VCP-DCV Practice Test 5 — 10 Questions

Question 1

Which TWO prerequisites must be met before enabling vLCM image-based management on a vSAN cluster?

Accepted Answer

All ESXi hosts must be reachable and managed by the same vCenter Server.. Options A and C are correct prerequisites for enabling vLCM image-based management on a vSAN cluster. All ESXi hosts in the cluster must be managed by the same vCenter Server because vLCM operates at the cluster level and requires a single vCenter to coordinate updates. Additionally, vCenter Server version must be 7.0 or later, as vLCM was introduced in vSphere 7.0. Option B is incorrect because vLCM supports vSAN clusters; the cluster does not need to avoid vSAN. Option D is incorrect; while vSAN readiness is required for vSAN itself, it is not a specific prerequisite for enabling vLCM image-based management. Option E is incorrect because vLCM does not require a dedicated vCenter Server; it uses the existing vCenter managing the cluster.

Answer

The cluster must not be using vSAN.

Answer

All hosts in the cluster must be vSAN ready and part of a vSAN cluster.

Answer

A separate vCenter Server must be dedicated to lifecycle management.

Question 2

What is the maximum number of virtual CPUs (vCPUs) that can be allocated to a virtual machine on vSphere 8 Enterprise Plus?

Accepted Answer

256. 256 vCPUs. vSphere 8 Enterprise Plus supports up to 256 virtual CPUs per virtual machine. Option A (128) was the maximum in vSphere 6.5 and earlier, not vSphere 8. Option B (512) exceeds the vSphere 8 limit. Option C (64) is below the current maximum and incorrect.

Answer

128

Answer

512

Answer

64

Question 3

A vSphere environment uses VMCA for certificate management. An administrator needs to replace the certificate for vCenter Server with a custom CA-signed certificate. The custom CA root certificate must be trusted by all ESXi hosts. Which method should the administrator use to distribute the custom CA root certificate to ESXi hosts?

Accepted Answer

Create a host profile containing the custom CA root certificate and apply it to the ESXi hosts. Using a host profile to apply the custom CA root certificate ensures consistent, policy-driven deployment across all ESXi hosts, leveraging vCenter's host profile functionality. Option A is incorrect: restarting the rhttpproxy service with a new configuration does not distribute certificates; it only restarts the proxy service. Option B is incorrect: while vCenter can manage machine SSL certificates, it does not automatically push root CA certificates to ESXi hosts; the administrator must explicitly import the root CA into the ESXi trust store, which is not done automatically by vCenter. Option C is incorrect: manually uploading via SCP is not scalable and is not the recommended method for managing certificate trust across multiple hosts; host profiles provide a centralized, automated approach.

Answer

Restart the rhttpproxy service on each ESXi host with a new configuration

Answer

Import the root CA certificate into vCenter Server and it will automatically push to hosts

Answer

Manually upload the root CA certificate to each ESXi host via SCP

Question 4

An administrator needs to lock down an ESXi host for FIPS 140-2 compliance. Which step must be taken?

Accepted Answer

Enable lockdown mode on the ESXi host.. For FIPS 140-2 compliance, the ESXi host must be placed in lockdown mode to restrict direct root access and ensure only authorized users via vCenter can manage the host. Option A is incorrect because disabling the ESXi Shell and SSH services alone does not achieve FIPS compliance; lockdown mode is the required step. Option C is incorrect because host profiles can apply security settings but do not enforce lockdown mode for FIPS. Option D is incorrect because FIPS mode is not configured in the host's BIOS; it is a software-level cryptographic compliance enforced by ESXi lockdown and other settings.

Answer

Disable the ESXi Shell and SSH services.

Answer

Configure a host profile with a security policy.

Answer

Enable FIPS mode in the host's BIOS.

Question 5

A company runs a critical e-commerce platform on a vSphere 7 cluster with ESXi hosts connected to a vSAN datastore. The environment uses vSphere Trust Authority (vTA) and VM encryption with an external KMS. Recently, after a successful vTA attestation, one of the VMs (WebServer-01) failed to power on with the error: 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable.' The administrator verifies that other encrypted VMs on the same host power on successfully. The KMS cluster consists of two servers: KMS-01 and KMS-02, both accessible from the management network. The administrator checks the VM's configuration and finds that it uses a custom storage policy with encryption. What is the most likely cause of this specific VM's failure?

Accepted Answer

The VM's encryption key was retrieved from a different KMS server that is now unavailable, and the key ID in the VM's metadata points to that KMS server.. The error 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable' indicates that the ESXi host cannot contact the KMS server to retrieve the VM's encryption key. Since other encrypted VMs on the same host power on successfully, the host can reach the KMS cluster, but this specific VM's encryption key may have been issued by a different KMS server (e.g., an older or alternative KMS) that is now unavailable. The key ID stored in the VM's metadata points to that unreachable server, causing the failure. Option A is incorrect because if the vCenter KMS cluster configuration were deleted, all VMs would be affected. Option B is incorrect because modifying the storage policy does not change the existing encryption key; the VM remains encrypted with its original key. Option C is incorrect because vTA attestation is separate from KMS key retrieval; the error message is specific to KMS unavailability.

