VCP-DCV Configure and Manage vSphere Networking Practice Test 4 — 15 Questions

Question 1

An administrator needs to separate vMotion traffic from management traffic. Which should be created?

Accepted Answer

A new VMkernel adapter on a different subnet.. Creating a separate VMkernel adapter on a different subnet isolates vMotion traffic from management traffic. Option A is incorrect because a new physical NIC alone does not provide network separation; a separate VMkernel adapter and IP subnet are required. Option C is incorrect because using the same VLAN but different IP subnet still shares the same broadcast domain. Option D is incorrect because a new standard switch port group alone does not separate traffic without a different IP network for the VMkernel adapter.

Answer

A new physical NIC.

Answer

A new VLAN on the existing port group.

Answer

A new standard switch port group.

Question 2

A vSphere administrator is troubleshooting connectivity issues for a virtual machine that is unable to communicate with other VMs on the same VLAN. The VM is connected to a distributed port group on a vSphere Distributed Switch (vDS). The administrator verifies that the VM's IP configuration is correct and that the port group is configured with the correct VLAN ID. However, the VM can only communicate with other VMs on the same ESXi host. What is the most likely cause?

Accepted Answer

The physical switch ports connecting the ESXi hosts are not configured as trunk ports for the VLAN.. The VM can communicate only with other VMs on the same ESXi host because VLAN-tagged frames cannot pass through the physical switch ports to other hosts. For VMs on the same VLAN to communicate across hosts, the physical switch ports connecting the ESXi hosts must be configured as trunk ports that allow the relevant VLAN. Option A is incorrect because the vDS does not require a separate VLAN trunking policy; the port group VLAN ID handles tagging. Option B is incorrect because the MAC address is automatically assigned and would not cause host-only communication. Option C is incorrect because the 'forging transmits' security policy controls MAC address changes, not basic connectivity.

Answer

The vDS is not configured with a VLAN trunking policy.

Answer

The VM's network adapter is configured with the wrong MAC address.

Answer

The distributed port group has forging transmits set to reject.

Question 3

An administrator needs to configure a vSphere Standard Switch (vSS) for a small environment. Which component must be created first before adding a virtual machine to the network?

Accepted Answer

Create a standard switch.. A standard switch must exist to create port groups. Without the switch, port groups cannot be created. Option B is incorrect because a VMkernel interface is used for management or storage traffic, not for regular VM connectivity, and it is created after the standard switch. Option C is incorrect because a virtual machine port group is created on the standard switch after the switch exists. Option D is incorrect because adding a physical uplink to the host occurs during or after standard switch creation, but the switch itself must exist first.

Answer

Configure a VMkernel interface.

Answer

Create a virtual machine port group.

Answer

Add a physical uplink to the host.

Question 4

A vSphere environment uses a vSphere Distributed Switch (vDS) with 10G uplinks and Network I/O Control (NIOC) enabled. Administrators report that during peak traffic, NFS storage traffic is experiencing high latency, while other traffic types remain unaffected. The vDS has default NIOC shares and limits. Which action should be taken to prioritize NFS traffic without completely starving other traffic?

Accepted Answer

Increase the shares for the NFS traffic class.. Increasing the shares for the NFS traffic class gives it a higher proportion of bandwidth during contention, without imposing a hard limit. Option A is incorrect because setting a low bandwidth limit would cap NFS traffic, potentially worsening performance. Option C is incorrect because setting a high bandwidth reservation could reserve bandwidth for NFS even when not needed, potentially wasting resources, and does not prioritize dynamically like shares do. Option D is incorrect because disabling NIOC removes all traffic prioritization, eliminating the ability to differentiate NFS traffic.

Answer

Set a low bandwidth limit for the NFS traffic class.

Answer

Set a high bandwidth reservation for the NFS traffic class.

Answer

Disable Network I/O Control on the vDS.

