VCP-DCV Practice Exam 1 — 20 Questions

Question 1

Which four types of traffic can be assigned to a separate VMkernel adapter on an ESXi host?

Accepted Answer

Management traffic. The correct answers are A, B, C, and E. VMkernel adapters are used for system traffic such as management, vMotion, vSAN, and Fault Tolerance logging. Management traffic (A) handles host communication, vMotion (B) supports live migration, vSAN (C) provides storage traffic, and Fault Tolerance logging (E) is used for FT logging and can be assigned to a separate VMkernel adapter for performance and isolation. Virtual machine network traffic (D) uses standard or distributed port groups, not VMkernel adapters.

Answer

Virtual machine network traffic

Question 2

A vSphere administrator is troubleshooting a VM that is experiencing excessive disk latency. The VM is on a datastore accessed via NFS over a 1GbE network. The host shows high network utilization. Which action should be taken to improve performance?

Accepted Answer

Upgrade the network link to 10GbE or enable multiple NICs with teaming.. The VM is experiencing excessive disk latency due to high network utilization on the 1GbE link. Since NFS storage traffic is entirely network-bound, upgrading to 10GbE or enabling multiple NICs with teaming increases the available bandwidth, reduces congestion, and directly addresses the root cause of the latency. This is the most effective action because the bottleneck is at the network layer, not the storage protocol or VM configuration.

Answer

Enable Storage I/O Control on the datastore.

Answer

Convert the datastore from NFS to VMFS.

Answer

Increase the memory reservation for the VM.

Question 3

A company uses vSphere with Tanzu to run container workloads. The security team requires that all container traffic between namespaces be encrypted. What is the best approach to achieve this?

Accepted Answer

Deploy NSX-T and enable the Network Encryption feature for East-West traffic.. NSX-T's Network Encryption feature provides encryption for East-West traffic between namespaces, meeting the security requirement. Option A is incorrect because the NSX Container Plugin has been deprecated and is not the best approach. Option B is incorrect as vSAN encryption only protects data at rest, not in transit. Option D is incorrect because while Calico can encrypt traffic, it lacks the native integration and centralized management that NSX-T offers with vSphere with Tanzu.

Answer

Use the NSX Container Plugin with IPsec to encrypt traffic.

Answer

Enable vSAN encryption to encrypt data at rest and assume it covers in-transit traffic.

Answer

Install a third-party CNI like Calico with IPsec enabled.

Question 4

A vSphere administrator is planning a Storage DRS implementation for a datastore cluster containing multiple VMFS datastores. The VMs have various I/O patterns. Some VMs should always remain together on the same datastore. Which configuration should be used?

Accepted Answer

Create a VM-to-VM affinity rule in the datastore cluster.. Storage DRS affinity rules allow you to keep VMs together (VM-to-VM affinity) or separate (anti-affinity). To ensure VMs remain together, a VM-to-VM affinity rule is required. Option B is incorrect because Storage DRS does not support per-host datastore affinity rules; rules are at the datastore cluster level. Option C is incorrect because Storage I/O Control manages I/O prioritization, not VM placement. Option D is incorrect because a VM-to-VM anti-affinity rule would separate the VMs, not keep them together.

Answer

Set individual datastore affinity rules on each host.

Answer

Apply Storage I/O Control with high shares to the VMs.

Answer

Create a VM-to-VM anti-affinity rule in the datastore cluster.

Question 5

Which switch type requires a separate vCenter Server to manage its configuration?

Accepted Answer

vSphere Distributed Switch. The vSphere Distributed Switch (VDS) requires a separate vCenter Server to manage its configuration because the VDS is a centralized virtual switch that spans multiple ESXi hosts, and its configuration is stored in the vCenter Server database rather than on individual hosts. Without vCenter, the VDS cannot be created, configured, or managed, as the ESXi hosts rely on vCenter to synchronize the distributed port group settings and network policies across the cluster.

Answer

Virtual Edge Gateway Switch

Answer

vSphere Standard Switch

Answer

vSphere Edge Switch

Question 6

A company requires all vMotion traffic to be encrypted. The vSphere administrator enables vMotion encryption at the cluster level. What else must be configured to ensure vMotion operations are encrypted?

