VCP-VVF Practice Test 16 — 15 Questions

Question 1

An architect is planning a vSphere Foundation 9.0 deployment for a remote office/branch office (ROBO) location with limited physical security. Which feature should be implemented to protect virtual machine data at rest against physical server theft?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

vSphere VM Encryption managed via a trusted KMIP-compliant key management server.. vSphere VM Encryption encrypts virtual machine files, including VMDKs, swap files, and configuration files, at rest using keys managed by a KMIP-compliant key management server (KMS). If a physical server is stolen from a ROBO site, the encrypted VM data is unreadable without the encryption keys, which reside on the external KMS rather than on the host. This directly addresses the threat of physical theft.

Answer

RAID 6 parity disk grouping on local RAID controllers.

Answer

Software iSCSI multipathing over encrypted IPsec tunnels.

Answer

Storage DRS auto-evacuation rules triggered by ambient temperature sensors.

Question 2

An administrator is managing a vSphere cluster with strict licensing compliance rules. A specific virtual machine must be restricted to run on only two designated ESXi hosts out of a six-host cluster. Which construct should the administrator configure?

Accepted Answer

A VM-Host affinity rule specifying a Host Group containing the two designated hosts.. A VM-Host affinity rule binds a specific VM (or group of VMs) to a designated Host Group, which is exactly what's needed to restrict the VM to only two of the six ESXi hosts. This is the standard vSphere DRS construct for enforcing VM-to-host placement for licensing, hardware, or compliance reasons. The rule can be configured as a 'must run on' rule to strictly enforce placement on the two designated hosts.

Answer

A storage DRS anti-affinity rule on the virtual machine disks.

Answer

A DRS resource pool share allocation set to restrict CPU scheduling.

Answer

An Enhanced vMotion Compatibility (EVC) baseline targeting those two hosts.

Question 3

When troubleshooting a vSphere Distributed Switch (vDS) configuration, an administrator needs to check which physical network adapters (vmnics) are assigned to specific uplinks on the switch. Where in the vSphere Client should the administrator look?

Accepted Answer

Select the vDS in the inventory, navigate to Configure -> Topology or Uplink port group settings.. Uplink configuration and physical adapter assignments on a vDS are managed under the vDS object -> Configure -> Topology or Uplink port groups / Teaming and Failover settings.

Answer

Check the cluster Quick Stats tab.

Answer

Open the Virtual Machine settings -> Hardware -> Network Adapter.

Answer

Navigate to vCenter Administration -> Deployment -> Network Maps.

Question 4

An administrator is managing a vSphere Foundation 9.0 cluster using vSphere Lifecycle Manager (vLCM) with an image-based approach. The compliance check reports that several ESXi hosts are non-compliant because their firmware versions do not match the vendor add-on specification. However, the hardware vendor's Hardware Support Manager (HSM) extension is not showing any available firmware updates. What is the most likely cause?

Accepted Answer

The Hardware Support Manager (HSM) vCenter extension is offline, unregistered, or experiencing authentication issues with the vendor's firmware repository.. The Hardware Support Manager (HSM) is a vCenter extension that vLCM relies on to query the vendor's firmware repository and return available firmware packages. If the extension is offline, unregistered, or failing authentication to the vendor's repository, vLCM can still detect that firmware doesn't match the add-on spec (from cached metadata) but cannot retrieve the updates needed to remediate. Restoring the HSM extension's connectivity and credentials resolves the missing firmware list.

Answer

Firmware updates require a legacy Update Manager baseline attached alongside the vLCM image.

Answer

The ESXi hosts are running in maintenance mode, which temporarily suspends HSM firmware polling.

Answer

The vCenter Server firewall is blocking inbound TCP port 443 traffic from the ESXi host management vmknics.

Question 5

An administrator is creating a new custom role in vCenter Server to grant a user permission to manage virtual machine snapshots. Which category of privileges should the administrator select in the privilege tree?

Accepted Answer

Virtual Machine -> State. Snapshot management privileges for virtual machines are located under the 'Virtual Machine -> State' privilege category.

Answer

Host -> Configuration

Answer

Datastore -> Allocate space

Answer

Global -> Licenses

Question 6

An administrator needs to check the current license capacity and expiration date for a vSphere Foundation deployment. Which dashboard or tool provides a consolidated view of all software licenses across the SDDC?

