VCP-VVF Practice Test 14 — 15 Questions

Question 1

An administrator is managing user permissions in vSphere Foundation 9.0. Which TWO practices are recommended when assigning roles and permissions? (Choose two)

Accepted Answer

Assign permissions to Active Directory/OpenID groups rather than individual user accounts.. Option A is correct because assigning permissions to Active Directory or OpenID Connect groups rather than individual user accounts centralizes identity management, simplifies onboarding/offboarding, and reduces the risk of orphaned or excessive per-user permissions in vSphere Foundation 9.0. Option D is correct because assigning roles at the highest logical inventory level, such as a datacenter or folder, leverages vSphere's permission inheritance model so child objects (clusters, hosts, VMs) automatically receive the role, minimizing administrative overhead and configuration drift. Option B is not recommended because per-VM, per-user assignments create massive management overhead and are error-prone compared to group-based, inherited permissions. Option C is not recommended because built-in roles such as Administrator are system-defined and should not be modified; custom roles should be cloned and edited instead to preserve upgrade compatibility and supportability. Option E is not recommended because granting the global Administrator role to all developers violates least-privilege principles and exposes the environment to accidental or malicious changes.

Answer

Assign permissions to individual users at the virtual machine level for every single VM.

Answer

Modify the built-in Administrator role directly to add custom security auditing privileges.

Answer

Grant all developers the global Administrator role to ensure zero operational friction.

Question 2

An administrator is deploying a new vSphere cluster with vSphere Lifecycle Manager (vLCM) in a VVF 9.0 environment. The cluster will use a single image to manage ESXi hosts. Before remediating the hosts, the administrator must validate that the desired image is compatible with the cluster's hardware. Which TWO actions should the administrator take to ensure a successful remediation? (Choose two.)

Accepted Answer

Verify that the hardware compatibility list (HCL) for the desired ESXi version includes the host model and its devices.. To ensure a successful vLCM remediation, the administrator must first verify that the desired image is compatible with the hardware by checking the HCL for the ESXi version. Then, running a compliance check against the image identifies any host-level discrepancies. These two actions validate both hardware support and current state, minimizing remediation failures.

Answer

Enable Quick Boot on each host to speed up remediation.

Answer

Configure a vSphere Distributed Resource Scheduler (DRS) rule to evacuate all VMs from the hosts before remediation.

Answer

Import an offline bundle from a USB drive to the vLCM depot.

Question 3

An enterprise architect is defining the network design for a vSphere Foundation 9.0 deployment. The requirement is that the ESXi management traffic, vMotion traffic, and storage traffic each be isolated on separate Layer 2 segments while sharing the same set of physical uplinks, and that a single physical uplink failure must not disrupt any traffic type. Which design element should the architect include?

Accepted Answer

A vSphere Distributed Switch with multiple uplinks, NIOC enabled, and separate distributed port groups per traffic type. A vSphere Distributed Switch with multiple uplinks delivers physical redundancy so a single link failure does not disrupt traffic. Separate distributed port groups with VLANs isolate management, vMotion, and storage at Layer 2, and Network I/O Control enforces per-traffic-type shares and limits. Together these elements satisfy both the isolation and the uplink-failure tolerance requirements.

Answer

A vSphere Standard Switch with two uplinks in a team and a single port group carrying all traffic types

Answer

A single vSphere Standard Switch with one uplink and VLAN-backed port groups for each traffic type

Answer

A vSphere Distributed Switch with a single uplink and per-traffic-type distributed port groups

Question 4

An administrator is designing a vSphere Foundation 9.0 environment that must use an industry-standard protocol for centralized authentication of ESXi hosts and vCenter Server to an existing directory service. The directory service supports LDAP and Kerberos. Which protocol should be used to join the vSphere components to the directory domain?

Accepted Answer

LDAP with Kerberos. Directory integration for ESXi and vCenter Server uses LDAP for directory lookups and Kerberos for authentication. This combination is the standard mechanism for joining vSphere components to an existing directory service and enabling centralized authentication. Other protocols listed serve different purposes such as federation, network access control, or API authorization, and do not perform domain joins.

Answer

RADIUS

Answer

OAuth 2.0

Answer

SAML 2.0

Question 5

An administrator is deploying a new three-host cluster running vSphere Foundation 9.0. The design requires that when an ESXi host is placed into maintenance mode, any running virtual machines are automatically migrated to another host without manual intervention. Which cluster feature must the administrator enable to meet this requirement?

