VMware 3V0-23.25 Advanced VMware Cloud Foundation 9.0 Storage Exam Practice Test

The two major contributors are RAID overhead and Operational Reserve. With the default policy set to FTT=1 using RAID-1 mirroring, vSAN stores two copies of protected data. The capacity planning guidance states that when Failures to tolerate is set to 1 failure with RAID-1 mirroring, virtual machines can use about 50 percent of raw capacity because each object consumes mirrored space. This is the largest capacity-impacting factor. The second contributor is Operational Reserve, which reserves capacity for vSAN internal operations such as policy changes, rebalancing, object movement, and other transient storage activities. Even when Host Rebuild Reserve is not activated, vSAN capacity monitoring still accounts for the operations threshold/reserve needed to keep the cluster functional during internal activity. Encryption overhead is typically not the primary reason for a 20% capacity difference. Host upgrade overhead is not a vSAN capacity category. VM swap can consume capacity, but it does not normally account for most unavailable raw capacity compared with RAID mirroring and operational reservation. Reference topics: vSAN Capacity Planning, RAID-1 FTT=1 Capacity Impact, Operations Reserve, Reserved Capacity.

The correct configuration is to create distinct SPBM storage policies mapped to supported shared NFS datastore resources and assign them to the matching Supervisor storage functions. Supervisor uses storage policies to represent datastores and to manage placement of components and workload storage. The documentation states that storage policies support shared datastores such as VMFS, NFS, vSAN, and vSAN ESA. At the Supervisor level, administrators configure storage policies for control plane VMs and, when vSphere Pods are used, assign policies for ephemeral disks and container image disks. Persistent storage for workloads is also made available through storage policies assigned at namespace level. Option A is too narrow because it forces all policies to reference one datastore merely for logical isolation, while the supported model allows distinct policies mapped to one or more shared NFS datastores. Option B is incorrect because DRS is compute placement, and datastore clusters are not the Supervisor mechanism for persistent volume policy assignment. Option D is incorrect because the Supervisor does not automatically create these storage policies. Reference topics: Supervisor Storage Policies, SPBM, NFS Shared Datastores, Ephemeral Disks, Container Images, Persistent Volumes.

vSAN Stretched Clusters meet the availability-zone requirement by extending a single logical vSAN cluster across two availability zones and using a witness for quorum. This provides rapid recovery from a site or availability-zone failure because workloads remain protected by the stretched topology and vSAN site-failure tolerance. vSAN Storage Cluster addresses the need for scalable, high-performance storage that can grow independently as application capacity requirements increase. In VCF 9.0, a vSAN Storage Cluster is based on vSAN ESA and provides disaggregated storage to vSAN compute or HCI clusters. This design supports storage-dense NVMe-based nodes, high IOPS, low latency, independent capacity scaling, and centralized storage services. Encryption at rest and in transit are native vSAN capabilities that can be enabled on the vSAN-backed storage architecture. vSAN File Service is for file shares, and vSAN iSCSI Target Service is for presenting block LUNs to external initiators; neither is required by the stated application-storage design. vSAN Data Protection is valuable for snapshots and recovery points, but the core architecture requirements are best satisfied by stretched site resilience plus scalable vSAN storage clustering. Reference topics: vSAN Storage Cluster, vSAN Stretched Cluster, vSAN ESA, vSAN Encryption.

Assigning different vSAN Storage Policies to each file share during creation satisfies the requirement because vSAN File Service allows each file share to be created with its own storage policy. The Create File Share workflow includes a Storage Policy selection, which controls how the file share’s underlying vSAN objects are protected and placed. This is the correct mechanism when each department requires distinct protection levels or placement rules. IP pools and file server bindings provide network endpoint capacity and service placement, but they do not define the protection level of file share data. Creating separate File Service clusters per department is unnecessary and operationally inefficient because file shares can be differentiated by policy within the same File Service deployment. vSphere Compute Policies influence compute placement, not vSAN object protection or file-share resilience. Therefore, the department-specific requirement is fulfilled directly by assigning the appropriate vSAN Storage Policy to each file share at creation time. Reference topics: vSAN File Service, Create File Share, Storage Policy, Placement and Protection Rules.

