VCP-VVF Practice Test 17 — 15 Questions

Question 1

An administrator needs to apply a license key to a new vSphere Foundation deployment. Where should this task be performed in the vSphere Client?

Accepted Answer

Administration > Licensing > Licenses. License keys in the vSphere Client are applied under Administration > Licensing > Licenses. This central location allows administrators to add, assign, and manage license keys for vCenter, ESXi, and other vSphere Foundation components.

Answer

Global Inventory Lists > vCenter Servers > Licensing

Answer

Host and Clusters > Configure > Licensing

Answer

Workload Management > Licensing

Question 2

An administrator needs to quickly identify which ESXi hosts in a VVF cluster are running an outdated firmware version that is flagged by vLCM. Which view in the vSphere Client displays this compliance status?

Accepted Answer

Cluster -> Updates -> Overview / Image compliance tab.. vLCM compliance status is displayed in the vSphere Client under Cluster -> Updates -> Overview / Image compliance tab, where each host's firmware and software compliance against the desired image is shown. This view lets the administrator quickly identify hosts flagged as non-compliant due to outdated firmware.

Answer

vCenter -> Summary -> Services Status.

Answer

Host -> Monitor -> Hardware Health -> Firmware.

Answer

Cluster -> Configure -> vSphere Availability.

Question 3

An administrator is deploying VMware vSphere Foundation 9.0 using the Cloud Builder appliance. During the environment bring-up validation phase, the precheck fails due to an insufficient number of IP addresses assigned to the ESXi management network pool. Which action must the administrator take to resolve this validation failure?

Accepted Answer

Modify the JSON specification file to expand the IP address pool range with valid unused IP addresses and restart prechecks.. Cloud Builder validates the JSON specification file during bring-up; if the ESXi management network pool has fewer IPs than required, the fix is to edit the JSON spec to expand the IP pool range with valid, unused addresses and re-run prechecks. Cloud Builder does not support bypassing IP validation or using DHCP for the management pool in this context.

Answer

Reboot the Cloud Builder appliance to clear cached allocation tables from previous failed validation runs.

Answer

Bypass the IP validation phase by editing the Cloud Builder local deployment service configuration properties.

Answer

Deploy an external DHCP server on the management VLAN to dynamically lease addresses to the ESXi hosts.

Question 4

An administrator is troubleshooting a performance bottleneck in a vSphere Foundation 9.0 environment where virtual machines are experiencing high memory swap-out rates. What does a high swap-out rate indicate about the ESXi host memory state?

Accepted Answer

Physical host memory is completely exhausted, and memory reclamation mechanisms have failed to free enough RAM, forcing the hypervisor to swap active memory to disk.. A high swap-out rate indicates that the ESXi host has exhausted its physical memory and has activated the swap mechanism to reclaim memory by writing VM memory pages to disk. This occurs when other reclamation techniques (ballooning, compression, transparent page sharing) are insufficient to free up RAM, forcing the hypervisor to swap active memory to a swap file. This severely degrades VM performance due to disk latency.

Answer

VMware Tools has failed to start inside the guest operating system.

Answer

The storage array is experiencing high hardware latency.

Answer

The virtual machine has too much physical RAM allocated, causing memory corruption.

Question 5

An administrator is troubleshooting a storage performance problem where virtual machines are experiencing high I/O latency. Which TWO techniques or features can help optimize storage performance in a vSphere Foundation environment? (Choose two.)

Accepted Answer

Configure the Path Selection Policy (PSP) to 'Round Robin' for multi-pathing active-active storage arrays to balance I/O across available paths.. Option B is correct because setting the Path Selection Policy to Round Robin on active-active storage arrays distributes I/O across all available paths, preventing a single path from becoming a bottleneck and thereby reducing latency. Option D is correct because Storage I/O Control (SIOC) monitors datastore latency and throttles queue depths per virtual machine, ensuring that critical workloads get fair access and congestion does not degrade overall storage performance. Option A is incorrect because memory reservations have no direct effect on storage I/O overhead or latency; setting a reservation to 0% only affects memory allocation. Option C is incorrect because thick-provisioning lazy zeroed consumes more capacity and does not inherently improve I/O latency compared to thin provisioning. Option E is incorrect because disabling ESXi firewall rules does not accelerate storage traffic and instead creates a serious security risk.

Answer

Set the virtual machine memory reservation to 0% to free up storage overhead.

