EMC E20-020 Online Practice Questions and Exam Preparation

EMC E20-020 Online Questions & Answers

• Question 11:

  After developing prototype applications in the public cloud, developers determined that they want softwaredefined network functionality. Which ability will this requirement provide for the developers?

  A. Programmatically provision an IPsec VPN tunnel between the public and private clouds
  B. Programmatically migrate layer-3 access from aggregate to access switches
  C. Programmatically control physical core network topologies
  D. Programmatically provision physical network segments and services
  D. Programmatically provision physical network segments and services

  ---

  Software-defined networking (SDN) is an approach to computer networking that allows network administrators to manage network services through abstraction of higher-level functionality. This is done by decoupling the system that makes decisions about where traffic is sent (the control plane) from the underlying systems that forward traffic to the selected destination (the data plane). Reference: https://en.wikipedia.org/wiki/Software-defined_networking

• Question 12:

  In a cloud design, an architect has defined a separate trust zone for host management. The hosts will be running open source hypervisors.

  What should be included in the design deliverables to support this separate trust zone?

  A. Isolated management network and a common super-user account
  B. Separate PKI and encrypted CMI portal access
  C. Separate authentication source and a preferred zone set
  D. Isolated management network and a separate authentication source
  D. Isolated management network and a separate authentication source

• Question 13:

  A cloud architect is designing a private cloud for an organization. The organization has no existing backup infrastructure. They want to offer consumers the ability to backup virtual machine instances using image-based backups. What should the cloud architect look for when selecting a backup application for this environment?

  A. Virtual machine hardware is on the backup application vendor's compatibility list
  B. Hypervisor servers' hardware is on the backup application vendor's compatibility list
  C. Backup application can be integrated with the selected CMP components
  D. Backup application supports a cloud gateway for accessing the cloud-based virtual machines
  D. Backup application supports a cloud gateway for accessing the cloud-based virtual machines

  ---

  A cloud storage gateway provides basic protocol translation and simple connectivity to allow the incompatible technologies to communicate transparently. The gateway can make cloud storage appear to be a NAS filer, a block storage array, a backup target or even an extension of the application itself. References: http://searchcloudstorage.techtarget.com/definition/cloud-storage-gateway

• Question 14:

  What are key benefits of ITaaS compared to traditional IT processes?

  A. Tiered services, integrated inventory management, and SLA-driven profit model
  B. Service catalog, SLA-driven management, and chargeback
  C. Strong policies, DevOps, and software licensing
  D. Ticket-based service model, cost, and chargeback
  B. Service catalog, SLA-driven management, and chargeback

  ---

  *In the ITaas model, corporate IT offers a menu of SaaS, PaaS and IaaS options for business users via acentralized service catalog. Business users are free to pick and choose cloud services that corporate IT has vetted, or provide themselves. These users can make informed decisions based on service pricing and SLAs, and can in many cases can provision services on their own. *ITaas can be implemented through new consumption models leveraging self-service catalogs offering bothinternal and external services; providing IT financial transparency for costs and pricing; offering consumerized IT ?such as bring your own device (BYoD) ?to meet the needs of users. All of which simplify and encourage consumption of services. *A service-level agreement (SLA) is a part of a standardized service contract where a service is formallydefined. Particular aspects of the service ?scope, quality, responsibilities ?are agreed between the service provider and the service user. References: http://leverhawk.com/is-itaas-really-a-new-concept-20130628321

• Question 15:

  When implementing QoS across a cloud network, how is storage traffic usually prioritized?

  A. Most important
  B. More important than tenant traffic but less important than management traffic
  C. More important than management traffic but less important than tenant traffic
  D. Least improtant
  C. More important than management traffic but less important than tenant traffic

• Question 16:

  What describes the storage categories represented by OpenStack Swift and EMC XtremIO requirements?