Question 5

An organization has deployed a vSphere Distributed Switch (vDS) across multiple ESXi hosts. The security team requires that no virtual machine can change its MAC address to impersonate another device. Which security policy setting on the distributed port group should be configured to fulfill this requirement?

Accepted Answer

Set 'Forged transmits' to 'Reject'.. The 'Forged transmits' policy, when set to 'Reject', drops any outbound frames with a source MAC address different from the one assigned to the virtual NIC. This prevents a VM from impersonating another device by spoofing its MAC address. Option B is incorrect because 'MAC address changes' controls whether the VM can change its effective MAC address, but this does not prevent the VM from sending frames with a forged source MAC. Option C is incorrect because 'Promiscuous mode' allows the VM to see all traffic on the port, which is a security risk but unrelated to MAC impersonation. Option D is incorrect because traffic shaping limits bandwidth, not MAC security.

Answer

Set 'MAC address changes' to 'Reject'.

Answer

Set 'Promiscuous mode' to 'Reject'.

Answer

Enable traffic shaping and set a low average bandwidth.

Question 6

A vSphere administrator needs to provide redundancy for VM traffic on a vSphere Standard Switch by using multiple physical uplinks. Which teaming configuration should be used to ensure that if one uplink fails, traffic automatically fails over to another?

Accepted Answer

Set load balancing to 'Route based on originating virtual port' and make one uplink active and one standby.. Option D is correct because setting load balancing to 'Route based on originating virtual port' with one active and one standby adapter explicitly configures a failover pair: if the active uplink fails, the standby automatically takes over, ensuring redundancy. Option A is incorrect because while an active/active configuration with 'Route based on IP hash' can provide failover, it is designed primarily for load balancing and requires proper EtherChannel setup on the physical switch; for simple redundancy, the active/standby configuration is the direct and recommended approach. Option B is incorrect because enabling 'Use explicit failover order' does not by itself designate a standby adapter; you must also configure the active/standby assignments. Option C is incorrect because having only one active uplink with no standby leaves no failover target if that uplink fails. Therefore, D is the correct answer.

Answer

Set load balancing to 'Route based on IP hash' and make both uplinks active.

Answer

Enable 'Use explicit failover order' and configure 'Network failures' detection.

Answer

Set load balancing to 'Explicit failover order' and set one uplink as active.

Question 7

A vSphere administrator is configuring Network I/O Control (NIOC) on a vSphere Distributed Switch to prioritize vMotion traffic during maintenance windows. The environment has three system traffic classes: Management, NFS, and vMotion. The administrator wants to ensure that when the network is congested, vMotion gets at least 50% of the available bandwidth, while Management and NFS each get at least 25%. Which NIOC configuration achieves this?

Accepted Answer

Set the vMotion traffic class shares to 50, Management shares to 25, and NFS shares to 25.. Shares allocate bandwidth proportionally during contention. Setting the vMotion shares to 50, Management to 25, and NFS to 25 ensures that vMotion receives 50% of available bandwidth when all traffic classes are congested, while Management and NFS each get 25%. Option A is incorrect because limits cap bandwidth and do not guarantee proportional allocation; they would restrict vMotion to at most 500 Mbps regardless of available bandwidth. Option C is incorrect because reservations guarantee a minimum bandwidth but do not enforce proportional sharing during congestion; they would ensure each class gets at least the reserved amount but not necessarily the desired percentages when the total bandwidth exceeds the sum of reservations. Option D is incorrect because without NIOC, all traffic classes are treated equally, so vMotion would not get prioritized bandwidth.

Answer

Set a limit of 500 Mbps for Management and NFS, and no limit for vMotion.

Answer

Set a reservation of 500 Mbps for vMotion, 250 Mbps for Management, and 250 Mbps for NFS.

Answer

Do nothing; NIOC is not needed because all traffic types are equally important.

Question 8

An administrator is troubleshooting an issue where a VM on a vSphere Distributed Switch cannot receive traffic from outside its subnet. The VM can send traffic out and receive replies from hosts on the same subnet. The default gateway is configured correctly. What is the most likely cause?

