FlashArray-Implementation-Specialist Pure Certified FlashArray Implementation Specialist (FAIS) Exam Questions and Answers

Complex upgrades that involve both removing old capacity (evacuation) and replacing controllers (hardware NDU) require a "checkpoint" with Pure Storage Support to ensure data safety.

The correct procedure dictates contacting support after removing the fully evacuated drives but before proceeding with the hardware NDU .

Why? Once the old drives are physically removed, the array's configuration state has changed. Support needs to verify that the evacuation was 100% successful, that no stale objects or pointers to the removed drives remain in the database, and that the system is fully healthy and redundant.

Proceeding directly into a controller reboot (NDU) without this verification could lead to issues if the array still "thinks" it needs the removed drives, potentially causing a boot failure or data unavailability during the controller failover.

FlashArray File Services (FA File) brings unified block and file storage capabilities directly into the Purity operating system, allowing customers to provision high-performance SMB and NFS shares alongside their traditional Fibre Channel and iSCSI volumes.

Once the initial FA File networking (Virtual Interfaces) and DNS/Active Directory integrations are configured, the Implementation Engineer must actually create the file structures for the customer. In the Pure Storage Purity GUI, the logical hierarchy for file storage requires the administrator to first create a "File System," which acts as the top-level container, and then create "Directories" within it that will be exported to clients.

To manage, create, or modify these directories, the Implementation Engineer must navigate through the left-hand navigation pane to Storage > File Systems . Clicking into a specific File System reveals the "Directories" tab. From this central pane, the engineer can create new managed directories, apply specific export policies (defining which IPs or users have read/write access), and configure directory-level snapshot schedules. Option B (Settings > Access > Directory Services) is a common distractor, but that menu path is used exclusively for configuring the array's connection to Active Directory or LDAP for administrative login authentication, not for managing storage directories.

When deploying a high-end Pure Storage FlashArray//XL (which utilizes a massive 5U chassis), the PCIe slot architecture differs significantly from the standard 3U //X series. The //XL is designed for extreme backend NVMe-oF (RoCE) bandwidth to support multiple DirectFlash Shelves (DFS) without creating bottlenecks.

According to the official FlashArray//XL cabling matrix and hardware implementation guides, specific PCIe slots are strictly reserved and optimized for backend expansion. To connect external DirectFlash Shelves, the Implementation Engineer must populate the 100GbE RoCE backend expansion cards into PCIe Slot 0 and PCIe Slot 6 .

When cabling the first two external shelves (typically designated logically as SH8 and SH9 depending on the loop configuration), the preferred mapping routes the NVMe-oF connections from the shelf modules to Slot 0 for one shelf and Slot 6 for the other. Utilizing other slots, such as Slot 1, 7, or 8, is incorrect because those are primarily reserved for frontend host connectivity (like 32G/64G Fibre Channel or frontend NVMe/TCP host bus adapters). Incorrectly slotting the backend cards will result in hardware_check.py validation failures, sub-optimal NUMA node alignment, and potential backend network instability.

For a Non-Disruptive Upgrade (NDU) from a FlashArray//X to a FlashArray//XL , the upgrade kit typically contains 4 QSFP cables, 2 Mellanox cards, and 20 DFMD blanks (or modules) .

2 Mellanox Cards: The FlashArray//X (source) likely requires the installation of 100GbE RoCE adapters (Mellanox) into its controllers to establish the high-speed replication link with the new FlashArray//XL (which has 100GbE native). One card is installed per //X controller.

4 QSFP Cables: To ensure a redundant, high-bandwidth connection between the two arrays during the data migration phase, 2 cables are used per controller pair (CT0-to-CT0 and CT1-to-CT1), totaling 4 cables.

20 DFMDs (Blanks/Fillers): The FlashArray//X typically holds 20 DirectFlash Modules. The FlashArray//XL chassis has 40 slots. When the 20 data drives are physically moved from the //X to the //XL, the //XL will still have 20 empty slots. These must be filled with DirectFlash blanking modules (DFMD blanks) to maintain proper chassis airflow and thermal pressure. Thus, the kit includes these 20 fillers.

To correctly configure the proxy settings for Phonehome and Remote Assist on a FlashArray, the Implementation Engineer requires the Protocol prefix (HTTP/HTTPS) and the Port number in addition to the IP address.

The Purity operating system requires a complete URL structure to establish a connection through a proxy server. A raw IP address like "10.24.18.120" is insufficient because the array does not know which communication protocol to use or which listening port the proxy server is monitoring.

Correct Format: The required input format is typically scheme://host:port. For example, https://10.24.18.120:8080 or http://10.24.18.120:3128.

Why it's critical: Without the port, the connection will likely time out or be rejected. Without the protocol (http vs. https), the handshake may fail. While credentials (username/password) might be required if the proxy enforces authentication, they are optional depending on the customer's network policy. However, the port and protocol are always technically mandatory to form a valid network socket connection.

During complex maintenance procedures like a controller upgrade or replacement (puresetup replace), it is often necessary to verify the physical hardware identity of the chassis to ensure compatibility with the new controllers or software image.

The command hwconfig --model is the specific CLI tool used at the engineering/boot level to return the chassis model string (e.g., FA-X50R3 or FA-XL170). This confirms the hardware platform identity.

hwconfig --all would dump a massive amount of verbose configuration data, making it difficult to quickly identify just the model.

pureversion -a displays the version of the Purity operating system software, not the physical hardware model of the chassis.

Therefore, hwconfig --model is the correct and most efficient command for the Implementation Engineer to validate the hardware platform identity during the upgrade workflow.

=========

To perform parallel evacuation of multiple SAS shelves , the FlashArray must be running Purity//FA 6.0 or higher.

Prior to Purity version 6.x, the shelf evacuation process (used during capacity consolidation or shelf retirement) was a serialized operation. An Implementation Engineer had to issue the evacuation command for one shelf, wait for all data to move to other storage within the array, and physically remove that shelf before starting the process for the next one. This could be time-consuming for large clusters of legacy SAS shelves.

With the release of Purity//FA 6.0, Pure Storage introduced significant enhancements to data mobility and background operational efficiency, including the ability to issue evacuation commands for multiple external shelves simultaneously. The system's intelligent scheduler manages the I/O bandwidth to ensure that the parallel data movement does not impact frontend host performance. While having sufficient free space (Option C) is logically necessary to hold the evacuated data, the specific functional capability to trigger concurrent evacuations is a software feature tied strictly to the Purity 6.x code base. Option B is irrelevant to the software capability of the array.

On a FlashArray//XR2 or //XR3 equipped with a 4-port Fibre Channel card in Slot 1 , the interfaces are named FC4, FC5, FC6, and FC7 .

The port enumeration logic on FlashArray controllers follows a sequential order based on the PCIe slot number:

Slot 0: This is the first PCIe slot. If a 4-port card is installed here (which is typical for the primary host I/O card), it claims the first block of names: FC0, FC1, FC2, and FC3 .

Slot 1: This is the second PCIe slot. A 4-port card installed here continues the sequence immediately after Slot 0. Therefore, it claims FC4, FC5, FC6, and FC7 .

Slot 2: Any card here would start at FC8 (if the previous slots are 4-port).

Option A describes the mapping for Slot 0. Option C describes a non-standard mapping that skips integers or assumes a different starting point. Correctly identifying these interface names is crucial for zoning (SAN configuration) and creating the correct host port definitions during the implementation.

The upgrade from a FlashArray//X10 (or X20) to a FlashArray//X50 requires a mandatory power supply unit (PSU) upgrade .

While the FlashArray//X series utilizes a shared chassis design (3U) for models X10 through X90, the power requirements differ significantly between the entry-level and performance-tier controllers.

X10/X20: These models typically ship with 1000W or 1200W power supplies, which are sufficient for their lower-power CPUs and component loads.

