VCP-DCV Practice Test 29 — 15 Questions

Question 1

A company has a vLCM-managed cluster with a desired image that includes ESXi 8.0 U1 and multiple VIBs. After remediating, one host fails with an error: 'Failed to retrieve VIBs from depot'. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The vCenter Server does not have internet access to the VMware depot.. The error 'Failed to retrieve VIBs from depot' indicates that vCenter Server cannot reach the depot from which the VIBs are sourced. In a vLCM-managed cluster using a desired image, the image specification includes VIBs that may be hosted on the VMware online depot or a local depot. If vCenter Server lacks internet access to the VMware depot, it cannot download the required VIBs, causing the remediation to fail. This is the most likely cause because the error is specifically about retrieval, not validation or compatibility.

Answer

The cluster has a baseline attached that conflicts with the desired image.

Answer

The image validation failed due to incompatible VIBs.

Answer

The host firmware is not compatible with the selected VIBs.

Question 2

A company operates a three-node vSphere cluster for a critical application. Each ESXi host has two 10GbE physical NICs (vmnic0 and vmnic1) connected to two separate physical switches (Switch A and Switch B) for redundancy. The cluster uses a vSphere Distributed Switch (vDS) with two uplinks per host: uplink1 (vmnic0) connected to Switch A, and uplink2 (vmnic1) connected to Switch B. The teaming policy is set to 'Route based on originating virtual port' with both uplinks active. The physical switches are configured in a multi-chassis link aggregation group (MLAG) that bundles the ports from both switches into a single LAG interface. The LAG is configured with mode 'active' (802.3ad). Recently, the cluster experienced a network outage when one of the physical switch uplinks failed. The VMs on the affected host lost connectivity for several seconds before recovering. The administrator wants to prevent such outages in the future. Which action should the administrator take?

Accepted Answer

Configure the vDS with LACP support and set the teaming policy to 'Route based on IP hash'.. The current configuration uses a static LAG (MLAG) on the physical switches with 802.3ad active mode, but the vDS is not configured for LACP. This mismatch causes the vDS to send frames based on originating virtual port, which does not coordinate with the physical LAG's hashing algorithm. When a physical uplink fails, the MLAG may not properly redistribute traffic because the vDS is unaware of the LAG state, leading to connectivity loss. Configuring the vDS with LACP support and setting the teaming policy to 'Route based on IP hash' aligns the virtual and physical LAG configurations, ensuring proper load balancing and failover behavior.

Answer

Disable LACP on the physical switches and configure the vDS with 'Route based on originating virtual port' only.

Answer

Add a third physical NIC to each host and configure it as a standby uplink.

Answer

Change the vDS teaming policy to 'Use explicit failover order' with vmnic0 active and vmnic1 standby.

Question 3

A vSphere cluster is experiencing high CPU ready time across multiple hosts during peak hours. The cluster consists of 8 hosts, each with 2 sockets and 8 cores per socket (hyperthreading enabled). DRS is set to a moderately aggressive migration threshold. The administrator needs to reduce CPU contention without disrupting workloads. Which three actions should the administrator consider? (Choose three.)

Accepted Answer

Upgrade the ESXi hosts to models with higher CPU clock speeds.. Enabling hyperthreading increases logical CPUs and can reduce ready time. Reducing the number of VMs per host decreases overall demand. Upgrading to faster CPUs increases per-core capacity. Setting CPU affinity on VMs is not recommended as it limits DRS balancing. Increasing the DRS migration threshold to the most aggressive may cause excessive migrations and does not address the root cause. Adding vCPUs to VMs would worsen contention.

Answer

Configure CPU affinity for VMs with high vCPU counts.

Answer

Increase the DRS migration threshold to the most aggressive setting.

Question 4

A vSphere administrator notices that a cluster managed by vSphere Lifecycle Manager image has drifted from the desired state. The administrator wants to correct the drift. What is the recommended action?

Accepted Answer

Use vSphere Lifecycle Manager to remediate the cluster.. The recommended action to correct drift in a vSphere Lifecycle Manager image-managed cluster is to use vLCM to remediate the cluster (Option D). The remediate function automatically runs a compliance check and applies any needed updates to restore the desired state. While Option A also includes remediation after a compliance check, the most direct and recommended approach is the single-step remediation. Option B is incorrect because removing the cluster image would abandon image-based management, requiring a migration to baselines. Option C is incorrect because rebuilding the image is unnecessary; remediation can correct drift without rebuilding.

Answer

Run a compliance check and remediate any non-compliant hosts.

Answer

Remove the cluster image and reattach baselines.

Answer

Rebuild the image from scratch and reapply.

Question 5

An administrator notices that a VM with a 500 GB virtual disk stored on an NFS datastore is performing poorly during backup operations. The NFS datastore is mounted with default settings. Which change will most likely improve performance?