High latency in a vSAN cluster is commonly caused by congestion in the backend storage path. Disk group congestion means vSAN is queuing, delaying, or throttling I/O because one or more disk groups cannot service the workload at the required rate. VCF Operations and vSAN performance views expose disk group and device-level congestion indicators, including IOPS congestion, log congestion, component congestion, memory congestion, and SSD congestion. These metrics directly correlate with elevated latency because the virtual machine I/O path must wait for vSAN backend processing to complete. PVSCSI controllers are normally recommended for high-performance virtual disks and are not a typical cause of vSAN latency. Jumbo frames, when consistently configured end-to-end, are a valid network optimization and do not inherently cause latency. Disabled erasure coding would usually reduce parity overhead, not create backend latency. Therefore, disk group congestion is the most likely explanation for high latency shown in the vSAN cluster performance charts. Reference topics: vSAN Performance Service, Disk Group Metrics, Congestion Metrics, vSAN Latency Troubleshooting.

In vSAN ESA, the observed three disk stripes are expected behavior for objects using RAID-1, even when the storage policy shows “Number of disk stripes per object = 1.” The vSAN policy rule defines the minimum number of capacity devices across which each replica of an object is striped, and the default value is 1. However, VMware documentation explicitly notes that objects in a vSAN ESA cluster with RAID-0 or RAID-1 configuration have 3 disk stripes, even if the default storage policy defines only 1 disk stripe. Therefore, the three stripes are not caused by site mirroring itself, nor by the VM having three objects. Site mirroring controls placement across the preferred and secondary sites in a stretched cluster, while Failures to tolerate with RAID-1 controls local host/device protection. The behavior is also not evidence that a VM-level policy override exists. The datastore-level policy can still be applied correctly; ESA’s internal RAID-1 object layout uses three stripes as part of its optimized storage architecture. Reference topics: vSAN ESA Default Storage Policy Characteristics, Number of Disk Stripes per Object, RAID-1 Mirroring, vSAN Stretched Cluster Storage Policies.

The available custom recovery steps are top-level commands, message prompts, and per-machine commands. VMware Live Site Recovery recovery plans operate like automated runbooks, and administrators can insert custom steps to match business continuity requirements. Broadcom TechDocs states that custom recovery steps can run commands or present messages to the user during a recovery. Command recovery steps are divided into two categories: top-level commands and per-virtual-machine commands. Top-level commands are inserted directly into the recovery plan and run on the VMware Live Site Recovery server. Per-machine commands are associated with individual recovered VMs and run before or after that VM is powered on, depending on placement in the workflow. Message prompts are interactive steps that pause the plan until an operator acknowledges the message, making them useful for manual validation, external approvals, or runbook checkpoints. IP reconfiguration is handled through recovery plan networking and guest customization, not as a custom step type. Writable storage snapshots are part of test recovery/storage behavior, not a custom recovery step. Reference topics: VMware Live Site Recovery Recovery Plans, Creating Custom Recovery Steps, Top-Level Commands, Message Prompts, Per-VM Commands.

When vertically scaling a vSAN ESA cluster, adding the same model and capacity drives helps preserve a balanced and predictable cluster design. vSAN works best when hosts use uniform storage configurations. The guidance states that unbalanced host configurations reduce predictability of storage performance because vSAN does not store the same number of components on each host, can introduce different maintenance procedures, and can reduce performance on hosts with smaller or different device types. In ESA, each storage device contributes both capacity and performance through the storage pool model, so mixing device models, endurance classes, or capacities can create uneven consumption and inconsistent backend behavior. Using the same drive model and capacity across hosts improves capacity symmetry, keeps maintenance and replacement procedures consistent, and makes performance planning more predictable. The cache-drive option is incorrect because ESA is single-tier and does not use separate cache and capacity tiers. Equal cache and capacity tiers apply to OSA-style thinking, not ESA. vSAN File Services being configured does not drive the requirement to use identical drives. Reference topics: vSAN ESA Storage Pool Design, Balanced and Unbalanced Cluster Configuration, ESA Device Performance, Vertical Scaling.

Immutable snapshots are intended to provide hardened recovery points for cyber-recovery scenarios. In vSAN Data Protection, immutability is enabled at the protection group level. Once enabled, snapshots are read-only recovery points that cannot be modified or deleted, even by an attacker with administrative privileges. This immutability model imposes operational restrictions. A VM with immutable snapshots should not have its virtual hardware changed because hardware changes can alter the VM configuration state associated with protected recovery points. In addition, a protection group cannot be configured as both replicated and immutable, because replication and immutable local snapshot protection are separate protection behaviors with different lifecycle and retention handling. The statement that a VM cannot be part of multiple protection groups is not the specific limitation tested here. The number of snapshot schedules is not limited to seven by this requirement. Virtual hardware version 10 is also not the controlling condition for immutable snapshot configuration in this context. Reference topics: vSAN Data Protection, Immutable Snapshots, Protection Groups, Cyber-Recovery Snapshot Restrictions.