X50/X70/X90: These "Performance" class arrays utilize higher-wattage Intel Xeon processors and often support denser NVMe configurations, necessitating 1600W power supplies to ensure stability and N+1 redundancy.

When a customer performs a Data-in-Place upgrade (swapping controllers) from an X10 to an X50, the existing chassis is retained, but the lower-capacity PSUs must be physically swapped for the high-capacity 1600W units to support the new X50 controllers. Conversely, upgrades like X50 > X70 (Option B) or R2 > R3 (Option C) typically occur within the same power tier, utilizing the existing 1600W PSUs.

During the site planning and physical rack installation of a Pure Storage FlashArray//XR4, adhering to the strictly defined service clearance requirements is a mandatory step. These clearances guarantee that Implementation Engineers have the physical space necessary to perform break-fix maintenance, hardware non-disruptive upgrades (HWNDUs), and routine component swaps without being obstructed by closed rack doors or narrow datacenter aisles.

The front of the //XR4 chassis houses the protective bezel, the central NVRAM modules, and the capacity DirectFlash Modules (DFMs). Because these components are relatively short in physical length, the required front panel service depth clearance is explicitly documented as 216 mm (8.5 in.) .

However, the rear of the chassis is entirely different. The rear panel provides access to the massive, full-length controller sleds, high-wattage power supply units (PSUs), and delicate PCIe expansion cards. When an engineer needs to physically remove a controller to swap it for a newer generation, the entire heavy compute sled must be pulled straight out of the chassis on its rails before it can be lifted away. To accommodate the physical length of the controller and provide a safe working angle, the official Pure Storage hardware specifications mandate a much deeper rear panel service clearance of 530 mm (20.9 in.) . Option A is the only choice that correctly identifies this asymmetrical clearance requirement.

To safely stop the Purity operating environment on a specific controller during a physical controller upgrade (such as upgrading from FlashArray//X to //XL or performing a chassis swap), the correct command is pureadm stop .

This command is a system administration utility located in the Linux shell of the controller (accessible via the puresh prompt when logged into the specific controller's physical IP address). It is designed to stop the local Purity services on the node where the command is executed.

Procedure: In a non-disruptive controller upgrade, the engineer manually fails over primary services to the peer controller. Then, they log into the controller designated for removal (e.g., CT0) and run pureadm stop. This ensures that all Purity processes, I/O handling, and cache operations are cleanly terminated and flushed before the hardware is physically powered down or removed.

Syntax: The pureadm tool generally operates on the local instance. Options B and C utilize invalid flags (--secondary or --controller) for this specific command context. The engineer must be physically logged into the target controller to execute the stop command for that node.

The FlashArray//XL170R5 is a high-performance, high-capacity enterprise storage system. To maintain its performance characteristics and data layout efficiency, Pure Storage enforces a minimum raw capacity requirement for new orders and installations.

For the //XL170R5 model, the minimum supported configuration is 115TB of raw flash. This is typically achieved through a specific population of DirectFlash Modules (e.g., twenty 5.5TB modules or a similar combination that meets the threshold).

Implementation Engineers must verify during the pre-installation site readiness review that the hardware delivered matches this minimum. Attempting to initialize an //XL170 with significantly less capacity (e.g., 90TB) would be an unsupported configuration, potentially leading to performance degradation or an inability to initialize the wide write groups required by the //XL architecture.

=========

The Pure Engagement Request (PER) or Implementation Workbook (IWB) is the planning document where customers specify their desired configuration parameters. Validating these parameters against Purity requirements before arriving onsite is a critical step for the Implementation Engineer.

Regarding the array name "123": Array names cannot start with a digit .

Purity naming conventions follow standard DNS hostname RFC guidelines to ensure compatibility with network services and scripts.

While numbers are allowed within the name (e.g., array123), the first character must be a letter.

A name composed entirely of numbers (like "123") or starting with a number (like "1array") can cause ambiguity for parsers that might mistake the name for an IP address, a specific ID, or an integer value in scripts.

The engineer must flag this in the PER and request the customer provide a compliant name (e.g., flasharray-123) to avoid errors during the puresetup initialization process.

The FlashArray//XR2 and //XR3 architectures utilize dedicated NVRAM modules to provide the non-volatile write cache necessary for acknowledging writes safely before they are destaged to flash. These chassis are equipped with multiple NVRAM bays (labeled NVB0 through NVB3).

For standard configurations, specifically the //X10, //X20, and //X50 models, the system requires a redundant pair of NVRAM modules to function. These are always installed in NVRAM bays 0 and 1 .

Bays 0 and 1 form the primary high-availability pair. If one fails, the other retains the data, and the system can continue to operate (though often in write-through mode or with alerts).

Higher-end models like the //X70 and //X90 populate all four bays (0-3) to provide the larger write buffer required for their higher throughput capabilities.

However, since the question asks which bays are always populated (i.e., the minimum requirement for the platform to function across the board), the answer is the foundational pair in slots 0 and 1. An Implementation Engineer must ensure these specific slots are populated first during any chassis maintenance or upgrade.

=========

During the initialization phase of a new Pure Storage FlashArray, the Implementation Engineer executes the puresetup newarray (or puresetup array) command via a local serial console connection. This interactive script prompts the engineer for foundational network parameters, including the management IP addresses (vir0, eth0, eth1), subnet mask, default gateway, DNS servers, and NTP servers.

By default, the puresetup utility contains built-in safety mechanisms. As soon as the IP parameters are entered, the script actively attempts to ping the provided default gateway, resolve external hostnames via the provided DNS servers, and synchronize time with the NTP targets. If the customer's top-of-rack (ToR) switches are not yet configured, the cables are unpatched, or the array is being pre-staged in a lab completely isolated from the production network, these validation tests will inevitably fail, causing the setup script to hang or reject the configuration.

To intentionally bypass this validation and force the array to accept the network parameters without testing them, the Implementation Engineer must append the --skip-network-tests flag to the setup command. Executing puresetup newarray --skip-network-tests allows the system to save the configuration to the internal database and logically initialize the cluster. The array will bring the management interfaces online locally, allowing the engineer to connect via the GUI or SSH as soon as the physical network is eventually plugged in and routed.

To meet the requirement of deploying a specific, newer Purity version (6.1.21) on a factory-fresh array that arrived with older code (5.3.8), the most efficient and correct procedure for an Implementation Engineer is to create a bootable USB stick with the target 6.1.21 ISO and reimage the controllers .

The "Factory Reset" or re-imaging process is a supported method for initial installation when the desired software baseline differs significantly from what is pre-loaded. Since the array contains no customer data yet, re-imaging is non-destructive to business operations and avoids the time-consuming process of initializing the array on old code, registering it, and then performing a multi-step software upgrade (Option C).

Procedure: The engineer downloads the specific Purity ISO from the Pure Storage Support portal, uses a tool like Rufus or Etcher (or the pureinstall utility) to create the bootable media, and boots the controllers from this USB to lay down the fresh image.

Option B is incorrect because copying .ppkg files is part of an online upgrade workflow for running systems, not a re-imaging process for a raw box.

During the preparatory phases of a FlashArray Hardware Non-Disruptive Upgrade (HWNDU), validating physical connectivity is a strict prerequisite. If an Implementation Engineer discovers that a DirectFlash Shelf (like SH9) is incorrectly cabled to CT0, the safest and most efficient remediation is to correct the cabling precisely during the physical replacement of that specific controller.

Option A (proceeding and fixing it after) is perilous because leaving the improper cabling in place could compromise backend redundancy when the partner controller assumes the full I/O load, potentially leading to a multi-pathing failure or data unavailability event during the NDU. Option B (rescheduling the entire upgrade) is an unnecessary overreaction that wastes time and resources, as the upgrade procedure itself provides the perfect window for correction.