Answer

Set all VMDK files to thick-provision lazy zeroed across all datastores regardless of available capacity.

Answer

Disable all ESXi firewall rules to accelerate network-attached storage traffic.

Question 6

An administrator is auditing access control in a vSphere Foundation 9.0 environment. A specific security team member needs read-only access to all vSphere objects, but must be restricted from viewing sensitive virtual machine guest OS metrics and console data. How should the administrator accomplish this?

Accepted Answer

Create a custom role with specific privileges removed, and assign it to the user at the appropriate inventory object level.. To restrict a user from viewing sensitive VM guest OS metrics and console data while granting read-only access to all other objects, the administrator should create a custom role that removes the specific privileges related to guest metrics and console access, then assign that role to the user at the appropriate inventory level (e.g., vCenter root or datacenter). This follows the principle of least privilege and allows granular control.

Answer

Assign the built-in Read-Only role at the vCenter root level and use advanced settings to hide guest metrics.

Answer

Assign the Administrator role and rely on Active Directory group policy objects to restrict guest OS access.

Answer

Modify the global permissions table in the Platform Services Controller database to filter out VM console privileges.

Question 7

An enterprise architect is planning a vSphere Foundation 9.0 deployment and evaluating storage architecture choices. Which THREE storage types are fully supported as primary datastores for ESXi hosts? (Choose three.)

Accepted Answer

NFS (Network File System) datastores. Option A (NFS datastores) is correct because ESXi natively supports NFS v3 and NFS v4.1 as primary datastores for hosting VMs, making it a fully supported storage architecture in vSphere Foundation 9.0. Option B (VMFS on Fibre Channel or iSCSI block storage) is correct because VMFS is VMware's clustered file system designed for block storage over FC, iSCSI, or FCoE, and remains a core supported datastore type for ESXi hosts. Option E (vSAN datastores) is correct because vSAN is VMware's software-defined storage solution that aggregates local disks into a distributed, shared datastore fully supported as a primary storage type in vSphere Foundation 9.0. Option C (audio CD-DA tracks) is not a supported datastore format since CD-DA is a consumer audio standard with no block-level filesystem or VM storage capability. Option D (FAT16 floppy diskettes) is not supported because FAT16 is a legacy filesystem limited to small capacities and lacks the clustering, locking, and performance features required for ESXi datastores.

Answer

Audio compact disc (CD-DA) tracks

Answer

FAT16 formatted floppy diskettes

Question 8

During a firmware update via vSphere Lifecycle Manager, an ESXi host enters a non-compliant state. What is the first step the administrator should take to identify the root cause?

Accepted Answer

Check the Image Compliance status in the Updates tab. Viewing the 'Image Compliance' status in the cluster's 'Updates' tab provides detailed information about why a host is non-compliant.

Answer

Remove the host from the cluster

Answer

Reboot the host

Answer

Refresh the inventory

Question 9

An enterprise architect is designing a multi-site vSphere Foundation 9.0 environment with stretched clusters. When configuring vSAN stretched cluster witness traffic, what is the architectural recommendation regarding the witness network connection?

Accepted Answer

Ensure the witness network link meets minimum bandwidth requirements and maintains an RTT latency of 100 milliseconds or less.. For vSAN stretched clusters, VMware recommends that the witness host be placed at a third site with a network link that meets minimum bandwidth requirements and maintains round-trip latency of 100 ms or less. This ensures timely witness heartbeats and avoids false site-failure declarations. The witness carries metadata and tie-breaking traffic, not full data.

Answer

Configure the witness node to run on the exact same physical ESXi host as the primary storage controller.

Answer

Route witness traffic exclusively through unencrypted public dial-up modems.

Answer

Disable all IP keepalive heartbeats on the witness vmkernel adapter.

Question 10

An administrator is setting up vSphere Alarms and wants to ensure that an alarm triggers only when a virtual machine's CPU utilization exceeds 90% for a continuous duration of 15 minutes. Where is this time duration configured?

Accepted Answer

Under the Alarm Definition -> Trigger panel, by adjusting the 'In metric, time interval / tolerance' setting.. In vSphere alarms, the time duration for a metric-based trigger is configured in the alarm definition's trigger panel, specifically by adjusting the 'In metric, time interval / tolerance' setting. This allows the alarm to fire only if the condition persists for the specified period.

Answer

In the VCF Operations policy management engine.

