VCP-DCV Practice Test 2 — 25 Questions

Question 1

A company manages a vSphere 8 cluster with vLCM enabled. The administrator needs to remediate the cluster to apply a security patch. What should the administrator do to minimize performance impact on running workloads?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable Quick Boot in the cluster image configuration.. Quick Boot significantly reduces host reboot time during remediation, minimizing the time hosts spend in maintenance mode and thus reducing performance impact on running workloads. Options B, C, and D are incorrect: vSphere Live Migration (B) is for vMotion, not patching; legacy baselines (C) are deprecated with vLCM; disabling DPM (D) does not directly address remediation performance impact.

Answer

Use vSphere Live Migration to move workloads before remediation.

Answer

Use legacy baselines instead of vLCM to allow rolling updates.

Answer

Disable Distributed Power Management (DPM) to prevent hosts from powering off during remediation.

Question 2

During a cluster upgrade using vLCM, the pre-check reports that Quick Boot is disabled. How does this affect the upgrade?

Accepted Answer

Hosts will reboot normally. Quick Boot is an optional optimization that reduces reboot time by temporarily booting from a snapshot. When Quick Boot is disabled, hosts will reboot normally during remediation, and the upgrade proceeds without failure. Option A is incorrect because Quick Boot speeds up reboot, but its disablement does not cause upgrade failure; hosts just reboot normally. Option B is incorrect because disabling Quick Boot does have an effect: hosts will reboot normally instead of using the faster Quick Boot method. Option D is incorrect because the upgrade will not fail due to Quick Boot being disabled.

Answer

Quick Boot speeds up reboot

Answer

No effect

Answer

Upgrade will fail

Question 3

Refer to the exhibit. What does this output indicate?

Accepted Answer

The host has been upgraded to ESXi 8.0.0, but the previous profile remains. The `esxcli software profile list` output shows multiple software profiles on the host. After upgrading from ESXi 7.0U3 to 8.0.0, the old profile remains stored in the bootbank but is not active. The active profile is the one most recently installed (ESXi-8.0.0-789012). This is normal behavior and indicates that the host has been upgraded to ESXi 8.0.0, but the previous profile is still present. Therefore, option A correctly describes this situation.

Answer

The host has two ESXi installations and can boot into either

Answer

The host's profile is corrupted

Answer

The host is running both versions simultaneously

Question 4

Which THREE of the following are prerequisites for configuring LACP on a vSphere Distributed Switch? (Select exactly three.)

Accepted Answer

The vSphere Distributed Switch must be configured with enhanced LACP support.. Options A, C, and E are correct. For LACP on a vSphere Distributed Switch, the vDS must be configured with enhanced LACP support (option A). The physical switch ports must be configured for LACP, either in active or passive mode (option C). Additionally, the physical network switch must support LACP (IEEE 802.3ad) (option E). Option B is incorrect because each uplink does not need to be in a separate VLAN; LACP works across VLANs and VLAN configuration is independent. Option D is incorrect because the uplinks must be connected to the same physical switch to form a LAG; using different switches requires Multi-chassis LACP (e.g., MLAG).

Answer

Each uplink must be in a separate VLAN to avoid loops.

Answer

The uplinks must be connected to different physical switches for redundancy.

Question 5

Which two conditions must be met for a VMkernel adapter to be used for vMotion on a distributed switch? (Choose two.)

Accepted Answer

The VMkernel adapter must be in the same subnet as the destination host.. Options A and B are correct. The VMkernel adapter must be in the same subnet as the destination host (A) to allow vMotion traffic to route properly, and it must be enabled for vMotion (B) in the adapter properties. Other options are not required: active/standby mode (C) is not a requirement; VLAN ID can be any valid VLAN (D); and static IP is not necessary (E) as DHCP can be used.

Answer

The physical uplinks must be in active/standby mode.

Answer

The port group must have VLAN ID 0.

Answer

The port group must be configured with a static IP address.

Question 6

An administrator configures a distributed switch with a single uplink on each host and a port group with VLAN 10. After connecting a VM to the port group, the VM cannot communicate with other VMs on the same VLAN but on different hosts. What is a likely cause?

Accepted Answer

The physical switch port is set to access mode with VLAN 10.. When the physical switch port is in access mode with VLAN 10, it expects untagged frames. However, the distributed port group with VLAN 10 tags the frames with VLAN 10. This mismatch causes the physical switch to drop or mishandle the traffic, preventing the VM from communicating with other VMs on the same VLAN across hosts. Option B is incorrect because teaming is not required for basic connectivity; a single uplink suffices. Option C describes trunk mode which would actually accept tagged frames, so it would work. Option D is incorrect because the VLAN ID is configured on the port group, not on the VM's virtual adapter.

