VCP-VVF Practice Test 20 — 15 Questions

Question 1

An administrator is configuring a new Supervisor cluster in vSphere Foundation 9.0 using vSphere Distributed Switch (VDS). Which networking parameter must be verified prior to enabling the Supervisor?

Accepted Answer

A dedicated, non-overlapping management network IP block must be allocated for the Supervisor control plane VMs.. The Supervisor control plane VMs require their own dedicated IP addresses on a management network, and that IP block must not overlap with the workload network, pod/service CIDRs, or any existing infrastructure. Verifying a non-overlapping management IP block is a hard prerequisite because the Supervisor's control plane VMs are assigned static IPs from this block and cannot function if there is overlap or exhaustion.

Answer

The underlying vSphere Distributed Switch must be upgraded to version 6.5 minimum, with LLDP disabled globally.

Answer

All ESXi hosts in the cluster must have at least four physical uplinks configured in an active/active port channel.

Answer

IPv6 must be enforced as the primary transport protocol for all internal Supervisor control plane communication.

Question 2

An IT architect is configuring a vSphere Foundation 9.0 cluster and wants to ensure that specific virtual machines are always restarted on preferred hosts during a vSphere HA failover event. Which vSphere HA feature satisfies this design goal?

Accepted Answer

VM-Host affinity and anti-affinity rules.. VM-Host Affinity rules in vSphere HA allow administrators to define which hosts a virtual machine should or must run on during normal operations and failover events.

Answer

Distributed Power Management (DPM) sleep state intervals.

Answer

Storage DRS placement migration schedules.

Answer

Enhanced vMotion Compatibility (EVC) baselines.

Question 3

You have a VVF license assigned. If you need to troubleshoot a Certificate Authority (CA) issue involving 'vmca', where are the logs typically located within the VCSA file system?

Accepted Answer

/var/log/vmware/vmca/. The VMware Certificate Authority (VMCA) service, which is part of the vSphere Certificate Manager, writes its operational and error logs to the /var/log/vmware/vmca/ directory on the VCSA. This is the standard location for troubleshooting CA-related issues such as certificate signing, root certificate replacement, or VMCA service failures. Other directories like /var/log/vmware/sso/ are for SSO, not VMCA.

Answer

/var/log/vmware/eam/

Answer

/var/log/vmware/sso/

Answer

/var/log/vmware/vpxd/

Question 4

An administrator is configuring an alarm in vSphere to notify them when a virtual machine's CPU usage remains above 95% for 10 minutes. However, they want the alarm to automatically clear when the CPU drops below 80% for 5 minutes. Where is the reset/clear condition configured?

Accepted Answer

Under the Alarm Definition -> Reset condition or tolerance panel.. In vSphere alarms, the reset/clear behavior is configured as part of the alarm definition itself, specifically in the Reset condition (also called the tolerance or 'Reset to green' condition) panel. This lets you define a separate threshold and duration that must be met before the alarm returns to a normal state, independent of the triggering condition.

Answer

In the advanced vCenter setting 'Alarm.Reset.Threshold'.

Answer

In the VCF Operations policy management console.

Answer

Via esxcli alarm reset-rule configure.

Question 5

An administrator is troubleshooting a storage performance issue on a vSAN 9.0 cluster. The vSAN performance service indicates high object read latency on a specific VMDK. Which command line utility executed on an ESXi host can be used to inspect individual vSAN disk group health and component status directly?

Accepted Answer

esxcli vsan storage list. The command `esxcli vsan storage list` displays detailed information about vSAN storage, including disk groups, their health status, and component status. It is the correct utility to inspect individual vSAN disk group health and component status directly on an ESXi host.

Answer

esxcli storage vmfs extent list

Answer

esxcli vsan cluster get

Answer

esxcli network ip route list

Question 6

An administrator is configuring a new user role in vCenter Server 9.0 that requires permission to manage virtual machine snapshots, but nothing else. Where should the administrator create this custom role?

Accepted Answer

Administration -> Access Control -> Roles -> Create Role.. Custom roles in vCenter Server are created and managed from the vSphere Client under Administration -> Access Control -> Roles, where the administrator clicks 'Create Role' and selects the specific privileges (e.g., Virtual Machine -> Snapshot Management) needed. This is the native RBAC location for defining granular roles that can then be assigned to users or groups on inventory objects.

Answer

NSX Manager -> System -> Users -> Roles.

Answer

VCF Operations -> Administration -> Access Control -> Roles.

Answer

SDDC Manager -> Administration -> IAM -> Custom Roles.

Question 7

An IT architect is configuring an enterprise vSphere Foundation 9.0 environment with external identity providers. Which standard protocol does vCenter Server support for federated identity management with providers such as Okta or Microsoft Entra ID?

Accepted Answer

OIDC (OpenID Connect) and SAML 2.0 federation protocols.. vCenter Server supports OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) 2.0 for federated identity provider integration.

Answer

NetBIOS name broadcasting over UDP port 137.

Answer

RADIUS token authentication via serial modem lines.

Answer

Plain text LDAP binding without SSL certificates.

Question 8

Which vSphere feature ensures that virtual machines are automatically restarted on a remaining host if a host fails?

Accepted Answer

vSphere HA. vSphere HA (High Availability) is the feature that automatically restarts VMs on surviving hosts when a host fails. It monitors host and VM heartbeats and, upon detecting a failure, restarts affected VMs on other hosts in the cluster according to configured admission control and restart priorities.

Answer

vSphere DRS

Answer

vMotion

Answer

Fault Tolerance

Question 9

An administrator is configuring log forwarding from ESXi hosts to VMware Aria Operations for Logs in a vSphere Foundation 9.0 deployment. Which configuration setting must be updated on each ESXi host (or applied via Host Profile) to forward syslog data securely using TLS?