Accepted Answer

Ensure all VMs have virtual hardware version 11 or later.. For vMotion encryption to work, the virtual machine must have hardware version 11 or later. This requirement is documented for vSphere 6.5 and later, which support vMotion encryption. Option A is incorrect because there is no requirement to allocate additional memory for vMotion encryption; cryptographic operations for vMotion are handled by the host's CPU. Option B is incorrect because vMotion encryption is supported on ESXi 6.5 and later, not specifically version 7.0 or later. Option C is incorrect because VM Encryption is a separate feature that encrypts the VM's files at rest, not vMotion traffic. Therefore, ensuring VMs have virtual hardware version 11 or later is necessary for encrypted vMotion.

Answer

Allocate at least 4 GB of additional memory for cryptographic operations.

Answer

Upgrade all ESXi hosts to version 7.0 or later.

Answer

Enable VM Encryption also.

Question 7

A vSphere cluster using vSAN is experiencing high latency for some VMs. The administrator checks the vSAN skyline health and finds that all disk groups are healthy. Which additional step should the administrator take to diagnose the issue?

Accepted Answer

Check the vSAN performance service for object latency breakdown.. The vSAN Performance Service provides granular, real-time and historical metrics for vSAN objects, including latency breakdowns at the VM, disk group, and physical disk levels. Since the skyline health check shows all disk groups as healthy, the next logical step is to use the Performance Service to pinpoint whether the high latency is due to congestion on a specific object, such as a VM virtual disk or a particular disk group component, rather than a hardware failure.

Answer

Verify that the vSAN network is configured with jumbo frames.

Answer

Enable vSAN encryption to improve performance.

Answer

Increase the number of disk groups on each host.

Question 8

A company has a vSphere environment with 20 ESXi hosts and 500 VMs. The security team mandates that all administrative access to vCenter Server must be through a single, highly restricted account with multi-factor authentication (MFA). The account must be used for both the vSphere Client and API integrations. Which step should the administrator take?

Accepted Answer

Integrate vCenter Server with an external identity provider (e.g., ADFS, Okta) that supports MFA, and use a service account with MFA for API access.. Integrating vCenter Server with an external identity provider (IdP) such as ADFS or Okta allows the use of a single service account that supports multi-factor authentication (MFA) for both the vSphere Client and API integrations. This approach meets the security mandate by centralizing authentication through an IdP that enforces MFA, while also supporting OAuth 2.0 token-based API access, which is required for modern vSphere API integrations. The built-in administrator account cannot be directly configured with MFA in a way that satisfies both interactive and API access requirements without external integration.

Answer

Configure the built-in administrator account to require smart card authentication.

Answer

Create a new local account and configure it as a member of the Administrators group, then enforce MFA via a third-party tool on the vCenter Server OS.

Answer

Disable the built-in administrator account and create a new local account with the same privileges.

Question 9

An administrator is troubleshooting a host compliance issue in a vLCM-managed cluster with an image based on ESXi 8.0. The exhibit shows the output of 'esxcli software vib list' on a non-compliant host. Which action is most likely to resolve the compliance issue?

Accepted Answer

Update the Mellanox VIBs to versions compatible with ESXi 8.0 in the cluster image.. The VIBs shown are for ESXi 7.0 (as seen in the version string '700.0.0.12345') and need to be updated to versions compatible with ESXi 8.0 to match the cluster image. Option B is wrong because the host is not VMware-specific, it's about the driver version. Option C is wrong because the driver is still supported but version mismatched. Option D is wrong because you should not remove critical network drivers.

Answer

Replace the host with one from the VMware Compatibility Guide.

Answer

Remove the nmlx5 VIBs from the host to force compliance.

Answer

Ignore the incompatibility because the VIB is VMwareCertified.

Question 10

Which TWO statements are true regarding vSAN deduplication and compression?

Accepted Answer

They are disabled by default on new vSAN clusters. vSAN deduplication and compression are disabled by default on new vSAN clusters (option B is correct). They require an all-flash vSAN configuration, meaning all capacity devices must be SSDs (option D is correct). Option A is incorrect because deduplication and compression are enabled at the disk group level, not cluster level. Option C is incorrect because they can also be used with RAID-5/6 erasure coding policies, not just RAID-1 mirroring. Option E is incorrect because compression cannot be enabled independently; if compression is enabled, deduplication is also enabled.

