https://www.passcert.com/3V0-13.26.html Page 2 18 questions selected from source version V8.02 VMWARE CLOUD FOUNDATION SUPPORT Question 1 A development Virtual Machine is experiencing extreme latency. You open esxtop on the underlying ESXi host and press 'm' to enter the Memory view. You suspect the ESXi host is running out of physical RAM and has started forcing VMs to reclaim memory. Match the esxtop memory metric (1-3) with its correct definition (A-C). Metrics: 1. MCTLSZ 2. SWCUR 3. ACTV Definitions: A) The amount of memory currently being actively read/written by the guest OS. B) The amount of memory reclaimed by the ESXi host using the VMware Tools Balloon Driver. C) The amount of memory actively swapped to the hypervisor's physical disk swap file. A. 1-B, 2-C, 3-A B. 1-C, 2-B, 3-A C. 1-A, 2-C, 3-B D. 1-B, 2-A, 3-C Answer: A Explanation ● 1. MCTLSZ (Memory Control Size) matches B. This is the memory ballooning metric. A value > 0 means the host is under contention and forcing the guest OS to page out memory. ● 2. SWCUR (Swap Current) matches C. This represents VM memory swapped to the ESXi disk, which is severely detrimental to performance. ● 3. ACTV (Active) matches A. This is the hypervisor's estimate of how much memory the VM is actively touching at this exact moment. VMWARE CLOUD FOUNDATION SUPPORT Question 2 You are troubleshooting a heavily utilized database VM that suddenly experienced an OS-level file system crash. You suspect a storage queue bottleneck. Using esxtop on the underlying ESXi host, you observe the disk metrics for the specific LUN where the VM resides. The DAVG/cmd (Device Average Latency) is consistently very low (around 2ms), but the KAVG/cmd (Kernel Average Latency) is consistently spiking above 35ms. What is the precise root cause of this performance discrepancy, and how should you address it? A. The physical storage array is overloaded and cannot process I/O fast enough; the solution is to add more cache to the physical SAN. B. The ESXi host's physical HBA adapter is failing and dropping FC frames; the solution is to replace the PCIe HBA card. https://www.passcert.com/3V0-13.26.html Page 3 Question 2 continued C. The storage I/O demands of the VM are exceeding the configured ESXi device queue depth, causing I/O to queue up inside the hypervisor; the solution is to increase the Disk.SchedNumReqOutstanding or the HBA driver queue depth limits. D. The VM is aggressively swapping memory to disk due to a RAM shortage; the solution is to increase the physical memory allocated to the VM. Answer: C Explanation DAVG represents the time it takes the physical storage array to acknowledge the I/O. A low DAVG means the physical array is extremely fast and healthy. KAVG represents the time I/O spends waiting inside the ESXi kernel before it is sent to the array. A high KAVG combined with a low DAVG definitively means that the I/O is queuing up inside the hypervisor's storage stack. This is almost always caused by the VM generating more concurrent I/Os than the ESXi LUN queue depth or adapter queue depth can handle, forcing the hypervisor to hold the I/Os back. VMWARE CLOUD FOUNDATION SUPPORT Question 3 You are receiving a flood of "Virtual Machine CPU usage is critically high" alerts in VCF Operations. Upon investigation, you determine that these alerts are exclusively triggered by scheduled backup jobs that run every night between 2:00 AM and 4:00 AM. You want to keep the alert active during the day for genuine performance issues but stop the false positives at night. How should you optimize the alerting configuration in VCF Operations? A. Delete the underlying Symptom Definition for high CPU usage. B. Increase the alert's "Wait Cycle" to 24 hours. C. Create a "Maintenance Schedule" (Alert Suppression) spanning 2:00 AM to 4:00 AM and apply it to a Custom Group containing the affected VMs. D. Change the severity of the Alert Definition from Critical to Info. Answer: C Explanation The best practice for handling predictable, periodic spikes (like backups, batch processing, or virus scans) that trigger false positives is to use Alert Suppression. By creating a Maintenance Schedule for that specific time window and applying it to a Custom Group (or policy) that encompasses the affected VMs, VCF Operations will continue to collect data but will intentionally suppress generating alerts during those two hours. The alert remains fully active and vigilant for the rest of the day. 3V0-13.26 VCF Support - Mock Exam Practice Set 10 Phase 2: Automation, Monitoring & Operations Difficulty: Level 2 (Directed Troubleshooting & Operational Workflows) https://www.passcert.com/3V0-13.26.html Page 4 VMWARE CLOUD FOUNDATION SUPPORT Question 4 In the VCF Operations (vROps) Administration console, you notice that the primary vCenter Server adapter instance has a status of "Data receiving stopped." The vCenter Server itself is fully operational. To troubleshoot, you select the adapter instance and click "Test Connection," which prompts you with a certificate warning. After accepting it, the test succeeds. What infrastructure event caused this collection failure? A. The VCF Operations collector node ran out of disk space. B. The vCenter Server Appliance (vCSA) IP address was changed. C. The vCenter Server's SSL certificate was recently renewed or replaced. D. The VCF Operations service account password expired in vCenter. Answer: C Explanation VCF Operations adapters rely on a strict chain of trust using SSL certificates. If the vCenter Server's machine SSL certificate is renewed or replaced (e.g., via the certificate-manager utility), the VCF Operations adapter immediately stops collecting data because the target endpoint's identity has changed and is no longer trusted. The standard resolution is to edit the adapter instance, click "Test Connection" to fetch and manually accept the new thumbprint/certificate, and save the configuration to resume collection. VMWARE CLOUD FOUNDATION SUPPORT Question 5 A developer complains that their VCF Automation deployment failed. The blueprint is designed to be cloud-agnostic, simply requesting a "small" size machine with an "ubuntu" OS. The error log states: "No matching image mapping found for 'ubuntu' in the selected cloud zone." As the VCF Automation administrator, where in the Cloud Assembly architecture must you configure these abstracted requirements so they translate correctly into a specific vCenter VM template? A. Service Broker -> Content Sources B. Cloud Assembly -> Infrastructure -> Configure -> Image and Flavor Mappings C. Cloud Assembly -> Infrastructure -> Network Profiles D. vCenter Server -> VM Customization Specifications Answer: B Explanation One of the core strengths of VCF Automation is cloud-agnostic blueprinting. Instead of hardcoding a specific vCenter template name or exact CPU/RAM values into a blueprint, developers use abstracted terms (Image = 'ubuntu', Flavor = 'small'). It is the Cloud Administrator's responsibility to navigate to Infrastructure -> Configure -> Image and Flavor Mappings to define what these terms mean for each specific Cloud Account. For example, mapping the Image 'ubuntu' to a specific vSphere Template in the on-premises datacenter, and simultaneously mapping it to an AMI in AWS. 3V0-13.26 VCF Support - Mock Exam Practice Set 12 Phase 2: Automation, Monitoring & Operations Difficulty: Level 2 & 3 (Integration & Cross-Component Troubleshooting) https://www.passcert.com/3V0-13.26.html Page 5 VMWARE CLOUD FOUNDATION SUPPORT Question 6 You are enabling Workload Management (Supervisor) on a vSphere cluster within a VCF Workload Domain. The configuration process runs for several minutes but eventually fails at the "Configuring NSX for Supervisor" stage. You have verified that the NSX Edge cluster is healthy, the Tier-0 gateway is active, and BGP routing is established. Which specific network misconfiguration is the most common cause of this provisioning failure? A. The Workload Network MTU is set to 1500 instead of the required 9000. B. The starting IP address in the configured Ingress CIDR overlaps with the Egress CIDR. C. DRS is set to "Partially Automated" on the vSphere cluster instead of "Manual". D. The NSX Manager machine SSL certificate was not manually imported into the vCenter Trusted Root store. Answer: B Explanation When configuring the Supervisor cluster network via NSX, you must define specific subnets for Ingress (load balancers) and Egress (SNAT for pod outbound traffic). A strict requirement is that the Ingress CIDR, Egress CIDR, and Pod/Service CIDRs must be completely non-overlapping. If the Ingress and Egress IP ranges overlap, the NSX configuration task will fail during the Supervisor provisioning phase. (Note: DRS must be Fully Automated, not Partially Automated or Manual). VMWARE CLOUD FOUNDATION SUPPORT Question 7 You are creating a new vSphere Namespace in a VCF Workload Domain to allocate resources for a development team. After configuring the permissions and clicking finish, the Namespace remains in a "Configuring" or "Error" state in the vSphere Client. Looking at the Namespace events, you see an error stating: "Failed to apply storage limits." What is the