Free D-ECS-OE-23 sample questions

Correct answer: Set a retention policy in Compliance mode for 7 years.

To ensure that objects are immutable and cannot be deleted by any user, including administrators, the bucket's retention policy must be set to Compliance mode. This mode enforces WORM (Write Once, Read Many) storage, making it impossible to alter or delete the object until the retention period has passed. Governance mode allows users with special permissions to bypass retention settings, which would not meet the client's strict requirement.

Correct answer: ECS geo-replication only replicates object data, not object metadata updates.

By design, Dell ECS geo-replication is optimized for data durability and availability. The initial write of an object, including its data and initial metadata, is replicated. However, subsequent updates to an object's metadata (e.g., changing tags via an S3 PUT Object tagging operation) on the primary site are not replicated to the secondary sites. This is a fundamental characteristic of the eventual consistency model used for geo-replication.

Correct answers: The S3 secret key for the object user is incorrect or has been regenerated.; The object user account associated with the S3 access key has been locked or disabled.

A mismatched or regenerated S3 secret key is a primary cause of authentication failures between an S3 client like CloudPools and ECS. The key must match exactly what is configured on the PowerScale side.

If the underlying object user account in ECS is locked (e.g., due to too many failed login attempts if management access is enabled) or manually disabled, all associated S3 keys will fail to authenticate.

Correct answer: Multipart Upload

The S3 Multipart Upload operation is specifically designed for uploading large objects. It allows a large file to be broken into smaller parts that can be uploaded independently and in parallel, which maximizes throughput. It also allows the upload to be paused and resumed by uploading remaining parts, which is a key requirement. PUT Object requires the entire file to be sent in a single request and cannot be easily resumed.

Correct answer: False

This statement is false. When D@RE is enabled on an existing ECS system, only new data written to the system will be encrypted. Existing data remains unencrypted. To encrypt existing data, it must be read and rewritten back into the ECS system.

Correct answer: Quota on Number of Objects

ECS provides distinct quota controls for both storage capacity (size) and object count. To limit the total number of objects within a namespace, the administrator must configure the 'Quota on Number of Objects' setting. The 'Block Size Quota' or 'Notification Quota' relates to storage capacity.

Correct answer: The Active Directory group has not been mapped to an ECS management role with appropriate permissions.

Integrating ECS with Active Directory involves two steps: authentication and authorization. While the user can authenticate successfully, their AD group membership must be explicitly mapped to an ECS management role (like Namespace Admin or System Admin) within the ECS portal. Without this mapping, the authenticated user has no rights within ECS, resulting in 'permission denied' errors.

Correct answer: The inter-node private network

The 'Data Under Replication' metric indicates the amount of data that has been ingested but has not yet been fully protected by erasure coding or replication across the required number of nodes. A consistently high value points to a slowdown in the background process that distributes and protects data chunks. This process relies heavily on the high-speed inter-node private network. A bottleneck, high latency, or failures on this network would directly impact the system's ability to protect data promptly.

Correct answer: Select the 'Set OpenStack Swift Password' option and enter a password.

When creating or editing an object user in the ECS Management Portal, there is a specific and distinct option labeled 'Set OpenStack Swift Password'. The administrator must check this box and then enter the desired password. This is separate from the S3 secret key generation and is the required method for enabling Swift API authentication for that user.

Correct answer: Data Domain Retention Lock

Data Domain's Retention Lock feature, when used with an ECS target, ensures that tiered data is immutable for a specified period. When files are moved to the ECS Cloud Tier from a Retention Lock-enabled MTree, the immutability settings are preserved on the objects within ECS. This combination provides an end-to-end WORM solution that is essential for regulatory compliance and proving data integrity.