VCP-DCV Practice Test 1 — 10 Questions

Question 1

Which four types of traffic can be assigned to a separate VMkernel adapter on an ESXi host?

Accepted Answer

Management traffic. The correct answers are A, B, C, and E. VMkernel adapters are used for system traffic such as management, vMotion, vSAN, and Fault Tolerance logging. Management traffic (A) handles host communication, vMotion (B) supports live migration, vSAN (C) provides storage traffic, and Fault Tolerance logging (E) is used for FT logging and can be assigned to a separate VMkernel adapter for performance and isolation. Virtual machine network traffic (D) uses standard or distributed port groups, not VMkernel adapters.

Answer

Virtual machine network traffic

Question 2

A vSphere administrator is troubleshooting a VM that is experiencing excessive disk latency. The VM is on a datastore accessed via NFS over a 1GbE network. The host shows high network utilization. Which action should be taken to improve performance?

Accepted Answer

Upgrade the network link to 10GbE or enable multiple NICs with teaming.. The VM is experiencing excessive disk latency due to high network utilization on the 1GbE link. Since NFS storage traffic is entirely network-bound, upgrading to 10GbE or enabling multiple NICs with teaming increases the available bandwidth, reduces congestion, and directly addresses the root cause of the latency. This is the most effective action because the bottleneck is at the network layer, not the storage protocol or VM configuration.

Answer

Enable Storage I/O Control on the datastore.

Answer

Convert the datastore from NFS to VMFS.

Answer

Increase the memory reservation for the VM.

Question 3

A company uses vSphere with Tanzu to run container workloads. The security team requires that all container traffic between namespaces be encrypted. What is the best approach to achieve this?

Accepted Answer

Deploy NSX-T and enable the Network Encryption feature for East-West traffic.. NSX-T's Network Encryption feature provides encryption for East-West traffic between namespaces, meeting the security requirement. Option A is incorrect because the NSX Container Plugin has been deprecated and is not the best approach. Option B is incorrect as vSAN encryption only protects data at rest, not in transit. Option D is incorrect because while Calico can encrypt traffic, it lacks the native integration and centralized management that NSX-T offers with vSphere with Tanzu.

Answer

Use the NSX Container Plugin with IPsec to encrypt traffic.

Answer

Enable vSAN encryption to encrypt data at rest and assume it covers in-transit traffic.

Answer

Install a third-party CNI like Calico with IPsec enabled.

Question 4

A vSphere administrator is planning a Storage DRS implementation for a datastore cluster containing multiple VMFS datastores. The VMs have various I/O patterns. Some VMs should always remain together on the same datastore. Which configuration should be used?

Accepted Answer

Create a VM-to-VM affinity rule in the datastore cluster.. Storage DRS affinity rules allow you to keep VMs together (VM-to-VM affinity) or separate (anti-affinity). To ensure VMs remain together, a VM-to-VM affinity rule is required. Option B is incorrect because Storage DRS does not support per-host datastore affinity rules; rules are at the datastore cluster level. Option C is incorrect because Storage I/O Control manages I/O prioritization, not VM placement. Option D is incorrect because a VM-to-VM anti-affinity rule would separate the VMs, not keep them together.

Answer

Set individual datastore affinity rules on each host.

Answer

Apply Storage I/O Control with high shares to the VMs.

Answer

Create a VM-to-VM anti-affinity rule in the datastore cluster.

Question 5

Which switch type requires a separate vCenter Server to manage its configuration?

Accepted Answer

vSphere Distributed Switch. The vSphere Distributed Switch (VDS) requires a separate vCenter Server to manage its configuration because the VDS is a centralized virtual switch that spans multiple ESXi hosts, and its configuration is stored in the vCenter Server database rather than on individual hosts. Without vCenter, the VDS cannot be created, configured, or managed, as the ESXi hosts rely on vCenter to synchronize the distributed port group settings and network policies across the cluster.

Answer

Virtual Edge Gateway Switch

Answer

vSphere Standard Switch

Answer

vSphere Edge Switch

Question 6

A company requires all vMotion traffic to be encrypted. The vSphere administrator enables vMotion encryption at the cluster level. What else must be configured to ensure vMotion operations are encrypted?