Accepted Answer

Configure the NFS datastore to use vStorage APIs for Array Integration (VAAI).. VAAI for NFS offloads storage operations like hardware-assisted locking and full-file/clone operations to the NAS array, reducing CPU overhead on the ESXi host and improving performance during backup-intensive tasks. Since the NFS datastore is mounted with default settings, VAAI is not automatically enabled and must be explicitly configured to leverage array-based primitives.

Answer

Move the VM to a cluster with more memory.

Answer

Enable jumbo frames on the ESXi host's VMkernel adapter for NFS.

Answer

Increase the size of the NFS datastore to 1 TB.

Question 6

An administrator is configuring Storage DRS on a datastore cluster. Which THREE conditions must be met for Storage DRS to migrate virtual disks?

Accepted Answer

The source and destination datastores must be part of the same datastore cluster.. Storage DRS operates within a single datastore cluster, which is a collection of datastores that share resources and are managed as a single entity. For Storage DRS to migrate virtual disks via Storage vMotion, both the source and destination datastores must be members of the same datastore cluster; cross-cluster migrations are not supported by Storage DRS.

Answer

The virtual disk must not be attached to a snapshot.

Answer

The storage array must support VAAI.

Question 7

An administrator is analyzing performance data for a vSphere cluster and wants to identify VMs that are experiencing memory pressure. Which two metrics from esxtop or vCenter performance charts reliably indicate that a VM is actively reclaiming memory due to contention? (Choose two.)

Accepted Answer

Ballooned memory. Memory ballooning and swapping are clear indicators of memory pressure. Ballooning occurs when the VMkernel reclaims memory from a VM via the balloon driver, and swapping occurs when the hypervisor is forced to swap pages to disk. Active memory is the currently used memory, not a sign of pressure. Consumed memory includes overhead and target memory. Overhead memory is the hypervisor overhead, not a pressure metric.

Answer

Consumed memory

Answer

Active memory

Answer

Overhead memory

Question 8

Refer to the exhibit. An administrator runs the command on an ESXi host to check HTTPS connections. The host is running vCenter Server and several VMs. What is the most likely cause of the TIME_WAIT connection?

Accepted Answer

A client closed the HTTPS connection and the host is in TIME_WAIT state.. The TIME_WAIT state is a normal part of TCP connection termination. When a client closes an HTTPS connection, the ESXi host (as the server) enters TIME_WAIT to ensure any delayed segments are not misinterpreted by a new connection. This state is expected and not indicative of a problem.

Answer

A firewall is blocking return traffic from that client.

Answer

The host's TCP stack is misconfigured for high traffic.

Answer

The host is under memory pressure and dropping connections.

Question 9

An administrator is creating a vLCM image for a cluster of Dell PowerEdge R740 servers. The exhibit shows the current image JSON. When attempting to apply the image, compliance errors are reported regarding firmware. What is the most likely missing component?

Accepted Answer

A vendor add-on for Dell is missing.. A vendor add-on for Dell is missing from the vLCM image. In vSphere Lifecycle Manager (vLCM), vendor add-ons provide hardware-specific drivers and firmware updates required for proper management. Without the Dell add-on, firmware compliance errors will occur. Option B is incorrect because listing only Dell models is expected since all servers are Dell PowerEdge R740; not all hardware models need to be listed. Option C is incorrect because the firmware version in hardware_support is automatically populated based on the add-on, but without the add-on the firmware version is irrelevant. Option D is incorrect because the ESXi version is specified in the image and is not the cause of firmware errors.

Answer

Only Dell models are listed, not all hardware models.

Answer

The firmware version in hardware_support is wrong.

Answer

The ESXi version is incorrect.

Question 10

A vSphere administrator is tasked with automating the lifecycle management of ESXi hosts in a cluster using vLCM. The cluster currently has 10 hosts with various ESXi versions (7.0, 7.0 U1, 7.0 U2). The administrator wants to bring all hosts to a consistent version 7.0 U3. The administrator creates a new image with ESXi 7.0 U3 and attempts to remediate the cluster. The remediation fails with the error 'Host does not have the required power state to perform remediation'. All hosts are powered on and connected. What is the most likely cause?

Accepted Answer

vSphere DRS is not enabled on the cluster.. VSphere Lifecycle Manager (vLCM) requires vSphere DRS to be enabled on the cluster to automate the placement of hosts into maintenance mode during remediation. Without DRS, vLCM cannot automatically evacuate VMs from a host, so the remediation fails with the 'Host does not have the required power state' error, even though all hosts are powered on and connected.

Answer

The administrator must manually put all hosts into maintenance mode before remediation.

Answer

Some hosts are in standby mode or powered off.

Answer

There is a stale lock on the vLCM image specification.

Question 11

An organization is deploying vCenter Server in a DMZ. Which security best practice should the administrator implement to protect the vCenter Server appliance?

