VCP-DCV Quick Quiz — 10 Questions

Question 1

A vSphere administrator is managing a cluster with vLCM and receives a notification that a new ESXi patch is available. The administrator updates the desired image to include the patch and attempts to remediate, but the remediation fails with 'Cannot retrieve software depots'. What could be the issue?

Accepted Answer

The software depot URL in the image is incorrect or unreachable.. The error 'Cannot retrieve software depots' indicates that vLCM is unable to reach the software depot URL specified in the desired image. This typically occurs when the URL is incorrect, the depot server is down, or network/firewall rules block access to the depot. Since the administrator updated the image and remediation fails at the depot retrieval stage, the most direct cause is an unreachable or misconfigured depot URL.

Answer

The hosts cannot communicate with the vCenter Server.

Answer

The image validation failed due to missing dependencies.

Answer

The desired image was not saved after adding the patch.

Question 2

An administrator needs to apply a security patch to a vLCM-managed cluster. The patch is available as an ESXi image in the vSphere Lifecycle Manager depot. What is the correct procedure?

Accepted Answer

Create a new desired state image with the patch, validate, and remediate the cluster.. In a vLCM-managed cluster, the correct procedure to apply a security patch is to create a new desired state image that includes the patch from the vSphere Lifecycle Manager depot, validate the image against the cluster's hardware and software compatibility, and then remediate the cluster. This ensures all hosts are updated to the exact same image specification, maintaining consistency and compliance with the desired state.

Answer

Attach a patch baseline to the cluster and remediate.

Answer

Export the current image, add the patch, and import it to the cluster.

Answer

Use Quick Boot to apply the patch to each host individually.

Question 3

An administrator sees the above JSON output from a vLCM compliance report. What should the administrator do to resolve the compliance issue?

Accepted Answer

Verify that the custom-vib is available in the depot and that esxi-02 can install it.. The JSON output indicates that a custom VIB is present on esxi-01 but missing from esxi-02, causing a compliance mismatch. Option B is correct because the administrator must first verify that the custom VIB is available in the configured depot and that esxi-02 can install it, as vLCM uses depot-based image specifications and any missing VIB must be reachable and installable from the depot to achieve compliance.

Answer

Add the custom-vib to the desired image.

Answer

Update the firmware version for esxi-02.

Answer

Re-define the desired image for the cluster.

Question 4

An administrator is planning to migrate from legacy baselines to vLCM for a cluster. Which TWO statements are true about vLCM?

Accepted Answer

vLCM uses a desired state image to manage host configurations.. Option B is correct because vLCM uses a desired state image, which is a single, validated software specification that defines the exact ESXi version, firmware, and driver versions for all hosts in a cluster. This image-based approach ensures consistency and simplifies lifecycle management by eliminating the need for multiple baselines.

Answer

vLCM allows individual host remediation for flexibility.

Answer

vLCM supports different images for different hosts in the same cluster.

Answer

vLCM uses baseline groups to apply updates.

Question 5

A vSphere administrator is using vLCM and needs to ensure that all hosts are compliant with the desired image. Which TWO actions are valid when remediating a vLCM cluster?

Accepted Answer

Perform a pre-remediation check to validate the image.. Option A is correct because vLCM requires a pre-remediation check to validate that the desired image can be applied successfully to all hosts in the cluster. This check verifies hardware compatibility, driver versions, and firmware prerequisites before any remediation begins, preventing partial or failed updates.

Answer

Remediate without putting hosts into maintenance mode.

Answer

Remediate only hosts that are non-compliant.

Answer

Remediate the cluster even if there are compliance issues.

Question 6

Which TWO actions are recommended to secure the vCenter Server Appliance (VCSA)?

Accepted Answer

Change the default 'root' password. Option B is correct because changing the default 'root' password is a fundamental security best practice for the VCSA. The default password is well-known and documented, leaving the appliance vulnerable to unauthorized access if not changed immediately after deployment. This action directly mitigates the risk of brute-force or credential-based attacks against the root account.

Answer

Enable the auto-lock feature for the admin account

Answer

Configure the password policy for local accounts

Answer

Enable FIPS 140-2 compliance mode

Question 7

Which THREE security features are available in vSphere Trust Authority (vTA)?

Accepted Answer

Attestation of ESXi hosts. Option A is correct because vSphere Trust Authority (vTA) uses attestation to verify the integrity of ESXi hosts before allowing them to interact with trusted infrastructure. This attestation process confirms that the host is running genuine, untampered VMware code, which is a core security feature of vTA.

Answer

Integration with Active Directory for authentication

Answer

Encryption of vMotion traffic

Question 8

An administrator is configuring a distributed switch and needs to ensure that all virtual machine traffic on a specific VLAN is isolated. The administrator creates a port group with VLAN ID 100. However, a security scanner reports that packets from this VLAN are appearing on other VLANs. Which security policy setting on the distributed switch should the administrator verify?

Accepted Answer

VLAN trunking. The VLAN trunking policy on a distributed switch controls whether a port group can pass multiple VLAN IDs (trunk mode) or is restricted to a single VLAN (access mode). When VLAN trunking is enabled, the port group may forward traffic from VLAN 100 onto other VLANs if the virtual switch is configured to allow it, breaking isolation. The administrator should verify that VLAN trunking is disabled (set to 'Reject') to ensure strict VLAN isolation.

Answer

MAC address changes

Answer

Forged transmits

Answer

Promiscuous mode

Question 9

A vSphere administrator is planning the storage configuration for a new cluster of 10 hosts running VDI workloads. Each VM requires approximately 100 IOPS for typical operation. Which storage design best balances performance and scalability?

Accepted Answer

Configure each host with local NVMe or SSD drives and use vSphere Local Storage.. Option C is correct because VDI workloads are highly I/O-intensive and latency-sensitive, and local NVMe or SSD drives provide the lowest possible latency by eliminating network and SAN controller overhead. vSphere Local Storage allows each host to independently serve its VMs, which scales linearly with the number of hosts and avoids the contention and cost of a shared storage fabric. This design balances performance and scalability for a 10-host cluster where each VM requires only 100 IOPS, as local flash easily meets that demand without the complexity of a SAN or vSAN.

Answer

Implement vSAN using HDDs with a flash cache tier.

Answer

Deploy a centralized all-flash FC SAN with multiple paths.

Answer

Use a single NFS datastore on a large spinning-disk array.

Question 10

During a performance review, an administrator notices that a VM with 4 vCPUs and 16 GB memory is experiencing over 10% CPU ready time. The host has two 8-core sockets (hyper-threading enabled) and 256 GB memory. The host runs 15 other VMs with varying CPU loads. What is the most likely cause?

Accepted Answer

Over-provisioning of vCPUs on the host leading to contention.. Option D is correct because the host has 16 physical cores (with hyper-threading, 32 logical processors), but running 16 VMs with a total of 4 vCPUs each would require 64 vCPUs. This 2:1 over-provisioning ratio, combined with varying CPU loads, leads to contention for physical CPU resources, manifesting as CPU ready time exceeding 10%. CPU ready time measures the percentage of time a VM is ready to run but waiting for a physical CPU to become available.

Answer

NUMA node mismatch causing cross-node memory access.

Answer

CPU hot-add is enabled on the VM.

Answer

Memory over-provisioning causing ballooning.