VCP-DCV Practice Test 3 — 10 Questions

Question 1

A company uses an external Platform Services Controller (PSC) in a vSphere 6.7 environment. They plan to upgrade to vSphere 7.0. Which security-related consideration is most important?

Accepted Answer

The external PSC is deprecated; it must be converged into the vCenter Server.. In vSphere 7.0, external Platform Services Controllers (PSC) are deprecated and must be converged into the vCenter Server during upgrade. This convergence simplifies management and improves security by reducing the attack surface. The upgrade process requires a topology change to embedded PSC.

Answer

The external PSC will automatically convert to an embedded PSC during upgrade.

Answer

The SSL certificates for the PSC must be reissued from a new CA.

Answer

The STS certificates need to be replaced with custom ones immediately after upgrade.

Question 2

Refer to the exhibit. An administrator cannot resolve the hostname of a DNS server using the ESXi host. What is the most likely cause?

Accepted Answer

The DNS servers are not configured correctly for the domain.

Answer

The search domain is incorrectly set to localdomain.

Answer

The DNS servers are unreachable.

Answer

The ESXi host is not configured to use DNS.

Question 3

What is the purpose of the 'Export System Logs' option in vSphere Lifecycle Manager?

Accepted Answer

Collect logs for troubleshooting. The 'Export System Logs' option in vSphere Lifecycle Manager (vLCM) is designed to gather diagnostic information from the vLCM components, including the vLCM service logs, image depot logs, and related vCenter Server logs. This bundled log archive is used by VMware support and administrators to troubleshoot issues such as image compliance failures, remediation errors, or depot synchronization problems. It does not create backups or recovery images; it is purely a diagnostic tool.

Answer

Create a recovery image

Answer

Back up configuration

Answer

Transfer logs to vCenter

Question 4

Which two actions must the administrator take to ensure network connectivity for VMs on a new distributed switch?

Accepted Answer

Add the ESXi hosts to the distributed switch. To provide network connectivity for VMs on a new vSphere Distributed Switch, the administrator must first add the ESXi hosts to the distributed switch (option B), because a vDS only manages networking on hosts that are members of it; without host membership, no physical uplinks or VM traffic can traverse the switch. The administrator must also create a port group and assign a VLAN (option D), since VM vNICs connect to distributed port groups, and the VLAN ID on that port group determines the Layer 2 broadcast domain for the VMs. Configuring a VMkernel interface (option A) is only required for host management, vMotion, iSCSI, or vSAN traffic, not for general VM connectivity. Setting MTU to 9000 (option C) is an optional jumbo-frame tuning, and enabling Network I/O Control (option E) is an optional traffic-shaping/QoS feature; neither is required for basic VM network connectivity.

Answer

Configure a VMkernel interface on the distributed switch

Answer

Set the MTU to 9000

Answer

Enable Network I/O Control

Question 5

A vSphere administrator needs to ensure that all virtual machine disks are encrypted at rest. The environment uses a KMS cluster with multiple KMIP-compliant servers. The administrator has already configured a storage policy with encryption enabled. However, newly created VMs on a particular datastore still show unencrypted disks. What is the most likely cause?

Accepted Answer

The storage policy with encryption is not assigned to the VMs or their home namespace.. Even when a storage policy with encryption is configured, it must be explicitly assigned to the VMs or their home namespace (the VM's configuration and swap files). If the policy is not assigned, the VM will be created using the default datastore policy, which typically does not include encryption, resulting in unencrypted disks. The administrator must ensure the encryption-enabled policy is applied to the VM during creation or via a storage policy-based management (SPBM) assignment.

Answer

The datastore is a vSAN datastore, which does not support VM-level encryption.

Answer

The KMS cluster must have at least two KMS servers to function correctly.

Answer

The datastore is formatted with VMFS6, which does not support encryption.

Question 6

A VM with a large memory footprint is experiencing high swap rates. The host has free memory but the swap rate is still high. What is the most likely cause?

