VCP-DCV Practice Exam 3 — 20 Questions

Question 1

Which TWO prerequisites must be met before enabling vLCM image-based management on a vSAN cluster?

Accepted Answer

All ESXi hosts must be reachable and managed by the same vCenter Server.. Options A and C are correct prerequisites for enabling vLCM image-based management on a vSAN cluster. All ESXi hosts in the cluster must be managed by the same vCenter Server because vLCM operates at the cluster level and requires a single vCenter to coordinate updates. Additionally, vCenter Server version must be 7.0 or later, as vLCM was introduced in vSphere 7.0. Option B is incorrect because vLCM supports vSAN clusters; the cluster does not need to avoid vSAN. Option D is incorrect; while vSAN readiness is required for vSAN itself, it is not a specific prerequisite for enabling vLCM image-based management. Option E is incorrect because vLCM does not require a dedicated vCenter Server; it uses the existing vCenter managing the cluster.

Answer

The cluster must not be using vSAN.

Answer

All hosts in the cluster must be vSAN ready and part of a vSAN cluster.

Answer

A separate vCenter Server must be dedicated to lifecycle management.

Question 2

What is the maximum number of virtual CPUs (vCPUs) that can be allocated to a virtual machine on vSphere 8 Enterprise Plus?

Accepted Answer

256. 256 vCPUs. vSphere 8 Enterprise Plus supports up to 256 virtual CPUs per virtual machine. Option A (128) was the maximum in vSphere 6.5 and earlier, not vSphere 8. Option B (512) exceeds the vSphere 8 limit. Option C (64) is below the current maximum and incorrect.

Answer

128

Answer

512

Answer

64

Question 3

A vSphere environment uses VMCA for certificate management. An administrator needs to replace the certificate for vCenter Server with a custom CA-signed certificate. The custom CA root certificate must be trusted by all ESXi hosts. Which method should the administrator use to distribute the custom CA root certificate to ESXi hosts?

Accepted Answer

Create a host profile containing the custom CA root certificate and apply it to the ESXi hosts. Using a host profile to apply the custom CA root certificate ensures consistent, policy-driven deployment across all ESXi hosts, leveraging vCenter's host profile functionality. Option A is incorrect: restarting the rhttpproxy service with a new configuration does not distribute certificates; it only restarts the proxy service. Option B is incorrect: while vCenter can manage machine SSL certificates, it does not automatically push root CA certificates to ESXi hosts; the administrator must explicitly import the root CA into the ESXi trust store, which is not done automatically by vCenter. Option C is incorrect: manually uploading via SCP is not scalable and is not the recommended method for managing certificate trust across multiple hosts; host profiles provide a centralized, automated approach.

Answer

Restart the rhttpproxy service on each ESXi host with a new configuration

Answer

Import the root CA certificate into vCenter Server and it will automatically push to hosts

Answer

Manually upload the root CA certificate to each ESXi host via SCP

Question 4

An administrator needs to lock down an ESXi host for FIPS 140-2 compliance. Which step must be taken?

Accepted Answer

Enable lockdown mode on the ESXi host.. For FIPS 140-2 compliance, the ESXi host must be placed in lockdown mode to restrict direct root access and ensure only authorized users via vCenter can manage the host. Option A is incorrect because disabling the ESXi Shell and SSH services alone does not achieve FIPS compliance; lockdown mode is the required step. Option C is incorrect because host profiles can apply security settings but do not enforce lockdown mode for FIPS. Option D is incorrect because FIPS mode is not configured in the host's BIOS; it is a software-level cryptographic compliance enforced by ESXi lockdown and other settings.

Answer

Disable the ESXi Shell and SSH services.

Answer

Configure a host profile with a security policy.

Answer

Enable FIPS mode in the host's BIOS.

Question 5

A company runs a critical e-commerce platform on a vSphere 7 cluster with ESXi hosts connected to a vSAN datastore. The environment uses vSphere Trust Authority (vTA) and VM encryption with an external KMS. Recently, after a successful vTA attestation, one of the VMs (WebServer-01) failed to power on with the error: 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable.' The administrator verifies that other encrypted VMs on the same host power on successfully. The KMS cluster consists of two servers: KMS-01 and KMS-02, both accessible from the management network. The administrator checks the VM's configuration and finds that it uses a custom storage policy with encryption. What is the most likely cause of this specific VM's failure?

Accepted Answer

The VM's encryption key was retrieved from a different KMS server that is now unavailable, and the key ID in the VM's metadata points to that KMS server.. The error 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable' indicates that the ESXi host cannot contact the KMS server to retrieve the VM's encryption key. Since other encrypted VMs on the same host power on successfully, the host can reach the KMS cluster, but this specific VM's encryption key may have been issued by a different KMS server (e.g., an older or alternative KMS) that is now unavailable. The key ID stored in the VM's metadata points to that unreachable server, causing the failure. Option A is incorrect because if the vCenter KMS cluster configuration were deleted, all VMs would be affected. Option B is incorrect because modifying the storage policy does not change the existing encryption key; the VM remains encrypted with its original key. Option C is incorrect because vTA attestation is separate from KMS key retrieval; the error message is specific to KMS unavailability.