Accepted Answer

Ensure all VMs have virtual hardware version 11 or later.. For vMotion encryption to work, the virtual machine must have hardware version 11 or later. This requirement is documented for vSphere 6.5 and later, which support vMotion encryption. Option A is incorrect because there is no requirement to allocate additional memory for vMotion encryption; cryptographic operations for vMotion are handled by the host's CPU. Option B is incorrect because vMotion encryption is supported on ESXi 6.5 and later, not specifically version 7.0 or later. Option C is incorrect because VM Encryption is a separate feature that encrypts the VM's files at rest, not vMotion traffic. Therefore, ensuring VMs have virtual hardware version 11 or later is necessary for encrypted vMotion.

Answer

Allocate at least 4 GB of additional memory for cryptographic operations.

Answer

Upgrade all ESXi hosts to version 7.0 or later.

Answer

Enable VM Encryption also.

Question 7

A vSphere cluster using vSAN is experiencing high latency for some VMs. The administrator checks the vSAN skyline health and finds that all disk groups are healthy. Which additional step should the administrator take to diagnose the issue?

Accepted Answer

Check the vSAN performance service for object latency breakdown.. The vSAN Performance Service provides granular, real-time and historical metrics for vSAN objects, including latency breakdowns at the VM, disk group, and physical disk levels. Since the skyline health check shows all disk groups as healthy, the next logical step is to use the Performance Service to pinpoint whether the high latency is due to congestion on a specific object, such as a VM virtual disk or a particular disk group component, rather than a hardware failure.

Answer

Verify that the vSAN network is configured with jumbo frames.

Answer

Enable vSAN encryption to improve performance.

Answer

Increase the number of disk groups on each host.

Question 8

A company has a vSphere environment with 20 ESXi hosts and 500 VMs. The security team mandates that all administrative access to vCenter Server must be through a single, highly restricted account with multi-factor authentication (MFA). The account must be used for both the vSphere Client and API integrations. Which step should the administrator take?

Accepted Answer

Integrate vCenter Server with an external identity provider (e.g., ADFS, Okta) that supports MFA, and use a service account with MFA for API access.. Integrating vCenter Server with an external identity provider (IdP) such as ADFS or Okta allows the use of a single service account that supports multi-factor authentication (MFA) for both the vSphere Client and API integrations. This approach meets the security mandate by centralizing authentication through an IdP that enforces MFA, while also supporting OAuth 2.0 token-based API access, which is required for modern vSphere API integrations. The built-in administrator account cannot be directly configured with MFA in a way that satisfies both interactive and API access requirements without external integration.

Answer

Configure the built-in administrator account to require smart card authentication.

Answer

Create a new local account and configure it as a member of the Administrators group, then enforce MFA via a third-party tool on the vCenter Server OS.

Answer

Disable the built-in administrator account and create a new local account with the same privileges.

Question 9

An administrator is troubleshooting a host compliance issue in a vLCM-managed cluster with an image based on ESXi 8.0. The exhibit shows the output of 'esxcli software vib list' on a non-compliant host. Which action is most likely to resolve the compliance issue?

Accepted Answer

Update the Mellanox VIBs to versions compatible with ESXi 8.0 in the cluster image.. The VIBs shown are for ESXi 7.0 (as seen in the version string '700.0.0.12345') and need to be updated to versions compatible with ESXi 8.0 to match the cluster image. Option B is wrong because the host is not VMware-specific, it's about the driver version. Option C is wrong because the driver is still supported but version mismatched. Option D is wrong because you should not remove critical network drivers.

Answer

Replace the host with one from the VMware Compatibility Guide.

Answer

Remove the nmlx5 VIBs from the host to force compliance.

Answer

Ignore the incompatibility because the VIB is VMwareCertified.

Question 10

Which TWO statements are true regarding vSAN deduplication and compression?

Accepted Answer

They are disabled by default on new vSAN clusters. vSAN deduplication and compression are disabled by default on new vSAN clusters (option B is correct). They require an all-flash vSAN configuration, meaning all capacity devices must be SSDs (option D is correct). Option A is incorrect because deduplication and compression are enabled at the disk group level, not cluster level. Option C is incorrect because they can also be used with RAID-5/6 erasure coding policies, not just RAID-1 mirroring. Option E is incorrect because compression cannot be enabled independently; if compression is enabled, deduplication is also enabled.

Answer

They are enabled at the vSAN cluster level

Answer

They can only be used with RAID-1 mirroring policies

Answer

Compression can be enabled independently of deduplication