VCP-DCV Practice Exam 3 — 20 Questions

Question 1

An administrator is using vLCM to manage a cluster with 4 ESXi hosts. After a remediation, two hosts show a compliance status of 'Non-Compliant' with the message 'Firmware is not compatible with the selected image'. What is the most likely cause?

Accepted Answer

The cluster does not have a Hardware Support Manager configured.. The correct answer is D because vLCM relies on a Hardware Support Manager (HSM) to validate firmware compatibility against the selected ESXi image. Without an HSM configured, vLCM cannot check firmware versions, so it flags hosts as 'Non-Compliant' with the message 'Firmware is not compatible with the selected image' even if the firmware is actually compatible. This is a common misconfiguration when using vLCM with vSAN or other hardware-dependent clusters.

Answer

The selected image includes a firmware component that is not compatible with the hosts.

Answer

The firmware update requires a different ESXi version and was skipped.

Answer

The hosts were put into maintenance mode during remediation and autopassivation failed.

Question 2

An administrator has a vLCM-managed cluster with a desired image that includes a custom VIB from a third party. After remediation, one host shows 'Compliant' but the custom VIB is missing. What is the most likely cause?

Accepted Answer

The host's acceptance level is set to 'CommunitySupported' but the VIB requires 'PartnerSupported'.. Option B is correct because vLCM enforces host acceptance levels during image compliance checks. If the host's acceptance level is set to 'CommunitySupported' but the custom VIB requires 'PartnerSupported', vLCM will skip installing that VIB even though the rest of the image is compliant. This results in a 'Compliant' status because the host matches the desired image definition, but the VIB is missing because it was never accepted for installation.

Answer

The host has a host profile that overrides the vLCM image.

Answer

The custom VIB was not included in the baseline.

Answer

The custom VIB is not available in the VMware online depot.

Question 3

An administrator is troubleshooting a vLCM cluster where remediation fails with 'Host cannot be updated due to missing VIB'. The desired image includes the VIB. Which THREE actions should the administrator take?

Accepted Answer

Verify that the software depot URL is accessible from vCenter.. Option A is correct because vLCM retrieves VIBs from a software depot URL configured in the desired image. If vCenter cannot reach that URL (e.g., due to network issues, firewall rules, or DNS resolution failure), the remediation process will fail with 'missing VIB' even though the VIB is listed in the image specification. Verifying accessibility ensures the depot is reachable via HTTP/HTTPS and that the repository metadata can be downloaded.

Answer

Ensure that the host firmware is up to date.

Answer

Check if a baseline is attached that conflicts.

Question 4

An administrator sees the above error in the vLCM remediation history. What is the most likely cause?

Accepted Answer

The vCenter Server cannot reach the VMware depot.. The error shown in the vLCM remediation history indicates a failure to download the desired image components. vLCM relies on the vCenter Server to fetch VIBs and software depots from the VMware online depot (or a local depot). If the vCenter Server cannot reach the VMware depot due to network issues, proxy misconfiguration, or firewall blocks (e.g., port 443 to *.vmware.com), the remediation will fail with a download error, not a validation or acceptance-level error.

Answer

The desired image validation failed before remediation.

Answer

The host's acceptance level does not allow the VIB.

Answer

The host firmware is incompatible with the VIB.

Question 5

A company has a vLCM-managed cluster with a desired image that includes ESXi 8.0 U1 and multiple VIBs. After remediating, one host fails with an error: 'Failed to retrieve VIBs from depot'. What is the most likely cause?

Accepted Answer

The vCenter Server does not have internet access to the VMware depot.. The error 'Failed to retrieve VIBs from depot' indicates that vCenter Server cannot reach the depot from which the VIBs are sourced. In a vLCM-managed cluster using a desired image, the image specification includes VIBs that may be hosted on the VMware online depot or a local depot. If vCenter Server lacks internet access to the VMware depot, it cannot download the required VIBs, causing the remediation to fail. This is the most likely cause because the error is specifically about retrieval, not validation or compatibility.

Answer

The cluster has a baseline attached that conflicts with the desired image.

Answer

The image validation failed due to incompatible VIBs.

Answer

The host firmware is not compatible with the selected VIBs.

Question 6

An administrator is troubleshooting a situation where a virtual machine cannot be powered on. The error message indicates insufficient permissions. The VM is in a folder named 'Production' and the administrator has been assigned a custom role with 'Virtual machine > Power On' permission at the folder level. However, the VM is also in a resource pool. What additional permission is most likely missing?

