VCP-DCV Practice Test 2 — 30 Questions

Question 1

An administrator configures a distributed switch with a single uplink on each host and a port group with VLAN 10. After connecting a VM to the port group, the VM cannot communicate with other VMs on the same VLAN but on different hosts. What is a likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The physical switch port is set to access mode with VLAN 10.. When the physical switch port is in access mode with VLAN 10, it expects untagged frames. However, the distributed port group with VLAN 10 tags the frames with VLAN 10. This mismatch causes the physical switch to drop or mishandle the traffic, preventing the VM from communicating with other VMs on the same VLAN across hosts. Option B is incorrect because teaming is not required for basic connectivity; a single uplink suffices. Option C describes trunk mode which would actually accept tagged frames, so it would work. Option D is incorrect because the VLAN ID is configured on the port group, not on the VM's virtual adapter.

Answer

The distributed switch has no teaming configured.

Answer

The physical switch port connected to the uplink is set to trunk mode and is tagging the VLAN.

Answer

The VLAN ID is not set correctly on the VM's virtual network adapter.

Question 2

A vSphere administrator needs to apply a critical security patch to all ESXi hosts in a cluster that is managed by a baseline. The patch is not yet available as an update in the baseline group. What is the best approach to apply this patch quickly?

Accepted Answer

Attach the patch as a new baseline to the cluster alongside existing baselines.. Attaching the patch as a new baseline to the cluster alongside existing baselines allows you to quickly apply the critical security patch without modifying the existing baseline group. This method is efficient and directly addresses the immediate need. Option A is incorrect because remediating each host individually via CLI is time-consuming and less efficient for a cluster. Option B is incorrect because creating a new baseline group is unnecessary and may cause disruption by replacing the current baseline group. Option C is incorrect because vLCM is used for image-based management, not baseline-based management, and the cluster is managed by baselines, not images.

Answer

Remediate each host individually using CLI commands.

Answer

Create a new baseline group that includes the patch and attach it to the cluster.

Answer

Download the patch as an offline bundle and use vLCM to apply it directly.

Question 3

A vSphere administrator is using vSphere Lifecycle Manager images to manage a cluster. The administrator wants to add a new custom component (a driver) to the cluster image. Which THREE steps are required to successfully add the component? (Choose three.)

Accepted Answer

Download the component offline bundle from the vendor.. Options A, C, and D are correct. A: Download the component offline bundle from the vendor. C: Upload the component to the vLCM depot. D: Add the component to the image definition in vLCM. B is incorrect because you do not need to create a new software depot; the vLCM depot already exists and you upload the bundle to it. E is incorrect because validation is not a required step to add the component; it can be performed later as part of image compliance checking.

Answer

Create a new software depot on the vCenter Server.

Answer

Validate the component against the current image.

Question 4

An administrator has configured jumbo frames on a VDS and all physical switches. Virtual machines on different hosts can ping each other but cannot transfer files larger than 1500 bytes. What is the most likely cause?

Accepted Answer

The virtual machine's operating system MTU is set to 1500.. Jumbo frames require the entire network path, including the virtual machine's operating system, to support the larger MTU. If the VM OS MTU is left at 1500, packets larger than 1500 bytes will be fragmented by the OS or dropped, preventing large file transfers. Option A is incorrect because the problem states physical switches and the VDS are configured for jumbo frames, but the physical NICs must also be configured; however, the question does not indicate they are misconfigured, and the issue is more likely the VM OS. Option B is incorrect because TCP offload engines typically handle segmentation and checksum, not fragmentation due to MTU mismatch. Option C is incorrect because VMkernel adapters are for management and vMotion traffic, not VM data traffic; VM data uses the VM's own network stack.

Answer

The physical NICs are not configured for jumbo frames.

Answer

The TCP/IP offload engine is causing fragmentation.

Answer

The VMkernel adapters are not configured with MTU 9000.

