VCP-DCV Practice Test 9 — 10 Questions

Question 1

A vSphere administrator is designing a network for a cluster of ESXi hosts. Each host has four 10GbE uplinks. The cluster will host mission-critical VMs that require maximum throughput and redundancy. The administrator plans to use Network I/O Control (NIOC) and a vSphere Distributed Switch (vDS). Which configuration best ensures consistent network performance for all VMs?

Accepted Answer

Configure a single vDS with all four uplinks, enable NIOC, and set shares and reservations for each traffic type.. Option A is correct because NIOC enables per-traffic-type resource management using shares, reservations, and limits, ensuring that mission-critical VMs receive consistent network throughput even under contention. Combining all four uplinks into a single vDS maximizes aggregate bandwidth and provides redundancy through teaming policies, while NIOC prioritizes traffic flows to prevent VMkernel or management traffic from starving VM traffic.

Answer

Configure a single vDS with all four uplinks and enable NetFlow for monitoring.

Answer

Create two separate vDS, each with two uplinks, and separate VM traffic from VMkernel traffic.

Answer

Configure a single vDS with all four uplinks and use Route based on IP hash teaming.

Question 2

A VM on a vSphere Distributed Switch is unable to receive traffic from external networks. The VM can send traffic out successfully. The VM port group has no security policies set (default). The physical switch port is configured as an access port on VLAN 100. The VM port group VLAN is set to 100. What is the most likely cause?

Accepted Answer

The VM is using a different default gateway than the VMkernel interface. Option C is correct because the VM can send traffic out successfully but cannot receive traffic from external networks, which indicates a routing issue rather than a switching or VLAN problem. The most likely cause is that the VM's default gateway is set to the VMkernel interface's IP address instead of the physical network's gateway, causing return traffic to be misrouted. This is a common misconfiguration where the VM's default gateway does not match the subnet's gateway, preventing inbound traffic from reaching the VM.

Answer

VLAN mismatch between VM port group and physical switch

Answer

The VM's NIC is in promiscuous mode

Answer

The physical switch port is configured as an access port instead of a trunk

Question 3

An administrator is creating a new vSphere Standard Switch on an ESXi host. The host has two physical NICs: vmnic0 and vmnic1. The administrator wants to use vmnic0 for VM traffic and vmnic1 for management traffic. How should the administrator configure the switch?

Accepted Answer

Create two standard switches: one with vmnic0 and a VM port group, and another with vmnic1 and a VMkernel port group.. Option C is correct because the requirement is to use separate physical NICs for different traffic types (VM traffic on vmnic0 and management traffic on vmnic1). In vSphere, a standard switch is a per-host virtual switch that connects virtual machines and VMkernel interfaces to physical NICs. To isolate traffic at the physical NIC level, you must create two distinct standard switches: one with vmnic0 and a VM port group for VM traffic, and another with vmnic1 and a VMkernel port group for management traffic. This ensures that management traffic never traverses vmnic0 and VM traffic never traverses vmnic1, providing physical separation and avoiding contention.

Answer

Create one standard switch with vmnic0 only and use VLANs for separation.

Answer

Create one standard switch with both vmnics and separate port groups for VM and VMkernel.

Answer

Create a vSphere Distributed Switch with both vmnics.

Question 4

A vSphere administrator is deploying a vSphere Distributed Switch (vDS) version 7.0. The environment has ESXi hosts with hardware version 7.0. The administrator needs to ensure that the vDS supports Network I/O Control version 3 (NIOCv3). What must be true for NIOCv3 to function correctly?

Accepted Answer

All hosts must be running ESXi 7.0 or later.. NIOCv3 is a feature introduced with vSphere 7.0 that provides granular bandwidth allocation and reservation for network traffic. For NIOCv3 to function correctly, all ESXi hosts attached to the vDS must be running ESXi 7.0 or later because the feature relies on kernel-level enhancements and the vSphere Network Resource Management (vNRM) agent that are only present in that version. Hosts on earlier versions lack the necessary drivers and scheduling capabilities, causing NIOCv3 to be unavailable or non-functional.

Answer

The vDS must be configured with Route based on IP hash teaming.

Answer

All hosts must have the vDS in Link Aggregation Control Protocol (LACP) mode.

Answer

The vDS must have a Network Resource Pool configured.

Question 5

A VM on a vSphere Distributed Switch is experiencing intermittent connectivity drops. The administrator checks the vDS health check and sees no errors. The physical switch logs show no issues. The VM is on a port group with VLAN 200. The administrator runs a ping from the VM to the gateway and notices packet loss. What should the administrator investigate next?

