FlashArray-Storage-Professional Pure Certified FlashArray Storage Professional Questions and Answers

Understanding CRC Errors: CRC (Cyclic Redundancy Check) errors occur when the data received at a port does not match the checksum sent by the initiator or switch. In a Pure Storage environment, these are tracked per port and can be viewed via the CLI (purehw list) or the GUI.

Configuration vs. Hardware: While a failing SFP or a damaged fiber cable can cause CRC errors, they are a primary indicator of configuration mismatches in the SAN fabric. Common culprits include:

Port Speed Mismatches: Manually setting a port to 16Gbps when the switch is set to " Auto " or 8Gbps.

Duplex Mismatches: Though rare in modern Fibre Channel, it is a classic Ethernet/iSCSI configuration error.

MTU Mismatches: In iSCSI or NVMe-oF environments, if the FlashArray is configured for Jumbo Frames (MTU 9000) but the switch or host is at MTU 1500, packet fragmentation or CRC-like errors/drops will occur.

Why Option A is incorrect: A blinking status LED on a controller is often part of normal operation (indicating heartbeat or activity). A solid amber LED would be an indicator of a hardware failure, not necessarily a misconfiguration.

Why Option C is incorrect: While latency spikes can be caused by misconfiguration (like incorrect MPIO settings), they are more commonly symptoms of workload changes , " noisy neighbors, " or reaching the physical performance limits of the array. CRC errors are a much more specific diagnostic " smoking gun " for port and fabric configuration issues.

Best Practice: When CRC errors are detected, Pure Storage recommends first checking the physical layer (reseating SFPs/cables) and then verifying that the port speed and protocol settings on the FlashArray match the upstream switch configuration exactly.

SNMP Capabilities on FlashArray: Pure Storage FlashArrays support SNMP (Simple Network Management Protocol) versions v2c and v3. The primary use case for SNMP on the FlashArray is for integration with third-party monitoring tools (like SolarWinds, Nagios, or Zabbix) to provide a real-time health and performance heartbeat.

Performance Metrics (MIBs): The Pure Storage Management Information Base (MIB) specifically exposes high-level array performance metrics. These include the " Big Three " of storage performance: Latency (response time in microseconds), Bandwidth (throughput in bytes per second), and IOPS (I/O operations per second).

Scope of Monitoring: While the FlashArray GUI and CLI provide deep granularity (per host, per volume, or per pod), standard SNMP queries typically focus on array-wide performance and health status. Detailed " Host and volume performance " (Option B) is generally more effectively monitored via the Pure Storage REST API or the Pure1 VM Analytics, as SNMP is less efficient for pulling large tables of per-object data.

Capacity vs. Performance: While SNMP can report on capacity (Option C) through specific OIDs, the question specifically asks about performance statistics . In the context of Pure Storage monitoring documentation, the core performance metrics provided via SNMP traps and polling are latency, bandwidth, and IOPS.

API Evolution: Pure Storage introduced REST API 2.x to provide a more scalable, standardized, and performant way to automate FlashArray management. It uses a different authentication method (OAuth2 with API Clients) compared to the API Token-based method in 1.x.

Feature Freeze on 1.x: As of Purity 6.x and beyond, Pure Storage has designated REST API 1.x as " Legacy. " While 1.x is still supported for backward compatibility to ensure older scripts don ' t break, all new Purity features (such as specialized ActiveDR commands, advanced File Services, or new hardware capabilities) are only developed and exposed via REST API 2.x .

Side-by-Side Support: Contrary to option C, both versions are supported side-by-side on the same array. An administrator can run a script using 1.x for volume creation and another script using 2.x for performance monitoring simultaneously without contacting support.

Feature Parity: REST API 2.x has long since reached and exceeded the capabilities of 1.x. It offers improved filtering, pagination, and a more consistent object model (e.g., /volumes instead of multiple nested endpoints).

Best Practice: Pure Storage strongly recommends that all new automation projects use REST API 2.x to ensure access to the full suite of Purity features and to future-proof infrastructure-as-code (IaC) workflows.

When configuring NVMe/TCP (or iSCSI) for optimal performance on a Pure Storage FlashArray, configuring Jumbo Frames (an MTU of 9000) end-to-end is a standard best practice.

The command ping -M do -s 8972 < ip_addr > is specifically used to verify Jumbo Frame configuration across the network.

The -M do flag sets the " Do Not Fragment " (DF) bit, meaning the network is not allowed to break the packet into smaller pieces.

The -s 8972 flag sets the ICMP data payload to 8972 bytes. When you add the standard 8-byte ICMP header and the 20-byte IP header, the total packet size equals exactly 9000 bytes.