Accepted Answer

vCenter Server Administration > Licensing dashboard. The vCenter Server Administration > Licensing dashboard provides a consolidated, centralized view of all software licenses across the SDDC, including vSphere Foundation, vSAN, and add-on licenses. It displays license capacity (CPU cores), expiration dates, and assignment status for each license key. This is the authoritative location for license management in vSphere.

Answer

ESXi host Summary tab under Hardware Details

Answer

vSphere Lifecycle Manager Compliance Overview

Answer

VMware Aria Operations License Usage report widget

Question 7

An architect is planning the vSphere Distributed Switch (VDS) architecture for a new vSphere Foundation 9.0 deployment. What is the primary benefit of migrating from standard vSwitches to a VDS?

Accepted Answer

Centralized network management and configuration consistency across all hosts associated with the switch.. A vSphere Distributed Switch centralizes networking administration across all member ESXi hosts, ensuring consistent network configuration and enabling advanced features like port mirroring and NetFlow.

Answer

In-memory deduplication of guest operating system network packets.

Answer

Automatic conversion of virtual machine disk formats from VMDK to raw device maps.

Answer

Elimination of the requirement for physical top-of-rack Ethernet switches.

Question 8

An administrator needs to modify the hardware configuration of a running virtual machine, specifically adding more vCPUs, without causing downtime. Which vSphere feature makes this possible when supported by the guest operating system?

Accepted Answer

Hot-Plug / Hot-Add CPU and Memory. Hot-Plug (Hot-Add) CPU and Memory allows an administrator to add vCPUs or memory to a running VM without powering it off, provided the guest OS supports the feature and the VM's advanced settings allow it. This directly enables zero-downtime hardware reconfiguration for supported guests.

Answer

vSphere Fault Tolerance (FT)

Answer

Distributed Resource Scheduler (DRS)

Answer

Enhanced vMotion Compatibility (EVC)

Question 9

An administrator is designing a multi-tenant vSphere Foundation 9.0 environment and needs to restrict a particular group of tenant operators so they can only manage virtual machines within a specific folder, without having visibility into other clusters. Which vCenter Server architectural construct should be implemented?

Accepted Answer

Assign a custom Role with specific privileges to the tenant group scoped specifically to their assigned VM folder object.. Access control in vCenter Server is established by assigning roles to users or groups on specific inventory objects (such as folders or clusters) with propagation enabled or disabled.

Answer

Create separate physical vCenter Server appliances for every single folder in the hierarchy.

Answer

Apply a global SSO password policy that blocks login to the root vCenter level.

Answer

Configure IP subnet filtering rules on the vCenter appliance firewall.

Question 10

An administrator notices that an ESXi host's time is out of sync with the NTP server. Where in the vSphere Client should the administrator configure or restart the NTP service for the host?

Accepted Answer

Select the ESXi host -> Configure -> System -> Time Configuration (Date and Time).. NTP time synchronization and date/time settings on an ESXi host are configured under Host -> Configure -> Time Configuration (Date and Time).

Answer

Open virtual machine settings -> Guest OS Time.

Answer

Navigate to vCenter Administration -> Licensing -> Time Sync.

Answer

Check the vSphere Lifecycle Manager repository tab.

Question 11

An administrator is configuring a new virtual machine in a vSphere Foundation environment and needs to attach storage. Which TWO storage types can be natively provisioned and attached directly to a virtual machine in vSphere? (Choose two.)

Accepted Answer

Virtual Machine Disk (VMDK) stored on a VMFS or NFS datastore.. Option D is correct because a Virtual Machine Disk (VMDK) is the standard virtual disk format that vSphere natively provisions on a VMFS or NFS datastore and attaches directly to a virtual machine as its virtual storage device. Option E is correct because a Physical Raw Device Mapping (RDM) allows a VM to access a SAN LUN directly through a mapping file on a VMFS datastore, and vSphere natively supports provisioning and attaching this storage type to a virtual machine. Option A is incorrect because the local ESXi BIOS flash memory partition is system firmware storage used by the hypervisor, not a datastore that can be attached to a VM. Option B is incorrect because the ESXi scratch log volume is used by the host for logs and coredumps, not as VM-attachable storage. Option C is incorrect because a raw PCIe graphics card memory is not a storage type and cannot be provisioned or attached as VM storage without virtualization technologies such as passthrough or vGPU.