Answer

The vCenter Server's KMS cluster configuration has been deleted, affecting all VMs but not this one.

Answer

The storage policy used by the VM has been modified and no longer includes encryption.

Answer

The vTA attestation process failed for the VM's host, but the error message is misleading.

Question 6

A vSphere administrator has a VMFS6 datastore that is running low on space. The storage array has additional unallocated LUNs. The administrator attaches a new 2 TB LUN to the ESXi host. What is the correct procedure to increase the datastore capacity?

Accepted Answer

Use the 'Increase datastore capacity' wizard to add the LUN as an extent. The correct procedure is to use the 'Increase datastore capacity' wizard to add the new LUN as an extent to the existing VMFS6 datastore. VMFS6 supports online extension, allowing the datastore to be expanded without unmounting or disrupting running VMs. Option B is incorrect because unmounting and extending the partition is unnecessary; VMFS6 handles this dynamically. Option C is incorrect because recreating the datastore with a larger block size is disruptive and not required—adding an extent achieves the capacity increase. Option D is incorrect because creating a new datastore and migrating VMs is unnecessary and adds complexity; the existing datastore can be extended seamlessly.

Answer

Unmount the datastore, expand the VMFS partition, then remount

Answer

Recreate the datastore with a larger block size and restore from backup

Answer

Create a new datastore on the LUN and use Storage vMotion to migrate VMs

Question 7

An administrator needs to create a distributed port group on a vSphere Distributed Switch (VDS). Which two configuration settings must be specified during creation? (Choose two.)

Accepted Answer

VLAN ID. A VLAN ID must be specified to define the VLAN membership for the distributed port group, ensuring proper network segmentation and traffic isolation. The port group name is required as a unique identifier for administrative management and reference within the vSphere environment.

Answer

Uplink teaming policy

Answer

Number of ports

Answer

Traffic shaping policy

Question 8

A large e-commerce company has a vSphere cluster with 16 hosts, each with 2 sockets of 10 cores (HT enabled) and 512 GB RAM. They run a mix of web and database VMs. During the holiday season, some VMs experience high CPU ready time, especially the database VMs. DRS is set to Fully Automated and migration thresholds are at default. The administrator notices that the cluster's CPU utilization averages at 60%, but some hosts are at 90% while others are at 30%. The VMs with high ready time are all on the highly utilized hosts. To resolve this, the administrator considers several options. Which action will most effectively balance CPU load and reduce ready time for the database VMs?

Accepted Answer

Decrease the DRS migration threshold from 3 to 1 to make it more aggressive.. Decreasing the DRS migration threshold from 3 to 1 makes DRS more aggressive, triggering migrations even for small imbalances. This will redistribute VMs from highly utilized hosts to underutilized hosts, reducing CPU ready time for database VMs. Option A (resource pool with higher shares) does not cause migrations; it only prioritizes CPU allocation during contention on the same host. Option B (increasing threshold to 5) makes DRS less aggressive, worsening the imbalance. Option C (VM Monitoring) is an HA feature for fault detection, not load balancing.

Answer

Create a resource pool for database VMs and set a higher CPU share value.

Answer

Increase the DRS migration threshold from 3 to 5 to reduce unnecessary migrations.

Answer

Enable 'VM Monitoring' in the HA cluster settings.

Question 9

A company has a vLCM-managed cluster with hosts that have different hardware models (heterogeneous). The administrator needs to manage updates for all hosts. What is the correct approach?

Accepted Answer

Create multiple host images, each tailored to a specific hardware model.. VLCM supports heterogeneous clusters by creating multiple host images, one per host hardware configuration. Option A is wrong because baselines are a legacy method for managing updates, not recommended for vLCM. Option B is wrong because a single cluster image is intended for homogeneous clusters, not heterogeneous. Option C is wrong because manually adding missing drivers after remediation is not a supported approach for vLCM.

Answer

Use vSphere baselines to manage each host individually.

Answer

Create a cluster image that includes all necessary drivers for both hardware models.

Answer

Use a single image and manually add missing drivers after remediation.

Question 10

An administrator is planning a vMotion migration and wants to minimize the performance impact on the virtual machines during the migration. Which network configuration is recommended?

