FlashArray-Storage-Professional Exam Dumps - Pure Storage FlashArray Storage Questions and Answers

What is SafeMode Ratcheting?: SafeMode is Purity ' s " immutability " feature that prevents snapshots from being deleted, eradicated, or modified, even by an administrator with compromised credentials. Ratcheting is the process of increasing the protection levels (like extending the retention period) for a protection group (pgroup) to ensure even stricter data safety.

The Dependency on Local Snapshots: SafeMode ' s primary function is to protect point-in-time copies of data residing on the array. For a protection group to be " ratcheted " into a SafeMode-protected state, it must have an active Local Snapshot Schedule .

Why Option C is the Constraint: If a protection group does not have a local snapshot schedule, there are no local snapshots being generated for SafeMode to " lock. " SafeMode cannot protect what doesn ' t exist locally. While a pgroup might be used for replication only, SafeMode requires the local scheduling component to be active and configured to apply its immutable retention policies.

Why Option B is incorrect: Protection groups are designed to contain hosts, host groups, or volumes. This is the standard way to group related data for snapshot consistency and has no negative impact on SafeMode eligibility.

Operational Note: When you enable SafeMode on a protection group with a local schedule, the " Erradicate " button for those snapshots is disabled. To " ratchet " the protection, you typically work with Pure Storage Support to ensure the retention settings meet your compliance needs.

Pure1 Manage Capabilities: Pure1 is a SaaS-based platform that provides a " single pane of glass " view across an entire fleet of FlashArrays. It excels at aggregating metrics that are otherwise siloed on individual arrays.

Specialized File Metrics: Because FlashArray File (FA File) operates as a specific service layer within Purity, its performance metrics (NFS/SMB latency, throughput, and IOPS) are tracked separately from traditional block storage.

The File Systems Performance Report: This specific report/view in Pure1 allows administrators to:

Select multiple file systems residing on different arrays.

Overlay their performance graphs to identify trends or outliers.

Filter by specific protocol (NFS vs. SMB) to see how different workloads are behaving across the infrastructure.

Why Options B and C are less ideal:

Overview Dashboard: While great for a " health at a glance " check (showing total capacity and high-level alerts), it does not provide the granular, side-by-side performance comparison required for a deep-dive analysis.

Array Performance: This report typically shows the total load on the controllers. While this includes file traffic, it often aggregates it with block traffic, making it difficult to isolate how the file services specifically are performing across the fleet.

Analytical Advantage: Using the File Systems Performance report allows the administrator to correlate performance spikes with specific file-level events, such as a large backup job or a high-intensity data migration occurring on one array versus another.

When configuring NVMe/TCP (or iSCSI) for optimal performance on a Pure Storage FlashArray, configuring Jumbo Frames (an MTU of 9000) end-to-end is a standard best practice.

The command ping -M do -s 8972 < ip_addr > is specifically used to verify Jumbo Frame configuration across the network.

The -M do flag sets the " Do Not Fragment " (DF) bit, meaning the network is not allowed to break the packet into smaller pieces.

The -s 8972 flag sets the ICMP data payload to 8972 bytes. When you add the standard 8-byte ICMP header and the 20-byte IP header, the total packet size equals exactly 9000 bytes.

If this ping command fails, it indicates that somewhere along the network path between the host (initiator) and the FlashArray (target), a switch port, router, or network interface is not configured to support an MTU of 9000. The packet is being dropped because it is too large and cannot be fragmented. The administrator must verify the MTU settings on every network hop (switches, routers, and host NICs) to resolve the issue.

Here is why the other options are incorrect:

Engage support to enable NVME/ TCP services (A): The failure of a Jumbo Frame ping test is a Layer 2/Layer 3 network configuration issue, not an indicator that the NVMe/TCP storage protocol service is disabled on the array.

Run the command from the target (C): While pinging from the FlashArray back to the host is a valid secondary troubleshooting step, it will likely also fail if the network path doesn ' t support Jumbo Frames. The actual resolution is to fix the MTU on the network hops.

Similar to the previous question regarding directory services, Pure Storage Purity OS handles Role-Based Access Control (RBAC) overlaps by granting the most permissive role available to the user.