Dedicated VMFS datastores on assigned Fibre Channel arrays meet both the performance and separation requirements. VCF supports Fibre Channel-backed VMFS as principal storage for workload domains, making it valid as the primary datastore type for the tier-1 business application cluster. Fibre Channel provides low-latency block storage, resilient pathing, SAN zoning, LUN masking, and mature enterprise performance characteristics. Because the existing FC arrays are partitioned by business unit, dedicated datastores preserve organizational separation and avoid mixing business-unit workloads on shared storage resources. The same dedicated FC-backed VMFS approach can also be used as supplemental storage after the workload domain exists, allowing extra capacity or specialized tiers while maintaining separation. Shared VMFS datastores do not satisfy the organizational separation requirement because they allow multiple business units to consume the same datastore boundary. vSAN is explicitly excluded, so the design must rely on supported non-vSAN storage. Automated VM placement can be supported by VMFS datastore clusters and Storage DRS where datastores are compatible and similarly managed. Reference topics: Fibre Channel Storage Model, VMFS Datastores, Principal Storage, Supplemental Storage, Datastore Clusters.

vSAN datastores are not managed through datastore clusters and Storage DRS in the same way as traditional VMFS or NFS datastore collections. A vSAN cluster exposes a distributed vSAN datastore, and VM placement, resilience, space efficiency, and compliance are controlled through vSAN Storage Policy Based Management rather than Storage DRS. The scenario also includes mixed vSAN OSA and vSAN ESA storage across clusters, which introduces an additional compatibility concern. vSAN OSA and vSAN ESA datastores are different architectures and are not combined into a single datastore-cluster construct for uniform Storage DRS placement. A datastore cluster should not combine different storage architectures such as vSAN, Fibre Channel, and NFS because Storage DRS assumes similar, interchangeable datastore resources. Creating a datastore cluster through APIs does not make vSAN datastores supported in this model. Therefore, the administrator should consider that vSAN datastores are not supported in datastore clusters and should use vSAN storage policies and appropriate datastore selection instead. Reference topics: vSAN Datastores, Storage Policy Based Management, Datastore Cluster Requirements, vSAN OSA and ESA Compatibility.

ESA evaluates available capacity and fault domains to satisfy policy compliance.

vSAN detects the failure and marks affected objects as non-compliant.

Resync completes and objects transition to Compliant status.

New components are instantiated on eligible capacity devices, and resync begins.

A failed NVMe device in a vSAN ESA cluster is handled as a storage pool device failure. vSAN first detects the failure and marks affected objects as non-compliant when their assigned storage policy requirements are no longer satisfied. ESA then evaluates available capacity and fault domains to determine whether replacement components can be placed in a way that restores compliance. If sufficient placement resources exist, vSAN creates new components on eligible capacity devices and begins resynchronization. After the resync completes, the affected objects transition back to Compliant status. The Repair Delay Timer is primarily associated with absent components, such as a host or device that may return, and is not the required step for a permanent NVMe failure. The administrator does not have to manually trigger Repair Objects Immediately for the normal automatic repair process. A full cluster rebalance is separate from repair and is not performed before rebuilding missing or degraded components. Reference topics: vSAN ESA Storage Pool Device Failure, Object Compliance, Automatic Reprotection, Resynchronization.

Option D is the only design that uses supported non-vSAN storage models while matching the workload characteristics. VMFS over Fibre Channel is a supported enterprise block-storage option for the Management Domain and provides shared, resilient storage with SAN fabric pathing, zoning, LUN masking, and multipathing. Production requires low-latency block storage, and VMFS over NVMe/FC aligns with that requirement by using NVMe over Fibre Channel transport for high-performance block access. Non-production requires high-capacity file-based storage, and NFS v4.1 is the supported file-based option listed in the design. Option A is invalid because SMB is not a supported vSphere datastore protocol for VCF workload domain storage. Option B fails because local VMFS datastores do not provide the required shared storage model for a VCF Management Domain, and iSCSI is not presented as the complete best-fit block-storage design in the choices. Option C violates the explicit non-vSAN requirement by using vSAN ESA, vSAN HCI Mesh, and vSAN File Services. Reference topics: Supported Non-vSAN Storage, Fibre Channel Storage Model, NVMe/FC, NFS Storage Model, Principal and Supplemental Storage.