Question 5

A vSphere administrator manages a cluster of 50 ESXi hosts using vLCM with image-based management. The cluster includes hosts from two different hardware vendors. The administrator needs to ensure firmware updates are consistently applied across all hosts. What is the best practice for this scenario?

Accepted Answer

Create separate cluster images for each hardware vendor and apply to respective hosts.. Different hardware vendors require different firmware, and vLCM image-based management supports creating separate cluster images per hardware type to ensure the correct firmware is applied to each host. Option A is wrong because baseline groups are deprecated and not the best practice for firmware updates. Option B is wrong because a single cluster image cannot contain multiple firmware sets for different vendors. Option D is wrong because manually updating firmware with vendor tools is not standardized and defeats the purpose of centralized lifecycle management via vLCM.

Answer

Use baseline groups to manage firmware separately.

Answer

Create a single cluster image that includes firmware for both vendors.

Answer

Manually update firmware using vendor tools, then use vLCM for ESXi updates.

Question 6

During a period of high network contention, management traffic is starved while NFS traffic gets the most bandwidth. Which configuration change would best address the issue?

Accepted Answer

Set a reservation for management traffic.. Setting a reservation for management traffic guarantees a minimum amount of bandwidth, ensuring that management traffic does not get starved even under high network contention. Option A (increasing management shares) improves relative priority but does not guarantee bandwidth. Option B (increasing the NFS limit) would allocate more bandwidth to NFS, worsening the problem. Option D (enabling traffic shaping on the management port group) affects only outbound traffic on a standard switch and does not use NIOC (Network I/O Control), which is needed for reservation-based guarantees. Option E (removing the vMotion reservation) may free up bandwidth but does not guarantee management traffic receives a minimum.

Answer

Increase management shares to 100.

Answer

Increase the NFS limit to 1000 Mbps.

Answer

Enable traffic shaping on the management port group.

Answer

Remove the reservation from vMotion.

Question 7

An administrator notices that a critical virtual machine is running slowly. The VM has 8 vCPUs and 32GB memory. The host is an ESXi 7.0 server with two Intel Xeon Gold 6248 sockets (20 cores each, hyperthreading enabled). The VM's CPU ready time is consistently above 10%. What is the most likely cause?

Accepted Answer

The host has too many VMs running and CPU oversubscription is too high.. High CPU ready time indicates the VM is ready to run but the hypervisor cannot schedule it. This is typically due to excessive CPU oversubscription. Option B correctly identifies that having too many VMs on the host leads to high CPU contention, causing ready time. Option A is incorrect because pinning vCPUs to a single NUMA node can increase ready time if other nodes are idle, but with only 8 vCPUs on a 40-logical-CPU node, contention is unlikely unless many other VMs are also pinned. Option C is incorrect because over-provisioning refers to total vCPUs exceeding physical CPUs, not individual VM vCPU count; the host has 80 logical CPUs, so 8 vCPUs is not over-provisioned. Option D is incorrect because disk I/O does not cause CPU ready time; it causes disk latency.

Answer

The VM's vCPUs are pinned to a single NUMA node causing contention.

Answer

The VM is over-provisioned on vCPUs relative to the host's physical cores.

Answer

The VM is using Eager Zero Thick disks causing high I/O latency.

Question 8

Based on the Healthcheck output for a distributed port (DVS Port 1) on dvs0, what can be concluded?

Accepted Answer

The physical switch is correctly configured for VLAN 100 and MTU 1500 on the uplinks connected to this host.. The Healthcheck output shows 'VLAN 100' and 'MTU 1500' with status 'OK', indicating that the physical switch configuration matches the DVS port settings for VLAN and MTU. Option A is incorrect because Healthcheck doesn't report speed/duplex of uplinks. Option C is incorrect because the teaming policy shown is 'Route based on originating virtual port', not IP hash. Option D is incorrect because Healthcheck checks configuration consistency, not packet loss.

Answer

The uplinks vmnic0 and vmnic1 are operating at 10 Gbps.