Answer

Via esxcli system settings set --alarm-duration=15.

Answer

In the advanced vCenter setting 'Alarm.Tolerance.Duration'.

Question 11

An administrator is planning storage design for a vSphere Foundation 9.0 cluster. Which TWO file-level storage protocols are supported by ESXi for mounting external shared file datastores? (Choose two.)

Accepted Answer

Network File System (NFS) version 4.1. ESXi supports NFS version 3 and NFS version 4.1 for external file-level datastore mounting.

Answer

Hypertext Transfer Protocol Secure (HTTPS)

Answer

Secure File Transfer Protocol (SFTP)

Answer

Trivial File Transfer Protocol (TFTP)

Question 12

An administrator is configuring certificate replacement for NSX Manager in a VVF environment using the NSX API. They generate a CSR, have it signed by the enterprise CA, and import it using the API. However, NSX services fail to trust the new certificate. What step was likely omitted during the import process?

Accepted Answer

Importing the intermediate and root CA certificates into the NSX Trust Store and assigning the certificate to the API/NODE service.. When replacing an NSX Manager certificate via the API, you must not only import the signed leaf certificate but also import the issuing intermediate and root CA certificates into the NSX Trust Store, then assign the new certificate to the relevant services (API/NODE). Without the CA chain in the trust store, NSX services cannot validate the certificate chain and will fail to trust the new certificate.

Answer

Updating the NSX Manager DNS pointer record in Active Directory.

Answer

Restarting the vCenter inventory service to push the trust bundle to NSX.

Answer

Running the certificate-manager utility on the ESXi host command line.

Question 13

An administrator is troubleshooting a snapshot deletion issue where a virtual machine's snapshot consolidate task fails repeatedly with a 'file locked' error. What is the recommended troubleshooting step to resolve this condition?

Accepted Answer

Check for stale backup operations, third-party software locks, or hanging CBT processes holding file locks on the delta VMDK files, and terminate the offending process or backup session.. If a snapshot consolidation fails due to file locks, it is often because a backup application, third-party security agent, or dangling process has a lock on the delta disk vmdk files. Checking active tasks or releasing the lock is required.

Answer

Reboot the vCenter Server appliance to clear guest OS file locks.

Answer

Power on the VM with '-f forceConsolidate' from the ESXi command line.

Answer

Instantly format the datastore using VMFS-6 repair mode.

Question 14

An administrator is troubleshooting a performance issue where virtual machines in a cluster are experiencing high memory contention. The cluster has Distributed Resource Scheduler (DRS) enabled. How does DRS assist in mitigating memory contention across cluster hosts?

Accepted Answer

By migrating virtual machines from heavily utilized hosts to hosts with available memory resources via vMotion.. DRS monitors cluster resource utilization (both CPU and memory) and migrates virtual machines via vMotion from heavily utilized hosts to hosts with more available physical RAM.

Answer

By compressing all VM guest operating systems into smaller memory footprints.

Answer

By powering off idle virtual machines when memory utilization exceeds 50%.

Answer

By automatically expanding physical RAM on ESXi hosts using software virtualization.

Question 15

An administrator is troubleshooting a vSphere cluster where Distributed Resource Scheduler (DRS) is failing to migrate virtual machines. Which TWO cluster-level conditions can prevent DRS from functioning or executing migrations? (Choose two.)

Accepted Answer

DRS is disabled at the cluster level.. Option C is correct because DRS migrations can only be generated and executed when DRS is actually enabled on the cluster; if the cluster's DRS setting is turned off, vCenter Server will not produce migration recommendations or perform automated vMotion operations. Option D is correct because DRS requires usable, connected hosts with available capacity; if every host is in Maintenance Mode or disconnected from vCenter Server, there is no valid target host and no active host to evacuate, so DRS cannot execute migrations. Option A is not correct because vSphere HA admission control affects whether VMs can be powered on and reserves capacity, but it does not inherently prevent DRS from functioning or migrating VMs. Option B is not correct because Storage I/O Control is a datastore-level feature for I/O prioritization and does not block DRS compute migrations. Option E is not correct because an EVC baseline affects CPU compatibility for vMotion, but a properly configured advanced baseline does not by itself disable DRS or prevent all migrations.

Answer

vSphere HA is configured with strict admission control.

Answer

Storage I/O Control is disabled on datastores.

Answer

Enhanced vMotion Compatibility (EVC) is set to an advanced baseline.