Accepted Answer

Create a dedicated VMkernel interface with at least 10 GbE throughput for vMotion.. A dedicated VMkernel interface for vMotion isolates migration traffic from other network traffic, reducing contention and ensuring consistent performance. A minimum of 10 GbE is recommended to handle the high throughput demands of vMotion, especially for large VMs. Option B is incorrect because using the default management interface can lead to resource contention and performance degradation. Option C is incorrect because a single 1 GbE interface for both vMotion and management is likely insufficient and causes competition. Option D is incorrect because jumbo frames alone do not address the contention issue; keeping vMotion on the management network still causes competition.

Answer

Use the default management VMkernel interface for vMotion traffic.

Answer

Configure a single 1 GbE interface for both vMotion and management traffic.

Answer

Enable jumbo frames on all interfaces, but keep vMotion on the management network.

Question 11

A storage administrator is planning a vSAN stretched cluster for a remote office. The cluster must support stretching across two sites for disaster avoidance. Which two prerequisites must be met? (Choose two.)

Accepted Answer

The network latency between sites must be less than 5 ms round-trip.. Correct options A and C: Each site must have a minimum of two hosts (C) and network latency between sites must be less than 5 ms round-trip (A). Option B is incorrect because the witness host must be placed at a third site, not the primary. Option D is incorrect because hosts can use multiple network adapters for vSAN traffic; a single adapter is not required. Option E is incorrect because a vSAN stretched cluster typically uses two fault domains (one per site) plus a witness, not four.

Answer

The witness host must be placed at the primary site.

Answer

All hosts must be configured with a single network adapter for vSAN traffic.

Answer

A vSAN stretched cluster requires a minimum of four fault domains.

Question 12

Which THREE are valid methods to remediate ESXi hosts using vSphere Lifecycle Manager? (Select THREE.)

Accepted Answer

Stage and remediate. The correct answers are C, D, and E. vSphere Lifecycle Manager (vLCM) supports three standard remediation methods: staging updates and then remediating (Stage and remediate), remediating immediately without staging (Remediate immediately), and scheduling remediation for a later time (Schedule remediation). 'Auto update' and 'Push from vCenter' are not valid vLCM remediation methods. Auto update is not a feature of vLCM, and push-based remediation is not how vLCM operates; vLCM uses a desired-state model.

Answer

Auto update

Answer

Push from vCenter

Question 13

A vSphere administrator configures a VVol datastore on a Pure Storage array. The administrator creates a storage policy with a custom tag. After attaching the policy to a VM, the VM remains uncompliant. What is the most likely cause?

Accepted Answer

The storage array does not support the capability specified in the policy.. VVol storage policies rely on capabilities advertised by the array through VASA. If the array does not support the specific capability or tag used in the policy, the VM will be uncompliant. Option A is correct because the custom tag in the storage policy is not supported by the Pure Storage array. Option B is incorrect: VVol datastores require VASA certification; if the array were not VASA-compliant, it could not host a VVol datastore at all. Option C is incorrect because Storage DRS is unrelated to VVol policy compliance. Option D is incorrect because VVol datastores can use either iSCSI or NFS protocols, and the protocol does not affect compliance.

Answer

The storage array is not VASA-compliant.

Answer

The datastore cluster is not configured for Storage DRS.

Answer

The VVol datastore is using NFS protocol instead of iSCSI.

Question 14

Refer to the exhibit. An administrator runs the 'esxcli storage core device list' command and sees the output. The storage array is an active-passive array with ALUA. The current path selection policy is set to Fixed with no preferred path. What is the consequence of this configuration?

Accepted Answer

I/O may be sent to a non-optimized path, causing higher latency. With an active-passive ALUA array, the Fixed path selection policy without a preferred path means the host may not switch to the optimized active path for a given LUN. Since no preferred path is set, the host can select any available path, potentially sending I/O through a non-optimized passive path. This results in higher latency as the array must redirect I/O through the partner controller. Option C correctly identifies this consequence. Option A is incorrect because Fixed policy does not load-balance; it uses a single path unless it fails. Option B is wrong because ALUA is supported and the host can use multiple paths but only one is active. Option D is irrelevant as VMDKs can be used on any path.

Answer

The I/O is load-balanced across all four paths

Answer

ALUA is not supported, so the host will use only one path

Answer

The device cannot be used for VMDKs, only for RDM

Question 15

Refer to the exhibit. An administrator observes high latency on a VMFS datastore. Based on the vdbench and esxtop output, which component is most likely causing the latency?

Accepted Answer

The virtual machine or application is causing high latency due to inefficient I/O patterns.. The esxtop output shows KAVG (kernel latency) of 2.5 ms and GAVG (guest latency) of 8.2 ms. The total latency (QAVG) is 10.7 ms, but the reported datastore latency is 12 ms. The high GAVG relative to KAVG indicates latency at the guest/application level, not at the storage array. The vdbench test shows 12 ms average latency, which matches the guest-level latency. The issue is likely due to application I/O patterns or queue depth, not the storage backend.