Answer

The distributed switch has no teaming configured.

Answer

The physical switch port connected to the uplink is set to trunk mode and is tagging the VLAN.

Answer

The VLAN ID is not set correctly on the VM's virtual network adapter.

Question 7

A vSphere administrator needs to apply a critical security patch to all ESXi hosts in a cluster that is managed by a baseline. The patch is not yet available as an update in the baseline group. What is the best approach to apply this patch quickly?

Accepted Answer

Attach the patch as a new baseline to the cluster alongside existing baselines.. Attaching the patch as a new baseline to the cluster alongside existing baselines allows you to quickly apply the critical security patch without modifying the existing baseline group. This method is efficient and directly addresses the immediate need. Option A is incorrect because remediating each host individually via CLI is time-consuming and less efficient for a cluster. Option B is incorrect because creating a new baseline group is unnecessary and may cause disruption by replacing the current baseline group. Option C is incorrect because vLCM is used for image-based management, not baseline-based management, and the cluster is managed by baselines, not images.

Answer

Remediate each host individually using CLI commands.

Answer

Create a new baseline group that includes the patch and attach it to the cluster.

Answer

Download the patch as an offline bundle and use vLCM to apply it directly.

Question 8

A vSphere administrator is using vSphere Lifecycle Manager images to manage a cluster. The administrator wants to add a new custom component (a driver) to the cluster image. Which THREE steps are required to successfully add the component? (Choose three.)

Accepted Answer

Download the component offline bundle from the vendor.. Options A, C, and D are correct. A: Download the component offline bundle from the vendor. C: Upload the component to the vLCM depot. D: Add the component to the image definition in vLCM. B is incorrect because you do not need to create a new software depot; the vLCM depot already exists and you upload the bundle to it. E is incorrect because validation is not a required step to add the component; it can be performed later as part of image compliance checking.

Answer

Create a new software depot on the vCenter Server.

Answer

Validate the component against the current image.

Question 9

An administrator has configured jumbo frames on a VDS and all physical switches. Virtual machines on different hosts can ping each other but cannot transfer files larger than 1500 bytes. What is the most likely cause?

Accepted Answer

The virtual machine's operating system MTU is set to 1500.. Jumbo frames require the entire network path, including the virtual machine's operating system, to support the larger MTU. If the VM OS MTU is left at 1500, packets larger than 1500 bytes will be fragmented by the OS or dropped, preventing large file transfers. Option A is incorrect because the problem states physical switches and the VDS are configured for jumbo frames, but the physical NICs must also be configured; however, the question does not indicate they are misconfigured, and the issue is more likely the VM OS. Option B is incorrect because TCP offload engines typically handle segmentation and checksum, not fragmentation due to MTU mismatch. Option C is incorrect because VMkernel adapters are for management and vMotion traffic, not VM data traffic; VM data uses the VM's own network stack.

Answer

The physical NICs are not configured for jumbo frames.

Answer

The TCP/IP offload engine is causing fragmentation.

Answer

The VMkernel adapters are not configured with MTU 9000.

Question 10

A vSphere administrator manages a cluster of 50 ESXi hosts using vLCM with image-based management. The cluster includes hosts from two different hardware vendors. The administrator needs to ensure firmware updates are consistently applied across all hosts. What is the best practice for this scenario?

Accepted Answer

Create separate cluster images for each hardware vendor and apply to respective hosts.. Different hardware vendors require different firmware, and vLCM image-based management supports creating separate cluster images per hardware type to ensure the correct firmware is applied to each host. Option A is wrong because baseline groups are deprecated and not the best practice for firmware updates. Option B is wrong because a single cluster image cannot contain multiple firmware sets for different vendors. Option D is wrong because manually updating firmware with vendor tools is not standardized and defeats the purpose of centralized lifecycle management via vLCM.

Answer

Use baseline groups to manage firmware separately.

Answer

Create a single cluster image that includes firmware for both vendors.

Answer

Manually update firmware using vendor tools, then use vLCM for ESXi updates.

Question 11

During a period of high network contention, management traffic is starved while NFS traffic gets the most bandwidth. Which configuration change would best address the issue?

Accepted Answer

Set a reservation for management traffic.. Setting a reservation for management traffic guarantees a minimum amount of bandwidth, ensuring that management traffic does not get starved even under high network contention. Option A (increasing management shares) improves relative priority but does not guarantee bandwidth. Option B (increasing the NFS limit) would allocate more bandwidth to NFS, worsening the problem. Option D (enabling traffic shaping on the management port group) affects only outbound traffic on a standard switch and does not use NIOC (Network I/O Control), which is needed for reservation-based guarantees. Option E (removing the vMotion reservation) may free up bandwidth but does not guarantee management traffic receives a minimum.

