VCP-VVF Practice Test 15 — 15 Questions

Question 1

An administrator is troubleshooting a certificate chain validation error when configuring a secure LDAP (LDAPS) identity source in vCenter Single Sign-On. The LDAP server uses a private internal Certificate Authority. Where must the administrator add the private CA certificate to resolve the validation failure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

vCenter Administration -> Single Sign-On -> Configuration -> Certificates -> Trusted Root Certificates.. When adding an LDAPS identity source signed by an internal CA, vCenter SSO requires the CA certificate to be present in the SSO Trusted Root Certificates store.

Answer

Active Directory Domain Controller Certificate Store.

Answer

SDDC Manager -> Security -> Certificate Authority.

Answer

ESXi Host -> Configure -> Security -> Trusted Certificates.

Question 2

An administrator needs to verify whether all ESXi hosts in a VVF cluster have uniform NTP settings configured. Which interface provides a quick summary of host time synchronization status?

Accepted Answer

Host -> Configure -> Time Configuration.. The vSphere Client summary page for each ESXi host or cluster displays time synchronization status under Configure -> Time Configuration (NTP).

Answer

VCF Operations -> Inventory -> NTP Widget.

Answer

SDDC Manager -> Infrastructure -> Host Time Sync.

Answer

NSX Manager -> Fabric -> Nodes -> NTP.

Question 3

Which THREE settings can be configured for a Virtual Machine using vSphere Storage Policies?

Accepted Answer

Encryption state. Storage policies allow defining performance, redundancy, and encryption settings.

Answer

VMware Tools update schedule

Answer

VM Guest OS type

Question 4

An administrator is configuring role-based access control (RBAC) across a VVF 9.0 deployment. Which THREE statements regarding RBAC management across vCenter and NSX are correct? (Choose three.)

Accepted Answer

Administrators can create custom roles in vCenter with specific granular privileges (e.g., VM snapshot management only).. vCenter permissions can propagate down the inventory hierarchy, custom roles can be defined with granular privileges, and NSX manages its own RBAC policies independently.

Answer

Assigning a role in vCenter automatically grants identical administrative privileges in NSX Manager.

Answer

Global Permissions in vCenter apply exclusively to a single ESXi host and cannot span across Linked Mode vCenters.

Question 5

An administrator is preparing to execute a major upgrade of a VVF 9.0 environment using SDDC Manager. Which THREE pre-upgrade validation checks are automatically performed by SDDC Manager before allowing the upgrade bundle to be applied? (Choose three.)

Accepted Answer

Check available disk space and partition utilization on SDDC Manager and target appliances.. SDDC Manager pre-checks validate inventory connectivity, snapshot status, disk space availability on appliances, and software compatibility (BOM validation).

Answer

Automatically delete all historical performance metrics older than 365 days from VCF Operations.

Answer

Power off all running production virtual machines to release memory.

Question 6

An administrator is attempting to run a pre-upgrade health check using SDDC Manager before upgrading the VVF environment. The pre-check fails with an error stating that API connectivity to the vCenter Server is unreachable. What is the most appropriate troubleshooting step?

Accepted Answer

Verify network connectivity and ensure vCenter API services (vpxd and associated web services) are running and accessible on TCP port 443.. SDDC Manager relies on API connectivity over HTTPS (port 443) to communicate with vCenter. The administrator should check network connectivity, credential validity, and ensure the vCenter web services are running.

Answer

Re-configure the ESXi host direct management passwords via DCUI.

Answer

Reboot the SDDC Manager appliance into single-user recovery mode.

Answer

Re-install the NSX Policy Manager appliance.

Question 7

An administrator is configuring the Supervisor on a vSphere cluster within a vSphere Foundation 9.0 environment. After enabling workload management, the control plane VMs fail to power on, and the status shows that the primary storage policy assigned to the Supervisor namespace cannot be validated against the datastore clusters. What is the most likely cause and corrective action?

Accepted Answer

Assign a storage policy that is backed by vSAN or an SPM-compliant datastore and ensure the policy tags match the requirements of the control plane nodes.. Supervisor control plane VMs require a storage policy that meets performance and availability requirements. If the referenced storage policy lacks the necessary capabilities or cannot be accessed on the chosen datastore cluster, initialization fails.

Answer

Disable DRS on the cluster because Supervisor control plane VMs cannot run on DRS-enabled clusters.

Answer

Convert the target datastore from VMFS to NFS, as Supervisor control planes do not support VMFS datastores.

Answer

Log in to each ESXi host via SSH and manually create VMDK files for the control plane VMs in the datastore root.