Accepted Answer

The VM's memory limit is set too low.. A VM memory limit in vSphere caps the amount of host physical memory the VM can consume. When the limit is lower than the guest's working set, the VM balloons and then swaps to its .vswp file even though the host has free memory, because the limit — not host pressure — is driving reclamation. Raising or removing the limit resolves the swap.

Answer

The VM's virtual machine swap file is on a slow datastore.

Answer

The host is using software iSCSI causing high latency.

Answer

The VM's memory reservation is set too high.

Question 7

Place the steps to create a resource pool in a cluster.

Accepted Answer

Right-click cluster, select New Resource Pool, name the resource pool, set CPU and memory resources (shares, reservation, limit), configure expandable reservation (optional), click OK.. Creating a resource pool in a vSphere cluster involves first initiating the creation by right-clicking the cluster and selecting New Resource Pool, then providing a name, followed by configuring CPU and memory resources including shares, reservation, and limit, optionally enabling expandable reservation, and finally confirming by clicking OK. This sequence ensures all required parameters are set before finalizing the resource pool.

Answer

Right-click cluster, select New Resource Pool, set CPU and memory resources (shares, reservation, limit), name the resource pool, configure expandable reservation (optional), click OK.

Answer

Right-click cluster, select New Resource Pool, name the resource pool, set CPU and memory resources (shares, reservation, limit), click OK, configure expandable reservation (optional).

Answer

Right-click cluster, select New Resource Pool, name the resource pool, configure expandable reservation (optional), set CPU and memory resources (shares, reservation, limit), click OK.

Question 8

An administrator is adding an ESXi host to vCenter Server and is prompted to verify the host's certificate thumbprint. The administrator compares it to the output above and it matches. However, the add operation fails with a certificate verification error. What else could be the issue?

Accepted Answer

The certificate common name does not match the hostname. When adding an ESXi host to vCenter Server, the thumbprint verification ensures the host's certificate fingerprint matches what is expected, but it does not validate the certificate's subject attributes. If the certificate's Common Name (CN) does not match the ESXi host's FQDN or IP address used during the add operation, vCenter Server will reject the connection with a certificate verification error, even if the thumbprint is correct. This is because vCenter Server performs hostname verification as part of TLS/SSL certificate validation to prevent man-in-the-middle attacks.

Answer

The vCenter Server's certificate is invalid

Answer

The certificate has expired

Answer

The certificate is not signed by a trusted Certificate Authority

Question 9

Refer to the exhibit. A virtual machine on the VM Network is experiencing intermittent connectivity. The administrator notices that vmnic0 is saturated. Which action would improve performance without causing a single point of failure?

Accepted Answer

Configure load-based teaming on vSwitch0 for the VM Network portgroup.. Load-based teaming (LBT) on vSwitch0 dynamically balances VM traffic across all active uplinks based on real-time utilization, so vmnic0's load is shared with vmnic1, relieving saturation. It also maintains redundancy because both uplinks remain active; if one fails, the other takes over. This directly addresses the intermittent connectivity caused by vmnic0 saturation without introducing a single point of failure.

Answer

Change the active uplinks for VM Network to vmnic1 only.

Answer

Increase the MTU on vSwitch0 to 9000.

Answer

Move the VM Network to vSwitch1.

Question 10

A vSphere cluster using vSAN is experiencing high latency for some VMs. The administrator checks the vSAN skyline health and finds that all disk groups are healthy. Which additional step should the administrator take to diagnose the issue?

Accepted Answer

Check the vSAN performance service for object latency breakdown.. The vSAN Performance Service provides granular, real-time and historical metrics for vSAN objects, including latency breakdowns at the VM, disk group, and physical disk levels. Since the skyline health check shows all disk groups as healthy, the next logical step is to use the Performance Service to pinpoint whether the high latency is due to congestion on a specific object, such as a VM virtual disk or a particular disk group component, rather than a hardware failure.

Answer

Verify that the vSAN network is configured with jumbo frames.

Answer

Enable vSAN encryption to improve performance.

Answer

Increase the number of disk groups on each host.