Answer

Increase management shares to 100.

Answer

Increase the NFS limit to 1000 Mbps.

Answer

Enable traffic shaping on the management port group.

Answer

Remove the reservation from vMotion.

Question 12

An administrator notices that a critical virtual machine is running slowly. The VM has 8 vCPUs and 32GB memory. The host is an ESXi 7.0 server with two Intel Xeon Gold 6248 sockets (20 cores each, hyperthreading enabled). The VM's CPU ready time is consistently above 10%. What is the most likely cause?

Accepted Answer

The host has too many VMs running and CPU oversubscription is too high.. High CPU ready time indicates the VM is ready to run but the hypervisor cannot schedule it. This is typically due to excessive CPU oversubscription. Option B correctly identifies that having too many VMs on the host leads to high CPU contention, causing ready time. Option A is incorrect because pinning vCPUs to a single NUMA node can increase ready time if other nodes are idle, but with only 8 vCPUs on a 40-logical-CPU node, contention is unlikely unless many other VMs are also pinned. Option C is incorrect because over-provisioning refers to total vCPUs exceeding physical CPUs, not individual VM vCPU count; the host has 80 logical CPUs, so 8 vCPUs is not over-provisioned. Option D is incorrect because disk I/O does not cause CPU ready time; it causes disk latency.

Answer

The VM's vCPUs are pinned to a single NUMA node causing contention.

Answer

The VM is over-provisioned on vCPUs relative to the host's physical cores.

Answer

The VM is using Eager Zero Thick disks causing high I/O latency.

Question 13

Based on the Healthcheck output for a distributed port (DVS Port 1) on dvs0, what can be concluded?

Accepted Answer

The physical switch is correctly configured for VLAN 100 and MTU 1500 on the uplinks connected to this host.. The Healthcheck output shows 'VLAN 100' and 'MTU 1500' with status 'OK', indicating that the physical switch configuration matches the DVS port settings for VLAN and MTU. Option A is incorrect because Healthcheck doesn't report speed/duplex of uplinks. Option C is incorrect because the teaming policy shown is 'Route based on originating virtual port', not IP hash. Option D is incorrect because Healthcheck checks configuration consistency, not packet loss.

Answer

The uplinks vmnic0 and vmnic1 are operating at 10 Gbps.

Answer

The load balancing policy is set to 'Route based on IP hash'.

Answer

The port is experiencing high packet loss due to misconfiguration.

Question 14

A vSphere administrator is planning to configure VMware vSAN. Which TWO requirements must be met for a vSAN cluster?

Accepted Answer

Each host must have at least one SSD and one HDD for capacity.. VSAN requires at least one SSD (or NVMe) for the cache tier and one HDD (or SSD) for the capacity tier on each host to form a disk group. This hybrid or all-flash configuration is fundamental to vSAN's storage architecture, where the cache tier accelerates writes and reads, while the capacity tier provides persistent storage.

Answer

A dedicated 10 GbE network for vSAN traffic.

Answer

All hosts must have identical CPU models.

Answer

A shared storage array accessible by all hosts.

Question 15

Which TWO of the following are functions of a vSphere Distributed Switch that are not available in a vSphere Standard Switch? (Select exactly two.)

Accepted Answer

Port mirroring (Distributed Port Mirroring).. Options A and C are correct. Port mirroring (Distributed Port Mirroring) is a feature exclusive to the vSphere Distributed Switch (vDS). Network I/O Control (NIOC) is also only available on vDS, allowing for bandwidth allocation and prioritization. Option B is incorrect because NIC teaming with explicit failover order is available on both standard and distributed switches. Option D is incorrect because traffic shaping policies are available on vSphere Standard Switches (vSS) at the port group level. Option E is incorrect because VLAN tagging and trunking are supported on both switch types.

Answer

NIC teaming with explicit failover order.

Answer

Traffic shaping policies.

Answer

VLAN tagging and trunking.

Question 16

Which TWO prerequisites must be met before enabling vLCM image-based management on a vSAN cluster?

Accepted Answer

All ESXi hosts must be reachable and managed by the same vCenter Server.. Options A and C are correct prerequisites for enabling vLCM image-based management on a vSAN cluster. All ESXi hosts in the cluster must be managed by the same vCenter Server because vLCM operates at the cluster level and requires a single vCenter to coordinate updates. Additionally, vCenter Server version must be 7.0 or later, as vLCM was introduced in vSphere 7.0. Option B is incorrect because vLCM supports vSAN clusters; the cluster does not need to avoid vSAN. Option D is incorrect; while vSAN readiness is required for vSAN itself, it is not a specific prerequisite for enabling vLCM image-based management. Option E is incorrect because vLCM does not require a dedicated vCenter Server; it uses the existing vCenter managing the cluster.