Accepted Answer

vSphere DRS. vSphere DRS is the cluster service that automates virtual machine placement and balancing. When a host is placed into maintenance mode, DRS recommends and, in fully automated mode, performs the migrations needed to evacuate that host. HA, FT, and DRS rules do not provide this evacuation behavior on their own, so the administrator must enable DRS to meet the design goal.

Answer

vSphere Fault Tolerance

Answer

vSphere HA

Answer

vSphere Distributed Resource Scheduler rules

Question 6

An IT architect is designing a vSphere Foundation 9.0 cluster that will run a mix of production and development workloads. The requirement is to prevent development virtual machines from consuming more than their fair share of CPU and memory during peak hours, while allowing production virtual machines to burst when resources are available. Which vSphere feature should be used to enforce these resource allocation policies?

Accepted Answer

vSphere resource pools with shares, reservations, and limits. Resource pools provide hierarchical control over CPU and memory through shares, reservations, and limits. Placing development virtual machines in a pool with lower shares and a hard limit caps their peak consumption, while production virtual machines in a pool with higher shares and no limit can burst when resources are free. DRS rules, HA admission control, and NIOC address placement, failover, and network bandwidth, not CPU or memory enforcement.

Answer

vSphere Distributed Resource Scheduler (DRS) rules

Answer

vSphere Network I/O Control shares

Answer

vSphere High Availability admission control

Question 7

An administrator is planning storage for a vSphere Foundation 9.0 cluster. The requirement is that a virtual machine's disk space be allocated fully at creation time so that the underlying datastore reserves the blocks immediately, and that the disk not be reclaimed by storage thin provisioning. Which virtual disk format should the administrator choose?

Accepted Answer

Thick provisioned, eager zeroed. Thick provisioned, eager zeroed reserves the entire disk size on the datastore at creation and zeroes all blocks immediately, satisfying both the full allocation and no-reclamation requirements. Thick lazy zeroed reserves space but defers zeroing, thin provisioned allocates on demand, and an RDM in physical mode bypasses the datastore entirely, so none of those match the design.

Answer

Thick provisioned, lazy zeroed

Answer

Thin provisioned

Answer

Raw Device Mapping in physical compatibility mode

Question 8

An administrator finds that the 'vCenter HA' state is 'Not Configured'. What is the purpose of this feature?

Accepted Answer

To provide redundancy for the vCenter Server appliance. vCenter HA provides active-passive redundancy for the vCenter Server appliance itself, ensuring the management plane remains available if the active node fails. It uses a three-node architecture (active, passive, witness) to replicate state and automate failover. This is distinct from VM-level HA (which protects workloads) or backup (which protects configuration data).

Answer

To back up the vCenter configuration

Answer

To provide high availability for VMs

Answer

To balance load across vCenters

Question 9

An administrator is designing a custom dashboard in VMware Aria Operations for a vSphere Foundation environment. The dashboard needs to display real-time health scores of all production ESXi clusters. Which widget type is best suited to display these health scores as visual colored badges?

Accepted Answer

Scoreboard Widget. The Scoreboard widget in VMware Aria Operations is specifically designed to display metric values as colored badges or scores, making it ideal for showing real-time health scores of ESXi clusters at a glance. It aggregates objects and renders their current metric value with color coding based on thresholds, which matches the requirement for visual colored badges.

Answer

Heat Map Widget

Answer

Text Widget

Answer

Topology Widget

Question 10

An enterprise architect is designing a multi-site vSphere Foundation 9.0 disaster recovery plan using vSphere Replication. How does vSphere Replication track changes to virtual machine disks prior to replication cycles?

Accepted Answer

By utilizing an efficient asynchronous change tracking mechanism built into the ESXi hypervisor kernel.. vSphere Replication uses the ESXi kernel's built-in asynchronous change tracking mechanism to record which disk blocks have changed since the last replication cycle. This lightweight tracking avoids full-disk scans and enables efficient delta-based replication at the configured RPO. The changed blocks are then transmitted to the target site during each replication cycle.

Answer

By mirroring every single SCSI command in real-time across synchronous Fibre Channel switches.

Answer

By forcing guest operating systems to write logs to a shared NFS datastore.

