FlashArray-Storage-Professional Sample Questions Answers

Definition of Host Personality: In Purity//FA, a Host Personality is a setting applied to a host object that modifies how the FlashArray communicates with that specific initiator. It ensures the array sends the correct SCSI responses that the target Operating System (OS) expects. Common personalities include ESXi, AIX, HP-UX, and Hitachi-VSP.

The Importance of Timing: The best practice is to set the personality during the host creation phase , before any volumes are attached or I/O has commenced. This ensures that from the very first " Inquiry " command sent by the host, the FlashArray responds with the appropriate settings (such as specific VAAI primitives for ESXi or specific ALUA behaviors for other Unix variants).

Risks of Changing Later: While Purity allows you to change a host personality later, doing so while volumes are connected and I/O is active can be disruptive. For many operating systems, a change in personality requires the host to be rebooted or the storage paths to be " rescanned " to recognize the change in device capabilities.

Default Behavior: If no personality is selected, the FlashArray uses a " Generic " personality suitable for standard Windows and Linux distributions. However, for specialized hypervisors like ESXi , failing to set the personality correctly from the start can lead to performance issues or lack of support for hardware acceleration features.

Why Option C is incorrect: Changing the personality after volumes are connected is reactive rather than proactive. It increases the risk of the host misinterpreting the storage device ' s capabilities, potentially leading to mount failures or path instability.

Understanding MTU: The Maximum Transmission Unit (MTU) defines the largest size of a packet or frame that can be sent in a single network transaction. The standard Ethernet MTU is 1500 bytes . Anything larger than 1500 bytes is referred to as a Jumbo Frame .

Replication Efficiency: Replication involves moving large amounts of data between arrays. Using standard 1500-byte frames results in higher overhead because the CPU must process a larger number of headers for the same amount of data. By increasing the MTU, the FlashArray can pack more data into each frame, reducing CPU interrupts and improving overall throughput.

The Pure Recommendation: Pure Storage specifically recommends an MTU of 9000 for both iSCSI and Replication traffic. This is the industry standard for Jumbo Frames that balances efficiency with compatibility across most enterprise-grade switches.

Configuration Requirements: It is critical to remember that MTU must be configured end-to-end . For an MTU of 9000 to work on the replication ports:

The FlashArray replication ports must be set to 9000.

The network switches along the path (and any routers/ISLs) must support and be configured for at least 9000.

The target array ' s replication ports must also be set to 9000.

Why 9216 (Option A) is incorrect: While some switches support a " Baby Giant " or slightly larger MTU like 9216 to account for VLAN tagging overhead, Pure ' s internal and best practice documentation specifically points to 9000 as the standard setting for the array ' s interface.

User Mapping in FA File: On a Pure Storage FlashArray, User Mapping is the mechanism that translates identities between different protocols (like mapping a Windows SID to a Unix UID/GID) or between an external directory service (like Active Directory or LDAP) and the local file system permissions.

The Impact of Disabling Mapping: When User Mapping is disabled on an active NFS export, the FlashArray can no longer resolve the identity of the user attempting to access existing files. Because NFS (specifically NFSv3 and NFSv4.1 supported by Pure) relies on these identifiers to verify file ownership and ACLs, existing files—which are tagged with specific owner IDs—become effectively " orphaned " from the perspective of the incoming request.

Access vs. Creation: * Existing Files: Accessibility is lost because the system cannot verify that the user has the rights to read or modify the file without the mapping logic.

New Files: Interestingly, in many " No Mapping " configurations, a user may still be able to create new files (often defaulting to a ' nobody ' or ' anonymous ' UID depending on the export rules), but they will immediately lose the ability to manage or access them once created because the mapping link is broken.

Real-time Application: Unlike some legacy storage systems that require a service restart, Purity applies export policy changes dynamically . As soon as the " User Mapping " toggle is disabled, the logic is removed from the data path, impacting active sessions immediately.