When the Implementation Engineer initiates the failover and successfully takes CT0 offline to swap the hardware, all active I/O is safely routed through CT1. Because CT0 is completely powered down and physically isolated from the data path at this stage, the engineer can safely disconnect the miswired SAS or NVMe-oF cables and re-cable them correctly into the new CT0 hardware according to the official Pure Storage cabling matrix. This method ensures maximum redundancy is restored the moment the new controller boots, seamlessly resolving the issue without introducing any additional maintenance windows or risks.

A swing shelf (temporary external capacity) is required during a SAS-to-NVMe (Evergreen) upgrade specifically when there is insufficient free space elsewhere in the array to evacuate the data residing in the legacy chassis.

The Evergreen "Stateless" or XFORM upgrade involves replacing the legacy SAS-based controller chassis (which contains SAS SSDs) with a new NVMe-based FlashArray//X chassis (which uses DirectFlash Modules).

Evacuation Requirement: Before the old chassis can be removed, the data on its internal drives must be moved to a safe location. If the customer already has external SAS expansion shelves with enough free space to hold this data, Purity will transparently migrate the data there, and no swing shelf is needed.

Swing Shelf Scenario: If the array is highly utilized (e.g., the chassis is full and external shelves are full or non-existent), the Implementation Engineer must attach a temporary "swing shelf" provided by Pure Storage. This shelf acts as the evacuation target. Once the data is moved to the swing shelf, the old chassis is replaced. The data is then migrated back from the swing shelf to the new NVMe media in the new chassis, and the swing shelf is returned.

In a Non-Disruptive Upgrade (NDU), ensuring that the host is correctly multipathed and balancing I/O across all paths is critical before taking a controller down. If a host is only using paths to the controller about to be rebooted (CT0, for example), taking that controller offline would cause an outage.

The command iobalance --sampletime 30 (or its wrapper purehost monitor --balance) is the standard tool used during the upgrade procedure to validate this state.

iobalance : This script samples the I/O throughput on all ports for a specified duration (e.g., 30 seconds).

It analyzes the distribution of I/O. If it detects that I/O is heavily skewed or missing entirely on the "secondary" paths (the ones that will survive the reboot), it flags a warning.

This allows the Implementation Engineer to pause and remediate the host multipathing configuration (e.g., fixing a bad cable or zoning issue) before proceeding with the controller removal, ensuring the NDU remains truly non-disruptive.

Following any planned maintenance event—such as a software upgrade, controller replacement, or network reconfiguration—it is a mandatory implementation step to verify that the FlashArray has successfully restored its secure outbound management connectivity to Pure Storage cloud services (Pure1).

To execute this validation on a FlashArray, the Implementation Engineer must use the purearray test command suite. Specifically, running a command like purearray test phonehome or purearray test with diagnostic flags forces the array's Callhome Connection Manager (CCM) to immediately generate and transmit a heartbeat payload to the Pure1 cloud infrastructure. If the network routing, DNS, and firewall rules are functioning correctly post-maintenance, the CLI will return a success message confirming that the payload was received by Pure Storage.

Note for clarity: While puresupport test (Option C) is a valid command within the Pure Storage ecosystem, it is strictly used on the FlashBlade (Purity//FB) operating system, not on block-optimized FlashArrays (Purity//FA).

To initiate a Purity Operating Environment (OE) software upgrade from the Command Line Interface (CLI), the correct command is pureinstall .

pureinstall : This command manages the upgrade workflow. It typically takes an image file (ISO) as an argument or downloads it from the repository, unpacks it, performs pre-flight checks, and then applies the update to the controllers in a non-disruptive rolling fashion.

purereboot is used to restart a controller or the array but does not install software.

puresetup is used for the initial configuration of network settings and array names, not for software updates.

=========

The FlashArray//XL features a robust 2+2 power supply unit (PSU) redundancy configuration. Unlike the smaller FlashArray//X chassis (3U), which typically utilizes two power supplies in a 1+1 redundancy setup, the FlashArray//XL utilizes a larger 5U chassis designed for higher performance and density, requiring a more substantial power infrastructure.

The //XL chassis is equipped with four physical Power Supply Units. These are configured to operate in an N+2 mode (effectively 2+2), meaning the system requires two PSUs to support the full electrical load of the chassis, while the other two provide redundancy. This architecture allows the array to survive the simultaneous failure or loss of input power to up to two power supplies without any interruption to service.

This design ensures maximum availability even in scenarios where an entire power grid feed (A-side or B-side) fails, or if multiple hardware components malfunction simultaneously. Options A (1+1) applies to the standard //X series, and Option C (3+1) is not a supported configuration for the FlashArray//XL. The 2+2 design is critical for maintaining the "Always-On" reliability standards required for the mission-critical workloads that the //XL platform supports.

Understanding the strict hardware boundaries of Pure Storage capacity expansion is critical. DirectFlash Modules (DFMs) and DirectFlash Modules with Distributed NVRAM (DFMDs) are fundamentally different hardware components. Standard DFMs contain only raw NAND flash and rely entirely on centralized, dedicated NVRAM modules located in the array chassis to protect write cache. DFMDs, however, feature their own onboard non-volatile memory to distribute the cache load across the capacity drives (primarily utilized in //XL and //XR4 architectures).

Pure Storage architecture explicitly dictates that drives operating within a single efficiency bundle or Wide Write Group (WWG) must be of the exact same hardware classification to ensure predictable parity calculation, wear leveling, and cache distribution. Mixing legacy DFMs with newer DFMDs within the same 20-module write group creates a severe hardware imbalance and is a strictly unsupported configuration.

While internal engineering tunables (like those suggested in Option A) occasionally exist to force overrides in lab environments, applying them in a customer's production array to bypass physical hardware incompatibility violates all implementation best practices. The only correct and safe action for the Implementation Engineer is to halt the physical installation, flag the Bill of Materials (BOM) mismatch, and work with the account/logistics team to RMA the DFMDs and ship the correct standard DFMs.

FlashArray controllers operate in an Active/Active high-availability cluster. Each controller (CT0 and CT1) has its own physical IP address for hardware-level management. However, Purity configures a Virtual IP (VIP) that floats between the two controllers.

The Virtual management IP is the recommended address for all administrative access, including the GUI, CLI, and API integrations. Using the VIP ensures High Availability (HA) for management sessions. If an Implementation Engineer were to log in directly to CT0's IP and CT0 subsequently rebooted (e.g., during an NDU or failure), the management session would be disconnected.

By contrast, the VIP automatically fails over to the surviving controller (CT1) in the event of a disruption, allowing the management session (and the GUI) to remain accessible. This abstraction layer simplifies administration, as the user does not need to know which controller is currently "primary" for management tasks. Direct controller IPs are typically reserved for specific hardware troubleshooting steps where accessing a specific node is required.

=========

When transitioning to a significantly different hardware platform—like moving from a 3U FlashArray//X50 R3 to a 5U FlashArray//XL130 R5—customers typically leverage Pure Storage’s Evergreen storage programs (such as Ever Agile or Capacity Consolidation).

The FlashArray//XL introduces a fundamentally different chassis architecture. It requires a minimum of 20 DirectFlash Modules with distributed NVRAM (DFMDs) populated in slots 0-19 to provide the necessary write caching, completely replacing the standalone NVRAM modules found in the older //X series.

Options A and B are procedurally incorrect. While it is technically possible to retain compatible older DFMs in an //XL chassis (specifically in slots 20-39), moving drives "one at a time, allowing parity to reach 100%" is never the standard Pure Storage procedure for a hardware upgrade. Evacuating and rebuilding parity for 20 individual drives sequentially would take an exorbitant amount of time, severely degrade array performance during the continuous rebuilds, and expose the system to unnecessary data loss risks. Pure Storage does not use a drive-by-drive rebuild methodology for controller or chassis swaps.

Instead, when older capacity is being replaced, a non-disruptive upgrade (NDU) or data migration is orchestrated via Purity's upgrade scripts and array-to-array migration tools. All data is transparently migrated from the legacy //X50 R3 drives to the fully populated DFMDs/DFMs in the new //XL130 R5. Once the software verifies that the data migration phase is successfully complete, the 20 legacy DirectFlash Modules from the //X50 R3 are decommissioned and returned to Pure Storage to fulfill the trade-in agreement.

