THE ULTIMATE DATA CENTER CHALLENGE. The Ultimate Data Center Challenge

Transcription

1 1 The Ultimate Data Center Challenge

2 The Ultimate Data Center Challenge

3 3 Q: You decide to migrate your virtual machines to a public cloud provider and need to maintain a consistent security policy, which of the following would be best choice? A: McAfee Security for VMware environments (endpoint-network) AND McAfee MOVE Anti-Virus (multiplatform support) Q: You discover that malware has been incubating on your domain controllers for over a year resulting in downtime and $1.5 million dollars in lost revenue. Which of the following can BEST augment your defenses to ensure only trusted code runs on systems in your data centers? A: McAfee Application Control reinforced by McAfee Network IPS, and McAfee Firewall or Web Gateway Q: A Financial Organization needs to be able to monitor intra-vm traffic in a critical network infrastructure. This is especially sensitive due to the types of transactions taking place and having visibility into the data on this part of the network. What should they do? A: Implement McAfee s Network Security Platform with vshield Integration Q: Intel and McAfee have developed an innovative way to ensure security at every layer in the server stack. The foundation of this is A: An ability to integrate between McAfee epolicy Orchestrator and Intel Trusted Execution Technology Q: Your data center is in the direct path of a big storm. The magnitude of the storm threatens to disrupt operations. You need to decide where you can migrate your sensitive workloads to minimize disruption and security risk. A: Move your virtual machines to a trusted host that is using Intel Trusted Execution Technology Q: What is the key advantage of Intel Trusted Execution Technology (Intel TXT)? A: Checks consistency with known good configuration to provide an auditable secure boot environment Q: You are a service provider with a number of customers that have subscribed to your gold tier premium security service. Once a month you need to generate a report to the customers to show customers that the protections they are paying for are in place. What do you do? A: Use Intel Trusted Execution Technology to verify platform trust, and test for other rules of compliance

4 4 Q: A new intern in your business deployed a BIOS update into a server environment that was not thoroughly tested. The BIOS has since been found to have a major flaw. Now you need to determine which systems have had the improper BIOS update to fix them. What do you do? A: Identify the systems that have become untrusted due to improper BIOS using Intel Trusted Execution Technology Q: Your company is branching into a new area and has a very sensitive workload that your business wants to tightly restrict access to. Historically you would have run on dedicated/isolated systems but you need to virtualize it. What can you do? A: Use hypervisor that supports trusted boot, and security policies that permit that workload only on trusted hosts Q: What does Intel TXT specifically do? A: It generates a MLE (measured launch environment) which is a base for trusted compute pools Q: What is a trusted compute pool? A: A set of servers running with known good hardware and prelaunch components Q: Which server systems support Intel TXT? A: Intel Xeon processor-based systems from most OEMs and ODMs Q: Your university is doing some very confidential research and has created documents and videos that are being hosted in their data center. What technology(ies) should be utilized to make sure that all the data is secure within those servers? A: Intel Advanced Encryption Standard-New Instructions (Intel AES-NI) along with Intel Trusted Execution Technology Q: You run a multinational e-commerce company and it s Cyber Monday, which is the biggest U.S. online spending day of the year. Which Intel processor feature will enable more secure online transactions? A: Intel Xeon processors with Intel AES-NI provide the power to offload security that keeps online transactions safe Q: What does Advanced Encryption Standard New Instructions (AES-NI) provide? A: Accelerates the performance of an implementation of AES by 3 to 10x over a completely software implementation

5 5 Q: Your company s IT operations group temporarily needs more web server resources to handle heavy online sales traffic. Which VMware product would best allow you to allocate temporary resources? A: VMware vcloud Director Q: You want to create a VMware vsphere Appliance (VSA) cluster with three hosts. Host 1 has 5 TB of SATA storage, host 2 has 2 TB of SAS storage, and host 3 has 3 TB of SAS storage. How much storage will the VSA cluster consume from each host? A: 2 TB Q: Your company recently went on a spending spree and has acquired several competitors. Your VMware vsphere data center is about to grow to over 100 hosts with approximately 400 powered on virtual machines. What would be the optimal VMware vcenter configuration? A: VMware vcenter Server with Oracle, SQL Server, or IBM DB2 running on 2 cores and 4 GB of RAM Q: Your IT consulting company is deploying VMware View to a healthcare organization, and you need to optimize the Windows 7 image that will be used for the VMware View desktops. Which of the following is NOT a recommended optimization? A: VMXNET2 NIC adapter Q: You recently converted a high-performance database server to a virtual machine, but you re seeing a lag in memory performance. Which VMware feature should you enable to improve database memory performance? A: vnuma Q: After a recent storm knocked out its data center, one of your clients has decided to build a backup data center using VMware vsphere 5, and has asked you to deploy 500 VMware ESXi hosts within 30 days. You should A: Use vsphere Auto Deploy