Answer

The vCenter Server's KMS cluster configuration has been deleted, affecting all VMs but not this one.

Answer

The storage policy used by the VM has been modified and no longer includes encryption.

Answer

The vTA attestation process failed for the VM's host, but the error message is misleading.

Question 6

A vSphere administrator has a VMFS6 datastore that is running low on space. The storage array has additional unallocated LUNs. The administrator attaches a new 2 TB LUN to the ESXi host. What is the correct procedure to increase the datastore capacity?

Accepted Answer

Use the 'Increase datastore capacity' wizard to add the LUN as an extent. The correct procedure is to use the 'Increase datastore capacity' wizard to add the new LUN as an extent to the existing VMFS6 datastore. VMFS6 supports online extension, allowing the datastore to be expanded without unmounting or disrupting running VMs. Option B is incorrect because unmounting and extending the partition is unnecessary; VMFS6 handles this dynamically. Option C is incorrect because recreating the datastore with a larger block size is disruptive and not required—adding an extent achieves the capacity increase. Option D is incorrect because creating a new datastore and migrating VMs is unnecessary and adds complexity; the existing datastore can be extended seamlessly.

Answer

Unmount the datastore, expand the VMFS partition, then remount

Answer

Recreate the datastore with a larger block size and restore from backup

Answer

Create a new datastore on the LUN and use Storage vMotion to migrate VMs

Question 7

An administrator needs to create a distributed port group on a vSphere Distributed Switch (VDS). Which two configuration settings must be specified during creation? (Choose two.)

Accepted Answer

VLAN ID. A VLAN ID must be specified to define the VLAN membership for the distributed port group, ensuring proper network segmentation and traffic isolation. The port group name is required as a unique identifier for administrative management and reference within the vSphere environment.

Answer

Uplink teaming policy

Answer

Number of ports

Answer

Traffic shaping policy

Question 8

A large e-commerce company has a vSphere cluster with 16 hosts, each with 2 sockets of 10 cores (HT enabled) and 512 GB RAM. They run a mix of web and database VMs. During the holiday season, some VMs experience high CPU ready time, especially the database VMs. DRS is set to Fully Automated and migration thresholds are at default. The administrator notices that the cluster's CPU utilization averages at 60%, but some hosts are at 90% while others are at 30%. The VMs with high ready time are all on the highly utilized hosts. To resolve this, the administrator considers several options. Which action will most effectively balance CPU load and reduce ready time for the database VMs?

Accepted Answer

Decrease the DRS migration threshold from 3 to 1 to make it more aggressive.. Decreasing the DRS migration threshold from 3 to 1 makes DRS more aggressive, triggering migrations even for small imbalances. This will redistribute VMs from highly utilized hosts to underutilized hosts, reducing CPU ready time for database VMs. Option A (resource pool with higher shares) does not cause migrations; it only prioritizes CPU allocation during contention on the same host. Option B (increasing threshold to 5) makes DRS less aggressive, worsening the imbalance. Option C (VM Monitoring) is an HA feature for fault detection, not load balancing.

Answer

Create a resource pool for database VMs and set a higher CPU share value.

Answer

Increase the DRS migration threshold from 3 to 5 to reduce unnecessary migrations.

Answer

Enable 'VM Monitoring' in the HA cluster settings.

Question 9

A company has a vLCM-managed cluster with hosts that have different hardware models (heterogeneous). The administrator needs to manage updates for all hosts. What is the correct approach?

Accepted Answer

Create multiple host images, each tailored to a specific hardware model.. VLCM supports heterogeneous clusters by creating multiple host images, one per host hardware configuration. Option A is wrong because baselines are a legacy method for managing updates, not recommended for vLCM. Option B is wrong because a single cluster image is intended for homogeneous clusters, not heterogeneous. Option C is wrong because manually adding missing drivers after remediation is not a supported approach for vLCM.

Answer

Use vSphere baselines to manage each host individually.

Answer

Create a cluster image that includes all necessary drivers for both hardware models.

Answer

Use a single image and manually add missing drivers after remediation.

Question 10

An administrator is planning a vMotion migration and wants to minimize the performance impact on the virtual machines during the migration. Which network configuration is recommended?

Accepted Answer

Create a dedicated VMkernel interface with at least 10 GbE throughput for vMotion.. A dedicated VMkernel interface for vMotion isolates migration traffic from other network traffic, reducing contention and ensuring consistent performance. A minimum of 10 GbE is recommended to handle the high throughput demands of vMotion, especially for large VMs. Option B is incorrect because using the default management interface can lead to resource contention and performance degradation. Option C is incorrect because a single 1 GbE interface for both vMotion and management is likely insufficient and causes competition. Option D is incorrect because jumbo frames alone do not address the contention issue; keeping vMotion on the management network still causes competition.

Answer

Use the default management VMkernel interface for vMotion traffic.

Answer

Configure a single 1 GbE interface for both vMotion and management traffic.

Answer

Enable jumbo frames on all interfaces, but keep vMotion on the management network.