VCP-VVF Practice Test 13 — 15 Questions

Question 1

An administrator notices that vCenter Server 9.0 alarms are not being sent via email. Where should the administrator check and configure SMTP mail server settings and alert receivers in the vSphere Client?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Select vCenter Server in the inventory -> Configure -> Settings -> Email (or Advanced Settings for mail server parameters).. SMTP server settings, alert receivers, and notification parameters in vCenter Server are configured under vCenter Server -> Configure -> General or Advanced Settings / Alarm Settings / Settings -> Email Configuration.

Answer

Log into the physical server iDRAC/iLO management interface.

Answer

Open ESXi Host Client -> Networking -> Mail Relay.

Answer

Navigate to vSphere Lifecycle Manager -> Baseline Settings -> SMTP.

Question 2

An administrator is performing a manual certificate replacement of the Security Token Service (STS) certificate on a vCenter 9.0 instance. After replacing the STS certificate, internal services fail to authenticate. What post-replacement step must be executed to resolve this?

Accepted Answer

Publish the new STS certificate to the Lookup Service and restart all vCenter services.. When the STS signing certificate is replaced, solution user certificates and trusted root stores must be updated or synchronized, and services must trust the new STS certificate. VMware provides a standard script or command to publish the new STS certificate to the VMDIR store.

Answer

Run the Cloud Builder deployment wizard in repair mode.

Answer

Re-configure Active Directory integration in vCenter SSO.

Answer

Reboot the ESXi hosts in the cluster to clear cached STS tokens from memory.

Question 3

An administrator is troubleshooting an ESXi 9.0 host network configuration issue where custom routes need to be added for a specific backend storage subnet reachable through a specific VMkernel gateway. Which esxcli command adds a static IPv4 route to the ESXi host network stack?

Accepted Answer

esxcli network ip route ipv4 add --gateway=192.168.100.1 --network=192.168.200.0/24. To add a static route in ESXi, administrators use 'esxcli network ip route ipv4 add --gateway=X --network=Y'.

Answer

esxcli network vswitch standard route set

Answer

esxcli storage san route add

Answer

esxcli route static create --ip=192.168.200.0

Question 4

An administrator is troubleshooting an ESXi host network packet loss issue where virtual machine traffic traversing a vSphere Distributed Switch (vDS) is dropping. Which THREE tools or commands can the administrator use to capture and analyze network packets directly on the ESXi host? (Choose three.)

Accepted Answer

tcpdump-uw (the ESXi port of standard tcpdump for analyzing packet traces). ESXi network troubleshooting tools include pktcap-uw for packet capture, tcpdump-uw, and esxcli network nic stats for monitoring drop counters.

Answer

esxcli vsan storage psp list

Answer

esxcli license assign --network

Question 5

An administrator is reviewing licensing and asset management across a VVF 9.0 deployment. Which TWO statements regarding VVF licensing are correct? (Choose two.)

Accepted Answer

VVF licenses are allocated based on physical CPU core counts of the managed ESXi hosts.. VVF licenses are typically based on per-core metrics for ESXi hosts and include entitlements for vSphere, vSAN, NSX, and VCF Operations components.

Answer

VVF licensing strictly prohibits the use of vSAN storage and requires separate standalone vSAN keys.

Answer

Cloud Builder is required to validate license keys daily during normal operations.

Answer

VVF licenses must be applied individually via the ESXi DCUI on each host without vCenter.

Question 6

An administrator is configuring alarms and alert notifications in vSphere 9.0. Which TWO actions can be configured as a direct response to a triggered vSphere Alarm? (Choose two.)

Accepted Answer

Run a command or script on the vCenter Server appliance.. vSphere alarms can be configured to send notification emails or execute a command/script on the vCenter Server.

Answer

Automatically re-license all hosts with trial keys.

Answer

Automatically migrate the vCenter Server VM to a secondary public cloud region.

Answer

Re-install the ESXi host hypervisor operating system from scratch.

Question 7

Which TWO actions are necessary when upgrading ESXi hosts using vSphere Lifecycle Manager (vLCM) in a VVF environment?

Accepted Answer

Assign an Image to the cluster. vLCM requires a defined image and compliance checking before remediation.

Answer

Configure DRS to manual

Answer

Reboot the vCenter Server

Answer

Manually install VIBs

Question 8

An administrator is configuring identity federation using Microsoft Entra ID (Azure AD) with vCenter 9.0. During authentication, users receive an OIDC token validation error. Upon checking the vCenter sso log (/var/log/vmware/sso/sso.log), it indicates a clock skew issue between vCenter and the IdP. How should the administrator resolve this?

Accepted Answer

Configure and synchronize Network Time Protocol (NTP) on both the vCenter Server appliance and the external Identity Provider.. OIDC token validation relies heavily on accurate timestamps. A clock skew between vCenter and the external IdP causes token expiration or premature validation errors. Both systems must synchronize time using NTP.

Answer

Regenerate the vCenter machine SSL certificate using the Certificate Manager utility.

Answer

Modify the sso.properties file on vCenter to increase the token lifetime tolerance to 72 hours.

Answer

Disable OAuth token verification in the advanced vCenter SSO configuration settings.

Question 9

An administrator is configuring Active Directory authentication for ESXi hosts directly via the Host Client. After entering the domain credentials and joining the domain, users in the domain are still unable to log into the ESXi host. What step was missed during the configuration?