6 6 Q: One of your Windows Server 2008 R2 virtual machines is sending and receiving an unusually large amount of network traffic across your VMware vsphere cluster s vnetwork Distributed Switch. How might you go about analyzing the virtual machine s network traffic? A: Enable port mirroring on the distributed switch and analyze the traffic in another virtual machine on the same host Q: One of your small business clients needs to add shared storage to her company s VMware vsphere cluster, but doesn t have the budget to purchase an expensive SAN or NAS solution. What do you recommend? A: Implement VMware Appliance to pool each host s storage Q: What is the name of VMware s Cloud Offering? A: VMware vcloud Director Q: Why are Intel SSDs an excellent choice for virtualized workloads? A: All of these. The choices are: They have fast random read/write performance; They are low power; They have high reliability Q: Intel TXT is most useful when A: You need sensitive data and workloads to run in virtualized environments, or in private, public or hybrid clouds

7 7 Q: The power distribution grid has been hit by the hurricane and you are forced to limit the power consumption of your data center and move to backup power. What do you do? A: Set rack power caps at a levels to minimize power utilization while on backup generators Q: Severe storms have wiped out power to more than 2 million people, the data center that houses your video streaming service is affected and using backup generators to mitigate the power loss. What would be the best solution to your problem? A: Use Intel Node Manager and Data Center Manager to cap power to limit power usage Q: Your supervisor has asked for an accurate power load reading per node to understand the utilization of the systems across a rack of hardware when idle and under load. What would help facilitate this process? A: Real-time power monitoring with Intel Data Center Manager and Intel Node Manager Technology Q: Limited power controls and lack of accurate temperature information has led to inefficient utilization and persistent hot spots are occurring in the data center. Which of the following technologies can help Intel Data Center Manager to identify this problem quickly? A: Intel Node Manager Q: With a factory refit you are looking to manage your power usage a little more closely for each rack in your data center that supports your factory. What would be a helpful utility to facilitate this? A: Intel Data Center Manager with Intel Node Manager Technology in each system Q: What benefits are seen from Intel Node Manager and Intel Data Center Manager? A: All of these. The choices are: Real-time power and thermal monitoring; Increase rack density to maximize server count per rack in a fixed rack power envelope; Business continuity allows to continue or prolong operation during power outages Q: You are researching system upgrades and would like to know your real-time power usage of servers in the rack, so you can plan your upgrades to match or be lower than current usage. What would be the best solution? A: Use Intel Data Center Manager to monitor actual per node power usage using Intel Node Manager Technology

8 8 Q: With the green movement in full swing your company has decided to look at its carbon footprint. Using Intel Node Manager technology, which feature would best help you document usage in order to make changes? A: Power Monitoring Q: You run the data center for an inept political figure donations have dwindled and you need to do more with less. You must reduce the cost of storage server upgrades (discrete storage controller). Which of the following Intel storage features can help reduce costs? A: Intel C600 series chipset with integrated SAS enables BOM cost savings compared to a discrete SAS controller Q: You run the data center for an online discount brokerage firm. Political unrest creates uncertainty which sends financial markets reeling. Which of the following Intel storage features can help keep the data center up during this time of heavy trading volume? A: Intel Xeon processors, with Non-Transparent Bridging, keep nodes in sync for failover during peak loads Q: A manufacturing firm needs to provide security on a group of administrative servers in their data center. They don t have time to constantly administer them, but need to ensure they are secure. What is the best approach to take with security policy on these servers? A: Install McAfee Application Control/Change Control with Dynamic Whitelisting Q: A regional healthcare provider recently deployed VMware View as part of an upgrade to its aging infrastructure. What is the most efficient way to secure this new infrastructure from Malware? A: Deploy McAfee MOVE A/V 2.5 Q: A lightning storm has caused rolling blackouts and you need to migrate your government customer workloads to stay compliant with FISMA boundary controls. What do you do? A: Migrate critical workloads to a trusted host in another data center in allowable geographic regions

