NO.10 The company’s IT strategy is to adopt innovative and emerging technologies such as software-defined storage solution. The IT team has decided to run their business-critical workloads on an all-flash Virtual SAN (vSAN) as it provides excellent performance.
The IT team has purchased servers that are compatible with vSAN. However, all the solid-state drives (SSD) in the servers are shown incorrectly as hard-disk drives (HDD) instead.
In addition, some of the solid-state drives (SSD) will be used for other purposes instead of vSAN and should not be part of the vSAN cluster. These are the requirements for the vSAN cluster:
* In each server, use the 3GB SSD as the cache tier and the 11GB SSD as the capacity tier
* As a result the vSAN cluster will use a total of six SSDs (three SSDs for caching and three SSDs for capacity
* Ensure all the disks that will be used for vSAN are shown correctly as SSDs
* Provide storage savings by using deduplication and compression.
Next, the IT team wants to improve the performance and availability of the business-critical workloads on the vSAN-datastore.
Ensure the following configurations will be applied on existing and new workloads located on vSAN-datastore:
Number of disk stripes per object: 2
Primary level of failures to tolerate: 2
Failure tolerance method: RAID-1 (Mirroring)
Force provisioning; Yes
The new configurations should be applied by default.
You may create new storage policy but do not edit the default vSAN storage policy as it may be used by other vSAN clusters in the future. Name the policy “New vSAN Default’.
Note: All tasks should be executed in PROD-A host cluster.

NO.11 The security team has decided to follow the VMware-recommended best practices in the vSphere hardening guide.
esxi02b:
Your first task is to create a local user in esxi02b:
* Name: SpecialUser
* Role: Administrator
Your second task is to ensure that SpecialUser is the ONLY user who is able to SSH into esxi02b via Putty.
Your final task is to enforce a strict lockdown on esxi02b.
Your second task is to ensure that SpecialUser is the ONLY user who is able to SSH into esxi02b via Putty.
Your final task is to enforce a strict lockdown on esxi02b.

NO.12 A new internal network is required to isolate virtual machines for security analysis. The virtual machine (honeypot-01) should reside on a new virtual standard switch with the ability for all traffic on the switch to be monitored.
Add a new virtual switch to accommodate this requirement and configure (honeypot-01) to reside on this switch.
Use the following information to complete this task:
* ESXi host: esxi0la
* Standard Switch: Create a new Standard Switch
* Physical uplink: NO UPLINK
* Network Label: QUARANTINE
* VLAN: none specified

NO.13 Your security team is getting ready for an audit and wants to check the status of all ESXI hosts’ outstanding security patches. Create a new fixed Update Manager baseline for all security ESXi host patches and name it ”Security patches. ”Use the patches available in the patch repository. Use VCSA01a in this task.
Baseline Name: Security Patches
Baseline Type: Host Patch
Category: Security

NO.14 You have just deployed a new vCenter Server Appliance. Vcsa0l
a. and are required to back up to configuration after deployment. To complete this task, perform an unencrypted backup of the vCenter Server Appliance using the following details:
* Use the FTP protocol to backup the appliance
* FTP Server Location: 172.20.10.10/
* FTP Username: administrator
* FTP Password: VMware1!
Note: Make sure you include the / at the end of the Server Location

NO.15 You are doing an audit for vCenter Server vcsa0la s inventory.
On the desktop, you will find a folder named “powercli-question”. In the folder, there is a script named “vds-script.psl”.
Your colleague needs some help to get it working as expected. Your task is to modify the script so that it exports a list of virtual machines, enables promiscuous mode on PCLI-Portgroup. and exports PCLl-Portgroup.

NO.16 The current vSphere environment will be adding new ESXi hosts that will be used to create a QA compute cluster. This cluster should have HA properties specific to the workloads that will be running in it.
In preparation of adding the new hosts, create the new cluster. QA-Cluster in. Datacenter-PROD on vcsa0la.vclass.local with the following HA requirements:
* The cluster should not contain any ESXi hosts or VMs
* Hosts should be monitored.
* VMs should be restarted in the event of a host failure.
* VMs should be restarted if guest heartbeats are not detected.
* In the case of a host becoming isolated, shutdown and restart VMs.
* If there is an All Paths Down event, any affected VMs must be moved to another host.
* Reserve 10% of memory and CPU for failover capacity.
Part 2
You have been given a requirement for a virtual machine to have no downtime when an ESXi host failure occurs. Configure Fault Tolerance on VM1-FT in the PROD-B cluster. Use any compatible secondary host and datastore. Configure the following advanced cluster settings. Use SAN01 as the storage during configuration.
das.isolationaddress0 172.20.10.11
dass.igoreRedundantNetWarining true
Note: ignore any related host, customer, or bandwidth warnings as long as fault tolerance is configured and VM1-FT is running.