Accepted Answer

The router does not have a route back to the VM's subnet.. The VM can send traffic out and receive replies from hosts on the same subnet, indicating that its network configuration and the switch are functioning correctly. However, traffic from outside the subnet is not reaching the VM. This typically occurs when the router that connects the subnets does not have a route back to the VM's subnet. Even though the VM's default gateway is correctly configured, the router must know how to reach the VM's subnet to forward return traffic. Option A is incorrect because the VTEP IP is used for VXLAN overlay networks, not for standard IP routing. Option B is incorrect because the ESXi host's default gateway is for host management traffic and does not affect VM traffic. Option D is incorrect because a VLAN ID mismatch between the port group and the physical switch would cause issues with all traffic, including same-subnet communication.

Answer

The VXLAN Tunnel Endpoint (VTEP) IP is not reachable from the remote subnet.

Answer

The ESXi host's default gateway is misconfigured.

Answer

The port group VLAN ID is different from the physical switch trunk allowed VLAN.

Question 9

A virtual machine is configured with two vNICs connected to different standard port groups (VLAN 10 and VLAN 20). The administrator wants to use both vNICs for load balancing and failover within the VM OS. Which condition must be met on the vSwitch side?

Accepted Answer

Configure NIC teaming within the guest operating system.. The VM OS must have NIC teaming configured to use both interfaces. The vSwitch port groups are separate, so they don't team at the virtual switch level. Option A is incorrect because teaming at vSwitch is per port group, not across port groups. Option B is incorrect because MAC address changes are not needed. Option D is incorrect because route based on IP hash is for a single port group.

Answer

Enable MAC address changes on both port groups.

Answer

Configure teaming on the standard switch by bridging the two port groups.

Answer

Set load balancing to 'Route based on IP hash' on both port groups.

Question 10

A vSphere administrator notices that after adding a new ESXi host to a vSphere Distributed Switch (vDS), some VMs on existing hosts lose network connectivity intermittently. What is the most likely cause?

Accepted Answer

The vDS MTU setting does not match the physical network MTU.. When a new ESXi host is added to a vDS with a different MTU setting than the physical network, packets may be silently dropped or fragmented, causing intermittent connectivity loss for VMs on existing hosts. This is because the vDS MTU must match the physical network MTU to avoid issues. Option B is incorrect because a faulty physical uplink would affect only VMs on that specific host, not VMs on other existing hosts. Option C is incorrect because LACP misconfiguration would typically cause issues with the new host's connectivity, not intermittent connectivity for VMs on hosts already in the vDS. Option D is incorrect because Network I/O Control regulates bandwidth allocation and does not cause connectivity loss; such issues would manifest as performance degradation rather than intermittent loss.

Answer

The new host's physical uplink is faulty, causing broadcast storms.

Answer

The vDS is configured with LACP, and the new host's links are not properly bundled.

Answer

The vDS Network I/O Control settings are not evenly distributed.

Question 11

Which TWO of the following are valid considerations when configuring a vSphere Distributed Switch with 10G uplinks and planning for a TCP/IP stack for vMotion? (Select exactly two.)

Accepted Answer

Enable vMotion to use a separate TCP/IP stack to avoid competing with management traffic.. Options B and E are correct. vMotion traffic should use a separate TCP/IP stack to avoid competing with management traffic, and a dedicated VMkernel interface is required for that stack. Option A is incorrect because the default TCP/IP stack does not support multiple gateways; a custom stack is needed. Option C is incorrect because jumbo frames are an MTU setting on the vDS, not a component of the TCP/IP stack. Option D is incorrect because the provisioned TCP/IP stack is for storage traffic (NFS/iSCSI), not vMotion.

Answer

Configure the default TCP/IP stack to handle vMotion traffic with multiple gateways.

Answer

Enable jumbo frames on the vMotion TCP/IP stack to improve performance.