9 9 Q: Management and legal for your company is concerned about the data breaches impacting your business. They have asked you for a solution that requires encrypting all traffic in and out of the data center with 40GB/sec of encrypted throughput. What do you do? A: Purchase a pair of Intel Xeon processor E5-based servers with Intel AES-NI Q: Your company won a subcontract to run an online gaming website with millions of users. User login information is stored in a secure database which of the following Intel storage features can help protect this sensitive data? A: Intel Xeon processors with Intel AES-NI provide power and flexibility to manage the encryption and data integrity Q: A large telescope is generating large amounts of data every second. This data could answer some of our most fundamental scientific questions. What would be the best platform to speed the analysis of this data? A: Intel Xeon processor E5-based server Q: You are part of a large company looking into analyzing and mining data from the recent online shopping extravaganza that is Cyber Monday. Which of the following platforms would best fit this type of workload? A: Intel Xeon processor E7 family Q: On the red carpet at a film festival, several actresses are asked who has the larger engagement ring. The ensuing cat fight creates a spike in online network traffic. Which of the following Intel storage features can help the data center service the increased demand? A: All of these. The choices are: Intel Xeon processors push infrequently accessed data to lower tiers, resulting in faster response times; Intel Xeon processors enable data de-duplication and erasure code, resulting in lower $ per TB of data stored; 10GbE networking and Intel Xeon processor technology breaks bottlenecks where data resides and improves bandwidth Q: Your company is evaluating new servers for an upcoming large node virtualization project. The consolidated applications have a large memory footprint and contain business critical data. Which system should you purchase? A: Intel Xeon processor E7 family-based server

10 10 Q: servers tend to be bound by disk and I/O rather than processing. Which of the following would be the best platform to host your virtualized servers? A: Server based on Intel Xeon Processor E5 Family Q: Hadoop is highly-threaded and designed for multi-node scaling. Disk and network I/O latency should be minimized. Which platform would be the best to deploy for mainstream solution? A: Server based on Intel Xeon Processor E5 Family Q: Memcache workloads rely on high memory performance, but do not require a high performing core. What would be the best suited platform for the array of uses for this workload? A: Server based on Intel Xeon Processor E3 Family Q: Dedicated web hosting for serving the variety of applications requires medium compute power and number of cores. These workloads can benefit by adding additional nodes to accommodate more capacity. Which platform would fit best? A: Server based on Intel Xeon Processor E3 Family Q: Static web hosting benefits from core count and nodes as these workloads tend to be highly parallel. Disk and network I/O performance could impact the overall workload performance. Which platform family would best fit this workload? A: Server based on Intel Xeon Processor E5 Family Q: Dynamic web hosting scales with the core performance, cores count, and nodes. Disk and network I/O performance could impact the overall workload performance. Which would be the best platform family for this workload? A: Server based on Intel Xeon Processor E5 Family Q: Financial trading is very compute-intensive, so the strength of individual cores, memory capacity, and disk and network I/O all impact overall performance. Which platform would be the best? A: Server based on Intel Xeon Processor E7 Family

11 11 Q: Which Intel SSD series drives are certified with VMware s vsan offering? A: DC S3700 and 910 Q: What is SSD Quality of Service? A: Consistency of read and write latency Q: Which model of Intel SSD is recommended for use in the Data Center? A: All of these. The choices are: Intel SSD DCS3700 Series; Intel SSD 910 Series; Intel SSD DC S3500 Series Q: The Intel SSD DC S3700 4K random read IOPs is how much faster than a typical 15K RPM hard drive? A: 200x Q: Why is SSD Read/Write IOP consistency and latency Quality of Service important in the data center? A: All of these. The choices are: Because it can affect application performance; SSDs perform background operations that can affect drive performance variability; A RAID set is only as fast as the slowest drive Q: The read latency of an Intel SSD DC S3700 is what percentage of a 15K RPM hard drive? A: <1% Q: The Intel SSD DC S3700 Series drive is available from which major OEM server manufacturers? A: Cisco, Dell, HP, Huawei, IBM, Inspur, Lenovo, Quanta, SGI, Supermicro Q: Why is power loss data protection important for SSDs used in the data center? A: All of these. The choices are: Unsafe power loss can cause more than just data in flight loss without it; Because you need to protect data in flight and background data moves; Because SSDs use write caches Q: How many full drive writes per day does the Intel SSD DC S3700 Series provide over 5 years? A: 10

12 12 Q: Which of the following Intel Xeon processor storage features can help save data in the event of a power failure? A: Asynchronous DRAM Refresh (ADR) Q: Which of the following Intel Xeon processor storage features can help keep your storage system running even if part of the system fails? A: Non-Transparent Bridge (NTB) Q: Which modular storage architecture is becoming more prevalent to manage the dramatic growth in unstructured data? A: Scale-out storage Q: Which intelligent storage capability allocates unused and new storage space to users as needed, in near real-time? A: Thin Provisioning Q: Which intelligent storage capability identifies and deletes redundant copies of data? A: Data Deduplication Q: Which intelligent storage capability distributes data across different storage media, such as SSDs, fibre channel drives, and SATA drives, based on frequency of access? A: Tiering