Accepted Answer

Resource > Assign virtual machine to resource pool permission on the resource pool. To power on a virtual machine that resides in a resource pool, the user must have the 'Resource > Assign virtual machine to resource pool' permission on that resource pool. Even though the user has 'Virtual machine > Power On' at the folder level, the VM's association with the resource pool introduces an additional authorization check. Without this resource pool permission, the power-on operation fails with an insufficient permissions error.

Answer

Network > Assign network permission on the network

Answer

Datastore > Allocate space permission on the datastore

Answer

Virtual machine > Configuration permission on the VM

Question 7

A security audit reveals that an ESXi host has been compromised due to an attacker gaining root access via the DCUI. The host is configured with a default DCUI password. Which security best practice should have been implemented to prevent this?

Accepted Answer

Configure the DCUI lockdown mode to 'Normal'. DCUI Lockdown Mode 'Normal' disables direct root access via the Direct Console User Interface (DCUI) by requiring authentication through vCenter Single Sign-On (SSO). This prevents an attacker from using the default or weak DCUI password to gain root access, as the root account is no longer accepted for DCUI login. The mode still allows authorized vCenter administrators to access the host via the DCUI using their SSO credentials, maintaining manageability while eliminating the root password attack vector.

Answer

Disable the DCUI service

Answer

Set a strong password for the root account

Answer

Disable SSH access

Question 8

An administrator is troubleshooting a vLCM cluster where a host fails to remediate with the error: 'Host does not meet the requirements of the selected image'. The host is running ESXi 7.0 U3 and the desired image is ESXi 8.0 U1. What should the administrator check first?

Accepted Answer

Verify that the host is in maintenance mode before remediation.. Option D is correct because vLCM requires the host to be in maintenance mode before applying a new image, especially when upgrading across major ESXi versions (e.g., 7.0 U3 to 8.0 U1). The error 'Host does not meet the requirements of the selected image' typically occurs when the host is not in maintenance mode, as vLCM cannot stage or reboot the host to apply the new image while VMs are running. Placing the host in maintenance mode ensures that all VMs are migrated or powered off, allowing the remediation process to proceed without disruption.

Answer

Verify that all VIBs in the image are compatible with ESXi 7.0 U3.

Answer

Ensure that the host has internet access to download the image.

Answer

Check that the vCenter Server version is at least 8.0.

Question 9

A vSphere administrator needs to ensure that all HTTPS traffic to ESXi hosts is encrypted using TLS 1.2. Where should the administrator configure the minimum TLS version?

Accepted Answer

Host Advanced Settings (Config.HostAgent.plugins.vimsvc.auth.minTLSVersion). Option A is correct because the minimum TLS version for ESXi host HTTPS traffic is configured via the host advanced setting `Config.HostAgent.plugins.vimsvc.auth.minTLSVersion`. This setting directly controls the TLS protocol version used by the ESXi host's HTTP services, including the vSphere Client and API endpoints, ensuring only TLS 1.2 or higher is accepted.

Answer

Security Profile in the vSphere Client

Answer

vCenter Server Appliance (VAMI) web interface

Answer

ESXi Firewall rules

Question 10

A vSphere environment uses Active Directory for authentication. The administrator notices that users from a specific AD group cannot log in to the vCenter Server, although other AD users can. The group is added to vCenter Server with the correct permissions. What is the most likely cause?

Accepted Answer

The domain of the group is not configured as an identity source in vCenter Single Sign-On. The most likely cause is that the domain of the group is not configured as an identity source in vCenter Single Sign-On. Even if the group is added with correct permissions in vCenter Server, vCenter SSO must be able to authenticate users against the domain. Without the domain listed as an identity source, vCenter cannot validate the credentials of users from that group, causing authentication failures for all users in that domain.

Answer

The users are not members of the vCenter Single Sign-On domain

Answer

The user accounts have expired passwords

Answer

The group is nested within another group

Question 11

An administrator wants to use vLCM to manage a cluster with 10 ESXi hosts. After enabling vLCM, what is the first step to ensure all hosts are running the same desired image?

Accepted Answer

Define a desired state image for the cluster.. With vLCM, the first step after enabling it on a cluster is to define a desired state image. This image specifies the exact ESXi version, firmware, and driver versions that all hosts in the cluster must match. Without defining this image, vLCM has no target configuration to validate or enforce against the hosts.

Answer

Remediate the cluster immediately to apply the default image.

Answer

Place all hosts into maintenance mode.