Policy-Driven Automation: Pure Protect //DRaaS (Disaster Recovery as a Service) is built on a declarative policy engine. When you define a business policy (Protection Group or similar policy-based management), the system ' s primary goal is to bring the environment into compliance with the " Desired State " defined by that policy.

Retention Enforcement: When the retention period is reduced (e.g., from 7 days down to 3 days), the Purity/Pure Protect engine identifies that any existing snapshots or backups older than the new 3-day threshold are now " out of policy. "

Immediate Reclamation: Unlike some legacy backup systems that only apply new retention settings to future backups, Pure Storage ' s policy-driven architecture typically triggers an immediate cleanup of the now-obsolete data to reclaim space on the target. This ensures the environment matches the modified policy requirements immediately upon the policy update.

SafeMode Considerations: If SafeMode is enabled on the target, these " erased " backups will actually move into the " Destroyed " (but not yet eradicated) bucket for the duration of the SafeMode timer, providing a safety net against accidental policy changes or malicious deletions. However, from the perspective of the active DR policy, they are removed.

As Pure Storage has iterated through FlashArray generations (moving from //X R2 to R3, R4, and beyond), the power density and performance capabilities of the controllers have increased significantly. Modern high-performance controllers, such as those found in the //X R4 or //XL series, have strict power requirements that often exceed what a standard 110V/120V (Low-Line) circuit can provide.

To support the higher wattage and current draw of modern CPUs and NVRAM modules, Pure Storage requires 200-240V (High-Line) power for its latest generation controllers. If an existing array is currently running on 110V power, it must be migrated to 220V power outlets before the upgrade can proceed. Attempting to run newer, high-spec controllers on 110V power could lead to power supply instability, insufficient cooling performance, or the controllers failing to boot entirely.

Here is why the other options are incorrect:

Call support to schedule a power supply replacement (A): The issue is not a faulty power supply; it is the external electrical infrastructure ' s inability to provide the necessary voltage/wattage for the new hardware. Replacing the power supply with the same model would not solve the voltage limitation.

Transition the array to DC power (B): While Pure Storage does offer DC power options for specific telco environments, this is not a standard requirement for a typical controller upgrade. Moving to standard high-line AC power (220V) is the standard prerequisite for data center environments.

Protocol Compatibility: While NVMe-over-Fabrics (NVMe-oF) is the future of high-performance storage, support for it within specific hypervisor ecosystems varies. In the context of Microsoft Hyper-V , especially in older or standard Ethernet-switched environments, iSCSI remains the most mature, widely supported, and native protocol for block storage.

Ethernet Constraints: The question specifies an Ethernet-switched environment . This immediately rules out NVMe/FC (NVMe over Fibre Channel), as that requires dedicated Fibre Channel switching infrastructure and HBAs, not standard Ethernet.

NVMe/RoCE vs. iSCSI: While NVMe/RoCE (RDMA over Converged Ethernet) runs on Ethernet, it requires specialized NICs (RDMA-capable) and a specific switch configuration (PFC/LFC) to ensure a lossless fabric. Hyper-V has specific requirements for RoCE (often tied to SMB Direct for File services), but for general block storage volumes in a standard Ethernet environment, iSCSI is the " best suited " due to its ease of deployment, native Windows initiator support, and lack of requirement for specialized lossless hardware.

Pure Storage Best Practices: Pure Storage FlashArrays provide industry-leading iSCSI performance. When using iSCSI with Hyper-V, Pure recommends using the native Windows MPIO (Multi-Path I/O) with the " Least Queue Depth " policy to ensure optimal load balancing across the Ethernet fabric.

In the Pure Storage ecosystem, " Meta fingerprinting " refers to the core technology behind Pure1 Meta , which is Pure ' s cloud-based artificial intelligence and machine learning engine. Pure1 collects thousands of data points of telemetry (metadata) from all connected FlashArrays globally every day.