most likely administrative configuration missing that prevents the Namespace from successfully activating? A. The ESXi hosts in the cluster do not have local VMFS datastores. B. No VM Storage Policy has been assigned to the vSphere Namespace, preventing the Supervisor from creating the required storage quota objects. C. The vSAN cluster has deduplication and compression disabled. D. The developer's Active Directory account does not have read permissions on the underlying datastore. Answer: B Explanation When a vSphere Namespace is created, vSphere requires a VM Storage Policy to govern where the Kubernetes persistent volumes and pod ephemeral disks will be placed, as well as to enforce storage quotas. If an administrator fails to assign at least one valid VM Storage Policy to the Namespace during or immediately after creation, the Supervisor cannot initialize the storage constraints, and the Namespace will fail to fully provision. https://www.passcert.com/3V0-13.26.html Page 6 VMWARE CLOUD FOUNDATION SUPPORT Question 8 A developer attempts to deploy a legacy monitoring DaemonSet to a vSphere 8 VKS guest cluster. The deployment fails, and the ReplicaSet generates an event: Error creating: pods "monitor-agent-" is forbidden: violates PodSecurity "baseline": privileged (container "agent" must not set securityContext.privileged=true). The organization has transitioned away from the deprecated PodSecurityPolicies (PSP). How should the cluster administrator resolve this deployment blockage using the modern vSphere 8 /Kubernetes 1.24+ security architecture? A. Create a new PodSecurityPolicy (PSP) that allows privileged escalation and bind it to the developer's ServiceAccount. B. Apply specific Pod Security Admission (PSA) labels (e.g., pod-security.kubernetes.io/enforce: privileged) to the target namespace where the DaemonSet is being deployed. C. Add the developer to the vCenter Administrators SSO group. D. Disable the NSX Distributed Firewall for the worker node VMs. Answer: B Explanation Starting with Kubernetes 1.24 (and strongly enforced in vSphere 8 VKS environments), PodSecurityPolicies (PSP) are deprecated and replaced by Pod Security Admissions (PSA). PSA operates at the namespace level using labels. By default, VKS namespaces may enforce a "baseline" or "restricted" profile, which blocks privileged containers. To allow a privileged DaemonSet to run without completely disabling security, the administrator must label the specific namespace to enforce the "privileged" PSA profile, explicitly granting permission for privileged pods to execute within that boundary. 3V0-13.26 VCF Support - Mock Exam Practice Set 18 Phase 4: NSX Networking & Security Difficulty: Level 1 & 2 (Tool Identification & Conceptual Routing) VMWARE CLOUD FOUNDATION SUPPORT Question 9 Two virtual machines, VM-A and VM-B, reside on the same NSX Overlay segment but on different ESXi hosts (Host-1 and Host-2) in a VCF Workload Domain. They can ping each other using standard ICMP packets (size 56 bytes). However, when they attempt to transfer large files or ping with a payload of 1600 bytes, the connection times out. Which CLI command should you run on the ESXi host to specifically test the physical underlay MTU for the GENEVE tunnel? A. ping <Destination_TEP_IP> B. vmkping ++netstack=vxlan -d -s 1572 <Destination_TEP_IP> C. esxcli network ip connection list D. pktcap-uw --vmk vmk1 Answer: B Explanation The issue described is a classic MTU mismatch on the physical network. Standard small pings work, but large packets fail because they exceed the physical switch MTU when GENEVE encapsulation overhead is added. To test the overlay underlay connectivity, you must use vmkping from the source host's TEP (Tunnel Endpoint) to the destination host's TEP IP. You must use the vxlan netstack (which handles GENEVE in modern NSX), set the "do not fragment" flag (-d), and set a large payload size (-s 1572 or larger, depending on the environment) to verify the physical switches allow jumbo frames. https://www.passcert.com/3V0-13.26.html Page 7 Question 9 continued VMWARE CLOUD FOUNDATION SUPPORT Question 10 VM-Web (IP: 10.10.10.5) is on Logical Segment A. VM-App (IP: 10.10.20.5) is on Logical Segment B. Both segments are connected to the same NSX Tier-1 Gateway. Both VMs reside on the EXACT SAME physical ESXi host. Which statement correctly describes the logical routing packet walk when VM-Web sends a packet to VM-App? A. The packet is encapsulated, sent to the physical Top-of-Rack switch, routed, and sent back down to the same ESXi host. B. The packet travels from VM-Web to the