Answer

The load balancing policy is set to 'Route based on IP hash'.

Answer

The port is experiencing high packet loss due to misconfiguration.

Question 9

A vSphere administrator is planning to configure VMware vSAN. Which TWO requirements must be met for a vSAN cluster?

Accepted Answer

Each host must have at least one SSD and one HDD for capacity.. VSAN requires at least one SSD (or NVMe) for the cache tier and one HDD (or SSD) for the capacity tier on each host to form a disk group. This hybrid or all-flash configuration is fundamental to vSAN's storage architecture, where the cache tier accelerates writes and reads, while the capacity tier provides persistent storage.

Answer

A dedicated 10 GbE network for vSAN traffic.

Answer

All hosts must have identical CPU models.

Answer

A shared storage array accessible by all hosts.

Question 10

Which TWO of the following are functions of a vSphere Distributed Switch that are not available in a vSphere Standard Switch? (Select exactly two.)

Accepted Answer

Port mirroring (Distributed Port Mirroring).. Options A and C are correct. Port mirroring (Distributed Port Mirroring) is a feature exclusive to the vSphere Distributed Switch (vDS). Network I/O Control (NIOC) is also only available on vDS, allowing for bandwidth allocation and prioritization. Option B is incorrect because NIC teaming with explicit failover order is available on both standard and distributed switches. Option D is incorrect because traffic shaping policies are available on vSphere Standard Switches (vSS) at the port group level. Option E is incorrect because VLAN tagging and trunking are supported on both switch types.

Answer

NIC teaming with explicit failover order.

Answer

Traffic shaping policies.

Answer

VLAN tagging and trunking.

Question 11

Which TWO prerequisites must be met before enabling vLCM image-based management on a vSAN cluster?

Accepted Answer

All ESXi hosts must be reachable and managed by the same vCenter Server.. Options A and C are correct prerequisites for enabling vLCM image-based management on a vSAN cluster. All ESXi hosts in the cluster must be managed by the same vCenter Server because vLCM operates at the cluster level and requires a single vCenter to coordinate updates. Additionally, vCenter Server version must be 7.0 or later, as vLCM was introduced in vSphere 7.0. Option B is incorrect because vLCM supports vSAN clusters; the cluster does not need to avoid vSAN. Option D is incorrect; while vSAN readiness is required for vSAN itself, it is not a specific prerequisite for enabling vLCM image-based management. Option E is incorrect because vLCM does not require a dedicated vCenter Server; it uses the existing vCenter managing the cluster.

Answer

The cluster must not be using vSAN.

Answer

All hosts in the cluster must be vSAN ready and part of a vSAN cluster.

Answer

A separate vCenter Server must be dedicated to lifecycle management.

Question 12

What is the maximum number of virtual CPUs (vCPUs) that can be allocated to a virtual machine on vSphere 8 Enterprise Plus?

Accepted Answer

256. 256 vCPUs. vSphere 8 Enterprise Plus supports up to 256 virtual CPUs per virtual machine. Option A (128) was the maximum in vSphere 6.5 and earlier, not vSphere 8. Option B (512) exceeds the vSphere 8 limit. Option C (64) is below the current maximum and incorrect.

Answer

128

Answer

512

Answer

64

Question 13

A vSphere environment uses VMCA for certificate management. An administrator needs to replace the certificate for vCenter Server with a custom CA-signed certificate. The custom CA root certificate must be trusted by all ESXi hosts. Which method should the administrator use to distribute the custom CA root certificate to ESXi hosts?

Accepted Answer

Create a host profile containing the custom CA root certificate and apply it to the ESXi hosts. Using a host profile to apply the custom CA root certificate ensures consistent, policy-driven deployment across all ESXi hosts, leveraging vCenter's host profile functionality. Option A is incorrect: restarting the rhttpproxy service with a new configuration does not distribute certificates; it only restarts the proxy service. Option B is incorrect: while vCenter can manage machine SSL certificates, it does not automatically push root CA certificates to ESXi hosts; the administrator must explicitly import the root CA into the ESXi trust store, which is not done automatically by vCenter. Option C is incorrect: manually uploading via SCP is not scalable and is not the recommended method for managing certificate trust across multiple hosts; host profiles provide a centralized, automated approach.