Answer

Use the provisioned TCP/IP stack for vMotion to leverage storage traffic isolation.

Question 12

Which TWO of the following are functions of a vSphere Distributed Switch that are not available in a vSphere Standard Switch? (Select exactly two.)

Accepted Answer

Port mirroring (Distributed Port Mirroring).. Options A and C are correct. Port mirroring (Distributed Port Mirroring) is a feature exclusive to the vSphere Distributed Switch (vDS). Network I/O Control (NIOC) is also only available on vDS, allowing for bandwidth allocation and prioritization. Option B is incorrect because NIC teaming with explicit failover order is available on both standard and distributed switches. Option D is incorrect because traffic shaping policies are available on vSphere Standard Switches (vSS) at the port group level. Option E is incorrect because VLAN tagging and trunking are supported on both switch types.

Answer

NIC teaming with explicit failover order.

Answer

Traffic shaping policies.

Answer

VLAN tagging and trunking.

Question 13

Which THREE of the following are prerequisites for configuring LACP on a vSphere Distributed Switch? (Select exactly three.)

Accepted Answer

The vSphere Distributed Switch must be configured with enhanced LACP support.. Options A, C, and E are correct. For LACP on a vSphere Distributed Switch, the vDS must be configured with enhanced LACP support (option A). The physical switch ports must be configured for LACP, either in active or passive mode (option C). Additionally, the physical network switch must support LACP (IEEE 802.3ad) (option E). Option B is incorrect because each uplink does not need to be in a separate VLAN; LACP works across VLANs and VLAN configuration is independent. Option D is incorrect because the uplinks must be connected to the same physical switch to form a LAG; using different switches requires Multi-chassis LACP (e.g., MLAG).

Answer

Each uplink must be in a separate VLAN to avoid loops.

Answer

The uplinks must be connected to different physical switches for redundancy.

Question 14

An ESXi host has two VMkernel interfaces as shown in the exhibit. The iSCSI targets are on the same subnet as vmk1 and support jumbo frames. The administrator reports that iSCSI sessions are experiencing high error rates and poor performance. What is most likely the cause?

Accepted Answer

The vDS port group for iSCSI does not have jumbo frames enabled (MTU 9000).. The iSCSI targets support jumbo frames (MTU 9000), but if the vDS port group for iSCSI is configured with the default MTU of 1500, packets will be fragmented, leading to high error rates and poor performance. The exhibit shows vmk1 is on the vDS, and the iSCSI targets are on the same subnet as vmk1, so the mismatch in MTU settings is the most likely cause. Option A is incorrect because management traffic on vmk0 is separate and does not affect iSCSI. Option B is incorrect because iSCSI VMkernel ports can be bound to a vDS. Option C is incorrect because the iSCSI network (vmk1) is on the same subnet as the iSCSI targets, so subnet mismatch is not the issue.

Answer

The management network (vmk0) is also using the vDS, causing traffic interference.

Answer

The iSCSI VMkernel port should not be bound to a vDS.

Answer

The iSCSI network (vmk1) is on a different subnet than the iSCSI targets.

Question 15

Based on the Healthcheck output for a distributed port (DVS Port 1) on dvs0, what can be concluded?

Accepted Answer

The physical switch is correctly configured for VLAN 100 and MTU 1500 on the uplinks connected to this host.. The Healthcheck output shows 'VLAN 100' and 'MTU 1500' with status 'OK', indicating that the physical switch configuration matches the DVS port settings for VLAN and MTU. Option A is incorrect because Healthcheck doesn't report speed/duplex of uplinks. Option C is incorrect because the teaming policy shown is 'Route based on originating virtual port', not IP hash. Option D is incorrect because Healthcheck checks configuration consistency, not packet loss.

Answer

The uplinks vmnic0 and vmnic1 are operating at 10 Gbps.

Answer

The load balancing policy is set to 'Route based on IP hash'.

Answer

The port is experiencing high packet loss due to misconfiguration.