VCP-VVF Practice Test 21 — 15 Questions

Question 1

An administrator is deploying and configuring a new VVF 9.0 environment. Which TWO tasks must be completed prior to initiating the Cloud Builder bring-up process? (Choose two.)

Accepted Answer

Configure forward and reverse DNS records for all ESXi hosts, vCenter, NSX, and SDDC Manager components.. Option B is correct because the Cloud Builder bring-up requires fully resolvable forward (A/AAAA) and reverse (PTR) DNS records for every management component — ESXi hosts, vCenter Server, NSX Manager/Edge, and SDDC Manager — since hostname resolution failures cause validation to fail before deployment begins. Option E is correct because Cloud Builder consumes a validated JSON deployment parameter workbook (the VVF/VCF deployment parameter file) that defines management network settings, IP pools, VLANs, hostnames, and credentials; this file must be prepared and pass Cloud Builder's pre-validation checks before bring-up can start. Option A is not required because VVF 9.0 uses the embedded PostgreSQL-based vCenter Server Appliance database by default, and an external Microsoft SQL clustering group is neither needed nor supported for this bring-up. Option C is not required because ESXi image and VIB/driver compliance is handled by the VVF-managed image and SDDC Manager lifecycle management, not by manually installing community VIBs via esxcli before bring-up. Option D is not required because vSphere Trust Authority is an optional security feature configured after the environment is operational, not a prerequisite for Cloud Builder bring-up.

Answer

Deploy an external Microsoft SQL clustering group for vCenter database persistence.

Answer

Upgrade all ESXi hosts to the latest community-supported community VIB drivers via esxcli.

Answer

Configure vSphere Trust Authority clusters on physical hardware management cards.

Question 2

An administrator is troubleshooting a storage performance issue on a vSAN datastore in a VVF cluster. Which TWO tools or views in the vSphere Client and VCF Operations can be used to inspect vSAN health and performance? (Choose two.)

Accepted Answer

VCF Operations vSAN Performance and Capacity dashboards.. Option C is correct because VCF Operations (formerly vRealize Operations) provides dedicated vSAN Performance and Capacity dashboards that surface metrics such as IOPS, latency, throughput, congestion, and capacity usage across the vSAN cluster, which is exactly what is needed to inspect vSAN health and performance. Option D is correct because in the vSphere Client, navigating to Cluster -> Monitor -> vSAN exposes the vSAN Health and Performance views, including health checks, performance charts, and Skyline Health diagnostics for the vSAN datastore. Option A is not relevant because the ESXi DCUI hardware sensor reboot menu deals with physical hardware sensors and host reboot actions, not vSAN storage health or performance. Option B is not relevant because NSX Manager's transport node storage status panel relates to NSX transport node configuration and NSX-managed storage, not vSAN datastore performance. Option E is not relevant because the Cloud Builder storage inventory wizard is used during SDDC bring-up/validation to inventory hosts and storage for deployment, not for ongoing vSAN performance troubleshooting.

Answer

ESXi DCUI hardware sensor reboot menu.

Answer

NSX Manager transport node storage status panel.

Answer

Cloud Builder storage inventory wizard.

Question 3

An administrator is using VMware Aria Operations integrated with vSphere Foundation 9.0 to troubleshoot a performance bottleneck. The dashboard highlights a badge score called 'Stress'. What does the Stress badge indicate for a virtual machine?

Accepted Answer

It indicates the extent to which the virtual machine has consumed its allocated resources over time relative to its historical demand and current spikes.. The Stress badge in Aria Operations measures the combination of demand and allocation over time, showing whether a VM is actually utilizing its allocated resources or if it is constrained.

Answer

It represents the hardware temperature and thermal load of the physical host running the VM.

Answer

It calculates the risk of a hardware failure based on S.M.A.R.T. disk errors.

Answer

It shows the percentage of CPU ready time caused strictly by host-level overcommitment.

Question 4

An administrator is troubleshooting a Supervisor cluster deployment failure in vSphere Foundation 9.0 where control plane VMs fail to power on. Which THREE log files or diagnostic locations should the administrator inspect on the vCenter Server Appliance? (Choose three)

Accepted Answer

/var/log/vmware/vpxd/vpxd.log. Option A, /var/log/vmware/vpxd/vpxd.log, is correct because vpxd is the vCenter Server service that manages VM provisioning and power operations, so failures to power on the Supervisor control plane VMs would be recorded there. Option C, /var/log/vmware/wcp/wcp.log, is correct because the VMware Workload Control Plane (WCP) service orchestrates Supervisor cluster deployment and its log captures control plane VM creation and power-on errors. Option E, /var/log/vmware/clcm/clcm.log, is correct because the Cluster Lifecycle Manager (CLCM) service handles Supervisor cluster lifecycle and deployment tasks, logging failures during control plane bring-up. Option B, /var/log/samba/smbd.log, is incorrect because Samba is an SMB/CIFS file-sharing service unrelated to vSphere Supervisor operations. Option D, /var/log/cups/error_log, is incorrect because CUPS is a printing service and has no role in vCenter or Supervisor cluster deployment.