Deploy ESX at 9.x

Deploy vCenter 9.x

Create Storage and General dvS

Configure VMkernel Binding for the NVMe over TCP Adapter

Add Software NVMe over TCP Adapters

Import the workload domain to VCF

The correct sequence starts by preparing the vSphere environment that will later be imported into VMware Cloud Foundation. ESX 9.x must be deployed first on the six blade hosts because the hosts provide the compute foundation for the workload domain. After the hosts are available, vCenter 9.x is deployed to manage the cluster and provide the required vSphere inventory. The two distributed switches are then created: one for storage isolation and one for general host and workload traffic. Because the external array supports NVMe/TCP only and multipathing is required, VMkernel binding must be configured for the NVMe over TCP adapter before the software NVMe over TCP adapters are added. This ensures the NVMe/TCP storage paths are correctly associated with the intended storage network. After the software NVMe over TCP adapters are created and the hosts can access the external storage, the prepared workload domain can be imported into the existing VCF environment. Reference topics: NVMe over TCP Configuration, VMkernel Binding, Software NVMe/TCP Adapters, Existing vCenter Import, VCF Workload Domain Import.

A witness host for a 2-node vSAN cluster must be external to the 2-node vSAN-enabled data cluster. The witness provides quorum and must be placed outside the protected data-node pair so that it can arbitrate availability during host or site failure. If the proposed witness host resides inside the 2-node vSAN enabled cluster, it is not eligible and therefore does not appear as an available selection during the replacement workflow. Having a VMkernel adapter configured with vSAN traffic enabled is required for witness communication, so that is not the cause of the issue. Connectivity to the data hosts is also expected and does not make the witness invalid. A witness host already assigned to another 2-node vSAN cluster is not necessarily disqualified because shared witness configurations are supported within scale and sizing limits. The core eligibility issue is that the witness host cannot be a member of the same 2-node vSAN cluster that it is intended to witness. Reference topics: 2-Node vSAN Cluster, Witness Host Placement, Replace Witness Host, Shared Witness Support.

With “Ensure Accessibility,” vSAN migrates only the minimum amount of data required to keep objects accessible while the host enters maintenance mode. This mode is faster than Full Data Migration, but it does not fully reprotect all objects. The documentation states that objects might no longer be fully compliant with their storage policy during this evacuation mode, meaning they might not have access to all replicas. Because the default policy is RAID-1 with FTT=1, each object can tolerate only one failure. While the first host is in maintenance mode, some VM objects are already running in a reduced-availability state. If a second host loses network connectivity during this window, affected objects can lose quorum or access to required components. vSAN does not immediately rebalance or fully rebuild objects simply because Ensure Accessibility was selected, and permanent data loss is not the expected result from a temporary network loss. The likely impact is that some VMs become inaccessible until either the maintenance host returns or the isolated host reconnects. Reference topics: vSAN Maintenance Mode, Ensure Accessibility, Default Storage Policy, RAID-1 FTT=1, Network Partition Handling.

vSAN object availability is based on two conditions: an intact replica must be available, and more than 50% of the object’s votes must be accessible. In this scenario, vSAN can locate a full replica and 55% of the votes for the noncompliant objects. Because 55% is greater than the quorum threshold, the objects remain available to the vSAN datastore. A noncompliant status means the VM objects do not currently satisfy the assigned storage policy, but it does not automatically mean the VM is inaccessible. The documentation states that if the operational state remains healthy although the object is noncompliant, the virtual machine can continue using the vSAN datastore. If the cluster contains enough resources and the failure is permanent, vSAN automatically recovers failed components and restores compliance. The VM is marked inaccessible only when a full replica cannot be located or when 50% or fewer votes are available. It becomes orphaned only if the VM namespace, such as the .vmx file, cannot be accessed. Reference topics: vSAN Object Health, Quorum Votes, Noncompliant Objects, Inaccessible and Orphaned VM States.

vSAN HCI Mesh is the correct feature because the application must continue running on the existing compute cluster, but that cluster lacks enough unused vSAN capacity and has no available NVMe slots for expansion. HCI Mesh, also known as vSAN datastore sharing, allows independent vSAN clusters to share remote datastore capacity with other compatible vSAN clusters. The remote datastore can be mounted and used as if it were local storage, allowing VMs running on the current cluster to consume storage from another vSAN cluster that has sufficient capacity and performance. This satisfies the requirement without purchasing hosts, reassigning hosts, or moving the application away from the cluster that provides the required CPU and memory. vSAN Data Protection addresses snapshots and recovery, not capacity expansion. vSAN File Services provides SMB/NFS file shares, not additional VM datastore capacity. vSAN Stretched Clusters provide availability-zone resilience, not cross-cluster capacity borrowing. VCF documentation describes HCI Mesh as cross-cluster capacity sharing that enables multiple independent vSAN HCI clusters to consume storage from adjacent vSAN storage resources. Reference topics: vSAN HCI Mesh, vSAN Datastore Sharing, Cross-Cluster Capacity Sharing, Remote vSAN Datastore.