By analyzing this vast amount of telemetry data, Pure1 Meta creates workload signatures or " fingerprints. " It then continuously compares your array ' s telemetry footprint against the global pool of arrays. The major benefit of this is that it enables predictive support . If Pure1 Meta detects that your array ' s fingerprint matches a known issue experienced by another array elsewhere in the world, Pure Storage can proactively alert you, open a support ticket, or recommend a Purity upgrade before you ever experience an outage or performance impact. It also uses these fingerprints for highly accurate capacity and performance forecasting.

Here is why the other options are incorrect:

Provides security for Remote Assist (RA) (A): Remote Assist allows Pure Support to log into your array for troubleshooting, but its security is based on a customer-initiated, secure outbound TLS connection (tunneling), not meta fingerprinting.

Ensures biometric security (B): This is a distractor. " Fingerprinting " in the context of Pure Storage refers to data and workload profiling, not human biometric authentication like physical fingerprint scanners.

Pure1 and Phone Home: Pure1 is a cloud-based management and monitoring platform. For the FlashArray to communicate its health data, performance metrics, and alerts to Pure Storage, it must be able to " Phone Home. "

The Power of HTTPS: This communication is encrypted and sent via the HTTPS protocol. Consequently, the standard port for HTTPS, TCP 443 , must be opened for outbound traffic on the management network.

Firewall Configuration: The array controllers initiate an outbound connection to the Pure Storage cloud (specifically to destinations like cloud-connect.purestorage.com). Because it is an outbound-initiated connection, most stateful firewalls will allow the return traffic automatically once port 443 is permitted.

Why Option A is incorrect: Port 22 (SSH) is used for secure shell access to the array ' s CLI. While essential for local administration, it is not used for the automated Phone Home or Pure1 telemetry data stream.

Why Option B is incorrect: Port 8117 was historically used for the " Remote Assist " tunnel in older Purity versions. However, even for Remote Assist, modern Purity versions have transitioned to using port 443 to simplify firewall rules for customers. It is not the standard port for the general Phone Home/Pure1 logging service.

Verification: An administrator can verify connectivity by running the purearray test phonehome command in the CLI. If port 443 is blocked, the test will fail with a connection timeout.

ActiveCluster and Pod Roles: In a Pure Storage ActiveCluster or ActiveDR environment, a Pod is a management container for volumes. To move workloads or perform a planned failover between two arrays, you use the Promote and Demote commands.

The Reversal Process: When you have two pods in a replication relationship (Source and Target), data flows from the Promoted (Active/Source) pod to the Demoted (Passive/Target) pod.

When you Demote the current source, it transitions from a " read-write " state to a " read-only " (passive) state.

If the other pod in the pair is then Promoted , Purity automatically intelligently reverses the direction of replication . The array that was previously receiving data now begins sending incremental updates back to the original source.

Continuous Protection: This design ensures that you don ' t have to manually tear down and recreate replication schedules every time you switch production sites. The system tracks the metadata changes and ensures that only the delta (changed blocks) are sent in the new direction.

Why Option C is incorrect: If replication were simply paused, the two sites would quickly drift out of sync, making it impossible to fail back without a full baseline resync.

Why Option A is incorrect: Demoting a pod does not delete any data; it simply changes the access characteristics and replication role. The data remains fully intact on the storage media.

In Pure Storage FlashArray File Services (Purity//FA), administrators can apply Quota Policies to managed directories to control and monitor capacity consumption. When configuring the rules for these quotas, the limits are categorized into two specific types: Enforced and Unenforced .

Enforced Quotas (Hard Limits): When a quota rule is set with the --enforced flag set to True , it acts as a hard boundary. If the users or applications writing to that managed directory hit the specified capacity limit, the FlashArray will actively block any further write operations, ensuring the directory cannot exceed its allocated space.

Unenforced Quotas (Soft Limits): When a quota rule is unenforced (the flag is set to False ), it acts purely as a monitoring and alerting threshold. Users can continue to write data and organically grow the directory past the specified limit without application disruption, but the system will track the overage and trigger administrative notifications.

