Management, Monitoring, and Data Protection
Domain 5: Management, Monitoring, and Data Protection
This domain tests day-2 operations: which console manages which product, how to monitor health and capacity, and how to build a data-protection design that meets RPO/RTO and ransomware requirements.
Management planes
- HPE GreenLake/Data Services Cloud Console provides cloud-based management and consumption for supported Alletra and GreenLake storage services.
- HPE InfoSight provides predictive analytics, health checks, capacity forecasting, and cross-stack recommendations from telemetry.
- SSMC manages Primera/Alletra 9000; the Nimble UI manages Alletra 6000/5000; MSA SMU manages MSA; StoreOnce Management Console/Enterprise Manager manages backup appliances; Command View manages tape libraries.
- Use RBAC, LDAP/AD integration, audit logs, firmware baselines, and call-home consistently.
Monitoring and analytics
Track capacity and growth, performance (IOPS, throughput, latency, queue depth), replication lag, backup success, hardware health, and alert floods. InfoSight is valuable for prediction and cross-stack correlation, but local monitoring and syslog/SNMP integration are still needed for operations.
Data protection
- Snapshots and clones are fast recovery points, not independent backups. Keep copies on separate media or sites.
- Remote Copy synchronous gives RPO 0; asynchronous/periodic gives distance at nonzero RPO. Peer Persistence adds transparent failover with a Quorum Witness.
- StoreOnce provides deduplicating backup targets, Catalyst integration, replication, and Cloud Bank to cloud object storage. HPE RMC integrates snapshots with backup workflows; Zerto provides continuous data protection and DR orchestration.
- Apply 3-2-1, immutability or air gap, encryption, secure erase, and restore testing. Ransomware protection requires isolated, immutable copies and tested recovery.
Worked example
A VMware customer needs 15-minute RPO, 1-hour RTO, and ransomware recovery. Design snapshots every 15 minutes plus asynchronous Remote Copy to a secondary site for the 15-minute RPO, automated failover runbooks for the 1-hour RTO, and StoreOnce Catalyst backups with an immutable or air-gapped copy for ransomware recovery. Snapshots alone fail the ransomware test because an attacker with array credentials can delete them.
Traps that cost marks
- Calling snapshots a backup.
- Assuming synchronous replication protects against ransomware or logical corruption.
- Confusing deduplication with encryption.
- Using InfoSight as the only monitoring tool.
- Designing retention without testing restore.