Accepted Answer

Assigning specific roles and permissions to the Active Directory users or groups on the ESXi host's Permissions tab.. Joining an ESXi host to Active Directory adds the computer account, but permissions must still be explicitly assigned to AD users or groups under the host's 'Permissions' tab to allow login access.

Answer

Enabling Network Time Protocol (NTP) synchronization across all domain controllers.

Answer

Restarting the vCenter Server service to synchronize the Active Directory forest schema.

Answer

Modifying the Active Directory Group Policy Object (GPO) to allow remote desktop connections.

Question 10

An administrator is configuring log rotation and retention policies for ESXi hosts using Host Profiles. Which advanced setting must be adjusted within the Host Profile to control the maximum size of local log files before rotation?

Accepted Answer

Syslog.global.logDefaultMaxSize. ESXi host log rotation and size parameters are managed via advanced system settings such as 'Syslog.global.logDefaultMaxSize'.

Answer

Mem.ZipMemAllocPercent

Answer

Config.HostAgent.log.level

Answer

Vpx.Vpxd.QueueSize

Question 11

An administrator is troubleshooting a failed vSphere Lifecycle Manager (vLCM) image remediation on an ESXi host in a vSphere Foundation 9.0 cluster. The remediation task stops with a hardware compatibility error. What is the most likely root cause?

Accepted Answer

A hardware component or driver on the ESXi host is not compatible with the target base image or vendor addon specified in the cluster image.. vLCM performs hardware compatibility checks against the VMware Compatibility Guide (VCG) and firmware guidelines. A hardware compatibility failure indicates that a component (such as a storage controller or NIC driver) is not supported by the specified target base image or vendor addon version.

Answer

The physical switch port MTU size is configured below 1500 bytes on the management uplink.

Answer

The ESXi host root password has expired, preventing the vLCM agent from executing commands.

Answer

The vCenter Server lacks sufficient storage space in /storage/core to download the ISO image.

Question 12

An administrator is configuring monitoring, log analysis, and alerting in a VVF 9.0 environment. Which THREE actions can be performed within VCF Operations (Aria Operations)? (Choose three.)

Accepted Answer

Configure outbound alert notifications and integrations with external ITSM systems like ServiceNow via webhooks.. VCF Operations supports creating custom dashboards, configuring outbound alert plugins to ITSM systems, and setting up advanced capacity planning policies.

Answer

Configure direct BGP routing tables on physical top-of-rack switches.

Answer

Directly patch ESXi host base images and execute vLCM remediation tasks.

Question 13

An administrator wants to configure an alarm in vSphere 9.0 to trigger an email notification when a datastore's free space drops below 15%. After creating the alarm definition and specifying the trigger condition, no emails are received when the threshold is breached. What is the most likely missing configuration?

Accepted Answer

The vCenter mail server (SMTP) settings have not been defined in vCenter Server settings.. To send email alerts from vCenter, the SMTP mail server settings must be configured in vCenter Server Settings under 'General' or 'Email' configuration, and the alarm action must be explicitly set to 'Send a notification email'.

Answer

The datastore was formatted with VMFS-5 instead of VMFS-6.

Answer

The ESXi firewall is blocking outbound TCP port 443 to the mail server.

Answer

SNMP traps must be enabled on the physical switch interconnecting the management network.

Question 14

A VVF 9.0 administrator needs to enable vSphere Supervisor on a vSphere cluster to support Kubernetes workloads. The selected cluster consists of four ESXi hosts managed by vCenter 9.0. When attempting to configure the Supervisor through the vSphere Client, the option is greyed out. What is the most likely missing prerequisite?

Accepted Answer

NSX is not installed, or the cluster has not been prepared for NSX networking required by Workload Management.. Enabling Supervisor requires that NSX is deployed and configured on the cluster, or that vSphere Distributed Switch with vSphere Distributed Services Engine / NSX networking is fully operational, and vCenter has appropriate licensing for VVF.

Answer

The vCenter Server has not been joined to an Active Directory domain for identity federation.

Answer

The ESXi hosts have not been licensed with VMware vSphere Foundation keys.

Answer

Shared VMFS datastores have not been mounted across all four hosts in the cluster.

Question 15

An administrator is managing a vSphere Foundation 9.0 cluster using vSphere Lifecycle Manager (vLCM) with an image-based approach. The compliance check reports that several ESXi hosts are non-compliant because their firmware versions do not match the vendor add-on specification. However, the hardware vendor's Hardware Support Manager (HSM) extension is not showing any available firmware updates. What is the most likely cause?

Accepted Answer

The Hardware Support Manager (HSM) vCenter extension is offline, unregistered, or experiencing authentication issues with the vendor's firmware repository.. vLCM image-based firmware integration relies on a registered Hardware Support Manager (HSM) vCenter extension provided by the hardware vendor. If the HSM provider is offline, unregistered, or missing valid credentials, firmware catalogs cannot be queried.

Answer

Firmware updates require a legacy Update Manager baseline attached alongside the vLCM image.

Answer

The ESXi hosts are running in maintenance mode, which temporarily suspends HSM firmware polling.

Answer

The vCenter Server firewall is blocking inbound TCP port 443 traffic from the ESXi host management vmknics.