Free Practice Questions for EMC D-VXR-OE-23 Exam

To protect the vSAN storage against unauthorized access for both data on disk and in-flight, enable vSAN data-at-rest encryption and data-in-transit encryption. Follow these steps:

Log in to vSphere Client:

Open the vSphere Client.

Enter the username: administrator@vsphere.local.

Enter the password: VMw@r3!123.

Click Login.

Navigate to vSAN Cluster Settings:

In the left-hand navigation pane, expand VxRail-DC and select VxRail-Cluster.

Click on the Configure tab.

Enable vSAN Data-at-Rest Encryption:

Under the vSAN section, select Services.

Click on Data-at-Rest Encryption.

Click Edit to configure encryption settings.

Ensure that the Enable Data-at-Rest Encryption checkbox is selected.

Choose the vSphere Native Key Provider that has already been configured.

Click Apply to enable data-at-rest encryption.

Enable vSAN Data-in-Transit Encryption:

Under the same vSAN section, select Services.

Click on Data-in-Transit Encryption.

Click Edit to configure encryption settings.

Ensure that the Enable Data-in-Transit Encryption checkbox is selected.

Click Apply to enable data-in-transit encryption.

Verify Configuration:

Return to the vSAN > Services section.

Ensure that both Data-at-Rest Encryption and Data-in-Transit Encryption are enabled and show as active.

Verify that there are no error messages indicating configuration issues.

Steps using the Simulator:

Login to vSphere Client:

Open the simulator and navigate to the vSphere Client interface.

Log in using the credentials:

Username: administrator@vsphere.local.

Password: VMw@r3!123.

Navigate to vSAN Settings:

In the vSphere Client interface, expand VxRail-DC and select VxRail-Cluster.

Click on the Configure tab on the right.

Enable Data-at-Rest Encryption:

Under vSAN, click Services.

Find Data-at-Rest Encryption and click Edit.

Check the box for Enable Data-at-Rest Encryption.

Select the vSphere Native Key Provider.

Click Apply.

Enable Data-in-Transit Encryption:

Still under vSAN > Services, find Data-in-Transit Encryption and click Edit.

Check the box for Enable Data-in-Transit Encryption.

Click Apply.

Verification:

Check the status of both encryption services under vSAN > Services to ensure they are enabled and operational.

To prepare the system for maintenance mode and avoid unnecessary vSAN re-synchronization, follow these steps:

Log in to vSphere Client:

Open the vSphere Client.

Enter the username: administrator@vsphere.local.

Enter the password: VMw@r3!123.

Click Login.

Navigate to the Host:

In the vSphere Client interface, navigate to Hosts and Clusters.

Expand the VxRail-DC and then the VxRail-Cluster.

Select the Host for Maintenance:

Select the host you plan to put into maintenance mode (e.g., vcluster730-esx01.edu.local, vcluster730-esx02.edu.local, etc.).

Enter Maintenance Mode:

Right-click on the selected host and select Enter Maintenance Mode.

In the Enter Maintenance Mode window, you will have several options for vSAN data migration. To avoid unnecessary re-synchronization, choose Ensure Accessibility.

Ensure Accessibility: This option makes sure that the data remains accessible during maintenance but does not immediately trigger full data migration. It is the best choice to avoid unnecessary re-synchronization during a short maintenance window.

Confirm Maintenance Mode:

Click OK to confirm the selection and put the host into maintenance mode.

Verify the Host Status:

Monitor the status to ensure the host enters maintenance mode without triggering excessive re-synchronization.

To create the required vSAN storage policy in the vSphere Client for a VxRail stretched cluster, follow these steps:

Log in to vSphere Client:

Open the vSphere Client.

Enter the username: administrator@vsphere.local.

Enter the password: VMw@r3!123.

Click Login.

Navigate to Storage Policies:

From the home screen, go to Policies and Profiles in the left-hand navigation pane.

Click on VM Storage Policies.

Create a New Storage Policy:

Click Create VM Storage Policy.

Enter the name as vSAN Stretched Cluster.

Click Next.

Configure Policy Rules:

In the Policy Structure section, choose Enable tag-based placement rules if needed.

Click Next.

Add vSAN Rules:

In the Storage Compatibility section, click Add rule and select vSAN.

Configure the following:

Primary level of failures to tolerate (PFTT): 1 failure - RAID 1 (Mirroring)

Secondary level of failures to tolerate (SFTT): 1 failure - RAID 1 (Mirroring)

Failures to Tolerate: 1

Provisioning type: Thick Provisioning

Ensure "Force Provisioning" is enabled. This allows the VM to be provisioned even if the current resources do not satisfy the policy.

Set Data Services:

Skip the Data Services section if not applicable.

Click Next.

Review and Finish:

Review the policy settings.

Click Finish to create the storage policy.

Apply the Storage Policy to VMs:

Navigate to the VMs section.

Select the VMs that need the new storage policy.

Right-click and select VM Policies > Edit VM Storage Policies.

Choose the vSAN Stretched Cluster policy for the applicable disks.

To enable the system LED on vcluster730-esx03.edu.local for identification in the physical rack, follow these steps:

Log in to vSphere Client:

Open the vSphere Client.

Enter the username: administrator@vsphere.local.

Enter the password: VMw@r3!123.

Click Login.

Navigate to the Host:

In the vSphere Client interface, navigate to the Hosts and Clusters view.

Expand the VxRail-DC and then the VxRail-Cluster.

Select the host named vcluster730-esx03.edu.local.

Access Host Actions:

Right-click on vcluster730-esx03.edu.local.

From the context menu, select Actions.

Enable System LED:

In the Actions menu, locate and select Enable LED or Turn On Locator LED (the exact wording might vary).

Confirm the action if prompted.

Verify LED Activation:

Check the physical rack to ensure that the system LED on vcluster730-esx03.edu.local is enabled and the node is easily identifiable.