Answer

The storage array is overloaded, causing high queue depth (DAQLEN=32).

Answer

The VMFS datastore is fragmented, causing increased seek times.

Answer

The ESXi host's HBA queue depth is insufficient, causing queuing on the host.

Question 16

A global company manages multiple vSphere clusters across different data centers. They have a standard operating procedure to upgrade ESXi hosts every two years. The vSphere administrator is planning the upgrade of a critical production cluster that runs a mix of VMs, including some latency-sensitive applications. The cluster consists of 20 ESXi 7.0 Update 3 hosts managed by vLCM with a single image. The target is ESXi 8.0 Update 1. The administrator wants to minimize downtime and ensure rollback capability. The company has a hardware support manager (HSM) integrated with vLCM. After staging the new image, the administrator remediates the cluster. During the remediation of the first host, the host fails to reboot after applying the image and becomes unresponsive. What is the most likely cause of this failure?

Accepted Answer

The hardware support manager (HSM) did not deploy the correct firmware version for the host.. The most likely cause is that the hardware support manager (HSM) deployed an incorrect firmware version for the host during the vLCM remediation. vLCM integrates with HSM to automatically update firmware as part of the image-based lifecycle, and if the firmware is incompatible with ESXi 8.0 Update 1, the host can fail to reboot and become unresponsive. This is a known risk when upgrading across major ESXi versions, as hardware firmware requirements often change.

Answer

The vCenter Server version is not compatible with ESXi 8.0 Update 1.

Answer

The host was not placed in maintenance mode before remediation.

Answer

The vLCM single image is corrupted and was applied incorrectly.

Question 17

Refer to the exhibit. An administrator attempts to reclaim unused space on a VMFS datastore using esxcli storage vmfs unmap, but the command fails. Based on the logs and documentation, what is the most likely cause?

Accepted Answer

The storage LUN is thick-provisioned and does not support UNMAP.. The vmkernel log shows the UNMAP command failed with ILLEGAL REQUEST, sense 0x5 0x20 0x0, which indicates an invalid command. The vendor documentation states that UNMAP is only supported when thin provisioning is enabled on the LUN. The LUN is likely thick-provisioned, so the array rejects the UNMAP command.

Answer

The reclaim-unit parameter is set too low, causing the array to reject the command.

Answer

The ESXi host does not have sufficient permissions to issue UNMAP commands.

Answer

The VMFS datastore is not formatted with a supported block size.

Question 18

Refer to the exhibit. An administrator checks the status of a distributed switch port and sees no errors or drops. However, virtual machines on this port cannot communicate with the default gateway at 192.168.200.1. What is the most likely cause?

Accepted Answer

The port is configured with Allowed VLANs 100, 200, 300, which is a trunk configuration, but the virtual machine expects an access port on VLAN 200.. The exhibit shows the port has Allowed VLANs: 100, 200, 300. This is unusual because a port should typically be assigned to a single VLAN (access port) or carry multiple VLANs (trunk port). If the port is set to allow multiple VLANs but the virtual machine expects a specific VLAN, packets may be misconfigured. However, the most likely cause is that the port is configured as a trunk port (allows multiple VLANs) when it should be an access port for VLAN 200. This can cause the virtual machine to receive traffic from other VLANs or not tag its own traffic correctly.

Answer

The port has no allowed MAC addresses, which may cause filtering.

Answer

The MTU is set to 1500, which is standard and should work fine.

Answer

The link speed is 10 Gbps, which is sufficient.

Question 19

Refer to the exhibit. An administrator configured beacon probing for network failure detection on the Production port group. However, virtual machines are experiencing intermittent connectivity. What is the most likely reason?

Accepted Answer

There are only two uplinks, and beacon probing requires at least three uplinks.. Beacon probing requires at least three uplinks to function correctly. The exhibit shows only two uplinks (vmnic1 and vmnic2) are active. With two uplinks, beacon probing cannot reliably detect failures because there are not enough beacons to determine which link is down. This can cause false positives and connectivity issues.

Answer

The VLAN ID 200 is not allowed on the physical switch trunks.

Answer

The DVS version 7.0.0 does not support beacon probing.

Answer

The load balancing policy is set to Route based on IP hash, which is incompatible with beacon probing.

Question 20

Match each vSphere networking component to its description.

Accepted Answer

vSphere Distributed Switch: A centralized virtual switch that spans multiple ESXi hosts and provides consistent networking configuration.. Key vSphere networking components: Distributed Switch (centralized, multi-host), Standard Switch (per-host), Port Group (logical grouping). Common confusion is mixing the switch types.

Answer

vSphere Distributed Switch: A host-level virtual switch that does not support centralized management.

Answer

vSphere Standard Switch: A virtual switch that spans multiple hosts and provides consistent configuration across a cluster.

Answer

Port Group: A physical network interface that connects a host to the physical network.