When configuring LDAP or Active Directory authentication on a FlashArray, administrators map directory groups to specific FlashArray roles (Array Admin, Storage Admin, Ops Admin, Read Only). If a user happens to be a member of multiple LDAP groups that are mapped to different roles on the array, Purity evaluates all mapped roles and automatically assigns the user the highest level of privilege during their session.

Since " Array Admin " has full administrative rights over the entire array (including hardware management, directory services configuration, and firmware upgrades) and sits higher in the hierarchy than " Storage Admin " (which is restricted to provisioning and managing storage objects like volumes and hosts), the system will seamlessly grant the user Array Admin permissions.

Here is why the other options are incorrect:

User will not be able to login (B): Purity is designed to handle this exact scenario smoothly. It resolves the conflict by defaulting to the higher privilege, rather than throwing an error or denying access.

User will have Storage Admin permissions (C): The system does not default to the lowest privilege or restrict access when a higher-level group membership is present and valid.

Understanding CRC Errors: CRC (Cyclic Redundancy Check) errors occur when the data received at a port does not match the checksum sent by the initiator or switch. In a Pure Storage environment, these are tracked per port and can be viewed via the CLI (purehw list) or the GUI.

Configuration vs. Hardware: While a failing SFP or a damaged fiber cable can cause CRC errors, they are a primary indicator of configuration mismatches in the SAN fabric. Common culprits include:

Port Speed Mismatches: Manually setting a port to 16Gbps when the switch is set to " Auto " or 8Gbps.

Duplex Mismatches: Though rare in modern Fibre Channel, it is a classic Ethernet/iSCSI configuration error.

MTU Mismatches: In iSCSI or NVMe-oF environments, if the FlashArray is configured for Jumbo Frames (MTU 9000) but the switch or host is at MTU 1500, packet fragmentation or CRC-like errors/drops will occur.

Why Option A is incorrect: A blinking status LED on a controller is often part of normal operation (indicating heartbeat or activity). A solid amber LED would be an indicator of a hardware failure, not necessarily a misconfiguration.

Why Option C is incorrect: While latency spikes can be caused by misconfiguration (like incorrect MPIO settings), they are more commonly symptoms of workload changes , " noisy neighbors, " or reaching the physical performance limits of the array. CRC errors are a much more specific diagnostic " smoking gun " for port and fabric configuration issues.

Best Practice: When CRC errors are detected, Pure Storage recommends first checking the physical layer (reseating SFPs/cables) and then verifying that the port speed and protocol settings on the FlashArray match the upstream switch configuration exactly.

Understanding Total Latency: In a FlashArray environment, total latency as seen by the host application is the sum of several components. Pure Storage breaks this down into Array Time and SAN Time to help administrators pinpoint where performance bottlenecks exist.

SAN Time Definition: SAN Time represents the latency introduced by the network infrastructure between the host (initiator) and the FlashArray (target). This includes the time spent traveling across Fibre Channel or Ethernet switches, cables, and host bus adapters (HBAs). It is calculated by taking the total round-trip time measured by the host and subtracting the time the FlashArray spent processing the I/O.

Metric Breakdown: * Array Time: The time the FlashArray takes to process the I/O once it hits the front-end ports (Option C describes internal array time).

SAN Time: The transit time for the request to reach the array and the response to return to the host (Option A).

Wait Time: In ActiveCluster environments, there is also " Mirror Latency, " which is the time spent synchronizing data to a peer array (Option B).

Troubleshooting Value: If a user reports high latency but the FlashArray GUI shows very low Array Time , the administrator can look at the SAN Time metric. A high SAN Time indicates an issue with the fabric, such as a failing SFP, a congested switch port, or oversubscribed ISLs (Inter-Switch Links).

Understanding Space Reporting: To understand this behavior, you have to look at how Purity calculates capacity. Pure Storage uses a data reduction engine where data is deduplicated and compressed.

Volume Space vs. Shared Space:

Volume Space: This represents the unique data belonging to a specific volume that is not shared with any other volume via deduplication or snapshots.

Shared Space: This represents the data that is common across multiple volumes or snapshots. If you have two volumes that are clones of each other, most of that data is " Shared. "

The " Shift " Mechanism: When a volume is deleted (and potentially eradicated), the data it once shared with other volumes no longer needs to be " shared. "

Imagine Volume A and Volume B share 100GB of data. That 100GB is accounted for in Shared Space .

