VMware · Free Practice Questions · Last reviewed May 2026
24real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
An administrator needs to configure centralized log forwarding from ESXi hosts to an external syslog server in a VVF environment. Where in the vSphere Client should the administrator configure the syslog collector settings for an ESXi host?
vCenter -> Administration -> Deployment -> Syslog Gateway.
Host -> Configure -> Advanced System Settings -> Syslog.global.logHost.
Syslog.global.logHost is the standard advanced system setting to specify remote syslog servers on ESXi.
SDDC Manager -> Infrastructure -> Log Forwarding.
Cluster -> Settings -> vSphere Availability -> Logging.
An administrator wants to configure an alarm in vSphere 9.0 to trigger an email notification when a datastore's free space drops below 15%. After creating the alarm definition and specifying the trigger condition, no emails are received when the threshold is breached. What is the most likely missing configuration?
The datastore was formatted with VMFS-5 instead of VMFS-6.
The ESXi firewall is blocking outbound TCP port 443 to the mail server.
SNMP traps must be enabled on the physical switch interconnecting the management network.
The vCenter mail server (SMTP) settings have not been defined in vCenter Server settings.
vCenter requires valid SMTP server parameters to dispatch alert emails.
A VVF 9.0 administrator needs to enable vSphere Supervisor on a vSphere cluster to support Kubernetes workloads. The selected cluster consists of four ESXi hosts managed by vCenter 9.0. When attempting to configure the Supervisor through the vSphere Client, the option is greyed out. What is the most likely missing prerequisite?
The vCenter Server has not been joined to an Active Directory domain for identity federation.
NSX is not installed, or the cluster has not been prepared for NSX networking required by Workload Management.
Workload Management (Supervisor) depends heavily on networking constructs provided by NSX or compatible VDS configurations.
The ESXi hosts have not been licensed with VMware vSphere Foundation keys.
Shared VMFS datastores have not been mounted across all four hosts in the cluster.
An administrator is reviewing performance dashboards in VCF Operations integrated with VVF 9.0. A critical virtual machine is experiencing high CPU ready time, but the predefined dashboard does not show the underlying physical NUMA node contention. Which action should the administrator take to isolate the NUMA performance bottleneck?
Navigate to the VM object in VCF Operations, open the Metrics tab, and examine CPU -> Interconnect and NUMA metrics.
VCF Operations tracks physical topology metrics, including NUMA node locality and remote memory access latency.
Log into the ESXi shell and execute the command 'esxtop', press 'm', and review the SWCUR column.
Open SDDC Manager and run the Virtual Machine Hardware Health diagnostic script.
Modify the vCenter Server Advanced Settings to force all VMs onto a single NUMA node.
An administrator is configuring identity federation in vCenter 9.0 for VVF, integrating an Enterprise Identity Provider (IDP) via OIDC. Users report that after successfully authenticating against the external IdP, they receive an authorization failure when attempting to log into the vSphere Client. Where should the administrator check to verify group mappings and role assignments?
vRealize Operations -> Administration -> Access Control -> Authentication Sources.
Administration -> Single Sign-On -> Configuration -> Identity Provider under the IdP Groups mapping tab.
IdP Group mapping tab in SSO Configuration defines how external IdP groups map to local SSO groups for RBAC.
NSX Manager -> System -> Users -> Role Binding configuration panel.
Cloud Builder -> Infrastructure -> SSO Settings -> Federation Map.
An administrator is utilizing vSphere Lifecycle Manager (vLCM) in VVF 9.0 to manage ESXi host compliance and image updates across a cluster. The cluster image compliance check reports an error indicating that a vendor hardware addon is incompatible with the selected ESXi base image version. How should the administrator resolve this issue?
Manually edit the vpxd configuration file on vCenter to bypass hardware compatibility checks for the cluster.
Select a vendor add-on version that explicitly supports the target ESXi base image version from the software depot.
vLCM requires component compatibility; selecting a supported vendor add-on version resolves the image mismatch.