  A. Swift = Distributed Object StorageXtremIO = Central Storage
  B. Swift = Central Storage XtremIO = Distributed File Storage
  C. Swift = Distributed Block StorageXtremIO = Distributed Object Storage
  D. Swift = Distributed File StorageXtremIO = Distributed Block Storage
  A. Swift = Distributed Object StorageXtremIO = Central Storage

  ---

  OpenStack Swift is a globally-distributed object storage with a single namespace that's durable enough for the most demanding private clouds and now brought to you in an easy- to-deploy/scale/manage system.

  XtremIO is a flash-based Storage Array.

  References:

  https://www.swiftstack.com/#testimonial/2 http://www.emc.com/collateral/white- papers/h11752-intro-to-XtremIO-array-wp.pdf

• Question 17:

  During the assessment phase of the design process, the cloud architect discovers that an organization wants to provide consumers with the ability to backup and restore entire virtual machines. Which backup application functionality will support this requirement?

  A. Agent-based backups
  B. Image-based backups
  C. Array-based snapshots
  D. Cloud gateway backups
  B. Image-based backups

• Question 18:

  An organization plans to build a cloud using some of the existing data center infrastructure. Specifically, they want to use the existing FC storage infrastructure to support cloud hosts. However, they want to logically separate the cloud storage traffic from the existing data center storage traffic within this infrastructure. Which mechanism can be used to meet this requirement?

  A. MPIO
  B. VLAN
  C. VSAN
  D. Masking
  D. Masking

  ---

  The use of VSANs allows the isolation of traffic within specific portions of the network. If a problem occurs in one VSAN, that problem can be handled with a minimum of disruption to the rest of the network. VSANs can also be configured

  separately and independently. Note: Virtual storage area network (VSAN) is a collection of ports from a set of connected Fibre Channel switches, that form a virtual fabric. Ports within a single switch can be partitioned into multiple VSANs,

  despite sharing hardware resources. Conversely, multiple switches can join a number of ports to form a single VSAN.

  Incorrect:

  Not A: Microsoft Multipath I/O (MPIO) is a Microsoft-provided framework that allows storage providers to develop multipath solutions that contain the hardware-specific information needed to optimize connectivity with their storage arrays.

  MPIO is protocol-independent and can be used with Fibre Channel, Internet SCSI (iSCSI), and Serial Attached SCSI (SAS) interfaces in Windows Server?2008, Windows Server 2008 R2 and Windows Server 2012.

  Not D: Logical Unit Number Masking or LUN masking is an authorization process that makes a Logical Unit Number available to some hosts and unavailable to other hosts. LUN masking operates at Layer 4 of the Fibre Channel protocol.

  Reference: https://en.wikipedia.org/wiki/VSAN

• Question 19:

  A cloud architect is evaluating an organization's need for encryption. Which type of encryption eliminates the requirement for key management?

  A. Embedded
  B. File-based
  C. File system-based
  D. Virtual disk
  D. Virtual disk

  ---

  The most convenient form of encryption is disk/volume encryption. If you have any data on an existing Virtual Machine (VM), you can easily add an encrypted disk or volume. Then, when you unmount the encrypted volume (or power off the

  server), as long as you don't store the encryption key on the server, your data is safe. The drawback with this type of encryption however is that if your server gets compromised somehow, there is a possibility that the attacker could capture

  your passphrase/key (and/or data) the next time you mount the disk image.

  Incorrect:

  Not C: Filesystem-level encryption, often called file/folder encryption, is a form of disk encryption where individual files or directories are encrypted by the file system itself. Each file can be and usually is encrypted with a separate encryption

  key. References: https://www.cloudsigma.com/securing-your-data-in-the-cloud-with-encryption/

• Question 20:

  Which cloud services are typically responsible for automatically scaling applications?

  A. Orchestration and monitoring
  B. Metering and service catalog
  C. Monitoring and metering
  D. Service catalog and orchestration
  A. Orchestration and monitoring

  ---

  Orchestration is the automated arrangement, coordination, and management of complex computer systems, middleware and services. This usage of orchestration is often discussed in the context of service-oriented architecture, virtualization, provisioning, converged infrastructure and dynamic datacenter topics. Orchestration in this sense is about aligning the business request with the applications, data, and infrastructure. References: https://en.wikipedia.org/wiki/Orchestration_ (computing)