VCP-DCV Practice Test 8 — 10 Questions

Question 1

A company is deploying a high-performance database workload on vSphere. The storage array supports NVMe over RDMA (NVMe-oF) and iSCSI. The workload requires extremely low latency and high IOPS. The network is dedicated 25 Gbps Ethernet with RoCE v2 support. Which storage protocol should be recommended, and why?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

NVMe over RDMA, because it provides direct memory access and lower CPU overhead. NVMe over RDMA (NVMe-oF with RoCE v2) provides direct memory access between the host and storage target, bypassing much of the TCP/IP stack and dramatically reducing CPU overhead and latency. For a high-IOPS, low-latency database workload on a dedicated 25 Gbps RoCE-capable network, this is the optimal choice. It leverages the existing RDMA fabric to deliver near-local NVMe performance.

Answer

NFS, because it supports advanced features like Storage DRS

Answer

Fibre Channel, because it is the fastest protocol available

Answer

iSCSI, because it is simpler to configure and does not require RDMA support

Question 2

An administrator manages a vSAN cluster with 5 ESXi hosts in a single failure domain. The cluster uses vSAN version 8 and is configured with a single disk group per host. A storage policy is applied to a group of VMs with 'Number of failures to tolerate = 1' and 'Primary level of failures = Host'. One host experiences a catastrophic hardware failure and is now marked as 'Absent' in the vSAN cluster. The administrator checks the vSAN health and finds that the affected host's disk group is completely lost. One of the VMs from that group previously had two replicas on different hosts and a witness component on a third host. The VM is still powered on, and the administrator sees that one replica was on the failed host. The other replica and witness are on surviving hosts. What is the current state of this VM regarding data accessibility?

Accepted Answer

The VM is fully accessible because it still has one replica and the witness.. With 'Number of failures to tolerate = 1' and 'Primary level of failures = Host', vSAN ensures that a VM has at least one full replica and a witness when one host fails. The VM still has one replica and the witness on surviving hosts, so it remains fully accessible. The witness acts as a tiebreaker for quorum but does not store VM data; the remaining replica provides data access.

Answer

The VM is accessible but performance is degraded because the disk group on the failed host is gone.

Answer

The VM is inaccessible because the lost replica cannot be rebuilt without a replacement host.

Answer

The VM is inaccessible because the witness component is now the only copy and cannot be used for reads.

Question 3

An organization wants to use vLCM for lifecycle management. Which three components can be managed using vLCM images? (Choose THREE)

Accepted Answer

ESXi version. Option A (ESXi version) is correct because a vLCM image is fundamentally a declarative specification of the ESXi base image, which defines the exact ESXi version and build to be installed on hosts. Option C (Add-ons like drivers) is correct because vLCM images include add-on components such as async drivers, vendor add-ons, and components that are layered on top of the base ESXi image. Option D (Firmware for supported hardware) is correct because vLCM integrates with Hardware Support Managers (HSMs) from OEMs to include firmware and driver updates for supported servers in the image, enabling firmware compliance alongside software. Option B (vCenter Server version) is not managed by vLCM images; vCenter Server is upgraded separately via VAMI or the CLI installer. Option E (VMware Tools) is not part of a vLCM image; it is managed per-VM through vSphere Lifecycle Manager baselines or VM hardware settings, not as an image component.

Answer

vCenter Server version

Answer

VMware Tools

Question 4

An administrator is configuring a new iSCSI storage array for a vSphere cluster. The array supports multiple iSCSI targets. What is the recommended best practice for multipathing to ensure high availability and load balancing?

Accepted Answer

Create multiple VMkernel ports for iSCSI, each bound to a separate physical NIC, and configure multiple iSCSI targets.. VMware best practices for iSCSI multipathing require multiple VMkernel ports, each bound to a separate physical NIC, and multiple iSCSI targets to provide both path redundancy and load balancing. This configuration leverages the Pluggable Storage Architecture (PSA) and native multipathing plugins (NMP) to distribute I/O across active paths while maintaining high availability through automatic path failover. Using separate VMkernel ports and NICs ensures that no single point of failure exists in the storage network.

Answer

Use the management VMkernel port for iSCSI traffic to simplify configuration.

Answer

Configure a single physical NIC with multiple VLANs for iSCSI traffic.

Answer

Use a single VMkernel port for iSCSI and assign multiple IP addresses to it.

Question 5

An administrator wants to configure the ESXi host firewall to allow connections only from a specific management subnet. How can this be achieved?

Accepted Answer

Use the ESXi firewall settings to define allowed IP addresses for the required services.. ESXi's built-in firewall allows you to restrict each service (e.g., SSH, vSphere Client, vMotion) to specific IP addresses or subnets via the 'Allowed IP addresses' list in the firewall ruleset. By editing the ruleset for the management services and specifying the management subnet, you limit connections to only those sources.

