EMC E10-001 Online Practice Questions and Exam Preparation

EMC E10-001 Online Questions & Answers

• Question 31:

  In the Fibre Channel protocol, what are functions of the FC-1 layer?

  A. Encoding and decoding
  B. Routing and flow control
  C. Interface mapping and flow control
  D. Transmission of raw bits and encoding
  A. Encoding and decoding

  ---

  

  FC-1 Layer: It defines how data is encoded prior to transmission and decoded upon receipt. At the transmitter node, an 8-bit character is encoded into a 10-bit transmission character. This character is then transmitted to the receiver node. At the receiver node, the 10-bit character is passed to the FC-1 layer, which decodes the 10-bit character into the original 8-bit character. FC links with speed 10 Gbps and above use 64-bit to 66-bit encoding algorithm. This layer also defines the transmission words such as FC frame delimiters, which identify the start and end of a frame and primitive signals that indicate events at a transmitting port. In addition to these, the FC-1 layer performs link initialization and error recovery. EMC E10-001 Student Resource Guide. Module 5: Fibre Channel Storage Area Network (FC SAN)

• Question 32:

  What is an accurate statement about Infrastructure as a Service?

  A. A consumer can deploy and run arbitrary software, including operating systems and applications.
  B. A consumer only has control over user-specific application configuration settings.
  C. A consumer can deploy applications created using the programming tools offered by the provider.
  D. A consumer only has control over the configuration settings of the application-hosting environment.
  A. A consumer can deploy and run arbitrary software, including operating systems and applications.

• Question 33:

  Refer to the exhibit.

  

  Based on the exhibit, which example represents the risk triad?

  A. A
  B. B
  C. C
  D. D
  A. A

• Question 34:

  An administrator has configured redundant Fibre Channel links between hosts and storage systems. The administrator has identified a performance bottleneck on a link due to overutilization; whereas, the other links have sufficient bandwidth. In addition, the administrator has identified that if a link fails, I/Os to the link do not failover to the other available links. Which solution should be recommended to resolve these issues?

  A. Multipathing software
  B. NIC teaming
  C. Virtual SAN
  D. Zoning
  A. Multipathing software

• Question 35:

  What is determined based on the recovery point objective in asynchronous remote replication?

  A. Size of the buffer
  B. Size of the replica
  C. Response time
  D. Location of the source
  A. Size of the buffer

• Question 36:

  Select and Place

  

  

• Question 37:

  What is a characteristic of an FC-SW implementation?

  A. Provides a dedicated path between nodes
  B. Nodes arbitrate to gain control of the data path to transfer data
  C. Only one node can perform an I/O operation at a time
  D. Supports up to 126 nodes
  A. Provides a dedicated path between nodes

• Question 38:

  What is a reason for implementing single HBA zoning?

  A. Decrease reset time for any change made in the state of the fabric
  B. Increase reset time for any change made in the state of the fabric
  C. Prevent host from seeing the same volumes via multiple HBAs
  D. Reduce the number of zones required in the SAN
  A. Decrease reset time for any change made in the state of the fabric

• Question 39:

  What is a benefit of virtual storage provisioning over traditional provisioning?

  A. Enables more efficient allocation of storage to hosts
  B. Can be used for applications that require predictable performance
  C. Provides full control for precise data placement
  D. Does not enable oversubscription
  A. Enables more efficient allocation of storage to hosts

  ---

  Virtual Storage Provisioning

  Virtual provisioning enables creating and presenting a LUN with more capacity than is physically allocated to it on the storage array. The LUN created using virtual provisioning is called a thin LUN to distinguish it from the traditional LUN.

  Thin LUNs do not require physical storage to be completely allocated to them at the time they are created and presented to a host. Physical storage is allocated to the host "on-demand" from a shared pool of physical capacity. A shared pool

  is consists of physical disks. A shared pool in virtual provisioning is analogous to a RAID group, which is a collection of drives on which LUNs are created. Similar to a RAID group, a shared pool supports a single RAID protection level.

  However, unlike a RAID group, a shared pool might contain large numbers of drives. Shared pools can be homogeneous (containing a single drive type) or heterogeneous (containing mixed drive types, such as flash, FC, SAS, and SATA

  drives).

  Virtual provisioning enables more efficient allocation of storage to hosts. Virtual provisioning also enables oversubscription, where more capacity is presented to the hosts than is actually available on the storage array. Both shared pool and

  thin LUN can be expanded nondisruptively as the storage requirements of the hosts grow. Multiple shared pools can be created within a storage array, and a shared pool may be shared by multiple thin LUNs.

  EMC E10-001 Student Resource Guide. Module 4: Intelligent Storage System

• Question 40:

  How can an organization reduce vulnerabilities in their environment?

  A. Minimize the attack surface and maximize the work factor
  B. Maximize the attack surface and minimize the work factor
  C. Minimize both the attack surface and work factor
  D. Maximize both the attack surface and work factor
  A. Minimize the attack surface and maximize the work factor

  ---

  Vulnerabilities The paths that provide access to information are vulnerable to potential attacks. Each of the paths may contain various access points, which provide different levels of access to the storage resources. It is important to implement adequate security controls at all the access points on an access path. Implementing security controls at each access point of every access path is known as defense in depth. Defense in depth recommends using multiple security measures to reduce the risk of security threats if one component of the protection is compromised. It is also known as a "layered approach to security". Because there are multiple measures for security at different levels and defense in depth gives additional time to detect and respond to an attack. This can reduce the scope or impact of a security breach.

  Attack surface, attack vector, and work factor are the three factors to consider when assessing the extent to which an environment is vulnerable to security threats. Attack surface refers to the various entry points that an attacker can use to launch an attack. Each component of a storage network is a source of potential vulnerability. An attacker can use all the external interfaces supported by that component, such as the hardware and the management interfaces, to execute various attacks. These interfaces form the attack surface for the attacker. Even unused network services, if enabled, can become a part of the attack surface.

  An attack vector is a step or a series of steps necessary to complete an attack. For example, an attacker might exploit a bug in the management interface to execute a snoop attack whereby the attacker can modify the configuration of the storage device to allow the traffic to be accessed from one more host. This redirected traffic can be used to snoop the data in transit. Work factor refers to the amount of time and effort required to exploit an attack vector. For example, if attackers attempt to retrieve sensitive information, they consider the time and effort that would be required for executing an attack on a database. This may include determining privileged accounts, determining the database schema, and writing SQL queries. Instead, based on the work factor, they may consider a less effort-intensive way to exploit the storage array by attaching to it directly and reading from the raw disk blocks.

  EMC E10-001 Student Resource Guide. Module 14: Securing the Storage Infrastructure