The requirement is to alternate the primary site every six months, which requires a disaster recovery design that can reverse protection direction after failover. Inventory mappings define how resources such as compute resources, folders, networks, and datastores map between the protected and recovery sites. Using “Prepare reverse mappings” during inventory mapping creation ensures that the same mapping structure can be used when the recovery site later becomes the protected site. After a failover or planned migration succeeds, VMware Live Site Recovery uses the re-protect operation to reverse the protection relationship. This makes the formerly recovered site the new protected source and prepares replication and recovery plans for failback or for the next scheduled site rotation. A test recovery plan validates recovery without changing the primary site. Extending the network can simplify workload mobility but is not required for reprotection. Reconfiguring vSAN Data Protection manually is not the Live Site Recovery workflow for reversing protected and recovery site roles. Reference topics: VMware Live Site Recovery, Inventory Mappings, Reverse Mappings, Recovery Plans, Reprotect.

LUN Masking = A security process performed on the storage array by which specific storage components are hidden to prevent unauthorized access to data;

Datastore Cluster = A collection of shared resources with a shared management interface that enables resource allocation policies;

SAN Fabric = A dedicated high-performance network infrastructure for storage devices;

Datastore = A manageable storage entity used as a repository for Virtual Machine files including log files, scripts, configuration files and virtual disks;

Host Bus Adapter (HBA) = Added to an ESX host server to allow the host access to the dedicated storage area network;

Zoning = A security process completed on the Storage Area Network to ensure only certain devices can communicate with each other.

These definitions describe the core components of a Fibre Channel SAN design in a VCF Workload Domain. LUN masking is performed on the storage array and controls which hosts can see specific LUNs, preventing unauthorized access to storage. A datastore cluster is a collection of datastores managed as a shared resource pool, allowing placement and balancing policies through Storage DRS. A SAN fabric is the dedicated high-performance network that interconnects ESX hosts, Fibre Channel switches, and storage arrays. A datastore is the vSphere logical storage container where VM configuration files, virtual disks, logs, and related files reside. A Host Bus Adapter is the physical or virtual adapter in the ESX host that connects the host to the Fibre Channel storage area network. Zoning is performed on the Fibre Channel fabric and controls which initiators and targets can communicate. Together, zoning and LUN masking provide layered access control, while datastores and datastore clusters provide the vSphere consumption model. Reference topics: Fibre Channel SAN Concepts, SAN Fabric, Zoning, LUN Masking, VMFS Datastores, Datastore Clusters.

Cross-cluster capacity sharing, also known as vSAN datastore sharing or HCI Mesh, allows vSAN HCI clusters or vSAN storage clusters to share remote datastores with other vSAN HCI clusters or vSAN compute clusters. A required availability setting is to configure vSphere HA failure response for “Datastore with APD” on the client cluster to “Power off and restart VMs.” This ensures that if a remote vSAN datastore becomes unavailable to a host, vSphere HA can respond appropriately and restart affected virtual machines on hosts that can access the datastore. The latency option is incorrect because vSAN storage cluster guidance requires latency below five milliseconds between client and server ESX hosts, not a minimum of ten milliseconds. The VM object placement option is also incorrect because all objects that make up a VM must reside on the same datastore, not multiple datastores. Finally, client and server clusters must use compatible vSAN architectures; vSAN OSA and vSAN ESA cannot share datastores with each other. Reference topics: Cross-Cluster Capacity Sharing, vSAN Datastore Sharing, HCI Mesh, vSphere HA APD Response, vSAN OSA/ESA Compatibility.

Seven hosts per availability zone is required for this design. In a vSAN ESA stretched cluster, data components are distributed across two data sites, while a witness site provides quorum. The first requirement is a secondary level of resilience of FTT=2 using RAID-6 erasure coding. RAID-6 requires enough fault domains to place data and parity components while tolerating two failures. The second requirement is more restrictive: vSAN must be able to regain its prescribed level of resilience after a sustained host outage. This means the site must have enough remaining placement capacity to rebuild components and return objects to policy compliance after a host is lost. A six-host site can satisfy the RAID-6 placement minimum, but it does not provide the additional host needed to rebuild cleanly after a sustained host outage. Therefore, the design requires seven hosts in each availability zone. This produces fourteen data hosts across the stretched cluster, plus the witness. Reference topics: vSAN ESA Stretched Cluster Design, Secondary Level of Resilience, RAID-6 Erasure Coding, Availability Zone Host Count.