Here is why the other options are incorrect:

File and Block (A): This describes the two underlying storage protocols/architectures the unified FlashArray serves, not the types of capacity quota limits for directories.

Limited and Unlimited (B): While you can theoretically leave a file system to grow " unlimited " up to the size of the array, the specific technical parameters in the Purity quota policy engine are defined as enforced vs. unenforced.

Supported Directory Services: Pure Storage FlashArray File Services (FA File) is designed to integrate seamlessly into existing enterprise identity infrastructures. To manage file permissions (SMB ACLs and NFS POSIX/NFSv4 permissions), Purity supports joining the array to a directory service.

Active Directory (AD): This is the most common integration for FA File, specifically for SMB environments. Purity allows the array to join an AD Domain, creating a computer account and enabling the resolution of SIDs to usernames.

OpenLDAP: For Linux/Unix-heavy environments using NFS, Purity supports OpenLDAP . This allows the array to look up UID/GID information and group memberships to enforce security across the file system.

Authentication vs. Management: It is important to distinguish between Data Access (FA File) and Management Access (GUI/CLI login).

FA File (Data Access): Uses AD and OpenLDAP to authorize users accessing shares/exports.

Management (GUI/CLI): Uses SAML (Option C) or LDAP for Single Sign-On (SSO) (Option B) to allow administrators to log into the array.

The " Either/Or " Logic: While a FlashArray can be configured with multiple directory services, for a specific File System/Export mapping, the system relies on the primary identity provider configured—either Microsoft AD or an LDAP-compliant service like OpenLDAP—to validate the users ' identity.

On a Pure Storage FlashArray, Role-Based Access Control (RBAC) allows administrators to integrate with Directory Services (like Active Directory or OpenLDAP) to control user access. Purity uses a specific hierarchy for its administrative roles, which from highest to lowest privilege are: Array Admin , Storage Admin , Ops Admin , and Read Only .

When a user logs in and is found to be a member of multiple Active Directory or LDAP groups that are mapped to different roles on the FlashArray, Purity ' s behavior is designed to grant the user the highest level of permissions among those conflicting group mappings. Because the Array Admin role is higher in the hierarchy than the Storage Admin role, the user will successfully log in and be granted full Array Admin permissions.

Here is why the other options are incorrect:

Inability to login (A): Purity handles overlapping group memberships gracefully by defaulting to the highest privilege. It does not lock the user out or cause a login failure.

Storage Admin permissions (B): Because the system grants the highest available mapped privilege, the user will not be restricted to the lower-tier Storage Admin role when they also possess group membership for the Array Admin role.

In Pure Storage Purity OS, the absolute best practice and proper configuration method for sharing a single volume across multiple hosts—such as a VMware ESXi cluster or a Microsoft Windows Server Failover Cluster (WSFC)—is to connect the volume to a Host Group .

When you create a Host Group, you add the individual Host objects (which contain the WWPNs, IQNs, or NQNs) into that group. When a volume is then connected to the Host Group, Purity automatically ensures that the volume is presented to every host in that group using the exact same LUN ID . Consistent LUN IDs across all nodes in a cluster are a strict requirement for clustered file systems like VMFS and Cluster Shared Volumes (CSV) to function correctly and prevent data corruption.

Here is why the other options are incorrect:

Connect the volume to each individual host (C): This is known as creating " private connections. " If you manually connect a shared volume to multiple hosts individually, Purity might assign a different LUN ID to the volume for each host. Inconsistent LUN IDs will cause clustered operating systems to fail to recognize the disk as a shared resource. Private connections should only be used for boot LUNs or standalone standalone servers.

Connect a volume group to the host (B): In Purity, a " Volume Group " is a logical container used for applying consistent snapshot policies, replication schedules, or ActiveCluster configurations to a set of related volumes (like a database and its log files). Volume groups are not used for host presentation or access control.