Answer

The cluster must not be using vSAN.

Answer

All hosts in the cluster must be vSAN ready and part of a vSAN cluster.

Answer

A separate vCenter Server must be dedicated to lifecycle management.

Question 17

What is the maximum number of virtual CPUs (vCPUs) that can be allocated to a virtual machine on vSphere 8 Enterprise Plus?

Accepted Answer

256. 256 vCPUs. vSphere 8 Enterprise Plus supports up to 256 virtual CPUs per virtual machine. Option A (128) was the maximum in vSphere 6.5 and earlier, not vSphere 8. Option B (512) exceeds the vSphere 8 limit. Option C (64) is below the current maximum and incorrect.

Answer

128

Answer

512

Answer

64

Question 18

A vSphere environment uses VMCA for certificate management. An administrator needs to replace the certificate for vCenter Server with a custom CA-signed certificate. The custom CA root certificate must be trusted by all ESXi hosts. Which method should the administrator use to distribute the custom CA root certificate to ESXi hosts?

Accepted Answer

Create a host profile containing the custom CA root certificate and apply it to the ESXi hosts. Using a host profile to apply the custom CA root certificate ensures consistent, policy-driven deployment across all ESXi hosts, leveraging vCenter's host profile functionality. Option A is incorrect: restarting the rhttpproxy service with a new configuration does not distribute certificates; it only restarts the proxy service. Option B is incorrect: while vCenter can manage machine SSL certificates, it does not automatically push root CA certificates to ESXi hosts; the administrator must explicitly import the root CA into the ESXi trust store, which is not done automatically by vCenter. Option C is incorrect: manually uploading via SCP is not scalable and is not the recommended method for managing certificate trust across multiple hosts; host profiles provide a centralized, automated approach.

Answer

Restart the rhttpproxy service on each ESXi host with a new configuration

Answer

Import the root CA certificate into vCenter Server and it will automatically push to hosts

Answer

Manually upload the root CA certificate to each ESXi host via SCP

Question 19

An administrator needs to lock down an ESXi host for FIPS 140-2 compliance. Which step must be taken?

Accepted Answer

Enable lockdown mode on the ESXi host.. For FIPS 140-2 compliance, the ESXi host must be placed in lockdown mode to restrict direct root access and ensure only authorized users via vCenter can manage the host. Option A is incorrect because disabling the ESXi Shell and SSH services alone does not achieve FIPS compliance; lockdown mode is the required step. Option C is incorrect because host profiles can apply security settings but do not enforce lockdown mode for FIPS. Option D is incorrect because FIPS mode is not configured in the host's BIOS; it is a software-level cryptographic compliance enforced by ESXi lockdown and other settings.

Answer

Disable the ESXi Shell and SSH services.

Answer

Configure a host profile with a security policy.

Answer

Enable FIPS mode in the host's BIOS.

Question 20

A company runs a critical e-commerce platform on a vSphere 7 cluster with ESXi hosts connected to a vSAN datastore. The environment uses vSphere Trust Authority (vTA) and VM encryption with an external KMS. Recently, after a successful vTA attestation, one of the VMs (WebServer-01) failed to power on with the error: 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable.' The administrator verifies that other encrypted VMs on the same host power on successfully. The KMS cluster consists of two servers: KMS-01 and KMS-02, both accessible from the management network. The administrator checks the VM's configuration and finds that it uses a custom storage policy with encryption. What is the most likely cause of this specific VM's failure?

Accepted Answer

The VM's encryption key was retrieved from a different KMS server that is now unavailable, and the key ID in the VM's metadata points to that KMS server.. The error 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable' indicates that the ESXi host cannot contact the KMS server to retrieve the VM's encryption key. Since other encrypted VMs on the same host power on successfully, the host can reach the KMS cluster, but this specific VM's encryption key may have been issued by a different KMS server (e.g., an older or alternative KMS) that is now unavailable. The key ID stored in the VM's metadata points to that unreachable server, causing the failure. Option A is incorrect because if the vCenter KMS cluster configuration were deleted, all VMs would be affected. Option B is incorrect because modifying the storage policy does not change the existing encryption key; the VM remains encrypted with its original key. Option C is incorrect because vTA attestation is separate from KMS key retrieval; the error message is specific to KMS unavailability.

Answer

The vCenter Server's KMS cluster configuration has been deleted, affecting all VMs but not this one.

Answer

The storage policy used by the VM has been modified and no longer includes encryption.

Answer

The vTA attestation process failed for the VM's host, but the error message is misleading.