A "4X Module" kit is specifically designed to widen an existing write group (RAID set).

Write Group Geometry: In standard FlashArray//X configurations, DirectFlash Modules (DFMs) operate in "Write Groups" (typically 10 modules wide for a standard data pack). However, to offer more flexible entry points or capacity expansion options, Pure Storage allows configurations that start with smaller write groups (e.g., 6 modules).

Widening: When a customer wants to expand capacity or performance on these smaller configurations without adding a full new 10-pack, they can purchase a widening kit (in this case, 4 modules).

Process: The Implementation Engineer installs these 4 modules into the empty slots. The Purity operating system then logically integrates these new drives into the existing narrow write group, "widening" it to the standard width (e.g., 6 + 4 = 10). This operation redistributes parity and data across the full set of 10 drives, improving performance and efficiency.

A Pure Storage FlashArray is a highly available, dual-controller system. During the initial puresetup process, the Implementation Engineer assigns three distinct management IP addresses to the system: one physical IP for Controller 0 (ct0), one physical IP for Controller 1 (ct1), and one Virtual Management IP (VIP or vir0) .

According to official Pure Storage administration and implementation best practices, users should always connect to the GUI, CLI, and REST API using the Virtual Management IP. The Purity operating system utilizes an active/standby management plane. The VIP is designed to automatically float and bind itself to whichever controller is currently acting as the Primary node for management services.

If an administrator points their browser or SSH client directly to a physical controller IP (like CT0) and that controller happens to be the secondary node, they will either be redirected to the VIP, restricted to read-only access, or lose connection entirely if that specific controller is rebooting during a non-disruptive upgrade (NDU). By consistently using the Virtual Management IP, the customer ensures seamless, uninterrupted access to the array's administrative interfaces regardless of the underlying hardware state or active controller role.

ActiveCluster, Pure Storage's synchronous replication solution for zero RPO/RTO, currently supports a maximum of 2 arrays in a single active-active relationship (often referred to as a "Pod").

Architecture: The ActiveCluster architecture is strictly designed as a 1:1 synchronous pairing between two FlashArrays. This allows both arrays to serve reads and writes for the same volumes simultaneously.

Stretched Clustering: The limit of two arrays ensures that the synchronous acknowledgement (ACK) process for writes remains performant and manageable over the inter-site link. Adding a third array to the synchronous loop would exponentially increase write latency and complexity.

3-Data Center Configurations: While you can configure a "3DC" architecture, this involves one ActiveCluster pair (2 arrays) replicating asynchronously to a third, standalone array (ActiveCluster + ActiveDR or Async). However, the synchronous ActiveCluster domain itself never exceeds 2 arrays.

When an Implementation Engineer or storage administrator needs to configure the foundational networking for array-to-array replication, it is essential to distinguish between configuring the network interfaces and configuring the replication partnerships .

To set up the IP addresses, subnet masks, gateways, and assign the replication service to specific Ethernet ports (such as eth2 and eth3), the user must navigate to Settings > Network in the Purity GUI. This section of the interface is strictly dedicated to managing the physical and virtual network topology of the array. Here, the engineer defines which physical ports are allowed to handle replication traffic, ensuring it is isolated from frontend host I/O or management traffic.

It is a common misconception to navigate to "Storage > Array Connections" for this step. However, the "Array Connections" tab is used after the network settings are fully configured. "Array Connections" is where the administrator actually enters the Connection Key to establish the synchronous (ActiveCluster) or asynchronous replication link between two fully networked arrays. Therefore, the foundational IP configuration must always be completed first under the Settings > Network tab.

Executing a Hardware Non-Disruptive Upgrade (HWNDU) is a complex procedure involving the physical removal and replacement of core processing nodes while host I/O continues uninterrupted. Occasionally, after the new controllers are seated, cabled, and initialized, the cluster may fail to fully form a healthy quorum, manifesting as a "health not responding" state during a pureadm status check.

Before immediately escalating the issue to Pure Storage Support, the Implementation Engineer is expected to perform basic, front-line triage to understand exactly what is blocking the system's high-availability formation. The most effective diagnostic tool for this is the puremessage CLI suite.

While the standard puremessage list command displays standard administrative alerts, a controller in a degraded state often suppresses deeper hardware faults or internal cluster mismatch errors from the standard user view. By executing puremessage list --open --hidden , the engineer forces Purity to reveal all active, unresolved alerts, including internal, low-level system faults normally hidden from standard administrator accounts. This output might reveal issues such as a mismatched firmware version on a newly inserted PCIe card, an improperly seated NVRAM module, or a disconnected internal NTB (Non-Transparent Bridge) link. Armed with this specific error code or fault description, the engineer can either resolve the physical issue immediately or provide the exact fault string to Pure Support, drastically accelerating the time to resolution.

Configuring replication involves two distinct steps: setting up the physical network interfaces (IP addresses) and then connecting the arrays (partnerships). The question specifically asks where to configure replication IP settings .

In the Purity//FA GUI, the configuration of Ethernet interfaces—regardless of their use for Management, iSCSI, or Replication—is centralized under the Settings tab, specifically within the Network sub-menu.

Settings > Network : Here, the user selects the Ethernet ports (e.g., eth2, eth3) designated for replication and assigns them IP addresses, netmasks, and gateways (or assigns them to a subnet).

Storage > Array Connections : This is where you use those configured IPs to connect to a remote array and establish the replication partnership.

Storage > Replication : This tab is used to monitor replication sessions and manage protection groups (snapshots/policies), not to configure the underlying interface IPs.

=========

The Customer is the mandatory party required to provide completion sign-off before the Implementation Engineer leaves the site.

According to the FlashArray Implementation Service Brief and standard operating procedures, the final step of the deployment phase is the "Project Sign-off." After the engineer has racked, cabled, initialized, and verified the array's health (often demonstrating connectivity and the Purity GUI), the customer must formally acknowledge that the installation meets the agreed-upon scope of work. This sign-off serves as the legal and operational acceptance of the hardware and software implementation.

While the Account Team manages the commercial relationship and Support may assist with technical hurdles, neither can validate that the physical implementation meets the customer's specific on-site requirements or that the "handover" of administration has occurred. The customer's signature (physical or digital) on the implementation checklist or service completion form signals the transition from the "Deployment" phase to the "Production/Support" phase.

When cabling and configuring the network topology for a Pure Storage FlashArray (including the //XR4 platform equipped with standard OCP mezzanine networking cards), the physical Ethernet ports are strictly mapped to default services by the Purity//FA operating system. Understanding these defaults prevents network collisions and ensures traffic is isolated appropriately.

The first two onboard ports, explicitly labeled eth0 and eth1, are always reserved for out-of-band Management traffic. These 1GbE ports handle GUI access, SSH, API calls, and outbound Pure1 telemetry.

To support heavy data mobility workloads without impacting administrative access, Purity defaults the next sequential pair of high-speed ports— eth2 and eth3 —to Replication services. These 10GbE, 25GbE, or 100GbE ports are meant to be cabled directly to the customer's redundant WAN links or replication switches. They carry all asynchronous snapshot transfers, continuous ActiveDR replication, and synchronous ActiveCluster traffic between arrays. While an Implementation Engineer can manually reassign these services using the purenetwork CLI suite if the customer requires a custom topology, utilizing eth2 and eth3 as the default replication interfaces remains the universally documented Pure Storage best practice for baseline installations. Ensuring these specific ports are properly patched into the designated replication VLANs prior to running the initialization scripts guarantees a smooth, error-free setup process.

On a FlashArray//XR2 or //XR3 controller equipped with an optional Ethernet Mezzanine (EMEZZ) card, the additional ports are enumerated as ETH6, ETH7, ETH8, and ETH9 .