Disable vSphere High Availability (HA) on the cluster before initiating the image compliance remediation.
Switch the cluster back to a baseline-based update method and apply legacy patch baselines.
Want more Deploy Configure And Operate Vvf practice?
Practice this domainAn enterprise is designing a multi-site vSphere Foundation 9.0 architecture leveraging stretched clustering. What is the maximum supported Round Trip Time (RTT) network latency for synchronous vSAN storage replication between primary and secondary data centers?
500 milliseconds or less
100 milliseconds or less
5 milliseconds or less
Correct. Synchronous vSAN replication requires strict low-latency links capped at 5ms RTT.
25 milliseconds or less
An administrator is designing a new vSphere Foundation 9.0 cluster using 32-core AMD EPYC processors. Which hardware design standard must be verified to ensure maximum VM density and NUMA efficiency without cross-socket memory latency penalties?
Size virtual machine vCPUs to fit within the core and cache boundaries of a single physical NUMA node.
Correct. Keeping vCPUs within a single NUMA node optimizes memory access and reduces remote memory latency.
Configure the hypervisor to span all vCPUs evenly across all sockets regardless of core counts.
Enable Fault Tolerance for every virtual machine to force physical socket load-balancing.
Disable hyperthreading globally across all hosts in the vCenter Server cluster settings.
An enterprise architect is integrating vSphere Foundation 9.0 with an external hardware security module (HSM) cluster using KMIP. Which architectural standard ensures that vCenter Server securely establishes keys for VM encryption without exposing cleartext credentials?
Mutual TLS (mTLS) certificate authentication combined with KMIP-compliant key exchange.
Correct. vCenter uses certificates for mutual authentication over KMIP to securely retrieve and manage keys.
IPsec transport mode tunnels terminated on the ESXi management vmkernel interface.
OAuth 2.0 token exchange via the vCenter Lookup Service.
LDAP over SSL (LDAPS) binding using shared secret service accounts.
A systems architect is reviewing the hardware compatibility list (HCL) for a vSphere Foundation 9.0 cluster upgrade. The target servers utilize a modern SmartNIC (DPU) architecture. Which architectural benefit does offloading network and storage virtualization tasks to the DPU provide?
Eliminating the requirement for shared external storage arrays by converting the DPU into a vSAN witness node.
Enabling zero-latency synchronous replication across unlimited geographic distances.
Reclaiming host CPU cycles by offloading infrastructure tasks such as distributed firewalling, encapsulation, and crypto processing to the DPU hardware.
Correct. DPU offload frees up host CPU capacity for revenue-generating workloads.
Automating the physical switch firmware deployment via LLDP integration.
An administrator is preparing to deploy vCenter Server 9.0 in a high-availability architecture. What is the fundamental prerequisite regarding DNS for the vCenter Server Appliance (VCSA) deployment?
Static ARP entries mapped on all upstream core routing devices.
Configured Forward (A) and Reverse (PTR) DNS records corresponding to the VCSA FQDN.
Correct. Both forward and reverse DNS resolution must be fully operational prior to deployment.
Network Time Protocol (NTP) disabled during the initial installation wizard.
Active Directory domain controller roles installed directly onto the appliance OS.
An administrator is designing a multi-tenant vSphere Foundation 9.0 environment and needs to enforce strict isolation of management traffic, vMotion, and tenant workloads at Layer 2. Which feature should be used on a Distributed Switch to enforce this requirement?
Network I/O Control (NIOC) shares and reservation limits.
ESXi firewall rule adjustments via the Host Client.
Cross-vCenter vMotion encrypted transport tunnels.
Private VLANs (PVLANs) configured with isolated and community secondary VLAN IDs.
Correct. PVLANs allow ports on the same primary VLAN to be isolated from each other at Layer 2.
Want more IT Architectures Technologies Standards practice?