If this ping command fails, it indicates that somewhere along the network path between the host (initiator) and the FlashArray (target), a switch port, router, or network interface is not configured to support an MTU of 9000. The packet is being dropped because it is too large and cannot be fragmented. The administrator must verify the MTU settings on every network hop (switches, routers, and host NICs) to resolve the issue.

Here is why the other options are incorrect:

Engage support to enable NVME/ TCP services (A): The failure of a Jumbo Frame ping test is a Layer 2/Layer 3 network configuration issue, not an indicator that the NVMe/TCP storage protocol service is disabled on the array.

Run the command from the target (C): While pinging from the FlashArray back to the host is a valid secondary troubleshooting step, it will likely also fail if the network path doesn ' t support Jumbo Frames. The actual resolution is to fix the MTU on the network hops.

In the Pure Storage FlashArray GUI, granular performance metrics (Latency, IOPS, Bandwidth) are located under the Analysis > Performance tabs. When you navigate to the Volumes sub-tab and select a specific volume, Purity displays a unified line graph tracking the performance of that volume over time.

By default, the Latency graph simultaneously plots Read , Write , and Mirrored Write (for volumes participating in an ActiveCluster or synchronous replication pod) latencies. Because these lines can overlap or compress the Y-axis (especially if one metric spikes), isolating a specific metric requires interacting with the graph ' s legend.

To view the exact, un-obscured latency for standard write requests to that volume, the administrator should click on " Read " and " Mirrored Write " in the chart ' s legend. This deselects those metrics, effectively hiding their lines from the graph and automatically rescaling the view to exclusively display the host write latency.

Here is why the other options are incorrect:

Health > Network (A): The Health tab is used to check the hardware status of the physical controller ports, including link state and errors. While you might see port-level throughput or queue depth here, it does not provide volume-specific application latency.

Storage > Volumes > Details (B): The Storage tab is primarily used for provisioning and configuration management. Clicking on a volume here will show its size, data reduction ratio, snapshot policies, and connected hosts, but it does not provide detailed interactive performance graphs.

Understanding RFC2307: RFC2307 is an extension to the LDAP (Lightweight Directory Access Protocol) schema that allows for the storage of Unix-style information (POSIX attributes) within a directory service, most commonly Microsoft Active Directory . These attributes include things like uidNumber (User ID), gidNumber (Group ID), and login shells.

The Cross-Protocol Challenge: In a Unified Storage environment where the same data needs to be accessed by both Windows clients (using the SMB protocol) and Linux/Unix clients (using the NFS protocol), the storage array must be able to map a Windows Security Identifier (SID) to a Unix UID/GID.

How Pure Uses It: When an administrator enables RFC2307 support in Purity//FA File Services, the FlashArray can query Active Directory to retrieve these POSIX attributes. This creates a 1:1 mapping between the Windows user and the Unix identity.

The Benefit: This mapping ensures that a user can create a file via SMB and another user (or the same user on a different system) can access or modify that same file via NFS while maintaining consistent permission enforcement and ownership records. Without this (or a similar mapping service like NIS or local files), cross-protocol access often results in permission " Mapping " errors or files being owned by " nobody. "

User Mapping in FA File: On a Pure Storage FlashArray, User Mapping is the mechanism that translates identities between different protocols (like mapping a Windows SID to a Unix UID/GID) or between an external directory service (like Active Directory or LDAP) and the local file system permissions.

The Impact of Disabling Mapping: When User Mapping is disabled on an active NFS export, the FlashArray can no longer resolve the identity of the user attempting to access existing files. Because NFS (specifically NFSv3 and NFSv4.1 supported by Pure) relies on these identifiers to verify file ownership and ACLs, existing files—which are tagged with specific owner IDs—become effectively " orphaned " from the perspective of the incoming request.

Access vs. Creation: * Existing Files: Accessibility is lost because the system cannot verify that the user has the rights to read or modify the file without the mapping logic.

New Files: Interestingly, in many " No Mapping " configurations, a user may still be able to create new files (often defaulting to a ' nobody ' or ' anonymous ' UID depending on the export rules), but they will immediately lose the ability to manage or access them once created because the mapping link is broken.

Real-time Application: Unlike some legacy storage systems that require a service restart, Purity applies export policy changes dynamically . As soon as the " User Mapping " toggle is disabled, the logic is removed from the data path, impacting active sessions immediately.

To provide true real-time data and alerts directly to a Network Operations Center (NOC) dashboard, the information must be sourced directly from the FlashArray . The FlashArray ' s Purity operating environment natively supports real-time data streaming and alerting integrations via protocols like Syslog, SNMP traps, and the local REST API. Polling the array directly or configuring it to push alerts guarantees that the NOC receives instantaneous, up-to-the-second notifications regarding array health, hardware faults, and performance metrics.

