VCP-VVF Practice Test 10 — 10 Questions

Question 1

An infrastructure architect is designing a vSphere Foundation 9.0 environment where virtual machines running cryptographic workloads require hardware random number generator access. Which design approach satisfies this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure virtual machines with a virtual hardware random number generator (vHRNG) device backed by the host hardware entropy source.. Providing virtual machines with access to a virtual hardware random number generator (vHRNG) allows guest operating systems to draw entropy from the ESXi host's hardware RNG or TPM.

Answer

Configure software iSCSI multipathing with round-robin load balancing.

Answer

Set the virtual machine CPU hot-add setting to active.

Answer

Install a third-party USB entropy dongle directly into every virtual machine via software USB redirection.

Question 2

An administrator is configuring Active Directory authentication for ESXi hosts directly via the Host Client. After entering the domain credentials and joining the domain, users in the domain are still unable to log into the ESXi host. What step was missed during the configuration?

Accepted Answer

Assigning specific roles and permissions to the Active Directory users or groups on the ESXi host's Permissions tab.. After joining ESXi to Active Directory, you must still assign roles and permissions to AD users or groups on the host's Permissions tab. Joining the domain only establishes trust; it does not grant any login rights.

Answer

Enabling Network Time Protocol (NTP) synchronization across all domain controllers.

Answer

Restarting the vCenter Server service to synchronize the Active Directory forest schema.

Answer

Modifying the Active Directory Group Policy Object (GPO) to allow remote desktop connections.

Question 3

An administrator is troubleshooting a storage connectivity problem where a newly presented LUN is not visible to an ESXi host. What is the first manual action required in the vSphere Client to discover the new LUN?

Accepted Answer

Rescan the storage adapters on the ESXi host.. When new LUNs are presented from a storage array, the ESXi host must perform a storage adapter rescan to discover the new storage devices and extents.

Answer

Create a new virtual machine on the host.

Answer

Reboot the vCenter Server appliance.

Answer

Restart the CIM monitoring service.

Question 4

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure Storage I/O Control (SIOC) on a shared block storage datastore. What is the primary function of SIOC?

Accepted Answer

To prevent a single noisy virtual machine from monopolizing datastore I/O queues during periods of high latency congestion.. Storage I/O Control measures datastore latency and dynamically throttles I/O queues of lower-priority virtual machines when congestion and latency exceed a specified threshold.

Answer

To perform automatic RAID reconstruction when a physical disk drive fails.

Answer

To automatically migrate virtual machines across different physical data centers using wide-area replication.

Answer

To encrypt all disk blocks written to the datastore using AES-256 keys.

Question 5

An administrator is deploying VMware vSphere Foundation 9.0 using the automated installer. During the validation phase, the precheck fails with an error indicating that the target ESXi hosts cannot resolve the DNS records of the vCenter Server Appliance. Which deployment component configuration must be verified to resolve this issue?

Accepted Answer

Verify that the management network gateway and DNS server IP addresses are correctly configured in the JSON configuration file used by the installer.. During VVF deployment, the target ESXi hosts and management components require accurate forward and reverse DNS records. The installer validation checks DNS resolution before proceeding.

Answer

Restart the NSX Manager appliance to refresh its internal DNS cache.

Answer

Enable SSH on all ESXi hosts and restart the management agents.

Answer

Modify the vpxd.cfg file on the ESXi host to point to the local hosts file.

Question 6

An administrator is planning storage connectivity for a vSphere Foundation 9.0 cluster. Which TWO block storage protocols are natively supported by ESXi for connecting external enterprise storage arrays? (Choose two.)

Accepted Answer

Fibre Channel (FC). ESXi natively supports Fibre Channel (FC) and iSCSI for block storage connectivity out of the box.

Answer

Apple Filing Protocol (AFP)

Answer

IDE parallel ATA bus protocols

Answer

Server Message Block (SMB) version 1

Question 7

An administrator is configuring an alert for high CPU usage on a host. Which vSphere feature is used to send this notification to an external email server?

Accepted Answer

vCenter Server Mail Settings. vCenter Server Mail Settings (Administration -> Deployment -> Mail) configure the SMTP sender, port, and authentication that vCenter uses to dispatch alarm notifications to an external email server. Alarms defined on hosts, VMs, or datastores reference this global mail configuration when the 'Send email notification' action is triggered. Without valid Mail Settings, no alarm email can leave vCenter regardless of how the alarm is scoped.

Answer

vSphere Licensing Service

Answer

Operations Log Forwarder

Answer

ESXi Host SMTP Agent

Question 8

An administrator is configuring a new alert in vSphere 9.0 to monitor when an ESXi host loses connection to a primary storage datastore. After saving the alarm, they want to test it. What is the safest method to verify the alarm triggers correctly without causing an outage?

Accepted Answer

Trigger a test notification action directly from the vSphere Client alarm definition menu if available, or simulate the event in a test cluster.. The safest method to test an alarm for ESXi host datastore connectivity loss is to trigger a test notification from the alarm definition menu if available, or simulate the event in a non-production test cluster. This avoids any impact on production storage and ensures the alarm logic works without risking an outage.

Answer

Unmount the production VMFS datastore from all ESXi hosts simultaneously during peak business hours.

Answer

Disconnect the physical Fibre Channel cables from the core SAN switch.

Answer

Restart the vpxd service on vCenter while I/O is running.

Question 9

An administrator is reviewing the VVF 9.0 software BOM (Bill of Materials) compatibility before initiating an upgrade via SDDC Manager. Where in SDDC Manager is the target software version bundle downloaded and validated?

Accepted Answer

Lifecycle Management -> Bundle Management or Repository dashboard.. In SDDC Manager, the Lifecycle Management section contains the Bundle Management (also called the Repository) dashboard where target software version bundles for VVF/VCF are downloaded, validated, and staged before an upgrade. This is the single control point for BOM management in an SDDC Manager-managed environment. The administrator downloads the bundle there and SDDC Manager validates it against the current BOM before the upgrade can proceed.

Answer

vCenter -> Updates -> Lifecycle Manager -> Software Boms.

Answer

Cloud Builder -> Updates -> BOM Checker.

Answer

NSX Manager -> System -> Upgrades -> Bundle Store.

Question 10

An administrator is replacing default VMCA-signed certificates with custom Certificate Authority (CA) signed certificates on a vCenter 9.0 instance using the vSphere Certificate Manager utility. During the process, the utility fails while generating the Certificate Signing Request (CSR). What is the primary cause of this failure?

Accepted Answer

The configuration file (certool.cfg) contains incorrect or missing mandatory parameters.. The vSphere Certificate Manager utility relies on the certool.cfg configuration file to populate the fields of the CSR (Common Name, Organization, Country, etc.). If this file has missing or malformed mandatory parameters — such as an empty CN or an invalid country code — the CSR generation step fails immediately, before any external CA interaction occurs. This is the most common cause of CSR generation failures during certificate replacement.

Answer

Port 443 is blocked by a local firewall on the ESXi management vmkernel interface.

Answer

The root CA certificate has expired on the external enterprise CA server.

Answer

The vCenter Appliance Management Interface (VAMI) service is stopped.