Practice this domainAn administrator is managing a vSphere Foundation environment and needs to place an ESXi host into Maintenance Mode without powering off the virtual machines running on it. Which DRS setting must be configured to ensure these virtual machines are automatically migrated to other hosts in the cluster?
Disabled DRS
Partially Automated DRS
Fully Automated DRS
Fully Automated DRS automatically migrates VMs when entering Maintenance Mode.
Manual DRS
An administrator needs to configure Enhanced vMotion Compatibility (EVC) on an existing vSphere cluster containing mixed generations of Intel Xeon processors. What is a strict prerequisite before enabling EVC on the cluster?
All ESXi hosts in the cluster must be placed into Maintenance Mode simultaneously.
All running virtual machines must have CPU hot-add enabled.
The cluster must contain no virtual machines powered on with a feature set higher than the baseline.
VMs running with CPU features higher than the EVC baseline will fail to power on or require migration/power-off.
All virtual machines in the cluster must be powered off.
An administrator is configuring storage I/O control (SIOC) on a datastore shared by multiple clusters in a vSphere Foundation environment. During peak hours, a batch processing VM overwhelms the datastore with IOPS. Which SIOC configuration prevents this VM from starving other critical workloads?
Increase the datastore congestion threshold percentage from 30ms to 50ms.
Configure a hard IOPS limit on the specific virtual machine disks causing contention.
A hard IOPS limit caps the storage throughput consumed by the targeted virtual disks.
Disable Storage DRS on the shared datastore cluster.
Assign a higher disk share value to the batch processing virtual machine.
An administrator is troubleshooting a memory-constrained vSphere cluster. A virtual machine with a configured memory size of 32 GB has a balloon driver (vmmemctl) that is actively reclaiming 8 GB of guest memory. Which underlying condition explains why the memory balloon driver is active?
The guest operating system has experienced a hardware memory error on the physical DIMM.
The virtual machine has exceeded its configured memory reservation limit.
The virtual machine has a memory limit set lower than its active working set.
The ESXi host memory usage has crossed the active reclamation threshold, requiring memory reclamation.
Host-level memory pressure forces ESXi to use ballooning to reclaim guest OS memory.
A vSphere administrator notices that a high-priority virtual machine is experiencing CPU contention on an eight-socket ESXi host. The virtual machine is configured with 16 vCPUs and the host has physical NUMA nodes containing 8 cores each. Which configuration step will best mitigate performance degradation caused by remote memory accesses?
Resize the virtual machine to 8 vCPUs to match the physical NUMA node size.
Resizing the vCPU count to 8 ensures the VM fits within a single physical NUMA node.
Configure CPU shares to High for the affected virtual machine.
Increase the reservation on the virtual machine's memory settings to maximum.
Enable hyperthreading globally on the ESXi host cluster.
A cluster in a vSphere Foundation environment has High Availability (HA) enabled. An ESXi host suffers a sudden kernel panic and disconnects from the management network, but its virtual machines continue running because the heartbeat datastores are still reachable. How does vSphere HA respond to this isolated host state?
HA executes the configured isolation response, such as powering off or shutting down VMs on that host.
The isolation response governs how HA treats VMs running on a network-isolated host.
HA ignores the state change until management network connectivity is fully restored.
HA immediately powers off all VMs on the isolated host and restarts them on surviving hosts.
HA migrates all running VMs using vMotion to healthy hosts in the cluster.
Want more Vmware Vsphere Foundation Fundamentals practice?
Practice this domainAn ESXi 9.0 host in a vSphere cluster experiences a purple diagnostic screen (PSOD). Where should the administrator navigate in vSphere Client or use via CLI to locate the core dump file for analysis by VMware Support?
Open Aria Operations and download the 'Host Crash Archive' report from the administration tab.
Navigate to the VMFS datastore root folder and open the 'vmware-psod.log' text file.