Answer

By executing full virtual machine cold clones every 15 minutes.

Question 11

An IT architect is designing a vSphere Foundation 9.0 environment that must comply with an internal security standard requiring encrypted management access and authenticated access to the ESXi host client. Which TWO standards or mechanisms should the architect document as part of the baseline? (Choose two.)

Accepted Answer

TLS 1.2 or later for the ESXi host client and vCenter Server management interfaces. TLS 1.2 or later secures management traffic to the host client and vCenter Server, and Active Directory integration provides authenticated, identity-based access to ESXi hosts. Together they meet the requirement for encrypted and authenticated management access. SSH-by-default, SNMP v2c, and anonymous access each weaken security and contradict the stated baseline.

Answer

SNMP v2c with a read-only community string for host monitoring

Answer

Anonymous access to the ESXi host client for rapid break-glass recovery

Answer

SSH enabled by default on every ESXi host for administrative convenience

Question 12

An administrator is managing a VVF 9.0 environment with vSphere Lifecycle Manager (vLCM) using image-based management. The administrator attempts to remediate a cluster but receives an error that the image is incompatible with one of the hosts due to a missing firmware add-on. The host is from a supported vendor and model. Which action should the administrator take to resolve the issue?

Accepted Answer

Add the required firmware add-on to the image from the vLCM depot.. When vLCM reports an image incompatibility due to a missing firmware add-on, the administrator must add the required firmware add-on to the cluster's image. Firmware add-ons are vendor-specific and available in the vLCM depot. Once added, the image becomes compatible with the host, and remediation can proceed. This maintains the declarative model and ensures all hosts are updated consistently.

Answer

Disable firmware updates in the cluster remediation settings.

Answer

Upgrade the host's firmware manually to the latest version before remediation.

Answer

Remove the host from the cluster and manage it separately with baselines.

Question 13

An administrator is troubleshooting a vSphere 9.0 environment where a virtual machine cannot be powered on and the task fails with an error indicating insufficient resources in the cluster. The cluster has multiple ESXi hosts with available CPU and memory. Which vSphere feature should the administrator check first, because it can reserve capacity and block power-on operations even when physical resources appear free?

Accepted Answer

Admission control policy configured for vSphere High Availability (HA).. vSphere HA admission control reserves cluster capacity so that failover can succeed. Depending on the policy, the cluster may refuse to admit a new VM when the reservation would be violated, producing an insufficient-resources error despite free physical resources. Checking the admission control policy first explains the discrepancy between apparent free capacity and the power-on failure.

Answer

vSphere Distributed Switch (vDS) network resource pools configured with limits.

Answer

Distributed Resource Scheduler (DRS) automation level set to Fully Automated.

Answer

Storage I/O Control (SIOC) enabled on the datastore hosting the VM.

Question 14

An administrator wants to apply a standardized ESXi configuration baseline to all hosts in a vSphere Foundation 9.0 cluster and detect drift automatically, using the native image-based management model rather than a separate host configuration product. Which capability should be used?

Accepted Answer

vSphere Configuration Profiles applied at the cluster level. vSphere Configuration Profiles provide a cluster-level desired configuration that hosts are compared against, enabling automatic drift detection and remediation. This native, image-based model is distinct from per-host Host Profiles, patch-oriented baselines, and attestation. The administrator gets standardized configuration enforcement across the cluster without introducing a separate configuration management product.

Answer

vSphere Lifecycle Manager baselines using patch baselines only

Answer

vSphere Trust Authority attestation reports

Answer

Host Profiles applied individually to each host outside of cluster management

Question 15

An enterprise architect is designing storage for a vSphere Foundation 9.0 environment. The requirement is to provide block-level storage to ESXi hosts over a dedicated storage network using a standards-based protocol that supports multipathing and does not require a specialized storage array feature for host connectivity. Which storage technology should be used?

Accepted Answer

iSCSI. iSCSI provides block-level storage over TCP/IP and is fully standards-based. ESXi supports iSCSI initiators with multipathing through the Pluggable Storage Architecture, and connectivity does not depend on proprietary array features. It can be isolated on a dedicated storage network, satisfying the design requirement for block storage with multipathing.

Answer

SMB version 3.1.1

Answer

NFS version 4.1

Answer

Fibre Channel over Ethernet (FCoE)