VCP-DCV Practice Test 28 — 15 Questions

Question 1

An administrator is troubleshooting a situation where a virtual machine cannot be powered on. The error message indicates insufficient permissions. The VM is in a folder named 'Production' and the administrator has been assigned a custom role with 'Virtual machine > Power On' permission at the folder level. However, the VM is also in a resource pool. What additional permission is most likely missing?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Resource > Assign virtual machine to resource pool permission on the resource pool. To power on a virtual machine that resides in a resource pool, the user must have the 'Resource > Assign virtual machine to resource pool' permission on that resource pool. Even though the user has 'Virtual machine > Power On' at the folder level, the VM's association with the resource pool introduces an additional authorization check. Without this resource pool permission, the power-on operation fails with an insufficient permissions error.

Answer

Network > Assign network permission on the network

Answer

Datastore > Allocate space permission on the datastore

Answer

Virtual machine > Configuration permission on the VM

Question 2

A vSphere administrator is implementing Lockdown Mode on an ESXi host that hosts critical VMs for a healthcare application. After enabling Normal Lockdown Mode, the administrator tests that vCenter can still manage the host, but the local DCUI root account is disabled. Later, a network outage occurs, causing vCenter to become unreachable. The administrator needs to access the host directly via DCUI to perform emergency troubleshooting. The host's DCUI is still running, but the local root account is disabled due to Lockdown Mode. What should the administrator have configured to ensure DCUI access during such an outage?

Accepted Answer

Configure the DCUI access list with specific users or groups before enabling Lockdown Mode.. Normal Lockdown Mode disables the local root account for DCUI access, but it allows you to pre-configure a DCUI access list with specific users or groups (local or AD) who can still log in via DCUI. By adding a user to this list before enabling Lockdown Mode, the administrator could have gained DCUI access during the outage. Option A is incorrect because the vSphere Web Client does not have an option to add host exceptions for DCUI; the DCUI access list must be configured directly on the host or via host profile. Option C is incorrect because Strict Lockdown Mode disables all local accounts, including the DCUI access list, making DCUI entirely unavailable. Option D is incorrect because disabling Lockdown Mode requires vCenter Server access, which is unavailable during the outage.

Answer

Use the vSphere Web Client to add the host as an exception before the outage.

Answer

Enable Strict Lockdown Mode to allow vCenter access exclusively.

Answer

Disable Lockdown Mode only during the maintenance window.

Question 3

A vSphere administrator notices that after replacing the vCenter Server machine SSL certificate, all vCenter services start, but from one ESXi host, the vCenter Server appears as disconnected. Other hosts connect fine. What is the most likely cause?

Accepted Answer

The ESXi host does not trust the signing certificate authority of the new vCenter certificate.. When the vCenter Server machine SSL certificate is replaced, each ESXi host must trust the certificate's issuing CA. If one host's trusted root certificate store does not contain the new certificate's CA certificate, TLS verification fails, causing vCenter to appear disconnected from that host. Option A is incorrect because the Common Name is used for server identity, but it does not need to match the host's IP; the issue is trust of the CA, not name mismatch. Option C is incorrect because system time differences would affect all hosts, not just one, and typically cause certificate validity errors, not trust issues. Option D is incorrect because the machine SSL certificate is distinct from SSO certificates; replacing it does not affect SSO if other certificates are unchanged.

Answer

The vCenter certificate's Common Name does not match the host's IP address.

Answer

The ESXi host has a different system time than the vCenter Server.

Answer

The vCenter Server certificate was not imported into the SSO trusted domain.

Question 4

A company runs a critical SQL Server VM on vSphere 7.0. The VM has a single 300 GB virtual disk on a VMFS6 datastore backed by a SAN with 8 Gbps Fibre Channel. The VM is configured with 16 vCPUs and 64 GB RAM. Recently, users have reported slow query performance. The administrator checks the datastore performance and sees average latency of 15 ms with peaks of 50 ms during business hours. The storage array has multiple paths to the ESXi host, and the current path policy is Fixed with a single active path. The administrator wants to improve storage performance with minimal cost. Which action should the administrator take first?

Accepted Answer

Change the path selection policy to Round Robin on the ESXi host.. The current Fixed path policy with a single active path underutilizes the available storage bandwidth, causing high latency during peak I/O. Changing to Round Robin (RR) distributes I/O across all available paths, reducing queue depth on any single path and lowering latency without any hardware cost. This is the most immediate and cost-effective fix for the observed performance issue.

Answer

Add a vSphere Flash Read Cache to the VM.

Answer

Upgrade the Fibre Channel infrastructure to 16 Gbps.

Answer

Convert the virtual disk to thin provisioning to reduce I/O.