The ActiveCluster Mediator (whether it is the Pure1 Cloud Mediator or the On-Premises VM) is a lightweight tie-breaker that communicates continuously with the management interfaces of both FlashArrays. If it was previously online and suddenly reports as " unreachable " from both arrays simultaneously, the issue is almost always caused by a network interruption or firewall rule change blocking the required communication ports between the arrays ' management IP addresses and the Mediator VM.

If a network firewall is suddenly configured to drop or deny outbound TCP traffic (such as port 80/443 depending on the specific HTTP/HTTPS discovery and heartbeat configuration) from the FlashArrays to the ESXi-hosted Mediator, the arrays will fail to send their heartbeats, causing the mediator status to drop to " unreachable. "

Here is why the other options are incorrect:

Fibre Channel (FC) zoning or network access has not been created properly for the host (A): The Mediator is completely independent of the front-end host storage fabric (Fibre Channel or iSCSI). Host zoning issues would prevent the ESXi server from seeing its volumes, but it would not cause the FlashArrays to lose management network connectivity to the Mediator.

The mediator does not reside within a Pure datastore (B): This is actually a strict best practice and requirement . Pure Storage explicitly states that the On-Premises Mediator VM must be deployed in a separate (third) failure domain. It should not reside on the ActiveCluster mirrored datastore, because a site-wide SAN failure would take the mediator offline exactly when it is needed most. Therefore, not residing on a Pure datastore is the correct setup, not a cause for an outage.

To provide true real-time data and alerts directly to a Network Operations Center (NOC) dashboard, the information must be sourced directly from the FlashArray . The FlashArray ' s Purity operating environment natively supports real-time data streaming and alerting integrations via protocols like Syslog, SNMP traps, and the local REST API. Polling the array directly or configuring it to push alerts guarantees that the NOC receives instantaneous, up-to-the-second notifications regarding array health, hardware faults, and performance metrics.

Here is why the other options are incorrect:

Pure1 (B): While Pure1 is Pure Storage ' s powerful, cloud-based monitoring and predictive analytics platform, it relies on phone-home telemetry data. This telemetry is batched and transmitted from the array to the Pure1 cloud on a short polling interval (typically a few minutes). Because of this transmission and processing interval, Pure1 provides near-real-time (lagging by a few minutes) and historical data. It is excellent for global fleet management and predictive support, but not for instantaneous, zero-latency NOC alerting.

Pure Performance Monitoring (A): This is a distractor. There is no standalone product or specific protocol in the Pure Storage ecosystem officially named " Pure Performance Monitoring. " Performance monitoring is simply a feature accessed via the FlashArray GUI/CLI or the Pure1 platform.

In the Pure Storage FlashArray GUI, granular performance metrics (Latency, IOPS, Bandwidth) are located under the Analysis > Performance tabs. When you navigate to the Volumes sub-tab and select a specific volume, Purity displays a unified line graph tracking the performance of that volume over time.

By default, the Latency graph simultaneously plots Read , Write , and Mirrored Write (for volumes participating in an ActiveCluster or synchronous replication pod) latencies. Because these lines can overlap or compress the Y-axis (especially if one metric spikes), isolating a specific metric requires interacting with the graph ' s legend.

To view the exact, un-obscured latency for standard write requests to that volume, the administrator should click on " Read " and " Mirrored Write " in the chart ' s legend. This deselects those metrics, effectively hiding their lines from the graph and automatically rescaling the view to exclusively display the host write latency.

Here is why the other options are incorrect:

Health > Network (A): The Health tab is used to check the hardware status of the physical controller ports, including link state and errors. While you might see port-level throughput or queue depth here, it does not provide volume-specific application latency.

Storage > Volumes > Details (B): The Storage tab is primarily used for provisioning and configuration management. Clicking on a volume here will show its size, data reduction ratio, snapshot policies, and connected hosts, but it does not provide detailed interactive performance graphs.