Answer

Create a host upgrade baseline and attach it to the cluster.

Question 12

Match each vSphere component to its primary function.

Question 13

Match each vSphere command-line tool to its purpose.

Question 14

Match each VMware acronym to its full name.

Question 15

Match each vSphere edition/license tier to its key feature.

Question 16

An administrator is designing a new vSphere cluster for a mission-critical application that requires extremely low network latency between VMs within the same cluster. The cluster will use vSphere vMotion for maintenance. Which network configuration best meets these requirements?

Accepted Answer

Configure a distributed switch with jumbo frames and a dedicated VLAN for VM traffic.. Option C is correct because a distributed switch with jumbo frames (MTU 9000) reduces CPU overhead and improves throughput for latency-sensitive VM traffic, while a dedicated VLAN isolates VM traffic from management and vMotion, minimizing contention. Jumbo frames allow larger payloads per packet, reducing the number of packets and interrupt processing, which is critical for low-latency applications. The distributed switch also provides consistent network policy across hosts, essential for vMotion compatibility.

Answer

Create separate standard switches for VM traffic and management.

Answer

Enable SR-IOV on the physical NICs and assign virtual functions to VMs.

Answer

Use a single vSphere Standard Switch for all traffic.

Question 17

Refer to the exhibit. A distributed virtual switch port shows dropped Rx packets and CRC errors. What is the most likely cause?

Accepted Answer

Faulty physical network cable or NIC.. CRC errors and dropped Rx packets on a distributed virtual switch port indicate physical-layer corruption of frames, typically caused by a faulty cable, damaged NIC, or bad transceiver. These errors occur when the cyclic redundancy check (CRC) computed by the receiver does not match the frame's CRC field, which is a direct symptom of signal integrity issues at Layer 1.

Answer

Outdated NIC driver on the ESXi host.

Answer

MTU mismatch between the switch and the VM.

Answer

Incorrect VLAN configuration on the port group.

Question 18

An administrator is troubleshooting a VM that is running slowly. The VM has 4 vCPUs and 16 GB of memory. The host has 2 physical CPUs with 10 cores each, hyper-threading enabled. The administrator runs esxtop and sees that %RDY for the VM is consistently above 15%. Which action would most likely reduce the ready time?

Accepted Answer

Reduce the number of vCPUs to 2 if the workload does not require 4.. A %RDY value consistently above 15% indicates the VM is ready to run but is waiting for CPU scheduling time on the host. With 4 vCPUs on a host that has 20 logical CPUs (2 sockets × 10 cores × 2 threads), the VM is likely over-provisioned relative to its workload needs, causing co-scheduling contention. Reducing the number of vCPUs to 2 decreases the co-scheduling demands and reduces ready time, as the VM will require fewer physical CPUs to be available simultaneously.

Answer

Increase the CPU shares for the VM.

Answer

Increase the number of vCPUs to 8 to improve parallelism.

Answer

Increase the memory allocation to 32 GB.

Question 19

An administrator runs vmkfstools on a VMFS datastore and receives the output shown. The datastore is backed by a single LUN from a SAN array. What is the most likely explanation for the multiple extents shown?

Accepted Answer

The datastore was expanded by adding an extent from the same LUN.. When a VMFS datastore is expanded using the same LUN, vmkfstools can show multiple extents because the additional space is added as a separate extent on the same physical LUN. This is a common practice to grow a datastore without reprovisioning a new LUN, and the output reflects the original and expanded extents both pointing to the same LUN identifier.

Answer

The LUN was presented to the host with multiple paths, and each path is treated as a separate extent.

Answer

The datastore is a VMFS6 datastore with three logical volumes aggregated into one namespace.

Answer

The virtual machine has a large VMDK file that spans multiple extents due to VMFS6 sub-block allocation.

Question 20

Which TWO actions are required to enable encrypted vSphere vMotion for all virtual machines in a cluster?

Accepted Answer

Set the vMotion encryption policy to 'Encrypt all data' in the cluster settings.. Option A is correct because setting the vMotion encryption policy to 'Encrypt all data' in the cluster settings enforces encryption for all vMotion migrations within that cluster. This ensures that memory and state data transferred between ESXi hosts is protected using TLS 1.2, preventing eavesdropping or tampering during live migrations.

Answer

Configure a Key Management Server (KMS) for the cluster.

Answer

Enable Storage DRS on the cluster.

Answer

Set the vMotion encryption policy to 'Encrypt when supported' in the cluster settings.