The port numbering logic on these controllers follows a strict sequence:

ETH0 and ETH1: Fixed onboard 1GbE Management ports.

ETH2 and ETH3: Fixed onboard 10/25GbE ports (often used for replication or iSCSI).

ETH4 and ETH5: Reserved or used by the first PCIe slot expansion (if populated with Ethernet).

ETH6 through ETH9: Assigned to the Ethernet Mezzanine (EMEZZ) slot.

The EMEZZ is a specific internal slot distinct from the standard PCIe risers. When populated, the Purity operating system reserves the eth6–eth9 block for these interfaces. Options B and C are incorrect because they describe port ranges that would typically be assigned to PCIe expansion cards in Slot 1 or Slot 2 (e.g., eth10+), or they simply do not align with the hardcoded enumeration logic of the R2/R3 controller architecture. Correct identification of these interfaces is critical for configuring link aggregation (LACP) or assigning iSCSI IPs during the initial setup.

The FlashArray//E connects to its DirectFlash Shelves (DFS) using 25Gb Ethernet (RoCE) .

The FlashArray//E is the "Capacity Optimized" member of the FlashArray family, designed to replace spinning disk repositories with all-flash efficiency. While the high-performance FlashArray//XL utilizes 100GbE for its backend NVMe-oF connectivity to maximize throughput for mission-critical databases, the //E prioritizes cost-efficiency, density, and power consumption.

Architecture: To maintain this efficiency balance, the backend connectivity for expansion shelves on the //E platform is standardized on 25GbE . This provides ample bandwidth for the QLC-based workloads (typically unstructured data, repository, or Tier 2 block) without the higher cost and power draw of 100GbE optics and controllers.

Comparison: Option A (40G) is a legacy QSFP standard not used in modern Pure backend designs. Option C (100G) is reserved for the performance-tier //XL and high-end //X models.

Pure Storage DirectFlash Shelves (DFS) are designed with high-efficiency, enterprise-grade power supply units (PSUs). These PSUs are "auto-ranging," meaning they can accept a wide range of input voltages, typically from roughly 90V to 264V AC.

While data centers often prefer 208V-240V power sources for better efficiency (less heat loss and lower amperage draw for the same wattage), the hardware is fully validated and supported to operate on standard 110V/120V circuits . There is no "temporary only" restriction or hardware lockout that prevents operation on 120V.

Therefore, if the customer's high-voltage PDUs are full, the Implementation Engineer can safely connect the DirectFlash Shelf to the available 120V outlets. The shelf will function normally, provided the circuit has sufficient amperage capacity (amps) to handle the slightly higher current draw that results from using a lower voltage. This configuration is supported for the entire service life of the shelf.

=========

After configuring the management network and proxy settings, it is essential to validate that the FlashArray can successfully transmit logs and telemetry to the Pure1 cloud. The specific command designed to trigger a manual test of this "Phone Home" functionality is purearray phonehome test .

purearray phonehome test : Initiates a test cycle where the array attempts to resolve the Pure1 endpoint, establish a secure connection, and send a sample payload. Success here confirms that DNS, firewall rules, and proxy settings are correct for outbound telemetry.

puresupport phonehome: This is often used to manually send logs (e.g., puresupport phonehome --send), but the test syntax is specifically under purearray.

purearray test pinghome: This is not a valid standard command for this specific validation.

Using the correct command ensures the engineer receives a clear "Success" or "Failure" message to sign off on the installation checklist.

=========

Executing a Hardware Non-Disruptive Upgrade (HWNDU) is one of the most delicate procedures an Implementation Engineer performs. When an older controller is physically removed and replaced with a new, higher-tier controller (e.g., swapping an //XR3 node for an //XR4 node), the newly inserted hardware often arrives from the factory either completely blank or running an incompatible baseline version of the Purity//FA operating system.

Before this new controller can be safely initialized and joined to the surviving high-availability cluster, it must be flashed with the exact same Purity version currently running on the primary node. Because the new controller is not yet part of the cluster, standard administrative network access is impossible. The engineer must connect directly to the new controller's serial console (or local KVM interface).

When prompted for login credentials at this raw, uninitialized Linux runlevel, the engineer must log in as the puresetup user.

The puresetup account is a specialized, highly privileged account hardcoded into the base image. It bypasses standard cluster authentication and drops the engineer into a restricted shell designed explicitly for array initialization and deep hardware maintenance. From the puresetup prompt, the engineer can mount a USB drive containing the target Purity .ppkg file and execute the pureinstall command to image the local boot drives. Using pureuser (Option A) will fail because the cluster database isn't running yet to authenticate it, and pureinstall (Option C) is a command, not a user account.

Here is the final batch of your fully formatted and verified questions. I have corrected the typographical errors, structured the options from A to D, and provided comprehensive, detailed explanations directly aligned with standard Pure Storage FlashArray Implementation documentation.

When installing rails for a FlashArray in a rack requiring cage nuts (square hole racks that are not using the tool-less mechanism, or specific threaded adaptations), the correct placement for the cage nut is the top square of the lowest Rack Unit (RU) that the rail will occupy.

Pure Storage rail kits typically secure at the bottom of the targeted rack unit.

The "3-Hole" Rule: A standard Rack Unit (1U) consists of three vertical holes (often referred to as the bottom, middle, and top hole).

Alignment: The rail flange is designed to align such that the retaining screw or positioning stud engages specific holes to support the weight. For the standard securement point, the documentation specifies installing the cage nut in the top hole of the specific RU where the rail base sits (often the "lowest" RU if the device spans multiple U's, though the rail itself is 1U high).

Precision: Placing it in the "Lowest square of the lowest RU" (Option A) would interfere with the rail's shelf lip or the device below it. Correct alignment ensures the rail is level and the chassis slides in without binding.

Adding an external DirectFlash Shelf (DFS) or a legacy SAS Expansion Shelf to a Pure Storage FlashArray requires precise physical cabling to ensure backend high availability. Because the controllers utilize an active/active backend topology—where both controllers must maintain redundant loops to every single capacity shelf—a single misplaced cable can cause a severe hardware fault.

Once the physical installation is complete, the Implementation Engineer must definitively validate the topology before handing the array over to production. To do this, they log into the local KVM console or SSH session using the restricted puresetup account. From here, the official Pure Storage post-installation procedure dictates running two specific Python validation scripts: storage_view.py enclosures and storage_view.py config .

While both are used, storage_view.py config is the primary command utilized to map the specific SAS or NVMe-oF (RoCE) port bindings. The script actively polls the physical ports on the rear of the controllers and traces the loops down through the I/O Modules (IOMs) on the shelves. If the cabling is flawless, the CLI will explicitly return: "No errors detected." If a cable is crossed (e.g., Controller 0 plugged into IOM 1 instead of IOM 0), the script will instantly flag the topology mismatch, allowing the engineer to correct it on the spot.

The FlashArray//XL series (specifically the //XLR5 in this context) utilizes a 100 Gigabit Ethernet-based back-end fabric to communicate with DirectFlash Shelves (DFS). This connection relies on the RoCE (RDMA over Converged Ethernet) protocol to ensure low-latency access to the external NVMe modules.

The specific PCIe interface card validated for this connectivity is often labeled in the Bill of Materials (BOM) or configuration guides as the 2-Port 100GbE iSCSI/RoCE card (or simply the 100GbE Ethernet/RoCE card depending on the specific firmware/labeling revision). Crucially, it must be a 100GbE capability card.

The //XL platform standardized on 100GbE for its shelf interconnects, moving away from the 50GbE used in some previous generations of the //X series. The 200GbE cards are typically reserved for high-speed host connectivity or clustering, not the standard shelf loop. Therefore, ensuring the BOM includes the correct 100GbE RoCE-capable cards is essential for successful shelf detection and operation during installation.

To reduce SafeMode protections (such as shortening the retention period or disabling the eradication timer), two authorized SafeMode approvers must authenticate and approve the request via Pure1 step-up authentication .