Accepted Answer

Enable FIPS 140-2 mode on the vCenter Server appliance. Enable FIPS 140-2 mode on the vCenter Server appliance. When deploying vCenter Server in a DMZ, enabling FIPS 140-2 mode ensures that the appliance uses only FIPS-approved cryptographic algorithms, enhancing security and compliance. Option A is incorrect because joining the vCenter Server to the corporate Active Directory domain exposes it to domain-related attacks and increases the attack surface in the DMZ. Option B is incorrect because enabling SSH for remote administration is a security risk; SSH should be disabled unless absolutely necessary, and even then, it should be tightly controlled. Option D is incorrect because deleting the root user account is not a best practice; the root account is essential for system recovery and maintenance, and the recommended approach is to limit its use and enforce strong passwords.

Answer

Join the vCenter Server to the corporate Active Directory domain

Answer

Enable SSH for remote administration

Answer

Delete the root user account

Question 12

Refer to the exhibit. A distributed virtual switch port shows dropped Rx packets and CRC errors. What is the most likely cause?

Accepted Answer

Faulty physical network cable or NIC.. CRC errors and dropped Rx packets on a distributed virtual switch port indicate physical-layer corruption of frames, typically caused by a faulty cable, damaged NIC, or bad transceiver. These errors occur when the cyclic redundancy check (CRC) computed by the receiver does not match the frame's CRC field, which is a direct symptom of signal integrity issues at Layer 1.

Answer

Outdated NIC driver on the ESXi host.

Answer

MTU mismatch between the switch and the VM.

Answer

Incorrect VLAN configuration on the port group.

Question 13

A company experiences high latency on a VM running a critical database. The storage is a VMFS datastore on a SAN. The administrator notices that other VMs on the same datastore are idle. What should the administrator configure to ensure the database VM gets sufficient storage I/O resources?

Accepted Answer

Configure Storage I/O Control and set the database VM's shares to High.. Storage I/O Control (SIOC) dynamically shares storage I/O resources among VMs on a datastore. By setting a higher share value for the database VM, it gets priority during congestion. Option B is incorrect because manually setting low I/O limits on all other VMs is inefficient and may lead to underutilization; SIOC with shares is adaptive. Option C is incorrect because setting a latency threshold (e.g., 5 ms) is a configuration for SIOC to start congestion control, but it does not by itself ensure the database VM gets sufficient I/O; the key is adjusting shares. Option D is incorrect because Storage DRS (not compute DRS) migrates VMs for space and I/O load balancing, but it does not prioritize I/O for a specific VM; it balances across datastores over time.

Answer

Set storage I/O limits on all other VMs to 100 IOPS.

Answer

Configure Storage I/O Control and set a latency threshold of 5 ms.

Answer

Use Storage DRS to migrate idle VMs to another datastore.

Question 14

An administrator is troubleshooting a failed VM encryption operation. The key provider status shows as 'Not Responding' in the vSphere Web Client. The administrator has verified network connectivity between the ESXi hosts and the key provider. What is the most likely cause of the failure?

Accepted Answer

The key provider certificate is expired or invalid. When the key provider's certificate is expired or invalid, the ESXi hosts may be able to reach the key provider over the network, but the SSL/TLS handshake fails, resulting in a 'Not Responding' status. Option A is wrong because an expired vCenter certificate would affect vCenter operations but not the ESXi hosts' direct communication with the key provider. Option B is wrong: Port 443 is commonly used for HTTPS, but if firewall blocked port 443, the status would typically show as 'Unreachable' or 'Connection Refused', not 'Not Responding'. Option C is wrong: ESXi hosts do not need internet access for an on-premises key provider; they only need local network connectivity.

Answer

The vCenter Server certificate has expired

Answer

The firewall on the key provider is blocking port 443

Answer

The ESXi hosts cannot reach the internet

Question 15

A virtual machine connected to the 'VM Network' port group is unable to obtain an IP address from the DHCP server located on the same subnet (192.168.1.0/24). The DHCP server is connected to the physical switch which is configured as an access port for VLAN 100. What is the most likely cause of the issue?

Accepted Answer

The port group should use a different VLAN ID.. The virtual machine is connected to the default 'VM Network' port group, which has VLAN ID 0 (no VLAN tagging), sending untagged traffic. The DHCP server is connected to a physical switch port configured as an access port for VLAN 100, placing it in VLAN 100. Because the VM and the DHCP server are on different VLANs, they cannot communicate at Layer 2, preventing DHCP discovery broadcasts from reaching the server. The most likely cause is that the port group should use a different VLAN ID (VLAN 100) to match the DHCP server's VLAN. Changing the port group to VLAN 100 will tag the traffic, requiring a trunk on the physical uplink, but the root cause is the VLAN mismatch, not solely the uplink configuration.

Answer

The physical uplink vmnic0 is not configured as a trunk on the physical switch.

Answer

The standard switch has MTU of 1500 but DHCP uses 1500.

Answer

The DHCP server is on a different VLAN.

Answer

The VMkernel port vmk0 has an IP address in the same subnet but is not required for DHCP.