Here is why the other options are incorrect:

Pure1 (B): While Pure1 is Pure Storage ' s powerful, cloud-based monitoring and predictive analytics platform, it relies on phone-home telemetry data. This telemetry is batched and transmitted from the array to the Pure1 cloud on a short polling interval (typically a few minutes). Because of this transmission and processing interval, Pure1 provides near-real-time (lagging by a few minutes) and historical data. It is excellent for global fleet management and predictive support, but not for instantaneous, zero-latency NOC alerting.

Pure Performance Monitoring (A): This is a distractor. There is no standalone product or specific protocol in the Pure Storage ecosystem officially named " Pure Performance Monitoring. " Performance monitoring is simply a feature accessed via the FlashArray GUI/CLI or the Pure1 platform.

Definition of a Blackout Window: In Purity//FA, a Blackout Window is a scheduled period during which asynchronous replication is suspended. This is typically used by administrators to preserve WAN bandwidth during peak business hours or to prevent replication traffic from competing with high-priority local workloads (like a massive database batch job).

The " In-Progress " Rule: One of the most important characteristics of a blackout window is that it is non-disruptive to active transfers . If a replication job started at 7:55 AM and the blackout window begins at 8:00 AM, Purity will allow that specific transfer to continue until it finishes.

The Prevention Mechanism: Once the clock hits the start of the blackout window, the replication scheduler is effectively " paused. " No new snapshots will be queued for transfer, and no new replication sessions will be initiated until the window expires.

Why Option A is incorrect: Purity does not kill active transfers. Abruptly stopping a transfer would waste the bandwidth already consumed and require the entire delta-set to be re-calculated or re-sent later.

Why Option B is incorrect: The phrasing is logically inconsistent; you cannot prevent something that " started before " the window from being " new " during the window.

Best Practice: When configuring blackout windows, ensure that the " clear " time (the time between windows) is long enough to allow the array to catch up on the snapshots that were queued during the blackout, otherwise, you risk triggering Alert 51 (Replication Delayed) .

The Concept of Root Squash: In the world of NFS, " Root Squashing " is a fundamental security feature. By default, most modern storage systems (including FlashArray File Services) do not trust the " root " user of a remote client. This prevents a user with administrative access on a random laptop or server from gaining full administrative control over the files on the central storage.

Mounting vs. Accessing:

Mounting: This is the process of attaching the remote export to the local file system. If the Export Policy allows the client IP to connect, the mount will succeed.

Accessing: Once mounted, the array evaluates the identity of the user. If Root Squash is enabled, the array " squashes " the root user (UID 0) and maps it to a non-privileged user (usually nobody or anonymous ). Consequently, the client ' s root user loses their administrative permissions when trying to read/write files.

The Export Policy Setting: The behavior described (able to mount but permission denied for files as root) is almost always caused by the User ID Mapping or Access rules within the Export Policy .

To resolve this, an administrator must edit the specific rule in the Export Policy and enable " No Root Squash " (or change the mapping to allow root access). This tells the FlashArray to honor the client ' s root identity.

Why Options A and B are incorrect:

Managed Directory: This is where you set the directory structure and quotas, but it doesn ' t control the protocol-level identity mapping.

File System: While a file system has underlying permissions, if the mount is successful but specifically blocks the root user, the " gatekeeper " is the Export Policy rule.

ActiveDR Bandwidth Sizing: ActiveDR is a continuous, asynchronous replication technology designed to provide near-zero RPO. Because it streams data continuously rather than in discrete snapshot intervals, the bandwidth between the source and target arrays must be able to handle the application ' s write workload.

Handling Write Bursts: Application workloads are rarely flat; they have peaks and valleys. If you size the bandwidth exactly to the average change rate, any burst in write activity will cause the replication lag to increase, thereby increasing your RPO.

The 30% Rule: Pure Storage best practices and sizing guides recommend providing a 30% buffer (headroom) above the measured average write rate. This extra capacity ensures that during a high-IO period, the replication engine has enough " pipe " to catch up quickly and return to a near-sync state.

Calculation Example: If a workload generates an average of 100 MB/s of new unique data, the administrator should ensure at least 130 MB/s of usable, dedicated bandwidth is available between the sites.

Consequences of Under-sizing: If only 10% (Option A) is used, the array may struggle to recover from even minor bursts, leading to a consistently climbing RPO. 50% (Option B) is often considered safe but can be cost-prohibitive or overkill for standard networking budgets unless the workload is exceptionally volatile.