Answer

Restart the rhttpproxy service on each ESXi host with a new configuration

Answer

Import the root CA certificate into vCenter Server and it will automatically push to hosts

Answer

Manually upload the root CA certificate to each ESXi host via SCP

Question 14

An administrator needs to lock down an ESXi host for FIPS 140-2 compliance. Which step must be taken?

Accepted Answer

Enable lockdown mode on the ESXi host.. For FIPS 140-2 compliance, the ESXi host must be placed in lockdown mode to restrict direct root access and ensure only authorized users via vCenter can manage the host. Option A is incorrect because disabling the ESXi Shell and SSH services alone does not achieve FIPS compliance; lockdown mode is the required step. Option C is incorrect because host profiles can apply security settings but do not enforce lockdown mode for FIPS. Option D is incorrect because FIPS mode is not configured in the host's BIOS; it is a software-level cryptographic compliance enforced by ESXi lockdown and other settings.

Answer

Disable the ESXi Shell and SSH services.

Answer

Configure a host profile with a security policy.

Answer

Enable FIPS mode in the host's BIOS.

Question 15

A company runs a critical e-commerce platform on a vSphere 7 cluster with ESXi hosts connected to a vSAN datastore. The environment uses vSphere Trust Authority (vTA) and VM encryption with an external KMS. Recently, after a successful vTA attestation, one of the VMs (WebServer-01) failed to power on with the error: 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable.' The administrator verifies that other encrypted VMs on the same host power on successfully. The KMS cluster consists of two servers: KMS-01 and KMS-02, both accessible from the management network. The administrator checks the VM's configuration and finds that it uses a custom storage policy with encryption. What is the most likely cause of this specific VM's failure?

Accepted Answer

The VM's encryption key was retrieved from a different KMS server that is now unavailable, and the key ID in the VM's metadata points to that KMS server.. The error 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable' indicates that the ESXi host cannot contact the KMS server to retrieve the VM's encryption key. Since other encrypted VMs on the same host power on successfully, the host can reach the KMS cluster, but this specific VM's encryption key may have been issued by a different KMS server (e.g., an older or alternative KMS) that is now unavailable. The key ID stored in the VM's metadata points to that unreachable server, causing the failure. Option A is incorrect because if the vCenter KMS cluster configuration were deleted, all VMs would be affected. Option B is incorrect because modifying the storage policy does not change the existing encryption key; the VM remains encrypted with its original key. Option C is incorrect because vTA attestation is separate from KMS key retrieval; the error message is specific to KMS unavailability.

Answer

The vCenter Server's KMS cluster configuration has been deleted, affecting all VMs but not this one.

Answer

The storage policy used by the VM has been modified and no longer includes encryption.

Answer

The vTA attestation process failed for the VM's host, but the error message is misleading.

Question 16

A vSphere administrator has a VMFS6 datastore that is running low on space. The storage array has additional unallocated LUNs. The administrator attaches a new 2 TB LUN to the ESXi host. What is the correct procedure to increase the datastore capacity?

Accepted Answer

Use the 'Increase datastore capacity' wizard to add the LUN as an extent. The correct procedure is to use the 'Increase datastore capacity' wizard to add the new LUN as an extent to the existing VMFS6 datastore. VMFS6 supports online extension, allowing the datastore to be expanded without unmounting or disrupting running VMs. Option B is incorrect because unmounting and extending the partition is unnecessary; VMFS6 handles this dynamically. Option C is incorrect because recreating the datastore with a larger block size is disruptive and not required—adding an extent achieves the capacity increase. Option D is incorrect because creating a new datastore and migrating VMs is unnecessary and adds complexity; the existing datastore can be extended seamlessly.

