EMC E10-001 Online Practice Questions and Exam Preparation

EMC E10-001 Online Questions & Answers

• Question 201:

  Which operation is performed by a scale-out NAS cluster when clients send data to the cluster?

  A. Data is divided and stored on multiple nodes in parallel
  B. Data is consolidated into a block and stored in the NAS head
  C. Data is evenly distributed to every file system in the cluster
  D. NAS file system and cluster grow dynamically to store the data
  A. Data is divided and stored on multiple nodes in parallel

• Question 202:

  What is an example of a security management task in a storage infrastructure?

  A. Configuring LUN masking to restrict hosts from accessing a specific LUN
  B. Enforcing storage space quotas to restrict users from overprovisioning resources
  C. Restricting the number of simultaneous client access to application servers
  D. Enabling sending messages to a support center in the event of resource failure
  A. Configuring LUN masking to restrict hosts from accessing a specific LUN

• Question 203:

  What is the purpose of monitoring accessibility in a storage infrastructure?

  A. Identifying component failures that may lead to service unavailability
  B. Ensuring availability of adequate resources to prevent service unavailability
  C. Evaluating utilization of components and identifying bottlenecks
  D. Detecting unavailability of information to authorized users
  A. Identifying component failures that may lead to service unavailability

• Question 204:

  What is an example of an availability management task in storage infrastructure management?

  A. Configuring replication for data redundancy
  B. Trend analysis of storage space consumption
  C. Tracking configuration changes to storage components
  D. Specifying storage space quotas for users
  A. Configuring replication for data redundancy

• Question 205:

  A user tries to update the content of a file stored on a CAS system. What is the result of this operation?

  A. CAS generates a new address for the altered content and stores it as a new object
  B. CAS uses the same content address for the altered content and the original content
  C. CAS overwrites the original content and generates a new content address
  D. CAS overwrites the original content but the content address is preserved
  A. CAS generates a new address for the altered content and stores it as a new object

• Question 206:

  In Kerberos authentication, what is a role of the Active Directory?

  A. Verifies the user's login information
  B. Implements the Authentication service and Ticket Granting service
  C. Verifies the session ID when the client-server session is established
  D. Maintains the access control list in a keytab file
  A. Verifies the user's login information

  ---

  Kerberos Authentication

  

  1.

  The Kerberos authentication process shown in figure on the slide includes the following steps:

  2.

  The user logs on to the workstation in the Active Directory domain (or forest) using an ID and a password.

  The client computer sends a request to the AS running on the KDC for a Kerberos ticket. The KDC verifies the user's login information from Active Directory.

  3.

  The KDC responds with an encrypted Ticket Granting Ticket (TGT) and an encrypted session key. TGT has a limited validity period. TGT can be decrypted only by the KDC, and the client can decrypt only the session key.

  4.

  When the client requests a service from a server, it sends a request, consisting of the previously generated TGT, encrypted with the session key and the resource information to the KDC.

  5.

  The KDC checks the permissions in Active Directory and ensures that the user is authorized to use that service.

  6.

  The KDC returns a service ticket to the client. This service ticket contains fields addressed to the client and to the server hosting the service.

  7.

  The client then sends the service ticket to the server that houses the required resources.

  8.

  The server, in this case the NAS device, decrypts the server portion of the ticket and stores the information in a keytab file. As long as the client's Kerberos ticket is valid, this authorization process does not need to be repeated. The server

  automatically allows the client to access the appropriate resources.

  9.

  A client-server session is now established. The server returns a session ID to the client, which tracks the client activity, such as file locking, as long as the session is active. EMC E10-001 Student Resource Guide.

  Module 14: Securing the Storage Infrastructure

• Question 207:

  What is a function of the FC-1 layer of the Fibre Channel (FC) protocol stack?

  A. Defines data encoding
  B. Provides FC addressing
  C. Defines the physical interface
  D. Provides the structure of data
  A. Defines data encoding

• Question 208:

  Data is being replicated from site A to site B using disk buffering to create extended distance consistent point in time copies every hour. In the event of a site failure at A, what is the maximum amount of data that will be missing at site B?

  A. 1 hour
  B. 2 hours
  C. 3 hours
  D. 4 hours
  B. 2 hours

• Question 209:

  In the context of protecting the FC SAN infrastructure, what is an example of infrastructure integrity?

  A. Preventing node login to the fabric without proper authorization
  B. Implementing iSNS discovery domains
  C. Implementing an FSPF algorithm to create a virtual SAN
  D. Not permitting physical segmentation of nodes
  A. Preventing node login to the fabric without proper authorization

  ---

  Security controls for protecting the storage infrastructure address the threats of unauthorized tampering of data in transit that leads to a loss of data integrity, denial of service that compromises availability, and network snooping that may result in loss of confidentiality. The security controls for protecting the network fall into two general categories: network infrastructure integrity and storage network encryption. Controls for ensuring the infrastructure integrity include a fabric switch function that ensures fabric integrity. This is achieved by preventing a host from being added to the SAN fabric without proper authorization. Storage network encryption methods include the use of IPSec for protecting IP-based storage networks, and FC- SP for protecting FC networks.

  EMC E10-001 Student Resource Guide. Module 14: Securing the storage Infrastructure

• Question 210:

  Which EMC product provides a target-based deduplication solution?

  A. Data Domain
  B. VPLEX
  C. RecoverPoint
  D. Avamar
  A. Data Domain