Question 8

An administrator is configuring dashboards in VCF Operations for executive reporting. Which TWO widgets are best suited for displaying high-level summary health and risk scores across multiple SDDC clusters? (Choose two.)

Accepted Answer

Heat Map Widget displaying cluster health and risk percentages.. Health and risk scores across multiple objects are best displayed using Heat Map widgets or Scoreboard widgets in VCF Operations.

Answer

Virtual Machine Guest OS Desktop Screen Viewer.

Answer

Raw Log Stream Text Box Widget displaying tail -f outputs.

Answer

SDDC Manager Bring-up Progress Bar Widget.

Question 9

When troubleshooting certificate trust issues in VVF, which THREE components might require manual certificate replacement or refreshing?

Accepted Answer

Solution User certificates. The Solution Users, Machine SSL, and STS are the three critical certificate components.

Answer

vSphere Client browser cache

Answer

ESXi Host hardware BIOS password

Question 10

An administrator is monitoring resource performance in vSphere Foundation 9.0 using vCenter Performance Charts. Which metric type reflects the memory actively being used by a virtual machine, accounting for memory reclamation techniques like ballooning?

Accepted Answer

Active memory. Active memory represents the amount of memory that a virtual machine is actively using, distinguishing it from granted or consumed memory which may include idle cached pages.

Answer

Overhead memory

Answer

Ballooned memory

Answer

Consumable memory

Question 11

An administrator is configuring log forwarding from vCenter Server to a remote syslog server using the CLI/VAMI. The remote server requires custom TCP ports and mutual TLS (mTLS) authentication. How should the administrator configure this advanced syslog forwarding parameter?

Accepted Answer

Using the appliance shell command 'vcsyslog' or configuring advanced syslog parameters via VAMI.. Advanced syslog forwarding parameters on the vCenter Server appliance can be configured using the appliance shell (SSH) command 'vcsyslog' or via the VAMI advanced configuration options where supported.

Answer

Running the 'sddc-manager log-forwarding' CLI utility.

Answer

Updating the NSX Manager CLI command 'set syslog-server'.

Answer

Editing the /etc/rsyslog.conf file directly on each ESXi host in the cluster.

Question 12

An administrator is troubleshooting an issue where SDDC Manager fails to execute a life-cycle upgrade task because a pre-check reports an invalid vCenter SSO administrator password. The password was recently rotated. Where must the administrator update the stored credentials in SDDC Manager so the upgrade can proceed?

Accepted Answer

Administration -> Credentials / Password Management in SDDC Manager.. SDDC Manager maintains inventory credentials for vCenter, ESXi, and NSX. When credentials are changed natively on the target appliance, they must be updated in SDDC Manager under Administration -> Credentials or Inventory -> Passwords.

Answer

vCenter Server -> SSO -> Configuration -> Credentials.

Answer

Cloud Builder appliance configuration properties.

Answer

NSX Manager -> System -> Users -> Password Policy.

Question 13

An administrator is tasked with updating ESXi hosts using vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0. The cluster is managed using a single image. After importing a new vendor addon and base image, the compliance check reports a non-compliant state due to a missing component. How should the administrator resolve this?

Accepted Answer

Edit the cluster image specification to include the required component or vendor addon, then trigger remediation.. When a cluster is managed by a single image, remediation or compliance resolution requires updating the image specification to include the necessary component or vendor addon, or allowing vLCM to remediate the deviation.

Answer

Restart the vCenter Server Appliance management services to force an immediate cache refresh of host compliance.

Answer

Convert the cluster from image-based management to baseline-based management to bypass component validation.

Answer

Manually install the missing component on each ESXi host via an interactive SSH session using esxcli software.

Question 14

An administrator is configuring identity access control in vCenter 9.0. Which TWO identity sources are natively supported for user authentication in vCenter Single Sign-On (SSO)? (Choose two.)

Accepted Answer

Active Directory over LDAP / LDAPS. vCenter SSO natively supports Active Directory (Integrated Windows Authentication or over LDAP/LDAPS) and OpenID Connect (OIDC) identity federation providers.

Answer

Local MySQL database tables

Answer

Local Linux /etc/passwd file synchronization daemon

Answer

RADIUS token-based hardware token authenticators

Question 15

You have a VVF license assigned. If you need to troubleshoot a Certificate Authority (CA) issue involving 'vmca', where are the logs typically located within the VCSA file system?

Accepted Answer

/var/log/vmware/vmca/. /var/log/vmware/vmca/ is the designated path for logs related to the VMware Certificate Authority service.

Answer

/var/log/vmware/eam/

Answer

/var/log/vmware/sso/

Answer

/var/log/vmware/vpxd/