Accepted Answer

Review the NIC teaming failover order and ensure active uplinks are up.. Option D is correct because intermittent connectivity drops on a VM connected to a vDS, despite no errors on the vDS health check or physical switch logs, often point to a NIC teaming misconfiguration. If the active uplinks are not properly set or one uplink is down, the VM traffic may fail over to a standby or unused uplink, causing packet loss. Verifying the teaming failover order and ensuring all active uplinks are operational directly addresses this common cause of intermittent drops.

Answer

Verify the VMkernel port configuration

Answer

Check the VM's firewall settings

Answer

Check DNS resolution for the gateway

Question 6

An administrator is troubleshooting SSH connectivity to an ESXi host from a management workstation at 10.10.10.2. The SSH session is established, but the administrator cannot ping the host's IP 10.10.10.1. Based on the exhibit, what is the most likely cause?

Accepted Answer

ICMP traffic is blocked by the ESXi firewall.. The administrator can establish an SSH session, which proves that the ESXi host's SSH service is running and that TCP port 22 is reachable from the management workstation. However, the inability to ping the host's IP address (10.10.10.1) indicates that ICMP echo requests are being blocked. By default, the ESXi firewall blocks ICMP traffic, so the most likely cause is that ICMP is filtered by the host firewall.

Answer

The default gateway is not set correctly.

Answer

The SSH service is not running on the host.

Answer

The management workstation is on a different VLAN.

Question 7

An administrator is reviewing the network configuration of a standard switch. The exhibit shows the current settings for a port group. Which change would improve load distribution for VM traffic?

Accepted Answer

Change the load balancing policy to Route based on IP hash.. Option C is correct because Route based on IP hash uses a hash of source and destination IP addresses to determine which uplink to use for each traffic flow, ensuring that all packets in a given flow use the same uplink while distributing different flows across multiple uplinks. This improves load distribution for VM traffic compared to the default Route based on the originating virtual port, which only considers the vNIC port ID and can lead to uneven distribution when multiple VMs share the same port group.

Answer

Change the VLAN ID to 100.

Answer

Enable failover on the port group.

Answer

Set one NIC as active and the other as standby.

Question 8

A vSphere environment uses an iSCSI storage array with multiple targets. The administrator configures CHAP authentication but some hosts fail to connect. The working hosts are configured with mutual CHAP, while the failing hosts use only one-way CHAP. What is the most likely reason for the failures?

Accepted Answer

The storage array requires mutual CHAP, but the failing hosts are configured for one-way CHAP.. The correct answer is B because mutual CHAP requires the target to authenticate the initiator and the initiator to authenticate the target. If the storage array is configured to require mutual CHAP, hosts using only one-way CHAP will fail to complete the authentication handshake. The working hosts are configured with mutual CHAP, confirming the array enforces mutual authentication.

Answer

The CHAP secret is not set on the failing hosts.

Answer

The iSCSI target name is incorrect on the failing hosts.

Answer

The storage array is configured to use only one-way CHAP.

Question 9

Which THREE are valid methods to isolate and secure management traffic on a vSphere Distributed Switch? (Choose three.)

Accepted Answer

Assign a specific VLAN ID to the management port group.. Assigning a specific VLAN ID to the management port group isolates management traffic at Layer 2 by tagging frames with a unique VLAN identifier. This prevents unauthorized access from other VLANs and ensures that management traffic is logically separated from other network traffic on the same vSphere Distributed Switch.

Answer

Enable Route based on IP hash on the management port group.

Answer

Use Private VLANs on the management port group.

Question 10

A vSphere administrator is troubleshooting a VM that has been disconnected from its virtual disk. The VM's virtual disk file (vmdk) is still present on the datastore, but the VM cannot be powered on. Which step should the administrator take first to resolve the issue?

Accepted Answer

Use the vmkfstools command to re-register the virtual disk.. Option C is correct because when a VM is disconnected from its virtual disk but the .vmdk file remains on the datastore, the issue is often a corrupt or missing disk descriptor file. The vmkfstools command with the -fix option can repair the descriptor file, re-establishing the connection between the VM and its virtual disk without requiring VM recreation or manual re-attachment.

Answer

Create a new VM and attach the existing vmdk file.

Answer

Re-add the virtual disk from the datastore browser to the VM.

Answer

Perform a storage vMotion of the VM to another datastore.