Answer

They are enabled at the vSAN cluster level

Answer

They can only be used with RAID-1 mirroring policies

Answer

Compression can be enabled independently of deduplication

Question 11

An administrator attempts to expand a VMFS datastore by increasing the LUN size, but the expand option is grayed out. What could be the reason?

Accepted Answer

The LUN is shared with another datastore. If the LUN is shared with another datastore, it cannot be expanded because a LUN can belong to only one datastore. Block size does not affect expansion; RDMs are not used for VMFS; rescan is unrelated to the grayed-out option.

Answer

The datastore is using block size 2 MB

Answer

The host is not rescanned

Answer

The datastore is on a RDM

Question 12

An administrator wants to prevent direct root access to an ESXi host via SSH and the DCUI. Which two configurations are necessary?

Accepted Answer

Enable lockdown mode and remove root from permissions.. Enabling lockdown mode on an ESXi host disables direct root access via SSH and DCUI. Additionally, removing the root user from the permissions list ensures that root cannot be granted access through exception lists. Option A is wrong because setting lockdown mode with root exception would still allow root access under specific circumstances. Option B is wrong because disabling DCUI and SSH services does not prevent root access via other means (e.g., vCenter) and does not enforce persistent restriction. Option C is wrong because configuring SSO with Smart Card authentication does not affect local root access at the ESXi host level.

Answer

Set the host to lockdown mode with root exception.

Answer

Disable DCUI and SSH services.

Answer

Configure SSO to require Smart Card authentication.

Question 13

A company operates a large vSphere environment with 32 ESXi hosts, each featuring 2 sockets, 12 cores per socket (2.6 GHz), and 256 GB RAM. The environment runs a mix of VMs, including several critical database VMs with 16 vCPUs and 128 GB RAM configured. After migrating these database VMs from an older cluster to a new cluster with identical hardware specifications, administrators observe significant performance degradation. vCenter performance charts show high memory ballooning and elevated CPU ready time for these VMs, while overall host utilization remains moderate (CPU 40%, RAM 60%). The new cluster's hosts have two NUMA nodes per socket (each NUMA node spans 6 cores and 64 GB RAM). The older cluster had hosts with a single NUMA node per socket. The administrator confirms that the VMs are running on hosts with sufficient free resources and that no other VMs are contending heavily. What is the most likely cause, and what should the administrator do to resolve the issue?

Accepted Answer

Enable vNUMA for the database VMs to align with the physical NUMA topology.. The performance degradation is caused by a vCPU-to-NUMA topology mismatch. The database VMs have 16 vCPUs, but each NUMA node in the new cluster has only 6 cores. Without vNUMA enabled, the VM scheduler treats the guest as a single large NUMA domain, causing cross-NUMA memory accesses and high memory ballooning. Enabling vNUMA exposes the physical NUMA topology to the guest OS, allowing it to optimize memory locality and reduce overhead.

Answer

Reduce the number of vCPUs for the database VMs from 16 to 8.

Answer

Disable Hyper-Threading on the new cluster hosts.

Answer

Increase the memory reservation for each database VM to prevent ballooning.

Question 14

A vSphere administrator is planning to upgrade a vSphere 7.0 U2 cluster to vSphere 8.0 U1. The cluster is managed by a vCenter Server 7.0 U2. The administrator wants to use vSphere Lifecycle Manager (vLCM) to manage the upgrade. What must the administrator do first?

Accepted Answer

Upgrade vCenter Server to version 8.0 U1.. vLCM relies on the vCenter Server to orchestrate and push images to ESXi hosts. Since the vCenter Server version must be equal to or higher than the target ESXi version, upgrading vCenter Server to 8.0 U1 first is a prerequisite. Without this, vLCM cannot manage the ESXi 8.0 U1 image because the older vCenter lacks the necessary APIs and compatibility.

Answer

Enable vLCM on the cluster and set the desired image to ESXi 8.0 U1.

Answer

Upgrade one ESXi host to 8.0 U1 manually to test compatibility.

Answer

Create a baseline for ESXi 8.0 U1 in vLCM.

Question 15

A vSphere cluster with DRS enabled is experiencing an imbalance in resource utilization across hosts. DRS is set to 'Manual' mode. What action should the administrator take to resolve the imbalance?

