VCP-VVF Practice Test 19 — 15 Questions

Question 1

An administrator is setting up vSphere Alarms and wants to ensure that an alarm triggers only when a virtual machine's CPU utilization exceeds 90% for a continuous duration of 15 minutes. Where is this time duration configured?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Under the Alarm Definition -> Trigger panel, by adjusting the 'In metric, time interval / tolerance' setting.. When creating or editing an alarm definition in the vSphere Client, the trigger condition allows setting a time tolerance (e.g., 'Trigger if condition exists for more than specific minutes').

Answer

In the VCF Operations policy management engine.

Answer

Via esxcli system settings set --alarm-duration=15.

Answer

In the advanced vCenter setting 'Alarm.Tolerance.Duration'.

Question 2

An administrator is configuring a new alert in vSphere 9.0 to monitor when an ESXi host loses connection to a primary storage datastore. After saving the alarm, they want to test it. What is the safest method to verify the alarm triggers correctly without causing an outage?

Accepted Answer

Trigger a test notification action directly from the vSphere Client alarm definition menu if available, or simulate the event in a test cluster.. Testing alarms without causing production outages can be simulated by testing the alarm action directly from the alarm definition wizard or triggering a test event if supported, or by placing a test datastore into maintenance mode / unmounting it in a non-production test cluster.

Answer

Unmount the production VMFS datastore from all ESXi hosts simultaneously during peak business hours.

Answer

Disconnect the physical Fibre Channel cables from the core SAN switch.

Answer

Restart the vpxd service on vCenter while I/O is running.

Question 3

An administrator is configuring a new storage policy in vCenter to provision VMs on a vSAN datastore with specific erasure coding (RAID-5/6) and failure tolerance settings. Where are these vSAN storage rules defined?

Accepted Answer

Policies and Profiles -> VM Storage Policies -> Create vSAN Storage Policy.. vSAN storage policies are created and managed in vCenter under Policies and Profiles -> VM Storage Policies.

Answer

NSX Manager -> Storage -> Profiles.

Answer

SDDC Manager -> Storage -> vSAN Profiles.

Answer

VCF Operations -> Policies -> vSAN Storage Rules.

Question 4

An administrator is configuring identity federation in vCenter 9.0 for VVF, integrating an Enterprise Identity Provider (IDP) via OIDC. Users report that after successfully authenticating against the external IdP, they receive an authorization failure when attempting to log into the vSphere Client. Where should the administrator check to verify group mappings and role assignments?

Accepted Answer

Administration -> Single Sign-On -> Configuration -> Identity Provider under the IdP Groups mapping tab.. Identity federation in vCenter maps external IdP groups to vCenter Single Sign-On groups or direct global permissions. The administrator must check Administration -> Access Control -> Global Permissions or Single Sign-On -> Configuration -> Identity Provider.

Answer

vRealize Operations -> Administration -> Access Control -> Authentication Sources.

Answer

NSX Manager -> System -> Users -> Role Binding configuration panel.

Answer

Cloud Builder -> Infrastructure -> SSO Settings -> Federation Map.

Question 5

An administrator is configuring vSphere Trust Authority (vTA) in a VVF 9.0 environment to protect encrypted VMs. During the initial setup of the Trust Authority Cluster, communication fails between the Attestation Service and the Key Provider. Which network port must be open between these components to allow secure attestation communication?

Accepted Answer

TCP port 443 and TCP port 8443.. vSphere Trust Authority components communicate securely over specific ports. The Attestation Service communicates with ESXi hosts and other trust components typically over TCP port 443 (HTTPS) and port 8443 or specific vTA service ports depending on the exact architecture.

Answer

TCP port 22 and TCP port 80.

Answer

TCP port 902 and UDP port 902.

Answer

UDP port 514 and UDP port 123.

Question 6

An administrator is managing cluster compliance and lifecycle updates using vLCM in a VVF environment. Which TWO components can be included in a vLCM single cluster image specification? (Choose two.)

Accepted Answer

Vendor Hardware Add-on (OEM drivers/VIBs). vLCM single images combine the ESXi base image, a vendor hardware add-on, and optional firmware/driver component add-ons.

Answer

NSX Edge appliance virtual machine templates

Answer

vRealize Operations management pack installation binaries

Answer

Windows Guest OS ISO installation images

Question 7

An administrator is configuring log forwarding from ESXi hosts to VMware Aria Operations for Logs in a vSphere Foundation 9.0 deployment. Which configuration setting must be updated on each ESXi host (or applied via Host Profile) to forward syslog data securely using TLS?

Accepted Answer

Configure the advanced setting Syslog.global.logHost with the tls:// protocol prefix and the collector FQDN/port.. Syslog configuration on ESXi hosts involves setting the syslog.global.logHost advanced option with the appropriate protocol prefix, such as tcp:// or tls:// along with the destination collector address.

Answer

Modify the vCenter Server advanced setting vpxd.log.syslog.encryption to enabled.

Answer

Update the /etc/resolv.conf file on every ESXi host to include the syslog forwarding gateway IP address.

Answer

Deploy an OVF template containing a secure proxy daemon on each physical ESXi management vmkernel port.

Question 8

An administrator is troubleshooting a failure where VCF Operations fails to collect metrics from a vCenter Server instance in the VVF inventory. The test connection fails with a credential validation error. After verifying the service account password is correct, what underlying issue should the administrator investigate?

