VCP-DCV Practice Test 28 — 15 Questions

Question 1

A database VM with 32 vCPUs and 256 GB memory is deployed on a host with two NUMA nodes, each with 8 cores (16 threads with HT). The application performs badly. Analysis shows high remote memory access. What is the MOST LIKELY reason?

Accepted Answer

The vNUMA nodes are not aligned with the physical NUMA nodes.. With 32 vCPUs, the VM exceeds the default vNUMA node size of 8 cores, so vSphere will expose multiple vNUMA nodes. However, if vNUMA is not correctly configured or if the VM's memory size forces it to span physical NUMA nodes, the guest OS may not optimize memory locality. The most common cause is that the VM's vCPUs and memory are not aligned with the physical NUMA topology, leading to remote memory access. Disabling hyperthreading would not help alignment, nor would adding more memory.

Answer

Hyperthreading is enabled causing CPU contention.

Answer

The host's NUMA nodes are not balanced in memory capacity.

Answer

The VM has too much memory allocated.

Question 2

A vSphere cluster has DRS enabled with 'Partially automate' mode. A VM is consistently showing high CPU ready time. The administrator wants to ensure the VM is automatically migrated to a less loaded host. What must be done?

Accepted Answer

Set the VM's DRS automation level to 'Automatic'. Option C is correct because the VM needs to be set to Automatic for DRS to migrate it automatically. Option A is wrong as Manual would require operator action. Option B is wrong; EVC does not affect DRS migration decisions. Option D is wrong; HA admission control is for availability, not performance.

Answer

Enable EVC mode on the cluster

Answer

Set the VM's DRS automation level to 'Manual'

Answer

Enable HA admission control

Question 3

Which TWO actions are effective in reducing CPU ready time on a vSphere host that is heavily overcommitted on CPU? (Choose two.)

Accepted Answer

Add more hosts to the cluster.. Reducing the number of vCPUs on over-provisioned VMs directly decreases scheduling contention. Adding more hosts to the cluster increases the pool of physical CPUs, reducing overcommitment. Increasing vCPUs worsens the issue. Enabling hyperthreading does not reduce ready time if the host is already CPU-bound. Configuring CPU affinity restricts scheduling and can increase ready time.

Answer

Enable hyperthreading on the host CPUs.

Answer

Increase the number of vCPUs on VMs with high ready times.

Answer

Configure CPU affinity to pin vCPUs to specific pCPUs.

Question 4

An administrator observes that a VM with 16 vCPUs on a 2-socket host (8 cores per socket, HT disabled) is experiencing poor performance. The VM's NUMA topology shows 2 vNUMA nodes, but performance is worse than expected. What is the most likely reason?

Accepted Answer

The VM is configured with a single virtual socket with 16 cores, causing a single vNUMA node that spans both physical NUMA nodes. Option A is correct. If the VM is configured with a single virtual socket (16 cores), vSphere creates one vNUMA node that spans both physical NUMA nodes, causing cross-node memory access. Option B is wrong; insufficient RAM would cause ballooning or swapping. Option C is wrong; memory reservation ensures pages are backed. Option D is wrong; old virtual hardware may limit features but not directly cause this.

Answer

The VM's memory is reserved but not backed by physical pages

Answer

The virtual hardware version is too old

Answer

The host has insufficient RAM

Question 5

Which TWO storage performance best practices should be followed when scaling a vSphere environment using shared storage? (Choose two.)

Accepted Answer

Enable Storage I/O Control (SIOC) on datastores to manage I/O latency.. Using multiple paths with round-robin load balancing improves throughput and redundancy. Storage I/O Control (SIOC) manages latency and prevents a single VM from monopolizing storage. VMFS-3 is outdated and should be avoided. RDM in physical compatibility mode is rarely recommended. vSphere Flash Read Cache is deprecated.

Answer

Use Raw Device Mapping in physical compatibility mode for virtual machines.

Answer

Deploy vSphere Flash Read Cache to reduce read latency.

Answer

Use VMFS-3 for large datastores to reduce seek time.

Question 6

Based on the exhibit, which VM (indicated by the row) is most likely experiencing severe CPU scheduling contention?

Accepted Answer

The VM with %RDY = 30.0. The row with the highest %RDY (30.0) indicates the VM is spending a large percentage of time ready to run but not being scheduled, which is a sign of severe CPU contention. The other rows have lower %RDY values.

Answer

The VM with %RDY = 2.3

Answer

The VM with %RDY = 15.5

Answer

The VM with %RDY = 0.5

Question 7

Which three actions can reduce CPU ready time for a virtual machine in a vSphere cluster? (Choose three.)

Accepted Answer

Place the VM on a host with lower CPU utilization. The correct options are B, D, and E. Reducing vCPUs reduces contention, adding hosts increases resources, and placing on less loaded host reduces ready time. Hot-add does not reduce ready time; manual CPU affinity can worsen.

Answer

Enable CPU hot-add on the VM

Answer

Set the VM's CPU affinity manually

Question 8

Based on the exhibit, which statement about the virtual machine's memory state is TRUE?