NSX Edge Node VM where the Tier-1 Gateway is hosted, gets routed, and is sent back to the ESXi host. C. The packet is routed locally within the ESXi host's kernel by the Distributed Router (DR) component of the Tier-1 Gateway; the packet never leaves the physical ESXi host. D. The packet is sent to the NSX Manager for routing decisions before being forwarded to VM-App. Answer: C Explanation NSX utilizes a Distributed Routing (DR) architecture. The routing logic for Tier-1 and Tier-0 gateways is instantiated in the hypervisor kernel of every ESXi host participating in the transport zone. When VM-Web wants to talk to VM-App, and both are on the same physical host, the local ESXi kernel's DR intercepts the packet, looks up the routing table, realizes the destination is also local, and routes the packet directly to VM-App's segment within memory. The packet never touches the physical network or an NSX Edge node. VMWARE CLOUD FOUNDATION SUPPORT Question 11 A virtual machine (VM-Web-01) on an NSX overlay segment needs to communicate with an external physical database residing on a traditional VLAN. The VCF architecture utilizes a standard two-tier routing topology (Tier-1 Gateway connected to a Tier-0 Gateway). The Tier-1 Gateway is configured with a stateful service (Gateway Firewall). Which statement correctly describes the packet's journey as it leaves the ESXi host and heads Northbound toward the physical network? A. The packet is routed by the Distributed Router (DR) on the ESXi host directly to the physical Top-of-Rack switch, bypassing the NSX Edge completely. B. The packet is encapsulated on the ESXi host, sent to the active NSX Edge Node hosting the Tier-1 Service Router (SR) to process the stateful firewall rules, then forwarded to the Tier-0 Gateway, and finally sent to the physical network. C. The packet is sent to the NSX Manager, which inspects the stateful firewall rules and forwards it to the physical network. D. The packet is routed by the Tier-0 Distributed Router on the ESXi host, sent to the physical switch, and the physical switch applies the stateful firewall rules. Answer: B Explanation In a two-tier NSX topology, distributed routing (DR) happens in the hypervisor kernel. However, stateful services (like NAT, https://www.passcert.com/3V0-13.26.html Page 8 Question 11 continued VPN, or Gateway Firewalls) cannot be distributed; they must be processed centrally. When a Tier-1 Gateway is configured with stateful services, an active Service Router (SR) component is instantiated on an NSX Edge Node. The packet walk is: VM -> ESXi Kernel (Tier-1 DR -> Tier-0 DR) -> GENEVE Tunnel to NSX Edge Node -> Tier-1 SR (stateful firewall processing) -> Tier-0 SR -> Physical Top-of-Rack switch. VMWARE CLOUD FOUNDATION SUPPORT Question 12 You are designing the NSX routing architecture for a VCF Workload Domain. You need to deploy a Tier-1 Gateway that provides Load Balancing and NAT services for a specific tenant. Based on NSX high availability (HA) principles, how must the Tier-1 Gateway be configured on the Edge Cluster to support these specific services? A. It must be deployed in Active-Active mode to provide Equal Cost Multi-Path (ECMP) routing for the Load Balancer. B. It must be deployed in Active-Standby mode because stateful services (like NAT and Load Balancing) require a single active router to maintain connection state tables. C. It must be deployed without an Edge Cluster allocation, running entirely in the distributed kernel space. D. It must be configured to use BGP Route Reflectors across all Edge Nodes. Answer: B Explanation Stateful services (such as NAT, Load Balancing, Stateful Gateway Firewalls, and VPNs) require the router to keep track of individual TCP/UDP session states. If traffic was load-balanced across multiple routers (Active-Active), asymmetric routing could cause the return packets to hit a router that doesn't have the connection state, resulting in dropped packets. Therefore, any Tier-1 or Tier-0 Gateway running stateful services MUST be configured in Active-Standby mode. Active-Active is strictly for stateless routing using ECMP. VMWARE CLOUD FOUNDATION SUPPORT Question 13 A new NSX Tier-0 Gateway is deployed and configured to peer with the physical Data Center core switches using BGP. The NSX UI shows the BGP neighbor status as "Active" or "Idle" instead of the expected "Established" state. You suspect a basic BGP parameter mismatch. Which of the following mismatches would prevent the BGP session from reaching the "Established" state? A. The NSX Tier-0 Gateway and the physical switch have different