software prt 2

PEC-5 and SEC-5 storage polices are used to

designate the protected VMs on each data center

witness servers forms

a 10 GB 3 way communication loop with primary, and alternative SECRET data center racks

DC20 G 9/G 10(sw3/4)

acts as a witness server

stretched cluster in CANES HW1.2/SW3

installed with 4 DL 380 G 10 servers (both UL AND RL) along with 2 data center switches

SECRET servers installed "stretched cluster"

vSan installed across and split between 2 data center equipment racks

Direct Console User Interface (DCUI) enables

system admin to interact with physical host and enables local and remote SSH access to ESXi

1 of 2 shell lockdown mode

normal: DCUI service remains active

vSphere web client is a platform independent implementation of vSphere client

-connects to ESXi server n vCenter server

- allows system admin to manage data center and ESXi hosts through a browser

4 memory management mechanisms

- page sharing : ESXi can transparently share memory pages between VMs eliminating redundant copies of memory pages

-ballooning

-memory compression

-regular host level swapping

canes vmware content libraries

container objects for vm and vApp templates and other types of files like ISO image, text files

vMotion

VMware tech that enables a virtual computer to be moved from one physical host server to another while it is running and with no interruption in service

affinity rules

setting that established a relationship between 2 or more VMs and hosts

Distributed Resource Scheduler (DRS)

monitors the balance of network VM operational demand across physical system hots and data center

vSphere appliance management interface (VAMI)

enables local admin for the VCSA and should not supersede procedures to monitor backup and configure the CANES data center as part of routine operations

performance statics

-configure performance data collection subsystem for vSphere collects performance data on a variety of inventory items and devices

-cluster services provides performance statistics for configured clusters using VMware DRS and or VMware HA

skyline health

used to monitor the status of cluster components, diagnose issues and troubleshoot problems

group 1 vm startup order

DCO1 1st and VCSA 2nd

group 2 vm startup order

YUM 1st and DCO2 2nd; DCO1 has to be started up to start group 2

group 3 vm startup order

doesn't need to be in order can start congruently

VSAN

eliminates the need for external shared storage and simplifies storage configurations and VM provisioning activities

VSAN uses

disk groups to manage the relationship between capacity devices and their cache tier

disk group

unit of physical storage capacity on a host and a group of physical devices that provides performance and capacity to the VSAN cluster

Deduplication

removes redundant data blocks with in a disk group

Compression

removes redundant data with in each data block

enabled on a VSAN

all flash clusters redundant within each disk group is reduced

standard cluster consists of

3 host, usuallly all hosts are in the same location and are connected on the same layer 2 network

vSAN Stretched Cluster

distributes hosts evenly across 2 sites or in the case of CANES, 2 data centers

list of server roles

-active directory domain and certificate services

-dhcp

-dns

-file and storage

-WSUS

administrator user accounts

modify system settings, install software, modify user accounts, and have full access to entire file system

windows networking CLI tools

ping

nslookup

netsat

device manager

miscrosoft management console (MMC) snap-in for managing devices and their drivers

device manager provides

update

rollback

install in device drivers

windows event viewer

an MMC snap-in that provides a centralized location to view and manage windows event logs

Yellow Dog Updater Modified (YUM)

primary package management tool for installing, updating, removing and managing software packages in red hat enterprise linux (RHEL)

Agile Core Services (ACS)

software that provides a common set of hardened enterprise services for programs of record (ROR)

Security Information and Event Management (SIEM)

hosts the sentimental server application and is the CANES security incident and event manager

1 of 3 most common SQL services

SQL server agent service

4 systems databases

master databases: info on SQL

module databases: templates

MSDB database: back up and restore

tempDB database: hold temporary info

IAEXT

provide the edge transport role of microsoft exchange server

Sw3

the at-sea max message size for incoming and outgoing email for a sub is 450kb

EMS

enables systems admin to use powershell command syntax to anaylze review and create

-exchange mailboxes

-groups

-mail services

4

OPSECON groups