Free D-PSC-DY-23 sample questions

Correct answer: SmartLock in Compliance mode with a seven-year retention period.

SmartLock in Compliance mode is the correct choice because it enforces strict WORM (Write Once, Read Many) rules that prevent anyone, including administrators, from modifying or deleting files before the retention period expires. This meets the stringent regulatory requirements. Enterprise mode allows privileged deletes by an administrator, which would violate the requirement. SnapshotIQ protects data but doesn't prevent deletion of the original file. RBAC restricts access but does not enforce immutability.

Correct answer: `isi statistics client --nodes all --long`

`isi statistics client` shows the most active clients by protocol, including each client's remote address and the node serving it. `--nodes all` reports every node (the default), and `--long` shows all columns. In OneFS 9.5, `isi statistics` has no `system` subcommand, `isi statistics protocol` has no `--total` option (it has `--totalby`), and `isi statistics query` takes `current` or `history` with `--keys`, not `--stats`.

Correct answer: CoW incurs a double-write penalty (the original block is copied to the snapshot, then new data is written) but limits fragmentation; RoW writes new data to a new location and avoids the copy, at the cost of more fragmentation. OneFS picks the method per situation.

SnapshotIQ uses both strategies and OneFS dynamically chooses one per situation; administrators cannot select it. With copy on write, the old blocks are first copied out to the snapshot version and then the new data is written, which is a double-write penalty but keeps the HEAD file less fragmented. CoW is most prevalent in OneFS and is used for small changes, inodes and directories. Redirect on write avoids the double write by writing changes to free space, at the cost of more fragmentation, so OneFS uses it for larger changes such as deletes and large sequential writes. No snapshot reserve is required.

Correct answer: ACLs, because they support granular permissions and can include both POSIX-like entries for the group and specific deny entries for the Windows user.

Access Control Lists (ACLs) are required for this scenario. Standard POSIX permissions only allow for one owner, one group, and 'other', and do not support explicit deny entries for specific users. ACLs provide the necessary granularity to add multiple access control entries (ACEs), allowing permissions to be set for the `devops` group while simultaneously adding an explicit deny ACE for the `jdoe` user.

Correct answers: The secondary cluster must have corresponding access zones created with the same names as the primary cluster.; The secondary cluster must be joined to the same Active Directory domain as the primary cluster.

SyncIQ replicates file data and metadata but not system configuration such as access zones, and Dell's failover procedure assumes that the target cluster already emulates the source configuration, including licensing, access zones, SmartConnect, shares and authentication providers. Creating the corresponding access zones on the secondary cluster before the first replication job (target directories become read-only afterward) keeps the multi-tenant layout after failover. Joining the secondary cluster to the same Active Directory domain lets the identities that SyncIQ replicates as SIDs resolve to the same users and groups. Identical hardware, a shared SSIP and a newer OneFS version are not failover prerequisites.

SyncIQ replicates file data and metadata but not system configuration such as access zones, and Dell's failover procedure assumes that the target cluster already emulates the source configuration, including licensing, access zones, SmartConnect, shares and authentication providers. Creating the corresponding access zones on the secondary cluster before the first replication job (target directories become read-only afterward) keeps the multi-tenant layout after failover. Joining the secondary cluster to the same Active Directory domain lets the identities that SyncIQ replicates as SIDs resolve to the same users and groups. Identical hardware, a shared SSIP and a newer OneFS version are not failover prerequisites.

Correct answer: File Pool Policies

File pool policies (SmartPools) match files on criteria such as path, name, size and timestamps, and set a storage target. When a file is created in a directory covered by a path-based file pool policy, it is written directly to that policy's target pool without waiting for a SmartPools job. Files matched only on other attributes, such as a *.mp4 name pattern, are first written to the default pool and moved the next time the SmartPools job runs (daily by default). CloudPools tiers data to cloud storage, SmartQuotas limits capacity, and SyncIQ replicates data between clusters.

Correct answer: `isi get `

`isi get` lists file attributes, including the requested protection, the current actual protection, and whether write-coalescing is enabled (output columns POLICY, LEVEL, PERFORMANCE, COAL). Add -D for more detail or -R to recurse into subdirectories. `isi set` changes attributes such as requested protection but does not report them. `isi storagepool settings view` shows global SmartPools settings, and `isi quota quotas view` shows a quota.

Correct answer: False

False. OneFS recommends giving each access zone a unique base directory that does not overlap another zone's base directory (the System zone is the exception), because that isolates data. This is a best practice, not a requirement. OneFS supports overlapping base directories when workflows need shared data. In that case the zones should share authentication providers, or use SID as the on-disk identity, so that users keep consistent identities.

Correct answer: Zone Administrator

In a non-System access zone the integrated ZoneAdmin role includes ISI_PRIV_SMB and ISI_PRIV_NFS, as well as S3, HDFS, file filtering, audit and namespace access privileges, but not ISI_PRIV_AUTH or ISI_PRIV_ROLE. Authentication providers are managed by the separate ZoneSecurityAdmin role (LOGIN_PAPI, AUTH, ROLE). SecurityAdmin and SystemAdmin are System-zone roles with cluster-wide scope, and there is no built-in 'Data Protection Administrator' role.

Correct answer: The file's data is moved to the cloud, but its metadata and a stub (pointer) remain on the PowerScale cluster, making the file appear local.

A core function of CloudPools is to maintain a seamless namespace. When a file is tiered, its data blocks are moved to the cloud object store, but the file's inode and metadata remain on the PowerScale cluster. A small stub file acts as a pointer to the data in the cloud. This makes the file still visible and accessible from its original path, though accessing it will incur recall latency from the cloud.