Answer

/var/log/samba/smbd.log

Answer

/var/log/cups/error_log

Question 5

Which TWO tasks are required to configure log analysis using VMware Aria Operations for Logs?

Accepted Answer

Configure syslog redirection on the ESXi host. Option A is correct because ESXi hosts do not send logs to Aria Operations for Logs by default; you must configure syslog redirection on each host (for example, via the vSphere Client advanced setting Syslog.global.logHost or the esxcli system syslog config set --loghost command) so the host forwards its logs to the Log Insight appliance. Option E is correct because installing the Log Insight agent on the source (for example, on Linux or Windows VMs) is the supported method to collect and forward application and OS logs to the appliance, complementing the syslog feed from ESXi. Option B is not required because root SSH access to the appliance is not needed for log ingestion or analysis configuration. Option C is not required because logs are streamed via syslog or the agent, not manually copied with SCP. Option D is not required because restarting virtual machines has no role in configuring log analysis and would only cause unnecessary disruption.

Answer

Enable root SSH access on the Log Insight appliance

Answer

Manually copy log files to the appliance via SCP

Answer

Restart all virtual machines

Question 6

An administrator is configuring advanced alerting and notification rules in VMware Aria Operations for vSphere Foundation. Which THREE actions can be configured as outbound notifications when an alert triggers? (Choose three)

Accepted Answer

Invoking a Webhook to send JSON payloads to third-party incident management systems (e.g., ServiceNow, Slack).. Option B is correct because Aria Operations supports outbound Webhook notifications, which POST a JSON payload to an external HTTP/HTTPS endpoint such as ServiceNow or Slack for incident management integration. Option D is correct because Aria Operations can be configured to send SNMP traps to an external SNMP manager/trap receiver for network management system integration. Option E is correct because Aria Operations includes an outbound email notification action that relays alert messages through a configured SMTP server. Option A is not a supported outbound notification action, as Aria Operations does not SSH into physical switches to alter VLAN trunking. Option C is also not supported, since Aria Operations cannot execute arbitrary Bash scripts directly on the ESXi host hypervisor kernel as an alert notification.

Answer

Directly modifying physical switch VLAN trunk configurations via SSH.

Answer

Automatically executing a local Bash shell script directly on the ESXi host hypervisor kernel.

Question 7

An administrator is configuring vRealize Log Insight / VMware Aria Operations for Logs in a vSphere Foundation environment. Which TWO features help manage high log volume and reduce storage consumption? (Choose two)

Accepted Answer

Log filtering and dropping rules to discard unneeded verbose events. Option C is correct because Log Insight / Aria Operations for Logs supports log filtering and dropping rules that discard unneeded verbose events at ingestion, which directly reduces the volume of data indexed and stored. Option D is correct because configuring data retention policies automatically purges old log buckets after a defined period, which controls storage consumption over time. The unmarked options do not belong: manually deleting ESXi kernel binary files (A) is unrelated to log management and can damage the host, converting syslog to uncompressed bitmap images (B) is not a supported feature and would increase storage, and disabling all vCenter auditing globally (E) removes valuable security events rather than managing log volume.

Answer

Manually deleting ESXi host kernel binary files from the datastore

Answer

Converting all syslog streams to uncompressed bitmap images

Answer

Disabling all vCenter auditing globally

Question 8

An administrator is configuring role-based access control (RBAC) across a VVF 9.0 deployment. Which THREE statements regarding RBAC management across vCenter and NSX are correct? (Choose three.)

Accepted Answer

Administrators can create custom roles in vCenter with specific granular privileges (e.g., VM snapshot management only).. Option C is correct because vCenter's RBAC model lets administrators define custom roles that bundle only the specific privileges needed, such as VirtualMachine.State.CreateSnapshot for snapshot management, rather than granting broad built-in roles. Option D is correct because permissions assigned at a folder (or datacenter) level can be propagated down the inventory hierarchy to child objects like VMs, hosts, and resource pools, which is how inheritance works in vCenter. Option E is correct because NSX Manager runs its own independent RBAC and role-assignment engine, so NSX roles and permissions are managed separately from vCenter roles even when the products are integrated. Option A is wrong because assigning a vCenter role does not automatically grant identical administrative privileges in NSX Manager; the two systems have separate role engines. Option B is wrong because Global Permissions in vCenter are not limited to a single ESXi host and do span across Linked Mode vCenters, applying to all objects in the inventory.

