VCP-DCV Practice Exam 2 — 20 Questions

Question 1

A company uses an external Platform Services Controller (PSC) in a vSphere 6.7 environment. They plan to upgrade to vSphere 7.0. Which security-related consideration is most important?

Accepted Answer

The external PSC is deprecated; it must be converged into the vCenter Server.. In vSphere 7.0, external Platform Services Controllers (PSC) are deprecated and must be converged into the vCenter Server during upgrade. This convergence simplifies management and improves security by reducing the attack surface. The upgrade process requires a topology change to embedded PSC.

Answer

The external PSC will automatically convert to an embedded PSC during upgrade.

Answer

The SSL certificates for the PSC must be reissued from a new CA.

Answer

The STS certificates need to be replaced with custom ones immediately after upgrade.

Question 2

Refer to the exhibit. An administrator cannot resolve the hostname of a DNS server using the ESXi host. What is the most likely cause?

Accepted Answer

The DNS servers are not configured correctly for the domain.

Answer

The search domain is incorrectly set to localdomain.

Answer

The DNS servers are unreachable.

Answer

The ESXi host is not configured to use DNS.

Question 3

What is the purpose of the 'Export System Logs' option in vSphere Lifecycle Manager?

Accepted Answer

Collect logs for troubleshooting. The 'Export System Logs' option in vSphere Lifecycle Manager (vLCM) is designed to gather diagnostic information from the vLCM components, including the vLCM service logs, image depot logs, and related vCenter Server logs. This bundled log archive is used by VMware support and administrators to troubleshoot issues such as image compliance failures, remediation errors, or depot synchronization problems. It does not create backups or recovery images; it is purely a diagnostic tool.

Answer

Create a recovery image

Answer

Back up configuration

Answer

Transfer logs to vCenter

Question 4

Which two actions must the administrator take to ensure network connectivity for VMs on a new distributed switch?

Accepted Answer

Add the ESXi hosts to the distributed switch. To provide network connectivity for VMs on a new vSphere Distributed Switch, the administrator must first add the ESXi hosts to the distributed switch (option B), because a vDS only manages networking on hosts that are members of it; without host membership, no physical uplinks or VM traffic can traverse the switch. The administrator must also create a port group and assign a VLAN (option D), since VM vNICs connect to distributed port groups, and the VLAN ID on that port group determines the Layer 2 broadcast domain for the VMs. Configuring a VMkernel interface (option A) is only required for host management, vMotion, iSCSI, or vSAN traffic, not for general VM connectivity. Setting MTU to 9000 (option C) is an optional jumbo-frame tuning, and enabling Network I/O Control (option E) is an optional traffic-shaping/QoS feature; neither is required for basic VM network connectivity.

Answer

Configure a VMkernel interface on the distributed switch

Answer

Set the MTU to 9000

Answer

Enable Network I/O Control

Question 5

A vSphere administrator needs to ensure that all virtual machine disks are encrypted at rest. The environment uses a KMS cluster with multiple KMIP-compliant servers. The administrator has already configured a storage policy with encryption enabled. However, newly created VMs on a particular datastore still show unencrypted disks. What is the most likely cause?

Accepted Answer

The storage policy with encryption is not assigned to the VMs or their home namespace.. Even when a storage policy with encryption is configured, it must be explicitly assigned to the VMs or their home namespace (the VM's configuration and swap files). If the policy is not assigned, the VM will be created using the default datastore policy, which typically does not include encryption, resulting in unencrypted disks. The administrator must ensure the encryption-enabled policy is applied to the VM during creation or via a storage policy-based management (SPBM) assignment.

Answer

The datastore is a vSAN datastore, which does not support VM-level encryption.

Answer

The KMS cluster must have at least two KMS servers to function correctly.

Answer

The datastore is formatted with VMFS6, which does not support encryption.

Question 6

A VM with a large memory footprint is experiencing high swap rates. The host has free memory but the swap rate is still high. What is the most likely cause?

Accepted Answer

The VM's memory limit is set too low.. A VM memory limit in vSphere caps the amount of host physical memory the VM can consume. When the limit is lower than the guest's working set, the VM balloons and then swaps to its .vswp file even though the host has free memory, because the limit — not host pressure — is driving reclamation. Raising or removing the limit resolves the swap.