Accepted Answer

Verify that the service account has not been locked out due to multiple failed login attempts and possesses the required Read-Only or Administrator privileges across the vCenter inventory.. VCF Operations connects to vCenter using named user accounts or SSO accounts. If account lockout policies triggered due to failed attempts, or if the account lacks sufficient API privileges (such as Global Read permissions), metric collection will fail.

Answer

Restart the VMware vRealize Log Insight agent on the vCenter appliance.

Answer

Reinstall the vCenter Server Appliance operating system.

Answer

Change the ESXi host root password via the DCUI.

Question 9

An administrator is configuring an alarm in vSphere to notify them when a virtual machine's CPU usage remains above 95% for 10 minutes. However, they want the alarm to automatically clear when the CPU drops below 80% for 5 minutes. Where is the reset/clear condition configured?

Accepted Answer

Under the Alarm Definition -> Reset condition or tolerance panel.. vSphere alarm definitions allow configuring separate trigger and reset (clear) conditions or tolerances to prevent alarm flapping.

Answer

In the advanced vCenter setting 'Alarm.Reset.Threshold'.

Answer

In the VCF Operations policy management console.

Answer

Via esxcli alarm reset-rule configure.

Question 10

An administrator is troubleshooting a storage performance issue on a vSAN datastore in a VVF cluster. Which TWO tools or views in the vSphere Client and VCF Operations can be used to inspect vSAN health and performance? (Choose two.)

Accepted Answer

VCF Operations vSAN Performance and Capacity dashboards.. vSAN health is monitored via vCenter (Cluster -> Monitor -> vSAN -> Health) and VCF Operations vSAN dashboards.

Answer

ESXi DCUI hardware sensor reboot menu.

Answer

NSX Manager transport node storage status panel.

Answer

Cloud Builder storage inventory wizard.

Question 11

An administrator is configuring alert definitions and notifications in VMware Aria Operations for vSphere Foundation. A specific alert must be triggered only when a virtual machine's CPU utilization exceeds 90% for a sustained period of 15 minutes, while ignoring brief CPU spikes. How should this alert symptom be configured?

Accepted Answer

Set the symptom definition threshold to 90% with a wait cycle of 3 evaluation periods (assuming a 5-minute collection cycle).. In Aria Operations, alert symptoms and conditions can be refined using wait cycles or duration thresholds. Setting a duration or wait period ensures the condition persists before triggering the alert.

Answer

Create a static threshold alert rule with an execution delay of 900 seconds in the vCenter Alarms tab.

Answer

Enable the aggressive sampling flag in the vCenter advanced metrics configuration file.

Answer

Configure an immediate action script that polls the guest OS kernel every 15 seconds.

Question 12

An administrator needs to apply a VMware vSphere Foundation 9.0 license key to a newly deployed vCenter Server instance and its associated ESXi hosts. Which inventory view in the vSphere Client must the administrator use to manage and assign these licenses?

Accepted Answer

Go to Administration > Licensing to add the license keys and assign them to vCenter Server, ESXi hosts, and clusters.. License management across vCenter and inventory objects is centralized in vCenter Administration under Licensing.

Answer

Navigate to Lifecycle Manager > Updates > Licensing to synchronize keys with VMware Cloud Services.

Answer

Open Host Profiles and attach a license profile to each ESXi host.

Answer

Right-click the vCenter Server root object and select Edit Settings > Licensing.

Question 13

An administrator is auditing access control within a vSphere Foundation 9.0 environment. A specific group of security operators requires permission to view and manage VM snapshots across all production virtual machines, but they must not be allowed to power off virtual machines or modify networking settings. What is the best practice method to implement this?

Accepted Answer

Create a custom vSphere role containing only the required snapshot privileges and assign it to the security group on the production VM folder with propagation enabled.. Role-based access control (RBAC) in vSphere requires creating a custom role with only the necessary privileges (e.g., Virtual Machine > State > Create Snapshot, Remove Snapshot) and assigning it to the security group on the folder or cluster level.

Answer

Modify the default 'No Access' role to include snapshot creation rights for the production cluster.

Answer

Assign the built-in Administrator role to the security group and remove individual permissions via advanced host policies.

Answer

Grant the security group Read-Only access at the vCenter root and enable snapshot delegation in Host Profiles.

Question 14

An administrator is planning the deployment architecture for VMware vSphere Foundation 9.0. Which TWO core components are mandatory deployment requirements for a standard VVF implementation? (Choose two.)

Accepted Answer

ESXi Hypervisor hosts. VVF core architecture includes vCenter Server for management and ESXi for virtualization. While NSX and Aria are part of the broader VVF portfolio, core deployment mandates vCenter and ESXi.

Answer

VMware Cloud Director

Answer

NSX Advanced Load Balancer (Avi Networks)

Answer

VMware Aria Automation

Question 15

An administrator is configuring the Supervisor in a vSphere Foundation 9.0 environment. Which THREE network configurations are prerequisites for successful Supervisor deployment on a vSphere cluster? (Choose three.)

Accepted Answer

A dedicated management network CIDR block for the Supervisor control plane VMs.. Supervisor cluster deployment requires specific network allocations including a management network for control planes, a workload network for pods, and ingress/egress CIDR blocks for load balancing.

Answer

A Fibre Channel SAN zoning configuration for container persistent volume replication.

Answer

IPv6 multicast routing enabled on all physical core switches.