Understanding Space Reporting: To understand this behavior, you have to look at how Purity calculates capacity. Pure Storage uses a data reduction engine where data is deduplicated and compressed.

Volume Space vs. Shared Space:

Volume Space: This represents the unique data belonging to a specific volume that is not shared with any other volume via deduplication or snapshots.

Shared Space: This represents the data that is common across multiple volumes or snapshots. If you have two volumes that are clones of each other, most of that data is " Shared. "

The " Shift " Mechanism: When a volume is deleted (and potentially eradicated), the data it once shared with other volumes no longer needs to be " shared. "

Imagine Volume A and Volume B share 100GB of data. That 100GB is accounted for in Shared Space .

If you delete Volume B, that 100GB of data is now only referenced by Volume A.

Consequently, that 100GB is moved from the Shared Space bucket into Volume A ' s Volume Space bucket.

Net Result: The total physical space used on the array remains the same initially, but the accounting shifts. You see a decrease in Shared Space and an identical increase in the Volume Space of the remaining volumes that held those deduplication references.

Definition of Host Personality: In Purity//FA, a Host Personality is a setting applied to a host object that modifies how the FlashArray communicates with that specific initiator. It ensures the array sends the correct SCSI responses that the target Operating System (OS) expects. Common personalities include ESXi, AIX, HP-UX, and Hitachi-VSP.

The Importance of Timing: The best practice is to set the personality during the host creation phase , before any volumes are attached or I/O has commenced. This ensures that from the very first " Inquiry " command sent by the host, the FlashArray responds with the appropriate settings (such as specific VAAI primitives for ESXi or specific ALUA behaviors for other Unix variants).

Risks of Changing Later: While Purity allows you to change a host personality later, doing so while volumes are connected and I/O is active can be disruptive. For many operating systems, a change in personality requires the host to be rebooted or the storage paths to be " rescanned " to recognize the change in device capabilities.

Default Behavior: If no personality is selected, the FlashArray uses a " Generic " personality suitable for standard Windows and Linux distributions. However, for specialized hypervisors like ESXi , failing to set the personality correctly from the start can lead to performance issues or lack of support for hardware acceleration features.

Why Option C is incorrect: Changing the personality after volumes are connected is reactive rather than proactive. It increases the risk of the host misinterpreting the storage device ' s capabilities, potentially leading to mount failures or path instability.

In the Pure Storage Purity operating environment, a volume can only be a member of one Volume Group at a time .

When an administrator navigates to a Volume Group in the GUI and clicks to add members, the system filters the inventory and only displays volumes that are currently " unassigned " (not belonging to any Volume Group). If a volume is already residing inside another Volume Group, Purity intentionally hides it from this available list to prevent conflicting overlapping memberships. To resolve this, the administrator must first navigate to the volume ' s current Volume Group, remove the volume from that group, and then it will become available to add to the new one.

Here is why the other options are incorrect:

It is already part of a Protection Group (B): Protection Groups (pgroups) manage snapshot and replication schedules. A volume can absolutely be a standalone member of a Protection Group while simultaneously being added to a Volume Group. Being in a pgroup does not hide it from the vgroup selection list.

It is protected by SafeMode (C): SafeMode is a ransomware protection feature that prevents the manual eradication of destroyed volumes and snapshots before their retention timer expires. It does not dictate or restrict logical organizational containers like Volume Groups.

Understanding the Audit Log: In Purity, accountability and security are maintained through the Audit Log . This log captures every administrative action taken on the array, whether through the GUI, CLI, or REST API. It records who performed the action, what the action was (e.g., volume creation, host deletion), and when it occurred.

The CLI Command: The command pureaudit list is the specific CLI tool used to display these logs. By default, it lists events in chronological order, making it the perfect tool for an administrator to review " shift change " activities.

Command Options: * pureaudit list can be filtered with flags like --user to see actions by a specific admin, or --start-time and --end-time to narrow down the " previous shift " window.

Why Option C is incorrect: puremessage (accessed via puremessage list) is used to view Alerts and Notifications generated by the system (e.g., a failed drive or a high-temperature warning). While it tells you what the array did, it does not track what users did.

Why Option A is incorrect: This is not a valid Purity command syntax. Purity does not use double-dashes to " pipe " or combine independent commands like pureaudit and puremessage in that manner.

According to official Pure Storage documentation regarding Asynchronous Replication management, while replication throughput (bandwidth) can be viewed globally on the Analysis tab, the actual replication status for in-progress snapshot transfers is tracked and monitored on the replication target .