MTU sizes configured on their loopback interfaces. B. The BGP Keepalive and Hold Down timers configured on the Tier-0 Gateway do not match the timers on the physical switch. C. The Local ASN (Autonomous System Number) configured on the Tier-0 Gateway does not match the Remote ASN configured on the physical switch's neighbor statement. D. ECMP is enabled on the Tier-0 Gateway, but disabled on the physical switch. Answer: C Explanation BGP peering requires strict matching of specific parameters to form an adjacency. If Router A is trying to peer with Router B, Router A's "Remote ASN" must exactly match Router B's "Local ASN", and vice versa. An ASN mismatch will immediately drop the peering attempt, leaving it in an Idle or Active state. Unlike OSPF, BGP timer mismatches (Option B) do not prevent a session from establishing; the routers will simply negotiate and use the lower timer value. MTU and ECMP settings https://www.passcert.com/3V0-13.26.html Page 9 Question 13 continued (Options A and D) affect data forwarding, not the initial BGP TCP handshake and peering establishment. VMWARE CLOUD FOUNDATION SUPPORT Question 14 A highly transactional virtual machine (VM-DB-01) running on an external Fibre Channel (FC) VMFS datastore is experiencing severe performance degradation. You open esxtop and examine the storage metrics (u for disk device, v for VM). You notice that the DAVG/cmd (Device Latency) is a healthy 1ms, the KAVG/cmd (Kernel Latency) is a healthy 0.5ms, but the GAVG/cmd (Guest Average Latency) is spiking over 40ms. What is the specific cross-stack bottleneck causing this issue? A. The physical Fibre Channel array is overloaded and queuing I/O requests. B. The ESXi host's physical HBA queue depth has been exceeded. C. The virtual machine has a misconfigured or missing VMware Tools installation. D. The virtual machine's Paravirtual SCSI (PVSCSI) adapter queue depth inside the guest OS is saturated, or the guest OS itself is starved for CPU resources to process the I/O interrupts. Answer: D Explanation GAVG (Guest Average Latency) is the total latency seen by the virtual machine (GAVG = KAVG + DAVG). If DAVG (Physical Storage) and KAVG (ESXi Kernel) are both extremely low, it proves the physical storage and the hypervisor storage stack are performing perfectly. A massive discrepancy where only GAVG is high points directly to a bottleneck inside the virtual machine. This is typically caused by a saturated virtual SCSI controller queue (requiring a registry/driver tweak inside the OS to increase the PVSCSI queue depth) or the VM lacking enough CPU cycles to process the storage interrupts generated by the virtual adapter. VMWARE CLOUD FOUNDATION SUPPORT Question 15 A multi-tier application is deployed across three virtual machines (Web, App, DB) in a VCF Workload Domain. The VMs reside on the same NSX Overlay Segment. The application owners report that the Web VM can communicate with the App VM, but the App VM cannot communicate with the DB VM. You run a Traceflow from the App VM to the DB VM. The Traceflow output shows the packet is explicitly dropped by a Distributed Firewall (DFW) rule, but the Rule ID shown is Rule 2 (Default Deny). You are certain you created an "Allow" rule for this traffic. What is the most likely reason the "Allow" rule is being ignored? A. The "Allow" rule was created in the Gateway Firewall section instead of the Distributed Firewall section. B. The "Allow" rule is placed below the "Default Deny" rule in the DFW policy hierarchy. C. The VMs are on the same ESXi host, so DFW rules are bypassed. D. The ESXi host's hardware firewall is dropping the packet before NSX can process it. Answer: B Explanation The NSX Distributed Firewall processes rules in a strict top-down order. The moment a packet matches a rule, the action (Allow/Drop/Reject) is applied, and processing stops. Every DFW policy table ends with a "Default Deny" or "Default Drop" rule. If an administrator creates a valid "Allow" rule but accidentally leaves its placement below a broader "Deny" rule (or the bottom Default Deny rule), the packet will hit the Deny rule first, get dropped, and the "Allow" rule will never be evaluated. https://www.passcert.com/3V0-13.26.html Page 10 Question 15 continued VMWARE CLOUD FOUNDATION SUPPORT Question 16 You are optimizing a VCF Workload Domain cluster that runs high-performance databases on vSAN. During peak hours, the vSAN cluster exhibits high write latency. You check the Skyline Health "vSAN Performance" metrics and observe that the "De-stage Rate" (the speed at which data moves from the cache tier to the