Answer

Local ESXi BIOS flash memory partition.

Answer

Shared ESXi scratch log volume.

Answer

Raw physical PCIe graphics card memory without virtualization.

Question 12

An administrator is configuring monitoring, log analysis, and alerting in a VVF 9.0 environment. Which THREE actions can be performed within VCF Operations (Aria Operations)? (Choose three.)

Accepted Answer

Configure outbound alert notifications and integrations with external ITSM systems like ServiceNow via webhooks.. Option C is correct because VCF Operations (Aria Operations) supports outbound alert notifications and integrations with external ITSM platforms such as ServiceNow, typically configured through notification rules, webhooks, or management packs. Option D is correct because VCF Operations provides customizable dashboards built from widgets including Heat Maps, Metric Sparklines, and Object Lists to visualize performance and capacity data. Option E is correct because VCF Operations includes capacity planning and analytics that let administrators define policies and project CPU, memory, and storage exhaustion based on demand and time-remaining thresholds. Option A is not correct because BGP routing on physical top-of-rack switches is a network configuration task, not a function of VCF Operations. Option B is not correct because patching ESXi base images and running vLCM remediation are performed through vSphere Lifecycle Manager, not within VCF Operations.

Answer

Configure direct BGP routing tables on physical top-of-rack switches.

Answer

Directly patch ESXi host base images and execute vLCM remediation tasks.

Question 13

An administrator is troubleshooting performance degradation on an ESXi host and suspects high storage latency affecting multiple virtual machines. Which TWO performance metrics in vSphere Client should the administrator monitor to evaluate storage latency? (Choose two.)

Accepted Answer

Kernel Latency (KAVG). Kernel Latency (KAVG) is correct because it measures the time a storage I/O request spends in the VMkernel queue before being issued to the device, directly reflecting storage stack latency that can degrade VM performance. Device Latency (DAVG/GAVG) is correct because DAVG measures the average latency reported by the physical storage device for each I/O, while GAVG is the guest-observed latency (KAVG + DAVG), making them the key metrics for evaluating end-to-end storage latency. Network Packet Drop Rate (A) relates to network throughput and packet loss, not storage latency. Memory Swapin Rate (D) reflects memory overcommitment and swapping, which is a memory metric rather than a storage latency indicator. CPU Ready Time (E) measures how long a vCPU waits for physical CPU scheduling, which is a CPU contention metric, not storage latency.

Answer

Network Packet Drop Rate

Answer

Memory Swapin Rate

Answer

CPU Ready Time

Question 14

An administrator is managing a vSphere Foundation cluster where Storage DRS (SDRS) is enabled on a datastore cluster. One of the virtual disks (VMDK) is configured with a Storage I/O Control reservation of 500 IOPS. How does SDRS utilize this setting during automated load balancing migrations?

Accepted Answer

SDRS ensures that the destination datastore has sufficient available IOPS capacity to honor the 500 IOPS reservation.. Storage DRS (SDRS) considers Storage I/O Control (SIOC) reservations when making migration decisions. If a VMDK has a 500 IOPS reservation, SDRS will ensure that the destination datastore has enough available IOPS capacity to satisfy that reservation before migrating. This prevents performance degradation due to overcommitment of IOPS.

Answer

SDRS suspends migration if any VMDK on the datastore has an active IOPS setting.

Answer

SDRS automatically converts the IOPS reservation into a storage capacity quota.

Answer

SDRS ignores SIOC reservations and solely relies on space utilization metrics for placement.

Question 15

An administrator needs to configure centralized log forwarding from ESXi hosts to an external syslog server in a VVF environment. Where in the vSphere Client should the administrator configure the syslog collector settings for an ESXi host?

Accepted Answer

Host -> Configure -> Advanced System Settings -> Syslog.global.logHost.. ESXi syslog forwarding is configured per-host under Configure > Advanced System Settings by setting the Syslog.global.logHost parameter to the target syslog server (e.g., udp://syslog.example.com:514 or ssl://host:1514). This is the standard method in vSphere Client for directing host logs to a remote collector. It applies at the host level and can be set via host profile for consistency across the cluster.

Answer

vCenter -> Administration -> Deployment -> Syslog Gateway.

Answer

SDDC Manager -> Infrastructure -> Log Forwarding.

Answer

Cluster -> Settings -> vSphere Availability -> Logging.