Question 5

An ESXi host has two VMkernel interfaces as shown in the exhibit. The iSCSI targets are on the same subnet as vmk1 and support jumbo frames. The administrator reports that iSCSI sessions are experiencing high error rates and poor performance. What is most likely the cause?

Accepted Answer

The vDS port group for iSCSI does not have jumbo frames enabled (MTU 9000).. The iSCSI targets support jumbo frames (MTU 9000), but if the vDS port group for iSCSI is configured with the default MTU of 1500, packets will be fragmented, leading to high error rates and poor performance. The exhibit shows vmk1 is on the vDS, and the iSCSI targets are on the same subnet as vmk1, so the mismatch in MTU settings is the most likely cause. Option A is incorrect because management traffic on vmk0 is separate and does not affect iSCSI. Option B is incorrect because iSCSI VMkernel ports can be bound to a vDS. Option C is incorrect because the iSCSI network (vmk1) is on the same subnet as the iSCSI targets, so subnet mismatch is not the issue.

Answer

The management network (vmk0) is also using the vDS, causing traffic interference.

Answer

The iSCSI VMkernel port should not be bound to a vDS.

Answer

The iSCSI network (vmk1) is on a different subnet than the iSCSI targets.

Question 6

An administrator is configuring a vSphere distributed switch. Which TWO are valid uplink teaming policies? (Choose two.)

Accepted Answer

Route based on physical NIC load. Route based on physical NIC load (option D) is a valid uplink teaming policy in vSphere distributed switches. This policy uses the load metric from the physical NICs to distribute traffic, where the switch selects the uplink with the least current load for outbound traffic, as determined by the vSphere Distributed Switch's load balancing algorithm.

Answer

Explicit failover order

Answer

Route based on MAC hash

Answer

Route based on round robin

Question 7

An administrator is designing a new vSphere environment and wants to minimize manual effort for patching and upgrade. Which lifecycle management approach should they choose for vSphere 8 clusters?

Accepted Answer

Enable vLCM for all clusters.. VLCM (vSphere Lifecycle Manager) is the modern, image-based lifecycle management approach for vSphere 8 clusters, minimizing manual effort for patching and upgrades. Option A is incorrect because vSphere baselines are a legacy approach and require more manual effort. Option C is incorrect because vSphere Update Manager is replaced by vLCM in vSphere 8 and is not recommended for new environments. Option D is incorrect because vLCM is recommended for all clusters, not just large ones.

Answer

Use vSphere baselines for granular control.

Answer

Use vSphere Update Manager for standalone hosts.

Answer

Use vLCM only for large clusters with more than 32 hosts.

Question 8

Refer to the exhibit. What does this error indicate?

Accepted Answer

The target LUN is not available.. SCSI sense key D:0x2 indicates 'Not Ready', meaning the LUN is not available. Host bus adapter failure or path misconfiguration would produce different sense codes; no path would show a different state.

Answer

The path is misconfigured.

Answer

The storage device is not connected.

Answer

The host's HBA is faulty.

Question 9

A company has a vSphere cluster of eight ESXi hosts managed by a single vCenter Server. They need to apply a critical security patch to the ESXi hosts with minimal downtime. Which method should the administrator use?

Accepted Answer

Put each host in maintenance mode and apply the patch via Update Manager.. VSphere Update Manager (VUM) automates the patching process by placing each host into maintenance mode, migrating VMs via vMotion to other hosts, applying the patch, and then bringing the host back online—all with minimal downtime. This is the recommended method for applying critical security patches to multiple ESXi hosts in a cluster managed by a single vCenter Server.

Answer

Use vMotion to migrate all VMs to one host, apply patch, then move back.

Answer

Use vSphere vMotion to migrate VMs, then apply patch using CLI on each host.

Answer

Schedule a host reboot during maintenance window and apply patch via ISO boot.

Question 10

A vSphere administrator needs to ensure that all virtual machine disks are encrypted at rest. The environment uses a KMS cluster with multiple KMIP-compliant servers. The administrator has already configured a storage policy with encryption enabled. However, newly created VMs on a particular datastore still show unencrypted disks. What is the most likely cause?

Accepted Answer

The storage policy with encryption is not assigned to the VMs or their home namespace.. Even when a storage policy with encryption is configured, it must be explicitly assigned to the VMs or their home namespace (the VM's configuration and swap files). If the policy is not assigned, the VM will be created using the default datastore policy, which typically does not include encryption, resulting in unencrypted disks. The administrator must ensure the encryption-enabled policy is applied to the VM during creation or via a storage policy-based management (SPBM) assignment.

Answer

The datastore is a vSAN datastore, which does not support VM-level encryption.