Answer

Enable vSphere HA and set it to control management traffic.

Answer

Configure the DCUI to restrict management access.

Answer

Set the firewall to enabled and allow all incoming connections.

Question 6

An administrator runs the command shown in the exhibit on a vCenter Server appliance. What is the primary purpose of the Machine ID?

Accepted Answer

To serve as a unique identifier for the vCenter Server instance in SSO. The Machine ID serves as a unique identifier for the vCenter Server instance within VMware SSO (Single Sign-On) and is used for certificate management. It is not related to workload distribution in DRS (option A), ESXi host identification (option B), or virtual machine identification for vMotion (option D). Therefore, option C is correct.

Answer

To calculate workload distribution in DRS

Answer

To identify an ESXi host to vCenter Server

Answer

To uniquely identify a virtual machine for vMotion

Question 7

A company is designing a vSphere environment for a critical database application. The storage array supports both Fibre Channel (FC) and iSCSI. The application requires low latency and high IOPS. Which storage protocol and path policy should be recommended?

Accepted Answer

FC with Round Robin path policy.. FC provides lower latency and higher IOPS than iSCSI due to dedicated hardware and lower protocol overhead, making it ideal for critical database workloads. The Round Robin path policy is recommended for FC with active-active storage arrays because it distributes I/O across all available paths, maximizing throughput and load balancing, which aligns with the requirement for high IOPS.

Answer

FC with Fixed path policy.

Answer

FC with Most Recently Used (MRU) path policy.

Answer

iSCSI with Round Robin path policy.

Question 8

A financial institution operates a vSphere 7.0 environment with three vCenter Servers in linked mode, each managing separate clusters. The company uses vSAN encryption with an external KMS appliance from a third-party vendor. The KMS appliance has a certificate that expires every two years. The storage administrator recently renewed the KMS certificate as per the vendor's instructions. After the renewal, the vCenter Server's 'Key Management Servers' view shows the KMS status as 'Unhealthy'. The administrator attempts to decrypt a test virtual machine, but the operation fails with an error: 'No key providers are available'. The KMS appliance is reachable from the vCenter Server, and the new certificate is installed on the KMS. The administrator has confirmed that the KMS IP address and port are correctly configured in vCenter. What is the most likely cause of the failure?

Accepted Answer

The new KMS certificate has not been imported into the vCenter Server trust store. The most likely cause is that the new KMS certificate was not imported into the vCenter Server trust store. Even though the KMS appliance is reachable and the new certificate is installed on the KMS, vCenter Server must trust the KMS certificate to establish a secure connection. Without the certificate in the trust store, vCenter considers the KMS unhealthy, leading to the 'No key providers are available' error. The vSAN encryption keys are not lost during certificate renewal—they remain stored on the KMS. Recreating the KMS cluster is unnecessary because the configuration is still valid, and restarting vCenter services would not resolve the trust issue.

Answer

The vSAN encryption keys were lost during the certificate renewal

Answer

The KMS cluster in vCenter needs to be recreated

Answer

The vCenter Server services need to be restarted

Question 9

A VM is experiencing high CPU ready time. The host has 16 physical cores and 20 vCPUs total across all VMs. Which action is MOST likely to reduce the CPU ready time on the VM?

Accepted Answer

Decrease the number of vCPUs on the VM.. Reducing the number of vCPUs on an over-provisioned VM decreases scheduling contention, lowering CPU ready time. Increasing vCPUs would worsen the issue. Migrating to another host with similar load would not help long-term. Increasing memory does not directly reduce CPU contention.

Answer

Migrate the VM to another host with the same CPU load.

Answer

Increase the number of vCPUs on the VM.

Answer

Increase the memory reservation for the VM.

Question 10

An administrator is creating a new vSphere Standard Switch on an ESXi host. The host has two physical NICs: vmnic0 and vmnic1. The administrator wants to use vmnic0 for VM traffic and vmnic1 for management traffic. How should the administrator configure the switch?

Accepted Answer

Create two standard switches: one with vmnic0 and a VM port group, and another with vmnic1 and a VMkernel port group.. The requirement is to use separate physical NICs for different traffic types (VM traffic on vmnic0 and management traffic on vmnic1). In vSphere, a standard switch is a per-host virtual switch that connects virtual machines and VMkernel interfaces to physical NICs. To isolate traffic at the physical NIC level, you must create two distinct standard switches: one with vmnic0 and a VM port group for VM traffic, and another with vmnic1 and a VMkernel port group for management traffic. This ensures that management traffic never traverses vmnic0 and VM traffic never traverses vmnic1, providing physical separation and avoiding contention.

Answer

Create one standard switch with vmnic0 only and use VLANs for separation.

Answer

Create one standard switch with both vmnics and separate port groups for VM and VMkernel.

Answer

Create a vSphere Distributed Switch with both vmnics.