Answer

The VM's virtual machine swap file is on a slow datastore.

Answer

The host is using software iSCSI causing high latency.

Answer

The VM's memory reservation is set too high.

Question 7

Place the steps to create a resource pool in a cluster.

Accepted Answer

Right-click cluster, select New Resource Pool, name the resource pool, set CPU and memory resources (shares, reservation, limit), configure expandable reservation (optional), click OK.. Creating a resource pool in a vSphere cluster involves first initiating the creation by right-clicking the cluster and selecting New Resource Pool, then providing a name, followed by configuring CPU and memory resources including shares, reservation, and limit, optionally enabling expandable reservation, and finally confirming by clicking OK. This sequence ensures all required parameters are set before finalizing the resource pool.

Answer

Right-click cluster, select New Resource Pool, set CPU and memory resources (shares, reservation, limit), name the resource pool, configure expandable reservation (optional), click OK.

Answer

Right-click cluster, select New Resource Pool, name the resource pool, set CPU and memory resources (shares, reservation, limit), click OK, configure expandable reservation (optional).

Answer

Right-click cluster, select New Resource Pool, name the resource pool, configure expandable reservation (optional), set CPU and memory resources (shares, reservation, limit), click OK.

Question 8

An administrator is adding an ESXi host to vCenter Server and is prompted to verify the host's certificate thumbprint. The administrator compares it to the output above and it matches. However, the add operation fails with a certificate verification error. What else could be the issue?

Accepted Answer

The certificate common name does not match the hostname. When adding an ESXi host to vCenter Server, the thumbprint verification ensures the host's certificate fingerprint matches what is expected, but it does not validate the certificate's subject attributes. If the certificate's Common Name (CN) does not match the ESXi host's FQDN or IP address used during the add operation, vCenter Server will reject the connection with a certificate verification error, even if the thumbprint is correct. This is because vCenter Server performs hostname verification as part of TLS/SSL certificate validation to prevent man-in-the-middle attacks.

Answer

The vCenter Server's certificate is invalid

Answer

The certificate has expired

Answer

The certificate is not signed by a trusted Certificate Authority

Question 9

Refer to the exhibit. A virtual machine on the VM Network is experiencing intermittent connectivity. The administrator notices that vmnic0 is saturated. Which action would improve performance without causing a single point of failure?

Accepted Answer

Configure load-based teaming on vSwitch0 for the VM Network portgroup.. Load-based teaming (LBT) on vSwitch0 dynamically balances VM traffic across all active uplinks based on real-time utilization, so vmnic0's load is shared with vmnic1, relieving saturation. It also maintains redundancy because both uplinks remain active; if one fails, the other takes over. This directly addresses the intermittent connectivity caused by vmnic0 saturation without introducing a single point of failure.

Answer

Change the active uplinks for VM Network to vmnic1 only.

Answer

Increase the MTU on vSwitch0 to 9000.

Answer

Move the VM Network to vSwitch1.

Question 10

A vSphere cluster using vSAN is experiencing high latency for some VMs. The administrator checks the vSAN skyline health and finds that all disk groups are healthy. Which additional step should the administrator take to diagnose the issue?

Accepted Answer

Check the vSAN performance service for object latency breakdown.. The vSAN Performance Service provides granular, real-time and historical metrics for vSAN objects, including latency breakdowns at the VM, disk group, and physical disk levels. Since the skyline health check shows all disk groups as healthy, the next logical step is to use the Performance Service to pinpoint whether the high latency is due to congestion on a specific object, such as a VM virtual disk or a particular disk group component, rather than a hardware failure.

Answer

Verify that the vSAN network is configured with jumbo frames.

Answer

Enable vSAN encryption to improve performance.

Answer

Increase the number of disk groups on each host.

Question 11

An administrator is planning a vCenter Server deployment for a large environment with 15 ESXi hosts and 300 VMs. The environment requires high availability for vCenter Server. Which deployment topology should the administrator choose?