If you delete Volume B, that 100GB of data is now only referenced by Volume A.

Consequently, that 100GB is moved from the Shared Space bucket into Volume A ' s Volume Space bucket.

Net Result: The total physical space used on the array remains the same initially, but the accounting shifts. You see a decrease in Shared Space and an identical increase in the Volume Space of the remaining volumes that held those deduplication references.

Command Purpose: The purehost monitor command is the primary tool in the Pure Storage CLI for observing real-time performance and connectivity health from the perspective of the hosts connected to the FlashArray.

The --balance Flag: When the --balance flag is added, the output shifts from general performance (IOPS, bandwidth, latency) to showing how I/O is distributed across the available paths (controllers and ports). This is critical for identifying " unbalanced " loads, which usually point to misconfigured MPIO (Multi-Path I/O) on the host side (e.g., a host only using one controller ' s ports).

Interval vs. Repeat:

The --interval flag specifies the time in seconds between each sample. In option C, --interval 15 tells the array to refresh the data every 15 seconds.

The --repeat flag (seen in option A) is used to limit the total number of samples taken before the command exits. However, in standard troubleshooting, the administrator typically wants a consistent stream of data until manually stopped (Ctrl+C).

--resample (seen in option B) is not a valid flag for the purehost monitor command in Purity.

Best Practice: When troubleshooting multipathing, Pure Storage recommends monitoring the balance to ensure that the " Relative I/O " percentage is roughly equal across all active paths. Large discrepancies often indicate that the host ' s MPIO policy is set to " Failover Only " instead of the recommended " Round Robin " or " Least Queue Depth. "

ActiveCluster Mediator Logic: In an ActiveCluster setup, the Mediator is a lightweight component (an " arbiter " ) that resides at a third site (failure domain). Its job is to break the tie in a " split-brain " scenario (when arrays lose connectivity with each other) to determine which array stays online.

Default Behavior: By default, every FlashArray is configured to use the Pure1 Cloud Mediator . This is a managed service provided by Pure Storage that requires no local infrastructure other than internet access from the array controllers.

On-Premises Mediator Deployment: Organizations that cannot use the Cloud Mediator (due to " dark site " security requirements or lack of reliable internet) can deploy the Pure Storage On-Premises Mediator as a small OVF/VM template.

Configuration at the Pod Level: Simply deploying the On-Premises Mediator VM and connecting the arrays to it at the array level is not enough for existing or new pods to switch automatically. In Purity, the mediator preference is a per-pod attribute .

When a pod is created or stretched, it inherits the default (Cloud).

To use the local mediator, the administrator must explicitly configure the pod to point to the On-Premises Mediator’s IP or DNS name. This is done via the CLI using purepod setattr --mediator < address > < pod-name > or through the Pod settings in the GUI.

Why Option C is incorrect: While an A record is necessary for DNS resolution, the prompt implies the mediator is already " deployed " and available. The most common reason it isn ' t being used is simply that the pod hasn ' t been told to look there instead of the default Cloud option.

Supported Directory Services: Pure Storage FlashArray File Services (FA File) is designed to integrate seamlessly into existing enterprise identity infrastructures. To manage file permissions (SMB ACLs and NFS POSIX/NFSv4 permissions), Purity supports joining the array to a directory service.

Active Directory (AD): This is the most common integration for FA File, specifically for SMB environments. Purity allows the array to join an AD Domain, creating a computer account and enabling the resolution of SIDs to usernames.

OpenLDAP: For Linux/Unix-heavy environments using NFS, Purity supports OpenLDAP . This allows the array to look up UID/GID information and group memberships to enforce security across the file system.

Authentication vs. Management: It is important to distinguish between Data Access (FA File) and Management Access (GUI/CLI login).

FA File (Data Access): Uses AD and OpenLDAP to authorize users accessing shares/exports.

Management (GUI/CLI): Uses SAML (Option C) or LDAP for Single Sign-On (SSO) (Option B) to allow administrators to log into the array.

The " Either/Or " Logic: While a FlashArray can be configured with multiple directory services, for a specific File System/Export mapping, the system relies on the primary identity provider configured—either Microsoft AD or an LDAP-compliant service like OpenLDAP—to validate the users ' identity.