To monitor an in-progress asynchronous transfer from the GUI, a storage administrator must log into the target FlashArray, navigate to Storage - > Protection Groups , and look at the Transfers section within the Protection Group Snapshots panel. This view explicitly details the time the replicated snapshot was created on the source, the time the transfer started, and the current progress of the snapshot being received. If a transfer is currently in-progress, the " Completed " column will remain blank until the snapshot is fully safely written to the target array.

Here is why the other options are incorrect:

From the replication source (C): While the source orchestrates the creation of the snapshot and initiates the data push, the granular transfer completion status and historical transfer logs of the incoming snapshots are tracked on the target ' s Protection Group interface.

From the either the replication source or target (B): Because the specific " Transfers " tracking panel for asynchronous protection group snapshots is located on the receiving end (target), monitoring the granular completion status cannot be done symmetrically from either side in the UI.

Replication Fundamentals: On a Pure Storage FlashArray, replication is a snapshot-based process . To replicate a Protection Group (pgroup) to a target array, the system must first create a point-in-time snapshot of the volumes within that group on the source array.

The " Immutable " Rule: Even if the Local Snapshot Schedule is disabled, the act of replicating requires the existence of a local snapshot to serve as the " base " or " source " for the data transfer. Purity does not stream data directly from the active volume to the wire; it creates a snapshot and then replicates the unique blocks contained in that snapshot.

Accounting for Local Copies: When a Protection Group is configured for replication, every snapshot generated by the Replication Schedule is stored locally on the source array. These snapshots will remain on the source array until they are aged out according to the Local Retention policy (even if the local schedule itself is off, the retention policy still applies to those replicated snapshots).

Visibility: If you navigate to the Protection Group in the Purity GUI, you will see these snapshots listed under the " Snapshots " tab. They are functionally identical to local snapshots, meaning they can be used for local clones or restores without needing to pull data back from the target array.

Why Option A and C are incorrect: * Option A: If 0 snapshots were stored, there would be nothing to replicate.

Option C: While Purity uses the most recent snapshot as a reference for delta-tracking, it keeps the entire history of snapshots defined by your retention policy, not just a single one.

In the Pure Storage ecosystem, " Meta fingerprinting " refers to the core technology behind Pure1 Meta , which is Pure ' s cloud-based artificial intelligence and machine learning engine. Pure1 collects thousands of data points of telemetry (metadata) from all connected FlashArrays globally every day.

By analyzing this vast amount of telemetry data, Pure1 Meta creates workload signatures or " fingerprints. " It then continuously compares your array ' s telemetry footprint against the global pool of arrays. The major benefit of this is that it enables predictive support . If Pure1 Meta detects that your array ' s fingerprint matches a known issue experienced by another array elsewhere in the world, Pure Storage can proactively alert you, open a support ticket, or recommend a Purity upgrade before you ever experience an outage or performance impact. It also uses these fingerprints for highly accurate capacity and performance forecasting.

Here is why the other options are incorrect:

Provides security for Remote Assist (RA) (A): Remote Assist allows Pure Support to log into your array for troubleshooting, but its security is based on a customer-initiated, secure outbound TLS connection (tunneling), not meta fingerprinting.

Ensures biometric security (B): This is a distractor. " Fingerprinting " in the context of Pure Storage refers to data and workload profiling, not human biometric authentication like physical fingerprint scanners.

ActiveCluster Mediator Logic: In an ActiveCluster setup, the Mediator is a lightweight component (an " arbiter " ) that resides at a third site (failure domain). Its job is to break the tie in a " split-brain " scenario (when arrays lose connectivity with each other) to determine which array stays online.

Default Behavior: By default, every FlashArray is configured to use the Pure1 Cloud Mediator . This is a managed service provided by Pure Storage that requires no local infrastructure other than internet access from the array controllers.

On-Premises Mediator Deployment: Organizations that cannot use the Cloud Mediator (due to " dark site " security requirements or lack of reliable internet) can deploy the Pure Storage On-Premises Mediator as a small OVF/VM template.

Configuration at the Pod Level: Simply deploying the On-Premises Mediator VM and connecting the arrays to it at the array level is not enough for existing or new pods to switch automatically. In Purity, the mediator preference is a per-pod attribute .

When a pod is created or stretched, it inherits the default (Cloud).

To use the local mediator, the administrator must explicitly configure the pod to point to the On-Premises Mediator’s IP or DNS name. This is done via the CLI using purepod setattr --mediator < address > < pod-name > or through the Pod settings in the GUI.

Why Option C is incorrect: While an A record is necessary for DNS resolution, the prompt implies the mediator is already " deployed " and available. The most common reason it isn ' t being used is simply that the pod hasn ' t been told to look there instead of the default Cloud option.