2V0-622D · Question #59
An administrator has upgraded to vSphere 6.5 and also wants to use Kerberos authentication for NFS. Which can be done to the existing NFSv3 volumes to enable this feature?
The correct answer is B. Unmount the NFSv3 datastore, and then mount as NFSv4.1 datastore.. Kerberos authentication for NFS is supported only on NFSv4.1, so existing NFSv3 datastores must be unmounted and remounted as NFSv4.1 datastores to use this feature.
Question
An administrator has upgraded to vSphere 6.5 and also wants to use Kerberos authentication for NFS. Which can be done to the existing NFSv3 volumes to enable this feature?
Options
- APerform a storage rescan on VMFS volumes.
- BUnmount the NFSv3 datastore, and then mount as NFSv4.1 datastore.
- CNothing. All NFSv3 mounted datastores are upgraded automatically during vSphere upgrades.
- DPerform a scan of new storage devices.
How the community answered
(68 responses)- A13% (9)
- B78% (53)
- C3% (2)
- D6% (4)
Why each option
Kerberos authentication for NFS is supported only on NFSv4.1, so existing NFSv3 datastores must be unmounted and remounted as NFSv4.1 datastores to use this feature.
A storage rescan on VMFS volumes applies to block storage and has no effect on NFS datastore protocol versions or authentication mechanisms.
Kerberos security is a feature exclusive to NFSv4.1 in vSphere 6.5 and cannot be enabled on NFSv3 mounts; there is no in-place upgrade path, so the datastore must be unmounted as NFSv3 and then mounted again using the NFSv4.1 protocol with Kerberos authentication configured.
NFSv3 datastores are not automatically upgraded to NFSv4.1 during a vSphere upgrade; protocol version and authentication settings must be explicitly reconfigured by the administrator.
Scanning for new storage devices discovers block storage LUNs and does not change the protocol or authentication settings of existing NFS mounts.
Concept tested: NFSv4.1 Kerberos authentication configuration in vSphere
Source: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.storage.doc/GUID-8A929FE4-1207-4CC5-A086-7016D73C328F.html
Topics
Community Discussion
No community discussion yet for this question.