Faced with prolonged times for hardware delivery, an administrator is looking for a way to be informed on time when cluster storage capacity is running low. In order for new hard disks to be delivered on time, the administrator needs to get a warning earlier than it is set currently.
Which action should the administrator take to receive a warning about cluster storage capacity running low earlier?

• A. Increase frequency of Storage Pool alerts.
• B. Decrease Storage Pool Capacity Usage Exceeded alert Critical threshold.
• C. Enable early warning Storage Container alert.
• D. Decrease Storage Container Space Usage Exceeded alert Warning threshold.

An administrator has configured Metro Availability but a few hours later got an NCC warning:
Node x.x.X.X:
WARN: Break replication timeout of Metro protection domain 'M1' is
below the recommended minimum.
What is a possible resolution for this issue?

• A. Update the break_replication_timeout to 15 seconds
• B. Update the break_replication_timeout to 5 milliseconds.
• C. Update the break_replication_timeout to 10 seconds.
• D. Update the break_replication_timeout to 15 milliseconds.

An administrator is managing an environment based on two different AHV-based and ESXi-based clusters. Workloads are evenly distributed and in a healthy state. A Linux VM running on ESXi is not performing well at the storage level and is configured as follows:
- VCPU: 8
- VRAM: 32
- vDisk: 3, first 100 GB, second 250 GB, third 250 GB
What is the easiest way to test VM performance, while minimizing downtime?

• A. Increase the number of vCPUs.
• B. Migrate the VM to the AHV cluster.
• C. Collapse the second and the third disk into a single one
• D. Enable vDisk sharding at AOS level.

An administrator detects suspicious outbound connections from a single VM that hosts a web tier component.
The incident response requirement is to immediately quarantine the VM so it cannot communicate with any other workload, but still allow connectivity from a designated forensic tooling group so investigators can collect evidence.
The organization uses categories for policy scope and wants a change that can be applied quickly during an incident without redesigning existing policies.
Which action best meets the requirement?

• A. Create an isolation environment policy between the VM and all other categories to block traffic and manually add exceptions for forensic tools.
• B. Assign the VM to the built-in Quarantine category with the Strict value and separately create a shared service policy to allow forensic access.
• C. Create an application policy that only allows outbound traffic to forensic tools, leaving inbound traffic as allow all for faster investigation.
• D. Assign the VM to the built-in Quarantine category with the Forensic value so quarantine behavior blocks traffic except to and from forensic tools.