SafeMode is a ransomware protection feature designed to prevent the accidental or malicious deletion of snapshots. Because reducing these protections weakens the array's security posture, Pure Storage enforces a strict "Ratchet" authorization process.

The Process: Unlike standard support requests, a single admin or local user cannot authorize this change (making Option C incorrect). The customer must have previously designated specific individuals as "SafeMode Approvers" in their Pure1 portal.

Authorization: When a request to weaken the policy is made, Pure Support triggers a verification workflow. Two of these designated approvers must log into Pure1 and perform a secondary authentication (often involving a PIN or TOTP) to explicitly "sign off" on the reduction. This "two-person rule" ensures that a compromised credential or a rogue insider cannot unilaterally expose the organization's backup data to destruction.

When expanding a Pure Storage FlashArray//XL130 R5 with an external DirectFlash Shelf (DFS), the backend connection between the shelf controllers and the main chassis relies on massive 100GbE bandwidth via the NVMe-oF (RoCE) protocol. Validating the Bill of Materials (BOM) before an onsite installation is a critical preparatory step to ensure the correct internal hardware was shipped to support this connection.

According to the official Pure Storage hardware matrix, the supported PCIe expansion card required for //XL series shelf connectivity is the FA-XL-100G Ethernet/RoCE 2-Port CX6 . This card utilizes the modern Mellanox/Nvidia ConnectX-6 (CX6) chipset, which is explicitly engineered to provide the necessary 100GbE RDMA capabilities to maintain ultra-low latency, NVMe-level speeds across the external storage fabric.

Option B (the CONNECTX-5 card) is an older, End-of-Sale component generally associated with legacy deployments or specific frontend iSCSI requirements, not the modern //XL backend loop. Option C (a 200G CX7 card) is not the standard validated BOM component for a single DFS loop on an //XL130 R5. Confirming the presence of the 100G CX6 card ensures the engineer has the exact hardware required to successfully cable the 100GbE backend ports.

To verify the history and transmission status of Phonehome log bundles, the correct command is purearray phonehome --list .

Before starting a controller upgrade (NDU), it is mandatory to ensure that the array can successfully transmit diagnostic data to Pure Storage. This allows Support to review the "pre-flight" checks and ensures that if an issue occurs during the upgrade, logs will be available for triage.

Usage: Running purearray phonehome --list displays a table of recent log bundles generated by the system.

Verification: The Engineer must look at the Status column for the most recent entries. A status of "uploaded" confirms that the array has successfully connected to the Pure Storage cloud and transferred the data. If the status is "queued" or "failed," the upgrade should not proceed until network connectivity (firewall/proxy) is resolved. Options A and C are incorrect CLI syntax for this specific verification task.

Within the Purity//FA operating system, specialized system variables, behavioral overrides, and feature flags are managed using "tunables." Tunables are typically set by Pure Storage Support or Implementation Engineers to address specific environmental edge cases, enable beta features, or manage hardware non-disruptive upgrade (HWNDU) states.

Once a maintenance window is complete or a tunable is no longer required, it must be carefully removed to return the array to its default operational state. The correct and officially supported Purity CLI command to remove a tunable is puretune --unset < tunable_name > .

Because FlashArray controllers operate in a highly available, clustered configuration, standard tunables applied to the array are generally mirrored. Executing puretune --unset from the active primary controller will cleanly strip the tunable from the configuration database, applying the change system-wide. Commands like pureadm do not exist in the standard Purity CLI, and puretune remove is incorrect syntax.

A FlashArray support case should be opened before starting the installation (Option C).

Proactive Support: Pure Storage advocates for a proactive support model. Opening a case (often categorized as an "Install" or "Planned Event" ticket) prior to the engineer arriving onsite or beginning the physical work serves multiple purposes:

Notification: It alerts Pure Support that a new array is about to come online.

Validation: It allows Support to verify the serial number, entitlement, and ensure the array is ready to receive the latest Purity updates or patches immediately upon connection.

Remote Assist: It establishes a placeholder for the "Health Check" phase. Once the physical install is done, the engineer can immediately reference this existing case number when enabling Remote Assist, allowing a Technical Support Engineer (TSE) to quickly jump in and perform the final validation without the delay of ticket creation and routing.

Waiting until an issue arises (Option A) is reactive, and waiting until completion (Option B) delays the mandatory sign-off process.

The FlashArray//E (and the //XR4/R5 family) utilizes a modern architecture that moves away from the dedicated NVRAM modules found in legacy generations (like the //XR2 and //XR3). In those older systems, NVRAM was housed in specific PCIe cards plugged into the chassis.

In the FlashArray//E architecture, the Non-Volatile RAM (write buffer) functionality is Distributed directly onto the storage media itself. These specialized drives are called DFMDs (DirectFlash Modules with Distributed NVRAM).

By integrating the NVRAM into the DFMs, the array scales its write buffer cache linearly with capacity and removes the bottleneck of fixed NVRAM slots in the chassis. This allows for higher density and simplified hardware designs. During installation or inventory, engineers must distinguish between standard DFMs (which store data only) and DFMDs (which store data and act as the write cache), ensuring the correct number of DFMDs are present to form the system quorum.

=========

When installing the first DirectFlash Shelf (DFS) on a FlashArray//XR2 or //XR3 utilizing the onboard or default mezzanine connectivity, the correct ports to use are ETH6 and ETH9 .

Hardware Layout: The FlashArray//XR2 and //XR3 utilize a specific Ethernet Mezzanine (EMEZZ) slot for backend connectivity to NVMe-oF shelves. This card typically enumerates its ports as ETH6 through ETH9 (a 4-port configuration).

Cabling Rule: To maximize physical separation and ensure redundancy across the internal ASIC lanes of the mezzanine card, standard cabling procedures for the first shelf dictate using the outer ports: ETH6 (Port 0) and ETH9 (Port 3).

Redundancy: This configuration (Port 0 and Port 3) is preferred over using adjacent ports (like 6 and 7) to reduce the risk of a single lane cluster failure affecting both connections to the shelf. The second shelf, if added later, would typically utilize the remaining ports (ETH7 and ETH8).

Understanding the default network port assignments on a standard 3U Pure Storage FlashArray (which encompasses models like the //X10, //X20, //X50, //X70, and //X90) is a fundamental requirement for any Implementation Engineer. The rear of the controllers features a standardized set of integrated Ethernet ports that are logically predefined by the Purity operating system upon factory initialization.

The first two ports, explicitly labeled eth0 and eth1 , are 1GbE Base-T copper ports. These are strictly reserved and dedicated by default for management traffic (GUI, CLI, SSH, API, and Call Home telemetry to Pure1). They are not designed to handle high-throughput storage workloads.

The next two ports, eth2 and eth3 , are high-speed 10GbE/25GbE optical/Twinax ports. By default, Purity provisions these specifically for asynchronous and synchronous replication traffic (including ActiveCluster), as well as IP-based block storage protocols like iSCSI if the customer is not using Fibre Channel. Utilizing eth2 and eth3 ensures that heavy data mobility workloads have the required bandwidth and are physically isolated from lightweight management traffic. Ports like eth4 and eth5 (if present via PCIe expansion cards) are typically configured manually for additional frontend host I/O or File Services, rather than acting as the default replication interfaces.

To reconcile the IP configuration, the Implementation Engineer must correct the invalid netmask to the standard Class C subnet mask of 255.255.255.0 (Option B).

The netmask provided in the workbook, 255.255.255.223, is mathematically invalid for a subnet mask. Subnet masks function by having a continuous sequence of binary '1's followed by '0's. The decimal value 223 (binary 11011111) breaks this rule due to the zero bit in the middle of the octet. Therefore, the array initialization script would reject this value as a syntax error.