ActiveDR is Pure Storage’s continuous, near-sync replication solution. It differs fundamentally from standard asynchronous replication because it uses a continuous stream of data rather than snapshot-based " periodic refreshes " (which eliminates Option A).

When you perform a test failover in ActiveDR, you do so by promoting the target pod . The target pod becomes writable, allowing your hosts and applications to run against the replicated data without disrupting the ongoing continuous replication from the source array in the background.

When the test is completed, you demote the target pod. To ensure that the data generated during your test failover isn ' t accidentally lost forever, ActiveDR automatically creates an undo pod at the exact moment of demotion.

If you need to resume that exact test failover scenario or recover the test data, you can re-promote the target pod and instruct ActiveDR to present the content from the undo pod . This unique mechanism allows storage administrators to seamlessly non-disruptively test, pause, and resume DR environments without affecting production protection.

Hardware Architecture (X vs. C): Pure Storage maintains two primary FlashArray lines: the FlashArray//X (performance-oriented) and the FlashArray//C (capacity-oriented).

Flash Types (TLC vs. QLC):

FlashArray//X (like the X20R4 mentioned in the question) uses TLC (Triple-Level Cell) DirectFlash Modules (DFMs). TLC provides high performance and high endurance, which is necessary for latency-sensitive mission-critical workloads.

FlashArray//C uses QLC (Quad-Level Cell) DirectFlash Modules. QLC provides significantly higher density at a lower cost per GB, but it has different performance and endurance profiles compared to TLC.

Compatibility Constraints: Purity//FA is designed to manage specific flash geometries. QLC modules are not compatible with the //X series arrays. The controller logic and software-defined flash management in an X20R4 are tuned for the voltage and timing characteristics of TLC flash.

The Admission Process: When a new data pack is inserted, the array performs a " handshake. " If the controller detects a module type that it is not hardware-qualified to support (in this case, QLC in an //X chassis), it will refuse to admit the capacity to prevent system instability or data integrity issues.

Why Option A is incorrect: Modern FlashArrays (since the //M series) use NVMe over a PCIe backplane for DirectFlash Modules. Pure moved away from SAS (Serial Attached SCSI) for its primary data drives years ago to eliminate the performance bottlenecks associated with the SAS protocol.

Why Option C is incorrect: An X20R4 uses TLC flash. If the data pack were TLC, it would likely be compatible (provided it met the minimum module count and Purity version requirements).

Understanding CRC Errors: CRC (Cyclic Redundancy Check) errors occur when the data received at a port does not match the checksum sent by the initiator or switch. In a Pure Storage environment, these are tracked per port and can be viewed via the CLI (purehw list) or the GUI.

Configuration vs. Hardware: While a failing SFP or a damaged fiber cable can cause CRC errors, they are a primary indicator of configuration mismatches in the SAN fabric. Common culprits include:

Port Speed Mismatches: Manually setting a port to 16Gbps when the switch is set to " Auto " or 8Gbps.

Duplex Mismatches: Though rare in modern Fibre Channel, it is a classic Ethernet/iSCSI configuration error.

MTU Mismatches: In iSCSI or NVMe-oF environments, if the FlashArray is configured for Jumbo Frames (MTU 9000) but the switch or host is at MTU 1500, packet fragmentation or CRC-like errors/drops will occur.

Why Option A is incorrect: A blinking status LED on a controller is often part of normal operation (indicating heartbeat or activity). A solid amber LED would be an indicator of a hardware failure, not necessarily a misconfiguration.

Why Option C is incorrect: While latency spikes can be caused by misconfiguration (like incorrect MPIO settings), they are more commonly symptoms of workload changes , " noisy neighbors, " or reaching the physical performance limits of the array. CRC errors are a much more specific diagnostic " smoking gun " for port and fabric configuration issues.

Best Practice: When CRC errors are detected, Pure Storage recommends first checking the physical layer (reseating SFPs/cables) and then verifying that the port speed and protocol settings on the FlashArray match the upstream switch configuration exactly.