Answer

Assigning a role in vCenter automatically grants identical administrative privileges in NSX Manager.

Answer

Global Permissions in vCenter apply exclusively to a single ESXi host and cannot span across Linked Mode vCenters.

Question 9

An administrator is designing a vSphere Foundation 9.0 cluster and configuring ESXi firewall settings. Which TWO network services have built-in firewall rules that can be enabled or disabled in ESXi Security Profiles? (Choose two.)

Accepted Answer

NFS client. Option B (NFS client) is correct because ESXi's firewall configuration includes a predefined service rule for the NFS client, allowing administrators to enable or disable outbound NFS traffic through the ESXi Security Profile. Option D (SSH) is correct because the SSH server has a built-in firewall rule in ESXi that can be toggled on or off within the Security Profile, controlling access to the ESXi Shell over port 22. Option A is incorrect because Group Policy Editor is a Windows management tool, not a network service with an ESXi firewall rule. Option C is incorrect because the Apple iOS App Store daemon is unrelated to ESXi and has no firewall rule in its Security Profile. Option E is incorrect because a Linux kernel compilation makefile is a build artifact, not a network service, and is not represented in ESXi firewall rules.

Answer

Microsoft Active Directory Group Policy Editor

Answer

Apple iOS App Store daemon

Answer

Linux kernel compilation makefile service

Question 10

An administrator is troubleshooting a vSphere Foundation cluster where vSphere HA has failed to restart virtual machines after a host failure event. Which THREE conditions or settings could cause this behavior? (Choose three.)

Accepted Answer

The virtual machines are configured with an incompatible VM-Host affinity rule that cannot be satisfied on surviving hosts. Option B is correct because vSphere HA honors VM-Host affinity (and anti-affinity) rules during a failover restart; if a required affinity rule cannot be satisfied on the surviving hosts, HA will not power on the VM. Option C is correct because a strict Admission Control policy reserves capacity and can block HA from restarting VMs when the remaining hosts lack sufficient reserved resources, causing the restart to fail. Option E is correct because if the shared datastores are in an All Paths Down (APD) state on the surviving hosts, HA cannot access the VM files and therefore cannot restart the virtual machines. Option A is not relevant because Enhanced Linked Mode only affects cross-vCenter visibility and management, not HA restart capability within a single cluster. Option D is not relevant because vSphere HA works with both standard switches and distributed switches, so the switch type alone does not prevent HA restarts.

Answer

Enhanced Linked Mode is disabled between local vCenter servers

Answer

The ESXi hosts are configured with a standard switch instead of a distributed switch

Question 11

An administrator is preparing to execute a major upgrade of a VVF 9.0 environment using SDDC Manager. Which THREE pre-upgrade validation checks are automatically performed by SDDC Manager before allowing the upgrade bundle to be applied? (Choose three.)

Accepted Answer

Check available disk space and partition utilization on SDDC Manager and target appliances.. SDDC Manager performs a set of automated pre-upgrade validation checks before applying an upgrade bundle. Option C is correct because SDDC Manager checks available disk space and partition utilization on itself and on target appliances to ensure there is sufficient room for the upgrade bundle and staging. Option D is correct because SDDC Manager verifies API connectivity and authentication status for vCenter Server and NSX Manager, since it must communicate with these components to orchestrate the upgrade. Option E is correct because SDDC Manager validates the software Bill of Materials (BOM) compatibility and component dependency trees to confirm the target versions are supported and upgradeable. Option A is not a pre-upgrade validation check; SDDC Manager does not automatically delete historical performance metrics from VCF Operations as part of upgrade validation. Option B is not performed automatically; powering off production VMs is not a validation step and would be an operational decision, not an SDDC Manager pre-check.

Answer

Automatically delete all historical performance metrics older than 365 days from VCF Operations.

Answer

Power off all running production virtual machines to release memory.

