backend behavior. Using the same drive model and capacity across hosts improves capacity symmetry, keeps maintenance and replacement procedures consistent, and makes performance planning more predictable. The cache-drive option is incorrect because ESA is single-tier and does not use separate cache and capacity tiers. Equal cache and capacity tiers apply to OSA-style thinking, not ESA. vSAN File Services being configured does not drive the requirement to use identical drives. Reference topics: vSAN ESA Storage Pool Design, Balanced and Unbalanced Cluster Configuration, ESA Device Performance, Vertical Scaling.

Answer : C

Four hosts are required to meet the 12 TB usable-capacity requirement after applying the protection policy, data reduction, reserves, and overhead. Each host contributes 8 TB raw capacity from two 4 TB NVMe devices. Three hosts provide 24 TB raw capacity, but once host rebuild reservation, 10% operational reserve, RAID-5 protection overhead, and 25% filesystem/object overhead are considered, the remaining effective usable capacity falls below the required 12 TB target. Four hosts provide 32 TB raw capacity. With vSAN ESA and FTT=1/RAID-5, vSAN uses erasure coding to improve capacity efficiency compared with mirroring. The vSAN sizing guidance states that RAID-5 with FTT=1 provides approximately 75% usable capacity before other reserves and overhead. Host Rebuild Reserve must also be planned so the cluster has enough free capacity to rebuild components after a host failure. After applying the expected 1.5 data reduction ratio and the required reserves, four hosts provide enough usable capacity while three hosts do not. Reference topics: vSAN ESA Capacity Sizing, RAID-5 Erasure Coding, Host Rebuild Reserve, Operations Reserve, vSAN Object Overhead.

Answer : D

Assigning different vSAN Storage Policies to each file share during creation satisfies the requirement because vSAN File Service allows each file share to be created with its own storage policy. The Create File Share workflow includes a Storage Policy selection, which controls how the file share's underlying vSAN objects are protected and placed. This is the correct mechanism when each department requires distinct protection levels or placement rules. IP pools and file server bindings provide network endpoint capacity and service placement, but they do not define the protection level of file share data. Creating separate File Service clusters per department is unnecessary and operationally inefficient because file shares can be differentiated by policy within the same File Service deployment. vSphere Compute Policies influence compute placement, not vSAN object protection or file-share resilience. Therefore, the department-specific requirement is fulfilled directly by assigning the appropriate vSAN Storage Policy to each file share at creation time. Reference topics: vSAN File Service, Create File Share, Storage Policy, Placement and Protection Rules.

Answer : A

The architect should highlight that quotas and Access Based Enumeration are configured when creating the vSAN file share, with ABE available for SMB shares. In the vSAN File Service create-share workflow, the General page allows the administrator to choose the protocol and configure protocol-specific options. When SMB is selected, the share can be configured with Access Based Enumeration, which displays only files and folders that the user has permission to access and hides files or folders where the user lacks Read or equivalent permissions. The same create-share workflow also includes Storage space quotas, including a share warning threshold and a share hard quota. Therefore, the design implication is operational: quotas and ABE must be planned and applied at the file-share configuration level for SMB shares that require both controls. Quotas are not limited only to NFS shares, and ABE is not a cluster-level setting. Separate file service servers are also unnecessary because vSAN File Service supports SMB and NFS shares through the same file service architecture. Reference topics: vSAN File Service, Create vSAN File Share, SMB Access Based Enumeration, Storage Space Quotas.

Answer : D

A shallow rekey operation rotates only the Key Encryption Key (KEK). In vSAN Data-at-Rest Encryption, vCenter obtains or generates the KEK through the configured key provider, while ESX hosts use Data Encryption Keys (DEKs) to encrypt the actual disk or object data. The KEK is used to protect, or wrap, those DEKs. When a shallow rekey is performed, the underlying encrypted data does not need to be rewritten because the DEKs remain the same; only the KEK changes, and the existing DEKs are re-encrypted with the new KEK. This is why shallow rekey is faster and less disruptive than a deep rekey. A deep rekey generates both a new KEK and new DEKs, requiring re-encryption of data. The Host Key is used for encrypted core dumps, not datastore data encryption. Key Derivation Key is not the key rotated in this vSAN shallow rekey workflow. Reference topics: vSAN Data-at-Rest Encryption, Generate New Encryption Keys, Shallow Rekey, Deep Rekey, KEK and DEK lifecycle.

Answer : A

The minimum total number of nested fault domains is six. In a two-node vSAN design, site disaster tolerance is provided through host mirroring between the two data hosts, with a witness maintaining quorum. The requirement adds another layer: the solution must also survive a disk group or local storage failure in addition to a host failure. vSAN's two-node host mirroring rule states that each data host must have at least three disk groups, or three disks in a storage pool, to use the rule. In ESA, the equivalent construct is disks in the storage pool rather than OSA-style disk groups. Because there are two data hosts, and each data host requires three nested placement units, the minimum total is 3 + 3 = 6 nested fault domains. Four would not meet the host-mirroring rule requirement, and two would only represent the two hosts without local storage fault isolation. Reference topics: vSAN Two-Node Cluster, Host Mirroring, Nested Fault Domains, vSAN ESA Storage Pool Placement.

Answer : B

The direct action is to convert the latency-sensitive OLTP workload policy from RAID-5/6 erasure coding to RAID-1 mirroring while keeping FTT=1. RAID-5/6 provides space efficiency, but it introduces parity operations and additional backend I/O, which can increase write latency during peak transactional activity and resynchronization. VMware states that RAID-1 mirroring requires fewer I/O operations to the storage devices and can provide better performance; cluster resynchronization also completes faster with RAID-1. This directly addresses the observed symptom: resync I/O and backend congestion increasing latency despite adequate network bandwidth. Increasing Object Space Reservation to 100% changes capacity preallocation but does not remove parity overhead or reduce write amplification from erasure coding. Increasing FTT to 2 with RAID-5/6 would increase protection overhead and backend work, making latency worse. Disabling checksums is not valid for ESA because object checksum is always enabled and cannot be deactivated. For ESA, compression can be controlled by policy, but the most direct protection-compliant performance action is RAID-1 FTT=1 for OLTP objects. Reference topics: vSAN Storage Policies, RAID-1 Mirroring, RAID-5/6 Erasure Coding, vSAN ESA Checksum, Resync and Congestion Metrics.