Accepted Answer

Configure the advanced setting Syslog.global.logHost with the tls:// protocol prefix and the collector FQDN/port.. To forward ESXi syslog to Aria Operations for Logs over TLS, you set the advanced setting Syslog.global.logHost to a value using the tls:// protocol prefix followed by the collector FQDN and port (typically 9543). This tells the ESXi syslog daemon (vmsyslogd) to establish a TLS connection to the collector. It can be applied per host or via Host Profile for consistency.

Answer

Modify the vCenter Server advanced setting vpxd.log.syslog.encryption to enabled.

Answer

Update the /etc/resolv.conf file on every ESXi host to include the syslog forwarding gateway IP address.

Answer

Deploy an OVF template containing a secure proxy daemon on each physical ESXi management vmkernel port.

Question 10

An administrator is reviewing the physical networking design for a vSphere Foundation 9.0 cluster. What is the recommended standard for physical switch port configurations connecting to ESXi host network adapters that carry multiple VLANs (Trunk ports)?

Accepted Answer

Configure the physical switch ports as VLAN trunks allowing all required VLAN IDs required by the port groups.. Physical switch ports connecting to ESXi uplinks carrying multiple VLANs must be configured as trunks allowing the required VLAN IDs, with a native VLAN configured correctly or untagged traffic handled according to security standards.

Answer

Disable all VLAN tagging on physical switches and force flat Layer 2 flooding.

Answer

Configure the ports as restricted access ports carrying only VLAN 1.

Answer

Configure the physical switch ports in static 802.3ad link aggregation mode without LACP enabled on the vSwitch.

Question 11

An administrator needs to configure a new VMware vSphere 9 cluster to ensure high availability for virtual machines in the event of a host failure. Which feature should be enabled in the vSphere Cluster settings to automatically restart VMs on surviving hosts?

Accepted Answer

vSphere HA. vSphere HA (High Availability) is the cluster-level feature specifically designed to detect ESXi host failures and automatically restart affected VMs on surviving hosts in the cluster. It uses heartbeat mechanisms (network and datastore heartbeats) to detect host isolation or failure, then applies a configured admission control policy and restart priority to bring VMs back online. This directly satisfies the requirement of automatic VM restart after a host failure.

Answer

vSphere Distributed Switch

Answer

Storage vMotion

Answer

vSphere DRS

Question 12

An administrator is managing a vSphere Foundation environment and needs to place an ESXi host into Maintenance Mode without powering off the virtual machines running on it. Which DRS setting must be configured to ensure these virtual machines are automatically migrated to other hosts in the cluster?

Accepted Answer

Fully Automated DRS. To automatically migrate VMs during Maintenance Mode without powering them off, DRS must be set to Fully Automated. In this mode, DRS automatically places VMs on other hosts when a host enters Maintenance Mode, ensuring zero downtime. Partially Automated only provides initial placement recommendations and requires manual approval for migrations, so it would not automatically evacuate VMs.

Answer

Disabled DRS

Answer

Partially Automated DRS

Answer

Manual DRS

Question 13

An administrator wants to view the real-time network throughput and packet drop rates on a specific Distributed Port Group in a VDS. Where can this be monitored in the vSphere Client?

Accepted Answer

Distributed Port Group -> Monitor -> Performance tab.. The vSphere Client exposes per-Distributed Port Group performance counters (throughput, packets dropped, broadcast, multicast) under the Monitor tab of the port group object. Selecting the Performance sub-tab lets an administrator view real-time and historical network I/O graphs scoped to that specific DVPort Group, which is exactly what the question asks for. This is the native vCenter monitoring path for VDS-level traffic.

Answer

ESXi Host Client -> Networking -> Ports.

Answer

Cloud Builder -> Network Monitoring.

Answer

SDDC Manager -> Networking -> Port Group Health.

Question 14

An administrator is configuring storage I/O control (SIOC) on a datastore shared by multiple clusters in a vSphere Foundation environment. During peak hours, a batch processing VM overwhelms the datastore with IOPS. Which SIOC configuration prevents this VM from starving other critical workloads?

Accepted Answer

Configure a hard IOPS limit on the specific virtual machine disks causing contention.. Configuring a hard IOPS limit on the specific virtual machine disks causing contention directly caps the batch VM's I/O rate, preventing it from monopolizing the datastore and starving other workloads. SIOC supports per-VMDK storage resource controls, including IOPS limits, which are enforced by the VMkernel when the datastore is congested. This is the precise, targeted fix for a single noisy-neighbor VM.

Answer

Increase the datastore congestion threshold percentage from 30ms to 50ms.

Answer

Disable Storage DRS on the shared datastore cluster.

Answer

Assign a higher disk share value to the batch processing virtual machine.

Question 15

An administrator is configuring an alert in VMware Aria Operations to trigger when a datastore's free space drops below 10%. The administrator wants the notification email to include specific custom properties of the datastore, such as its assigned Tier and Business Owner. How can this be accomplished?

Accepted Answer

Use notification rule payload variables referencing the object's custom properties in the notification template.. To include custom properties of a datastore in an alert notification email, you must use notification rule payload variables that reference the object's custom properties. Aria Operations allows you to insert dynamic variables in the notification template, such as ${object.customProperties['Tier']}, which will be replaced with the actual value at send time. This enables personalized and context-rich alerts.

Answer

Hardcode the datastore properties into the static subject line of the email notification rule.

Answer

Configure a syslog forwarding rule that translates custom properties into RFC 5424 structured data.

Answer

Edit the vCenter alarm definition script to query the vCenter database for custom attributes.