13 13 Q: 10 Gigabit Intel Ethernet Converged Network Adapters provide a choice of two technologies for accelerating I/O in virtualized environments. One is SR-IOV. What is the name of the other technology? A: Virtual Machine Device Queues (VMDq) Q: Which Intel Ethernet adapter supports iscsi, Fibre Channel over Ethernet (FCoE), and LAN traffic? A: 10 Gigabit Intel Ethernet Converged Network Adapter Q: What advantages does 10GBASE-T, supported by the Intel Ethernet Converged Network Adapter X540, have over other 10Gb standards? A: All of these. The choices are: Backward-compatibility w/ Gigabit Ethernet (1000BASE-T) switches; Uses existing twisted-pair copper cable; Uses existing twisted-pair copper cabling (Category 6, 6A, and 7); 100 meter reach for deployment flexibility Q: What is the best option for providing a flexible network that can accommodate heavy virtualization traffic, including live migration and Ethernet-based storage? A: 10 Gigabit Intel Ethernet Converged Network Adapter Q: Which Intel technology increases I/O bandwidth and reduces latency by allowing Intel Ethernet adapters to communicate directly with CPU cache? A: Intel Data Direct I/O Technology Q: What are the key features of the Intel Ethernet FM6000 series switch silicon? A: All of these. The choices are: <400nS L3 forwarding latency; flow tables for Software Defined ; Server load balancing and NAT Q: What is FlexPipe technology, a feature of the Intel Ethernet FM6000 series switch? A: A frame processing technology that can be configured using microcode Q: Intel Ethernet Converged Network Adapters accelerate which network overlay technology in VMware vsphere environments? A: VXLAN

14 14 Q: To facilitate more virtual machine migrations without major infrastructure redesign and to prepare better for possible disasters, what would be the best solution for network design in your data center? A: 10 Gigabit Intel Ethernet Converged Network Adapters that utilize iscsi and FCoE protocols Q: Your company purchased several companies and you have been tasked to integrate their IT staff and equipment into a centralized data center. To simplify the network connectivity and provide access to both iscsi and FCoE storage servers you should... A: Keep different storage, switch and cabling types but standardize on Intel Ethernet Converged Network Adapters (CNAs) Q: You have been asked to use FCoE to connect to your Fibre Channel storage without impacting the current 4Gb FC performance. To provide QoS levels for the network connectivity and provide access to storage servers you should A: Use Intel Ethernet CNAs, the native FCoE initiator in VMware vsphere and Network I/O Control for QoS Q: You have been asked to move the iscsi 1Gb network onto the 10Gb network without impacting iscsi performance. To provide QoS levels for the network connectivity and provide access to iscsi storage servers you should A: Use Intel Ethernet Adapters, the native iscsi initiator in VMware vsphere, and Network I/O Control for QoS Q: You recently discovered one of your missing VMware system administrators who became lost among your growing data center s cabling. To avoid having to post a missing system administrator flyer on your Facebook page again, you should A: Consolidate ports with 10 Gigabit Intel Ethernet Converged Network Adapters Q: You have been asked to replace the twelve 1Gb Ethernet ports on your ESXi 5.0 hosts with two 10Gb ports without impacting QoS control. To provide QoS levels for network connectivity you should A: Use 10 Gigabit Intel Ethernet Converged Network Adapters and a vsphere Distributed Switch with Network I/O Control Q: You have been asked to move some of your network appliances from physical hardware to run as virtual machines without significantly impacting performance. What is the best approach? A: Use 10 Gigabit Intel Ethernet Converged Network Adapters and SR-IOV with VMware DirectPath per VM

15 15 Q: What is Software Defined? A: A centralized, unified control of multi-vendor networks that drives reduced CapEx and OpEx Q: How many software engineers does Intel s Software and Services organization have? A: Approximately Q: Based on Moore s Law, the number of transistors incorporated in a chip will do what every 24 months? A: Double Q: What year did Intel launch the first microprocessor? A: 1971 Q: Intel recently launched its first system on a chip (SOC) for servers. What is the product name? A: Intel Atom Processor S1200 Family Q: What was the first processor Intel made? A: 4004 Q: Approximately how many transistors did the Intel 4004 have? A: 2300 Q: Who were the founders of Intel? A: Robert Noyce and Gordon Moore Q: What are the key Intel Cache Acceleration Software (CAS) differentiators? A: All of these. The choices are: Selective optimized caching; Multi-level integration with DRAM; Ability to pin data to the cache. Q: How many years has Intel been developing Ethernet products? A: More than , Intel Corporation. All rights reserved. Intel, the Intel logo, Intel Core, Core Inside, Xeon, Ultrabook, and vpro are trademarks of Intel Corporation in the U.S. and/or other countries. *Other names and brands may be claimed as the property of others.