Answer

The KMS cluster must have at least two KMS servers to function correctly.

Answer

The datastore is formatted with VMFS6, which does not support encryption.

Question 11

A company has a vSphere environment with a vCenter Server Appliance (VCSA) that is running low on disk space. The administrator notices that the /storage/archive partition is nearly full. Which action should the administrator take to reclaim space without impacting the functionality of vCenter Server?

Accepted Answer

Run the 'vcenter-delete-archive' script from the command line.. The VCSA runs on a Linux-based operating system, not Windows, so the Windows Disk Cleanup utility is irrelevant. The /storage/archive partition stores historical data such as stats, events, and tasks. VMware provides the 'vcenter-delete-archive' script as the supported method to safely purge old archived data from this partition without risking corruption of the vCenter Server database or services. Manually deleting files via SSH can leave the database in an inconsistent state, while increasing the virtual disk only postpones the issue without reclaiming space.

Answer

Increase the size of the VCSA virtual disk using vSphere Web Client.

Answer

Use the Windows Disk Cleanup utility on the VCSA.

Answer

Manually delete files from the /storage/archive directory using SSH.

Question 12

A vSphere administrator is deploying a vSphere Distributed Switch (vDS) version 7.0. The environment has ESXi hosts with hardware version 7.0. The administrator needs to ensure that the vDS supports Network I/O Control version 3 (NIOCv3). What must be true for NIOCv3 to function correctly?

Accepted Answer

All hosts must be running ESXi 7.0 or later.. NIOCv3 is a feature introduced with vSphere 7.0 that provides granular bandwidth allocation and reservation for network traffic. For NIOCv3 to function correctly, all ESXi hosts attached to the vDS must be running ESXi 7.0 or later because the feature relies on kernel-level enhancements and the vSphere Network Resource Management (vNRM) agent that are only present in that version. Hosts on earlier versions lack the necessary drivers and scheduling capabilities, causing NIOCv3 to be unavailable or non-functional.

Answer

The vDS must be configured with Route based on IP hash teaming.

Answer

All hosts must have the vDS in Link Aggregation Control Protocol (LACP) mode.

Answer

The vDS must have a Network Resource Pool configured.

Question 13

An administrator has configured a vSphere Distributed Switch (VDS) with Network I/O Control. They need to guarantee bandwidth for a specific set of virtual machines. Which method should be used?

Accepted Answer

Create a port group with a custom network resource pool.. Create a port group with a custom network resource pool. Network I/O Control allows administrators to create network resource pools to guarantee bandwidth for specific virtual machines or port groups. By creating a custom network resource pool and assigning it to a port group, you can reserve a certain amount of bandwidth. Option B is incorrect because SR-IOV provides direct hardware passthrough but does not manage bandwidth guarantees; it can actually bypass Network I/O Control. Option C is incorrect because setting a VLAN tag does not guarantee bandwidth; it only separates traffic. Option D is incorrect because traffic shaping is used to limit bandwidth (throttle outgoing traffic) but does not guarantee a minimum bandwidth; it only caps it.

Answer

Enable SR-IOV on the physical NICs.

Answer

Set the virtual machine's network adapter to use a specific VLAN.

Answer

Configure Traffic Shaping on the distributed switch.

Question 14

In a vSphere 8 environment with vGPU vMotion enabled, an administrator attempts a vMotion of a VM that has a NVIDIA vGPU profile assigned. The vMotion fails with an error. What is the most likely cause?

Accepted Answer

The VM's virtual hardware version is not supported for vGPU vMotion. vGPU vMotion has specific requirements; the VM must use virtual hardware version 19 or later. If the VM uses an older version, vMotion will fail.

Answer

Insufficient network bandwidth between the hosts

Answer

The destination host has a different GPU model

Answer

The vGPU license is not assigned to the VM

Question 15

A virtualized SQL server is experiencing high latency on its virtual disks. The datastore is an NFS mount on a shared NAS. Which action would most likely reduce disk latency without reducing capacity?

Accepted Answer

Enable Storage I/O Control (SIOC) on the datastore and set the latency threshold to a lower value.. D is correct because enabling Storage I/O Control (SIOC) on the NFS datastore and lowering the latency threshold allows the hypervisor to proactively throttle I/O-intensive VMs before the storage array becomes congested, reducing overall disk latency. SIOC uses a latency-based algorithm to enforce fairness and prevent a single VM from monopolizing I/O resources, which directly addresses the high-latency issue without altering the datastore capacity.

Answer

Increase the number of outstanding I/O requests per virtual disk in the VM settings.

Answer

Disable SIOC on the datastore to avoid overhead.

Answer

Enable SIOC on the datastore and set the latency threshold to a higher value.