capacity tier) is consistently flatlining at a low megabyte-per-second value, while the cache buffer fills to 100%. What is the underlying hardware constraint causing this bottleneck? A. The physical network switches are dropping Jumbo Frames. B. The CPU on the ESXi hosts is severely overcommitted, starving the vSAN I/O threads. C. The capacity tier drives (e.g., HDDs or lower-tier SSDs) are physically too slow to absorb the data draining from the high-speed NVMe cache drives. D. The vSAN Storage Policy is configured with FTT=2, doubling the write penalty. Answer: C Explanation In a 2-tier vSAN architecture, all writes hit the cache tier first (which is extremely fast). vSAN then lazily "de-stages" (flushes) this data down to the capacity tier. If the workload generates a massive, sustained burst of writes, the cache can fill up. If the cache is full, new writes are forced to wait for the de-stage process to make room. If the de-stage rate is low and flat, it indicates the physical capacity drives have reached their maximum hardware throughput limit and cannot spin or write any faster. The ultimate fix is upgrading the capacity tier hardware or moving to an Express Storage Architecture (ESA) which eliminates disk groups. VMWARE CLOUD FOUNDATION SUPPORT Question 17 A VCF operations team is flooded with hundreds of "Network Port Disconnect" alerts from VCF Operations (vROps). Upon investigation, all of these alerts are originating from a specific ESXi cluster designated for Virtual Desktop Infrastructure (VDI), where VMs are constantly powered on, off, and destroyed by automated pools. How should you configure VCF Operations to permanently eliminate these noisy alerts for this specific cluster without blinding the system to genuine network disconnects in the critical Database cluster? A. Disable the "Network Port Disconnect" Symptom Definition globally in VCF Operations. B. Increase the "Wait Cycle" on the Alert Definition to 60 minutes. C. Create a Custom Group containing the VDI cluster, create a custom Policy that disables that specific Alert Definition, and apply the policy to the Custom Group. D. Configure an Alert Notification Rule to filter out the VDI hostnames before sending the emails. Answer: C Explanation VCF Operations uses Policies to control which alerts, symptoms, and metrics are active for specific objects. By default, all objects inherit the "Base Policy". If an alert is useful for 90% of the environment (like a Database cluster) but useless/noisy for 10% (like a VDI cluster where network ports disconnecting is normal behavior when VMs are destroyed), you must use policy override. You create a Custom Group for the VDI objects, clone the base policy, disable the specific alert in the cloned policy, and assign it to the Custom Group. This maintains strict alerting for the DB cluster while silencing the VDI cluster. https://www.passcert.com/3V0-13.26.html Page 11 VMWARE CLOUD FOUNDATION SUPPORT Question 18 You are performing a final pre-flight check of a newly commissioned VCF Workload Domain. You navigate to the Skyline Health dashboard for the vSAN cluster. All checks are green except for a warning under the "Hardware Compatibility" section stating: "vSAN HCL DB is up-to-date: Warning". What is the direct consequence of ignoring this specific warning, and how do you resolve it? A. The ESXi hosts will refuse to mount the vSAN datastore; you must manually download the JSON file from the VMware HCL website and upload it to vCenter. B. The vSAN health engine cannot accurately determine if the physical disk controllers and NVMe drives are using supported firmware versions, risking data corruption; you must update the HCL database via the internet or manual offline upload. C. vSphere HA will be disabled on the cluster; you must run the vSAN hardware remediation wizard. D. The ESXi hosts will be placed into maintenance mode automatically; you must disable proactive HA. Answer: B Explanation The vSAN Hardware Compatibility List (HCL) database is a locally cached file in vCenter that contains the signatures of all VMware-certified storage controllers, physical drives, and their exact supported firmware/driver combinations. If this database is outdated (older than 180 days, triggering the warning), the Skyline Health engine cannot validate if your hardware is running safe code. Ignoring this risks severe data corruption or PSODs if a hardware vendor introduces a bug. It does not stop the cluster from running (so A, C, and D are false), but it leaves you running blind. The fix is simply updating the DB file online or offline.