Accepted Answer

Manually migrate VMs using vMotion.. In Manual mode, DRS only provides recommendations; the administrator must manually migrate VMs using vMotion. Option B is correct. Option A would automate future migrations but does not resolve current imbalance. Option C changes threshold but won't act immediately. Option D is unrelated.

Answer

Change DRS to 'Fully Automated' mode.

Answer

Enable HA admission control.

Answer

Increase the DRS migration threshold.

Question 16

An administrator creates a DRS rule to separate two VMs (VM1 and VM2) using a 'Should' rule (separate VMs). After the rule is created, VM1 is manually vMotioned to a host that already runs VM2. What is the expected behavior?

Accepted Answer

VM1 remains on the host and a compliance violation is logged.. With a 'Should' rule (separate VMs), DRS does not enforce the rule; it only logs a compliance violation if VMs run on the same host. Manual vMotion overrides DRS, so VM1 will remain on the host with VM2 and a violation is logged. Option A correctly describes this behavior. 'Must' rules would enforce separation, but 'Should' rules are advisory only.

Answer

DRS automatically migrates VM1 to a compliant host.

Answer

The target host is placed into maintenance mode.

Answer

VM1 is powered off to prevent performance issues.

Question 17

Refer to the exhibit. An administrator has configured a vSphere host to use Round Robin (RR) PSP for a specific ALUA storage device. However, after a storage array failover, the host is not detecting the new active paths correctly. Which configuration change should be made to ensure proper path failover behavior?

Accepted Answer

Enable explicit_transition by setting it to 1 in the SATP device config.. The exhibit shows the device is using TPGS (Target Port Group Support) with ALUA. The output shows that implicit_transition is set to 0, meaning the host does not automatically react to ALUA state changes. To ensure proper failover, explicit_transition should be enabled (set to 1), which allows the host to query the array for path state changes. Additionally, setting useANO=1 in PSP config can help by enabling Asymmetric Namespace Access, but the key issue is the implicit_transition setting.

Answer

Change the SATP to VMW_SATP_DEFAULT_AA.

Answer

Set the PSP to VMW_PSP_FIXED and designate a preferred path.

Answer

Increase the IOPS limit for the RR PSP to 10000.

Question 18

A company has multiple clusters with different hardware. They want to create separate vLCM images for each cluster. What is the best practice?

Accepted Answer

Create separate images for each cluster tailored to their hardware.. Each cluster may have unique hardware requirements, and vLCM allows creating separate images per cluster to ensure compatibility. Option A would include unnecessary components and may cause compliance issues; Option B uses deprecated baseline groups; Option D is not the best practice for hardware-specific clusters.

Answer

Create a single image that includes all possible components.

Answer

Use baseline groups instead of images.

Answer

Use Auto Deploy with a single image.

Question 19

A vSphere administrator needs to apply a critical ESXi security patch to a cluster of 10 hosts. The cluster is managed by vLCM using image-based management. What is the correct procedure to apply the patch?

Accepted Answer

Update the cluster image to include the patched version and remediate the cluster.. With vLCM image-based management, you update the cluster image to include the desired ESXi version (which includes the patch), then remediate the cluster to apply the image to all hosts. Option A is incorrect because baselines are not used with image-based management. Option C is incorrect because manual ISO updates are not required; vLCM automates the process. Option D is incorrect because vCenter Update Manager (VUM) is legacy; vLCM uses images.

Answer

Create a new baseline group with the patch and attach it to the cluster.

Answer

Manually update each host using the patch's ISO.

Answer

Use vCenter Update Manager to push the patch as a baseline.

Question 20

A company plans to deploy a new homogeneous cluster with vSphere 8. They want to use vLCM to simplify lifecycle management. What is the recommended approach for maintaining the ESXi hosts?

Accepted Answer

Define a single cluster image and apply it to all hosts.. VLCM uses a single cluster image for homogeneous clusters to ensure consistency. Option B is wrong because manual upgrades via ISO are not recommended when using vLCM; vLCM automates the process with cluster images. Option C is wrong because vSphere baselines are legacy and vLCM is the newer approach for lifecycle management. Option D is wrong because separate images per host are for heterogeneous clusters, not homogeneous.

Answer

Manually upgrade each host via ISO and then import into vLCM.

Answer

Use vSphere baselines to manage patches.

Answer

Create separate images for each host based on its hardware.