Question 12

An administrator is managing cluster updates using vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0. Which TWO actions can vLCM perform during cluster image remediation? (Choose two)

Accepted Answer

Install missing software components, drivers, and vendor addons specified in the cluster image.. Option B is correct because vLCM cluster image remediation installs any missing software components, drivers, and vendor addons that are declared in the cluster image, ensuring each host matches the desired image. Option E is correct because during remediation vLCM uses DRS to automatically place hosts into maintenance mode and evacuate running VMs to other hosts before applying the image. Option A is incorrect because vLCM does not repartition local ESXi datastore filesystems or resize VMFS volumes as part of image remediation. Option C is incorrect because vLCM remediates ESXi hosts and cluster images, not the vCenter Server Appliance OS version. Option D is incorrect because BIOS/firmware updates require vendor firmware addons in the image; vLCM cannot upgrade physical server BIOS automatically without them.

Answer

Directly repartition the local ESXi datastore filesystems to increase VMFS capacity.

Answer

Downgrade the vCenter Server Appliance operating system version.

Answer

Automatically upgrade the underlying physical server BIOS without vendor firmware addons.

Question 13

An administrator needs to migrate a virtual machine from one datastore to another without changing compute resources. Which TWO migration methods can accomplish this task? (Choose two.)

Accepted Answer

Storage vMotion. Storage vMotion (C) is correct because it is the VMware feature specifically designed to relocate a powered-on VM's files (configuration, VMDK, snapshots) from one datastore to another while the VM remains running and its compute resource (ESXi host/CPU/RAM) stays unchanged. Cold Migration selecting a new datastore destination (D) is also correct because a cold migration moves the VM's files to a different datastore while the VM is powered off, and since no host change is specified, compute resources remain the same. Enhanced vMotion Compatibility (A) only sets CPU feature masks for vMotion compatibility between hosts and does not move VM files between datastores. Storage DRS manual recommendation application (B) is a datastore-cluster balancing operation that applies recommendations, not a direct administrator-initiated migration method for moving a single VM to a chosen datastore. Standard vMotion (E) migrates a running VM's compute state between hosts and does not relocate its files to a different datastore.

Answer

Enhanced vMotion Compatibility baseline adjustment

Answer

Storage DRS manual recommendation application

Answer

Standard vMotion

Question 14

An administrator is troubleshooting a vSphere Distributed Switch (vDS) where network I/O control (NIOC) is being used. Which TWO benefits or capabilities does Network I/O Control provide in vSphere Foundation? (Choose two.)

Accepted Answer

Bandwidth limit enforcement for individual virtual machine network adapters (vNICs) or distributed port groups.. Option C is correct because vSphere Network I/O Control (NIOC) on a vSphere Distributed Switch supports per-vNIC and per-distributed-port-group bandwidth limits (shares, reservations, and limits), allowing an administrator to cap or guarantee the throughput available to individual VM adapters or port groups. Option E is correct because NIOC's core function is to define shares, reservations, and limits for system traffic types—such as vMotion, vSAN, iSCSI, NFS, Fault Tolerance, and management—so that bandwidth on the physical uplinks is prioritized and allocated according to business or operational requirements. The remaining options do not belong: A is wrong because IP address assignment is handled by DHCP or IP pools, not NIOC; B is wrong because a vDS is a virtual Layer 2 switch and cannot be converted into a physical core router; and D is wrong because NIOC has no role in flashing or managing physical switch firmware.

Answer

Automatic generation of IP addresses for guest operating systems.

Answer

Automatic conversion of standard virtual switches into physical core routers.

Answer

Automatic physical switch firmware flashing.

Question 15

An infrastructure architect is designing a vSphere Foundation 9.0 environment with strict compliance standards. Which THREE capabilities are provided by vSphere Trust Authority (vTA)? (Choose three.)

Accepted Answer

Isolation of Key Management Server (KMS) access from general administrative networks. vSphere Trust Authority (vTA) is designed to separate trust and key-management duties from the general vSphere administrative domain, so option A is correct: it isolates KMS access from general administrative networks by placing the Key Management Servers in a separate, more trusted trust-domain that the regular vCenter administrators cannot reach. Option B is correct because vTA only releases encryption keys to ESXi hosts that have successfully proven their integrity, meaning keys are never loaded onto unverified hosts and encrypted workloads remain protected even if a host is compromised. Option D is correct because vTA relies on remote attestation of the ESXi worker hosts, using the host's TPM and attestation service to verify platform integrity (secure boot, measured boot, etc.) before any keys are released. Option C is not a vTA capability; real-time 4K transcoding is a graphics/media workload handled by other products (e.g., NVIDIA vGPU or media accelerators), not by a trust service. Option E is also unrelated: automated provisioning of AWS S3 buckets is a public-cloud storage task, whereas vTA is an on-premises key-release and attestation service for vSphere.

Answer

Real-time transcoding of 4K video files for virtual desktop sessions

Answer

Automated provisioning of public cloud AWS S3 storage buckets