Accepted Answer

The VM is actively swapping memory because of memory pressure.. SWCUR (current swapped memory) is 512 MB, and SWR/s and SWW/s show non-zero swap rates, indicating that the VM is actively swapping memory to disk. MCTLSZ is 0, meaning no ballooning is occurring. The VM's memory size is 4096 MB. Swapping is a sign of memory pressure.

Answer

The VM is using the memory balloon driver to reclaim memory.

Answer

The VM is using transparent page sharing to reduce memory usage.

Answer

The VM has no memory pressure and is performing optimally.

Question 9

Which two factors most directly influence vSphere NUMA scheduling decisions for a VM? (Choose two.)

Accepted Answer

Host NUMA node topology. The correct options are A and C. vSphere NUMA scheduling uses the number of vCPUs and the host NUMA node topology to place the VM on a single node. Memory reservation and VM version are secondary. Storage policy is not relevant.

Answer

VM memory reservation

Answer

VM storage policy

Answer

Virtual machine version

Question 10

An organization is deploying vCenter Server in a DMZ. Which security best practice should the administrator implement to protect the vCenter Server appliance?

Accepted Answer

Enable FIPS 140-2 mode on the vCenter Server appliance. Option D is correct because enabling FIPS mode on the appliance ensures cryptographic compliance and strengthens security. Option A is wrong because joining Active Directory may introduce attack surface. Option B is wrong because vCenter does not use SSH by default for management. Option C is wrong because vCenter does not use root account in the same way; the appliance uses the 'root' user but best practice is to limit its use, not delete.

Answer

Join the vCenter Server to the corporate Active Directory domain

Answer

Enable SSH for remote administration

Answer

Delete the root user account

Question 11

A company wants to integrate vCenter Server with an external identity source to allow users to authenticate using their corporate credentials. The administrator must ensure that authentication traffic is encrypted. Which solution should the administrator implement?

Accepted Answer

Active Directory over LDAPS. Option B is correct because Active Directory over LDAPS encrypts authentication traffic with SSL/TLS. Option A is wrong because standard LDAP transmits credentials in plaintext. Option C is wrong because NTLM authentication is not supported as a direct identity source for vCenter Single Sign-On. Option D is wrong because local OS authentication does not use corporate credentials.

Answer

Local OS authentication on vCenter Server

Answer

Active Directory over NTLM

Answer

Active Directory over LDAP

Question 12

An administrator is troubleshooting a failed VM encryption operation. The key provider status shows as 'Not Responding' in the vSphere Web Client. The administrator has verified network connectivity between the ESXi hosts and the key provider. What is the most likely cause of the failure?

Accepted Answer

The key provider certificate is expired or invalid. Option C is correct because the key provider certificate may be expired or invalid, causing the hosts to reject the connection even if network is reachable. Option A is wrong because ESXi hosts do not need an internet connection for on-premises KMS. Option B is wrong because vCenter Server does not manage key provider certificates directly. Option D is wrong because a firewall rule blocking the correct port would typically show as 'Unreachable' rather than 'Not Responding'.

Answer

The vCenter Server certificate has expired

Answer

The firewall on the key provider is blocking port 443

Answer

The ESXi hosts cannot reach the internet

Question 13

An organization is implementing vSphere Trust Authority for sensitive workloads. The administrator must configure the trusted ESXi hosts to attest to vCenter Server. Which component is responsible for performing attestation?

Accepted Answer

A separate vCenter Server instance acting as the Trust Authority. Option B is correct because vSphere Trust Authority uses a dedicated vCenter Server (Trust Authority vCenter) to perform attestation of ESXi hosts. Option A is wrong because the workstation is not part of the trust chain. Option C is wrong because the trusted ESXi hosts themselves do not perform attestation; they are attested. Option D is wrong because the Key Provider is used for encryption keys, not attestation.

Answer

The administrator's workstation

Answer

The Key Provider (KMS) server

Answer

The trusted ESXi hosts themselves

Question 14

A vSphere administrator wants to restrict direct console access to an ESXi host to authorized administrators only, without interrupting running virtual machines. Which feature should the administrator enable?

Accepted Answer

Lockdown mode. Option A is correct because lockdown mode restricts direct access to the ESXi host via DCUI and SSH, but allows access through vCenter Server while VMs continue to run. Option B is wrong because disabling SSH alone does not restrict DCUI. Option C is wrong because host profiles configure settings but do not enforce access restriction. Option D is wrong because DRS is for load balancing, not security.

Answer

Enable DRS

Answer

Configure a host profile

Answer

Disable SSH service

Question 15

An administrator needs to allow HTTP traffic from a specific management workstation to an ESXi host while blocking all other inbound traffic. The ESXi firewall uses the default ruleset. What should the administrator do?

Accepted Answer

Use esxcli network firewall ruleset set to create an allowed IP list for the HTTP ruleset. Option D is correct because the ESXi firewall allows creating allow rules for specific IP addresses via esxcli, which overrides the default deny. Option A is wrong because opening all ports is insecure. Option B is wrong because service console firewall is not used in modern ESXi. Option C is wrong because disabling firewall is insecure.

Answer

Open all firewall ports for the management subnet

Answer

Disable the ESXi firewall and use a network firewall

Answer

Modify the service console firewall rules