In most standard implementation scenarios where a gateway of 10.24.18.1 is provided, the intended network is a /24 (255.255.255.0), which allows for hosts 10.24.18.1 through 10.24.18.254. While Option C (/23) is a valid subnet mask, it assumes a larger network scope than is typically implied by a standard typo. Correcting the mask to the standard /24 is the safest and most logical remediation to ensure the array can communicate with the gateway and the management network.

Capacity expansion on a Pure Storage FlashArray is a highly controlled, safe process. When an Implementation Engineer physically unboxes and inserts a new data pack (a group of DirectFlash Modules) into the available drive bays of a chassis or a DirectFlash Shelf, the Purity operating system detects the hardware instantly. However, it does not automatically wipe the drives and assimilate them into the global storage pool.

Instead, the newly inserted modules are placed into a safe, quarantined state known as "unadmitted." This intentional design choice prevents catastrophic data loss in the event that an engineer accidentally inserts a drive containing live data from another system, or inserts drives before the customer is financially or operationally ready to activate the new capacity.

To officially claim the drives, integrate them into the system's Wide Write Groups (WWGs), and initiate the background parity redistribution process, the Implementation Engineer must explicitly authorize their use. This is accomplished by running the puredrive admit command. The engineer can either specify the exact drives (e.g., puredrive admit CH0.BAY10 CH0.BAY11...) or use a global flag like puredrive admit --all if all unadmitted drives are ready for ingestion. Once admitted, the drives transition to a "healthy" state, and the array's total usable capacity increases seamlessly without any host disruption.

The command pureboot list is the correct tool to verify which Purity version is designated to load upon the next system reboot.

FlashArray controllers maintain two boot partitions (often referred to as banks) for redundancy and upgrade safety. When an upgrade is performed, the new Purity software image is written to the inactive bank.

Verification: Running pureboot list displays the status of both boot banks (e.g., Primary and Secondary) and explicitly flags which version is "Running" and which is set for "Next Boot."

Why it's critical: Just checking the currently running version (using pureversion or purearray list) is insufficient during an upgrade workflow. An engineer must confirm that the boot pointer has successfully switched to the new version before issuing the reboot command. If pureboot list shows the old version as "Next Boot," a reboot would simply reload the current code, indicating the upgrade installation failed or wasn't finalized.

The FlashArray//XL series has a specific, validated slot population rule for its PCIe cards to ensure optimal performance and thermal management. For a standard Fibre Channel (FC) configuration on a FlashArray//XLR5 , the factory default shipment includes a specific arrangement of host I/O cards and offload engines.

The correct default configuration is:

PCIe Slot 3: 4-Port 32Gb FC card.

PCIe Slot 5: 2-Port 32Gb FC card.

PCIe Slot 6: DirectCompress Accelerator (DCA).

This layout (Option B) adheres to the //XL's architecture where specific slots are prioritized for frontend host I/O (like slots 3 and 5) and others for offload functions or backend connectivity. Implementation Engineers must verify cards are in these exact slots during the visual inspection. If cards are moved to incorrect slots (like slot 1 or 4 for primary FC in this specific config), the array may not boot or may fail to initialize the FC services correctly due to BIOS enumeration orders.

=========

The FlashArray//XR4 maintains the standard port assignment convention established in previous generations for its onboard Ethernet interfaces.

ETH2 and ETH3 are the default ports designated for Replication traffic.

ETH0 and ETH1 are reserved for Management.

ETH2 and ETH3 are configured by Purity defaults to handle the heavy bandwidth of asynchronous or synchronous replication.

While these assignments can be modified in software, the physical ports labeled eth2 and eth3 on the rear of the chassis are the intended primary interfaces for this function. Implementation Engineers should cable these ports to the replication network switches during the initial install.

=========

Understanding the strict physical drive population rules is a fundamental requirement for any Pure Storage Implementation Engineer. The front chassis of a standard 3U FlashArray (such as an //X50 or //X70) contains 20 dedicated capacity drive bays, numbered from 0 to 19.

When installing a new FlashArray that has been ordered with a single, baseline data pack—which always consists of exactly 10 DirectFlash Modules (DFMs) or DFMDs—the physical insertion order is not arbitrary. The official hardware installation guidelines dictate that these 10 drives must be populated sequentially starting in bay 0, from left to right .

By filling bays 0 through 9 continuously, the engineer ensures that the Purity operating system can logically group the physical media into a contiguous, balanced Wide Write Group (WWG) for optimal parity calculation and wear leveling. Leaving gaps between the drives, or starting the installation in the higher-numbered bays (such as bay 10 or bay 19), violates the tested physical airflow characteristics of the chassis and will trigger hardware topology alerts during the hardware_check.py validation phase of the array initialization. If a second data pack is ever purchased for capacity expansion, those subsequent 10 drives would then seamlessly populate bays 10 through 19, again from left to right, completing the primary chassis.

The puresupport command suite is used to manage and verify the connectivity between the FlashArray and Pure Storage Support (Pure1). Specifically, to test the Remote Assist functionality—which allows Pure Support to securely log in to the array for troubleshooting—the correct command is puresupport test.

While phonehome is a related concept (sending logs out), Remote Assist is a distinct inbound tunnel feature. purearray test pinghome is often confused with phonehome but is an older or specific test for the log sender. The puresupport test command runs a comprehensive check of the support channel connectivity, including the ability to establish the Remote Assist tunnel. If this test passes, the Implementation Engineer can be confident that Support can access the array if needed during or after the deployment.

=========

When submitting a Pure Engagement Request (PER) or an Implementation Workbook (IWB) for a new Pure Storage FlashArray deployment, adhering to the strict naming conventions of the Purity//FA operating system is critical to ensure a smooth, error-free initialization. In this scenario, attempting to name the array "123" will cause the puresetup script to immediately reject the configuration.

According to the official FlashArray deployment documentation, a valid array name must adhere to specific alphanumeric rules. While the name can certainly contain numbers and hyphens (e.g., Prod-Array-01), it must always begin with a letter . It cannot begin with a digit, nor can it consist entirely of numbers. Furthermore, the name must be between 1 and 63 characters in length, and it cannot end with a hyphen.

Because "123" begins with a numeric digit, it violates the foundational naming schema required by the Purity OS for DNS resolution, Call Home telemetry tagging, and ActiveCluster synchronous replication identification. The Implementation Engineer must work with the customer to revise the array name in the IWB to a compliant format (such as FA-123 or Storage123) before proceeding with the onsite deployment and running the serial console initialization scripts.

The FlashArray//XR4 utilizes onboard 100GbE RoCE (RDMA over Converged Ethernet) ports for connecting to the first loop of DirectFlash Shelves, removing the need for dedicated PCIe add-in cards for the base configuration. The port mapping for these onboard backend ports differs from previous generations.

On the //XR4 controller chassis, the specific Ethernet interfaces designated for the first DirectFlash Shelf loop are typically the high-numbered onboard ports. In this specific exam context and hardware revision, ETH 18 and ETH 19 are identified as the correct primary backend connectivity ports .

Implementation Engineers must connect the QSFP28 cables from the "uplink" ports on the first shelf (IOM0 and IOM1) to ETH18 and ETH19 on the controllers (CT0 and CT1) respectively. Using incorrect ports (like ETH0/1, which are management) would result in the shelf not being detected by the storage fabric.

=========

FlashArray performance and capacity efficiency are optimized when drives are grouped into "Wide Write Groups" (typically 20 modules). Purity OS generally enforces strict homogeneity within a write group to ensure consistent performance and reliability. Specifically, mixing standard DirectFlash Modules (DFM) with DirectFlash Modules with Distributed NVRAM (DFMD) in the same write group is restricted by default because of the architectural differences in how they handle persistent memory and I/O acknowledgment.

However, in upgrade scenarios where a customer is expanding an existing 16-module DFM group to a 20-module group using newer DFMD spares or expansion packs, Purity includes an engineering tunable to permit this mixed configuration. The correct procedure is to physically install the new DFMDs and run the admission command. Because of the mix, the array might initially hesitate or create a separate group. To force the creation of a single 20-drive Wide Write Group (WWG) , the Implementation Engineer must work with Pure Storage Support to apply the specific tunable puretune --set ALLOW_DFMD_IN_DFM_WWG 1 . This overrides the default restriction, allowing the system to merge the disparate module types into a single, high-efficiency capacity pool.