Accepted Answer

A VCSA configured with vCenter HA (active-passive).. vCenter HA (active-passive) is the native, supported high-availability solution for VCSA, providing automatic failover between an active, passive, and witness node. For a large environment (15 hosts, 300 VMs) requiring vCenter HA, this topology ensures minimal downtime and is the recommended approach in modern vSphere versions.

Answer

A Windows vCenter Server with a mirrored SQL database.

Answer

A single VCSA with an embedded database.

Answer

A VCSA deployed with an external Platform Services Controller.

Question 12

A vSphere administrator is deploying VMs on a vSAN cluster with 6 hosts. Each host has two disk groups, each with one cache SSD and four capacity SSDs. The administrator applies a storage policy using RAID 5 erasure coding with Number of failures to tolerate set to 1. After some time, the administrator notices that several VMs are showing compliance status as 'Non-compliant'. Investigating further, the administrator finds that on one host, the cache SSD of the first disk group has failed. The capacity SSDs in that disk group are still functional. The vSAN cluster still has sufficient overall capacity and the health service shows no other issues. What is the most likely reason for the VMs' non-compliance?

Accepted Answer

The failed cache device makes the entire disk group unavailable, so components on that disk group are inaccessible.. A failed cache device renders the entire disk group non-operational; any VM components on that disk group become inaccessible, causing non-compliance. Option A is incorrect because cache capacity is not a compliance factor. Option B is incorrect because loss of a single cache device does not remove a fault domain. Option C is incorrect because the number of hosts with cache devices is still sufficient.

Answer

The failed cache device reduces the overall cache capacity, causing the policy to be violated.

Answer

The vSAN cluster has lost a fault domain due to the failed cache device.

Answer

The RAID 5 policy requires a minimum of 4 hosts with cache devices, and now only 5 are available.

Question 13

An administrator notices that HTTP connections to the ESXi host are timing out frequently. Based on the exhibit, which configuration change would most likely resolve the issue?

Accepted Answer

Increase maxKeepAliveTimeout to a higher value, such as 180. Increasing maxKeepAliveTimeout to a higher value, such as 180, would most likely resolve the issue of HTTP connections timing out frequently. The maxKeepAliveTimeout setting controls how long the ESXi host's reverse proxy (rhttpproxy) keeps an HTTP connection open for keep-alive requests. If it is too low, connections may time out prematurely, causing frequent timeouts. Increasing it allows longer-lived connections.

Answer

Restart the rhttpproxy service

Answer

Set useProxy to true and specify a proxy server

Answer

Set maxKeepAliveTimeout to 0 to disable keepalive

Question 14

Sequence the steps to configure a VM to use a static IP address via vSphere's customization specification.

Accepted Answer

Initiate customization, then select or create a customization specification, then configure the IP settings within the specification, then apply the customization, then power on the VM.. The correct sequence ensures that the VM receives the static IP configuration during the first boot after customization. Initiating the customization opens the wizard, selecting or creating a spec defines the settings, configuring IP within the spec sets the static address, applying saves the configuration, and powering on triggers the OS customization process.

Answer

Initiate customization, then configure IP settings, then select or create a customization specification, then apply, then power on.

Answer

Power on the VM, then initiate customization, then select or create a specification, then configure IP, then apply.

Answer

Initiate customization, then select or create a specification, then apply, then configure IP, then power on.

Question 15

An administrator wants to use vLCM to manage firmware for a cluster of Dell PowerEdge servers. What is required?

Accepted Answer

vCenter Server with vLCM and hardware support manager (HSM). To use vLCM to manage firmware for a cluster of Dell PowerEdge servers, you need vCenter Server with vLCM and a hardware support manager (HSM). The HSM is a vSphere Installation Bundle (VIB) provided by the hardware vendor (in this case, Dell) that integrates with vLCM to provide firmware updates. Dell's HSM is typically delivered as part of the Dell OpenManage integration, but the core requirement is the HSM plugin registered with vLCM.