Generate a support bundle from the vSphere Client or examine the configured diagnostic partition / scratch partition using 'esxcli system coredump file get'.
The core dump file can be retrieved or configured via the esxcli system coredump namespace, and a full support bundle collects recent logs and dump summaries.
Log into the vCenter Server appliance shell and check '/var/log/vmware/vpxd/psod/' directory.
During a routine check in vSphere Client, an administrator notices that ESXi host network packet drops are incrementing rapidly on a distributed virtual switch (vDS) uplink. Which esxcli command should the administrator execute via SSH to inspect the physical network adapter statistics and check for frame errors or buffer overflows?
esxcli network ip interface list
esxcli vmswitch vds dvportgroup list
esxcli network nic stats get -n vmnicX
This command retrieves interface statistics, including drop counters and error packets for physical NICs.
esxcli hardware pnic list
An administrator notices that vSphere DRS is failing to migrate virtual machines automatically to balance cluster load. Upon checking the cluster configuration, DRS is enabled and set to Fully Automated. What is a likely cause preventing DRS from executing migrations?
Enhanced vMotion Compatibility (EVC) mode is set to a baseline higher than the host CPUs.
Conflicting VM-to-Host or VM-to-VM affinity rules that prevent placement on the targeted balanced hosts.
Affinity and anti-affinity rules take precedence over load balancing recommendations and can block DRS from migrating workloads.
HA admission control is disabled in the cluster.
The vCenter inventory service database is missing the DRS license key.
An administrator is investigating intermittent storage latency spikes on a VMFS datastore backed by an all-flash array. Using vRealize / Aria Operations or vSphere performance graphs, which metric should the administrator examine first to determine if the latency originates within the ESXi storage stack versus the underlying storage array?
Review the datastore free space percentage.
Compare Kernel Latency (KAVG) and Device Latency (DAVG/GAVG) to see if the delay is introduced inside the ESXi storage stack or by the storage array.
If KAVG is high, the issue is internal to ESXi (e.g., queue depths, software driver behavior). If DAVG/GAVG is high and KAVG is low, the array is responding slowly.
Check the VM Swapfile I/O rate to see if the guest OS is paging.
Inspect the physical switch buffer drop rate for the iSCSI/FC interfaces.
An administrator notices that a virtual machine in a vSphere Foundation 9.0 environment is experiencing high CPU ready time. Which performance counter in vSphere Client best helps determine if the VM is being constrained by CPU limits imposed by vSphere DRS or administrator settings?
Check the 'Max Limited' or 'CPU Limit' metric in the vSphere performance charts for the affected virtual machine.
Max Limited shows the percentage of time a VM was ready to run but was constrained by its configured CPU limit.
Review the 'Co-stop' metric to see if multiple vCPUs are misaligned.
Examine the 'Swapin rate' to check for memory pressure.
Verify the 'Kernel Memory' overhead counters.
An administrator is troubleshooting a vSAN 9.0 stretched cluster where the witness host has lost management connectivity to the primary site. The data sites remain operational. What is the expected immediate impact on the vSAN storage pools?
All virtual machines on the affected site immediately power off to prevent split-brain.
Storage remains available as long as the primary site and the witness maintain data path connectivity, but vSAN health alarms will trigger due to management loss.
Management network loss does not automatically tear down the vSAN data path (VMkernel traffic), though monitoring and alarm propagation are impaired.
The vSAN cluster automatically falls back to a standard single-site cluster layout.
The vSAN datastore becomes entirely read-only across all sites.
Want more Troubleshoot And Optimize practice?
Practice this domainThe VCP-VVF exam has 200 questions and must be completed in 120 minutes. The passing score is 700/1000.
Scenario-based questions covering exam objectives with detailed answer explanations.
The exam covers 4 domains: Deploy Configure And Operate Vvf, IT Architectures Technologies Standards, Vmware Vsphere Foundation Fundamentals, Troubleshoot And Optimize. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official VMware VCP-VVF exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.