=========

Validating multipath I/O balance is a critical post-configuration step. The FlashArray CLI provides a specific monitoring tool for this purpose under the purehost command suite.

purehost monitor --balance is the correct command.

monitor : This keyword initiates a real-time display of performance metrics (IOPS, bandwidth, latency).

--balance : This flag breaks down the metrics per initiator (per HBA/path) for the specified host(s).

The output allows the engineer to see if I/O is flowing evenly across all paths. If one path shows 0 IOPS while others are active, it indicates a zoning, cabling, or multipathing configuration issue that must be resolved to ensure high availability.

Understanding the physical chassis layout of the Pure Storage FlashArray is essential for capacity planning and hardware installation. The FlashArray//X Gen 2 (and Gen 3) utilizes a highly efficient 3U chassis design.

When looking at the front of a standard //X chassis, there are a total of 24 physical module bays. However, these bays serve fundamentally different architectural purposes:

Capacity Drive Slots: There are exactly 20 slots strictly dedicated to capacity drives (DirectFlash Modules, or DFMs). These are numbered 0 through 19 and are where the data packs are installed to provide raw storage capacity.

NVRAM Slots: The remaining 4 slots, located centrally in the chassis, are dedicated exclusively to NVRAM modules (NVB0, NVB1, NVB2, and NVB3). These provide the highly available, non-volatile write cache for the array and cannot be used for capacity expansion.

Therefore, when an Implementation Engineer is assessing the chassis for data pack expansion or module upgrades, there are exactly 20 standard capacity drive slots available before an external DirectFlash Shelf (DFS) must be added. (Note: FlashArray//XL utilizes a larger 5U chassis with 40 capacity slots, but the standard //X remains at 20).

A frequent question Implementation Engineers receive from security-conscious customers after a new installation is how to verify that data-at-rest encryption is active. Unlike legacy storage arrays where encryption requires a separate software license, specialized self-encrypting drives (SEDs), or complex CLI toggles, Pure Storage FlashArray handles encryption natively and transparently.

There are no commands like puresecurity status or purearray encryption list in the Purity CLI because data-at-rest encryption is an always-on, non-configurable architectural feature . It cannot be turned off by an administrator, support engineer, or malicious actor.

Purity secures data at rest using AES-256 bit encryption (FIPS 140-2 certified). The array uses three dependent layers of internal keys (an Array Key, an SSD Key, and a Data Encryption Key) that are automatically generated, partitioned, and spread across the DirectFlash Modules. Because this process operates continuously in the background without user intervention, the standard and officially documented response for an Implementation Engineer is to explain the always-on nature of the architecture and provide the customer with the official Pure Storage FlashArray Data Security and Compliance whitepaper to satisfy their compliance auditors. (Note: Option C mentions RDL or Rapid Data Locking, which is an external KMIP key management feature, not the base data-at-rest encryption itself).

The Pure1 mobile app (available on iOS and Android) is a powerful, cloud-connected tool that allows storage administrators and engineers to monitor their fleet from anywhere in the world. Viewing array telemetry (like IOPS, latency, and bandwidth), monitoring capacity utilization, and managing support cases are all handled seamlessly through Pure1's secure cloud infrastructure. These features work perfectly fine over a standard cellular network or public Wi-Fi.

However, enabling a Remote Assist session is treated with a much higher level of security. Remote Assist opens a secure, reverse SSH tunnel directly from the array to Pure Storage Support, allowing them to perform troubleshooting or execute upgrades. To trigger this from the Pure1 mobile app, the command must be authenticated and sent directly to the array's local management IP interface—it does not pass blindly down from the cloud.

Because of this architectural security design, the mobile device must be connected to the internal company network (e.g., via a corporate VPN or internal corporate Wi-Fi network) that has routing access to the array's management subnet. This ensures the organization's existing firewall and security models are respected, preventing unauthorized external triggers of support tunnels.

For the FlashArray//X50 R2 and R3 models, the default Fibre Channel (FC) configuration utilizes a 4-port PCIe Fibre Channel card installed in Slot 0 .

The hardware architecture of the FlashArray//X series differentiates slot usage based on the model controller chassis.

FlashArray//X10 and //X20: These lower-end models utilize Slot 2 for host connectivity (Fibre Channel or iSCSI) because Slots 0 and 1 are typically reserved or occupied by onboard controllers/mezzanine cards. The standard card for these models is often a 2-port card.

FlashArray//X50, //X70, and //X90: These mid-to-high-range models feature a different PCIe bus layout. Slot 0 is the primary designated slot for Host I/O connectivity. To support the higher performance capabilities and port density requirements of the X50, Pure Storage defaults to 4-port FC cards (typically 16Gb or 32Gb).

Therefore, identifying the model number is crucial. Since the question specifies the X50 (R2/R3), the correct placement is Slot 0, and the correct card type is the 4-port model. Option A is incorrect because the 2-port card is not the standard default for the performance-tier X50. Option B describes the configuration for an X20, not an X50.

The output "Ping successful with CCM" is a specific success message returned by the puresupport test or purearray test connectivity checks. CCM stands for Cloud Connection Manager , which is the internal service or endpoint responsible for mediating the secure connection between the local FlashArray and the Pure1 cloud management platform.

When an Implementation Engineer sees this message, it confirms that the array can successfully resolve and reach the Pure1 infrastructure over the internet (specifically the pure1.purestorage.com or associated regional endpoints). This validates that:

DNS is functioning correctly (resolving the CCM hostname).

Firewall rules are permitting outbound HTTPS (port 443) traffic.

The array's management interface is routing correctly.

This connection is vital for "Phone Home" logs, Remote Assist sessions, and fleet management via the Pure1 mobile app or dashboard. It is distinct from the Fusion Fleet Coordinator (which manages fleet logic) and the cross-controller interconnect (which is internal hardware communication).

=========

The customer should proceed via the Self-Service Upgrade (SSU) portal available on Pure1 Manage .

Pure Storage has transitioned significantly toward a self-service model for routine software upgrades to provide customers with greater flexibility and immediacy.

Pure1 Manage: This cloud-based management platform includes a "Software Lifecycle" or "Upgrade" widget. It automatically checks the array's health, compatibility, and readiness for various Purity versions.

Process: The customer can select the target Purity version directly in the portal. Pure1 then orchestrates the "Pre-Flight Checks" (Remote Audit) to ensure the array is healthy. Once passed, the Purity software is downloaded directly to the array, and the customer (or the engineer) can trigger the upgrade at their convenience without needing to schedule a specific window with a live Support engineer.

Invalid Options: Options A and B describe legacy or unsupported workflows. Customers do not manually download Purity ISOs to USB drives or run raw pureinstall CLI commands manually; these methods lack the automated safety checks and cloud-based verification provided by the SSU ecosystem.

Upgrading from a FlashArray//X to a FlashArray//XL is a complex procedure involving significant hardware and network architecture changes. A known issue during specific phases of this upgrade involves the synchronization of ARP tables and IP neighbor entries between the legacy environment and the new controller architecture, which can prevent the High Availability (HA) link from establishing correctly.

If the new controller hangs or fails to reach a "Ready" state after a reboot, the engineering-level script ha_sync.py --resync ipneigh is the prescribed resolution.

This script forces a resynchronization of the IP neighbor table (ARP cache) and HA state information.

It clears stale entries that might be pointing to old MAC addresses or interfaces that moved during the X-to-XL transition.

Once cleared, the controllers can correctly rediscover each other over the internal HA interconnect and proceed to a healthy clustered state.

Options like hardware_check.py are diagnostic only, and firewall.py is for packet filtering, not ARP/HA sync issues.

=========