Answer

Unmount the datastore, expand the VMFS partition, then remount

Answer

Recreate the datastore with a larger block size and restore from backup

Answer

Create a new datastore on the LUN and use Storage vMotion to migrate VMs

Question 17

An administrator needs to create a distributed port group on a vSphere Distributed Switch (VDS). Which two configuration settings must be specified during creation? (Choose two.)

Accepted Answer

VLAN ID. A VLAN ID must be specified to define the VLAN membership for the distributed port group, ensuring proper network segmentation and traffic isolation. The port group name is required as a unique identifier for administrative management and reference within the vSphere environment.

Answer

Uplink teaming policy

Answer

Number of ports

Answer

Traffic shaping policy

Question 18

A large e-commerce company has a vSphere cluster with 16 hosts, each with 2 sockets of 10 cores (HT enabled) and 512 GB RAM. They run a mix of web and database VMs. During the holiday season, some VMs experience high CPU ready time, especially the database VMs. DRS is set to Fully Automated and migration thresholds are at default. The administrator notices that the cluster's CPU utilization averages at 60%, but some hosts are at 90% while others are at 30%. The VMs with high ready time are all on the highly utilized hosts. To resolve this, the administrator considers several options. Which action will most effectively balance CPU load and reduce ready time for the database VMs?

Accepted Answer

Decrease the DRS migration threshold from 3 to 1 to make it more aggressive.. Decreasing the DRS migration threshold from 3 to 1 makes DRS more aggressive, triggering migrations even for small imbalances. This will redistribute VMs from highly utilized hosts to underutilized hosts, reducing CPU ready time for database VMs. Option A (resource pool with higher shares) does not cause migrations; it only prioritizes CPU allocation during contention on the same host. Option B (increasing threshold to 5) makes DRS less aggressive, worsening the imbalance. Option C (VM Monitoring) is an HA feature for fault detection, not load balancing.

Answer

Create a resource pool for database VMs and set a higher CPU share value.

Answer

Increase the DRS migration threshold from 3 to 5 to reduce unnecessary migrations.

Answer

Enable 'VM Monitoring' in the HA cluster settings.

Question 19

A company has a vLCM-managed cluster with hosts that have different hardware models (heterogeneous). The administrator needs to manage updates for all hosts. What is the correct approach?

Accepted Answer

Create multiple host images, each tailored to a specific hardware model.. VLCM supports heterogeneous clusters by creating multiple host images, one per host hardware configuration. Option A is wrong because baselines are a legacy method for managing updates, not recommended for vLCM. Option B is wrong because a single cluster image is intended for homogeneous clusters, not heterogeneous. Option C is wrong because manually adding missing drivers after remediation is not a supported approach for vLCM.

Answer

Use vSphere baselines to manage each host individually.

Answer

Create a cluster image that includes all necessary drivers for both hardware models.

Answer

Use a single image and manually add missing drivers after remediation.

Question 20

An administrator is planning a vMotion migration and wants to minimize the performance impact on the virtual machines during the migration. Which network configuration is recommended?

Accepted Answer

Create a dedicated VMkernel interface with at least 10 GbE throughput for vMotion.. A dedicated VMkernel interface for vMotion isolates migration traffic from other network traffic, reducing contention and ensuring consistent performance. A minimum of 10 GbE is recommended to handle the high throughput demands of vMotion, especially for large VMs. Option B is incorrect because using the default management interface can lead to resource contention and performance degradation. Option C is incorrect because a single 1 GbE interface for both vMotion and management is likely insufficient and causes competition. Option D is incorrect because jumbo frames alone do not address the contention issue; keeping vMotion on the management network still causes competition.

Answer

Use the default management VMkernel interface for vMotion traffic.

Answer

Configure a single 1 GbE interface for both vMotion and management traffic.

Answer

Enable jumbo frames on all interfaces, but keep vMotion on the management network.