Answer

Manual download of firmware ISOs

Answer

Dell OpenManage Enterprise

Answer

vSphere Update Manager baseline

Question 16

A large financial institution runs a vSphere 7.0 environment with 100 ESXi hosts and 2,000 VMs. The security team has identified that several VMs are vulnerable to a critical side-channel attack that requires disabling hyperthreading on the ESXi hosts. The administrator needs to implement a solution that minimizes performance impact while ensuring compliance. The environment uses DRS clusters with varying workloads: some VMs are CPU-intensive (financial modeling) and others are memory-bound (database servers). The administrator cannot afford to take hosts offline for maintenance during business hours. The change must be implemented within 48 hours. Which course of action should the administrator take?

Accepted Answer

Place each host in maintenance mode individually, disable hyperthreading in the host BIOS, reboot the host, and then move to the next host. Rebalance VMs after all hosts are updated.. Disabling hyperthreading to mitigate side-channel attacks (e.g., L1TF or MDS) requires a host BIOS change, which necessitates a reboot. The only supported method in vSphere 7.0 is to place each host into maintenance mode, change the BIOS setting, reboot, and then repeat for all hosts. This approach minimizes performance impact by allowing VMs to be migrated via vMotion and avoids simultaneous downtime, meeting the 48-hour requirement without taking all hosts offline during business hours.

Answer

Use a vSphere DRS rule to disable hyperthreading for all VMs in the cluster, avoiding the need to modify host BIOS.

Answer

Delay the change and schedule a maintenance window for the next month when business impact is lower.

Answer

Disable hyperthreading on all hosts simultaneously using a vSphere Cluster feature, then reboot all hosts at once during off-peak hours.

Question 17

After upgrading the physical switches, the LAG (Link Aggregation Group) on a VDS does not come up. The VDS LAG configuration shows LACP active mode. The physical switch ports are configured with LACP active mode as well. What is the most likely cause?

Accepted Answer

The physical switch ports are not in a port-channel. For a VDS LAG in LACP active mode to come up, the physical switch ports must be configured as a port-channel (LAG) with LACP enabled. If the switch ports are left as individual access ports without a port-channel, the ESXi host's LACP PDUs are not matched to a LAG on the switch side, and the LAG never forms. This is the most common cause after a switch upgrade where the port-channel configuration was not reapplied.

Answer

The physical switch uses a different LACP system priority

Answer

The ESXi hosts have different LAG IDs

Answer

The VDS LAG hashing algorithm is set to IP hash

Question 18

Refer to the exhibit. The vSphere administrator observes that vm1 has a %RDY value of 20.5. What is the most likely cause of this high ready time?

Accepted Answer

The host's physical CPUs are overcommitted. %RDY (ready time) measures the percentage of time a VM's virtual CPUs are ready to run but cannot be scheduled onto a physical CPU because the host's pCPUs are busy. A sustained value of 20.5% indicates significant CPU contention, meaning the host's physical cores are overcommitted relative to the total vCPU demand of all powered-on VMs. This is a classic symptom of CPU over-subscription on the ESXi host.

Answer

The VM is experiencing network packet loss

Answer

The VM's virtual disk is causing I/O latency

Answer

Insufficient memory is allocated to vm1

Question 19

Which feature allows a VM to use storage directly from the host's local disks, pooled across a cluster?

Accepted Answer

vSAN. vSAN is VMware's software-defined storage solution that pools local disks (SSDs/HDDs) from ESXi hosts across a cluster into a shared datastore. It allows VMs to use storage directly from host local disks, aggregated and presented as a single distributed datastore. This matches the requirement exactly.

Answer

VMFS

Answer

vFlash

Answer

NFS

Question 20

A vSphere administrator wants to ensure that all ESXi hosts in a cluster boot from a consistent set of software packages, including firmware and drivers. Which vSphere feature should be used to achieve this?

Accepted Answer

vSphere Lifecycle Manager (vLCM) with a single image. vSphere Lifecycle Manager (vLCM) with a single image is the correct choice because it allows the administrator to define a complete software specification—including ESXi version, firmware, drivers, and add-ons—as a single desired state image. When applied to a cluster, vLCM ensures every ESXi host boots from exactly the same set of software packages, eliminating drift and guaranteeing consistency across all hosts.

Answer

vSphere Update Manager (VUM)

Answer

Host Profiles

Answer

Quick Boot