A customer has a supported cluster with the maximum protection level. How many simultaneous node component failures can Isilon OneFS sustain while still allowing full access to the entire file system and dataset?