VCP-VVF Practice Test 24 — 15 Questions

Question 1

An administrator is analyzing esxtop memory statistics on an ESXi host. The metric 'MEMSZ' shows 32768 MB, 'GRANT' shows 28672 MB, 'CONS' shows 24576 MB, and 'ACTIVE' shows 16384 MB. What does the difference between 'GRANT' and 'ACTIVE' indicate regarding memory efficiency?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The memory is granted to the virtual machine by the hypervisor but is currently idle or not actively used.. The difference between GRANT (28672 MB) and ACTIVE (16384 MB) represents memory that the hypervisor has granted to the VM but that the guest OS is not actively touching. GRANT is the amount of physical host memory mapped to the VM's configured memory, while ACTIVE is the portion recently accessed. A large gap indicates idle or cached memory that could be reclaimed under host memory pressure.

Answer

The virtual machine has exceeded its memory limit and is experiencing drops.

Answer

The guest operating system is actively swapping memory to its virtual disk.

Answer

The ESXi host is utilizing ballooning to reclaim memory from the hypervisor swap space.

Question 2

An administrator is configuring a new storage policy in vSphere. The storage policy needs to ensure that virtual machines assigned to it are placed on datastores capable of providing automated tiering between SSD and HDD media. Where is this capability defined?

Accepted Answer

Storage capabilities derived from VASA providers or user-defined datastore tags.. Storage policy capabilities that describe datastore features — such as automated tiering between SSD and HDD — are surfaced through VASA (vSphere APIs for Storage Awareness) providers or through user-defined datastore tags. VASA providers report storage capabilities from the array, and tags let admins manually describe capabilities. The storage policy then matches VM requirements against these capabilities to select compliant datastores.

Answer

vSphere HA admission control capacity percentages.

Answer

Enhanced vMotion Compatibility baseline configurations.

Answer

Virtual machine hardware compatibility level settings.

Question 3

An administrator is troubleshooting a VM storage performance issue and observes high disk latency. The datastore is backed by an all-flash array. Which vSphere feature can the administrator enable on the cluster to automatically distribute I/O load across multiple datastores when latency thresholds are breached?

Accepted Answer

Storage DRS (SDRS). Storage DRS (SDRS) is the vSphere feature that automatically balances I/O load across multiple datastores in a datastore cluster by migrating VM disk files when latency thresholds are exceeded. It uses Storage I/O Control (SIOC) to detect latency and then triggers Storage vMotion to redistribute workloads. This directly addresses the administrator's need to automatically distribute I/O load based on latency.

Answer

Storage vMotion

Answer

Storage I/O Control (SIOC)

Answer

Storage Distributed Power Management (DPM)

Question 4

An administrator notices that an ESXi host has lost its connection to vCenter Server, but virtual machines running on the host remain up and accessible via direct console or network. What is the status of the virtual machines while the host is disconnected from vCenter?

Accepted Answer

The virtual machines continue to run normally on the ESXi host; only centralized management and monitoring via vCenter are interrupted.. When an ESXi host disconnects from vCenter, virtual machines continue to run normally because ESXi is a standalone hypervisor. Management from vCenter is temporarily lost, but VM uptime is unaffected.

Answer

All virtual machines on the disconnected host immediately enter a suspended state.

Answer

The virtual machines automatically migrate to surviving hosts via DRS.

Answer

The guest operating systems shut down gracefully after a 5-minute timeout.

Question 5

A vSphere Foundation administrator needs to configure Network I/O Control (NIOC) version 3 on a vSphere Distributed Switch to guarantee a specific bandwidth percentage for fault tolerance (FT) traffic during periods of high network utilization. Where must this share and reservation configuration be applied?

Accepted Answer

Under the Resource Allocation tab for System Traffic on the vSphere Distributed Switch.. Network I/O Control version 3 on a vSphere Distributed Switch exposes system traffic types (including Fault Tolerance, vMotion, iSCSI, NFS, etc.) under the switch's Resource Allocation tab. Shares, reservations, and limits for FT traffic must be configured there so that during contention the specified bandwidth percentage is guaranteed. This is the centralized location for NIOC v3 system traffic policies.

Answer

Inside the ESXi host firewall rule set configuration.

Answer

Inside the advanced properties of each individual virtual machine network adapter.

Answer

Within the physical switch CLI uplink configuration.

Question 6

What is the primary function of the vSphere Distributed Switch (VDS) in a multi-host cluster?

Accepted Answer

To provide a centralized point of network management across hosts. A vSphere Distributed Switch (VDS) is a single logical switch that spans multiple ESXi hosts in a cluster, allowing network configuration (port groups, VLANs, policies, uplinks) to be managed centrally from vCenter rather than per-host. This centralized control plane is its primary function and the reason it is preferred over standard switches in multi-host environments. It does not itself provide encryption, replace physical cabling, or create hardware redundancy — those are separate concerns.

Answer

To encrypt network traffic

Answer

To replace the need for physical uplink cables

Answer

To provide physical hardware redundancy

Question 7

An administrator needs to optimize storage performance and capacity utilization in a vSphere Foundation cluster. Which TWO features or capabilities should be implemented? (Choose two.)

Accepted Answer

Storage vMotion to migrate virtual disks between different datastore tiers without downtime. Storage vMotion (A) is correct because it lets the administrator non-disruptively relocate virtual disks between datastore tiers, enabling better capacity utilization and performance placement without VM downtime. Storage I/O Control (B) is correct because SIOC enforces per-VM or per-datastore share-based I/O prioritization when a datastore experiences high latency, protecting critical workloads and optimizing performance under contention. The other options do not fit: vSphere HA (C) provides VM restart on host failure, not block-level datastore replication; Host Profiles (D) enforce host configuration compliance, not datastore capacity alerting; and Network I/O Control (E) manages network bandwidth allocation, not SAN disk compression.

Answer

vSphere High Availability to replicate datastore blocks across the network

Answer

Host Profiles to manage datastore capacity alerts

Answer

Network I/O Control to compress virtual disk files on the SAN

Question 8

An administrator needs to export a virtual machine as an OVF template from the vSphere Client. Which menu option should the administrator select after right-clicking the virtual machine?

Accepted Answer

Export OVF Template. In the vSphere Client, right-clicking a virtual machine exposes the 'Export OVF Template' option, which launches the wizard to export the VM's configuration and virtual disks into an Open Virtualization Format (OVF/OVA) package. This is the standard method for creating portable, distributable VM templates that can be deployed to other vCenter instances or ESXi hosts. The wizard allows selection of OVF or OVA format, disk format (thin/thick), and optional advanced options like including extra configuration files.

Answer

Clone to Template

Answer

Migrate to Content Library

Answer

Convert to Virtual Machine

Question 9

An administrator is designing a vSphere Foundation 9.0 cluster and configuring VMkernel networking. Which TWO system traffic types can be enabled with a dedicated VMkernel network service checkbox? (Choose two.)

Accepted Answer

vSAN. In vSphere, VMkernel adapters are configured with specific system traffic types via checkboxes in the VMkernel NIC settings, and vSAN (Option A) is one such type—enabling it allows the host to carry vSAN storage I/O over that VMkernel interface, which is required for vSAN cluster communication. vMotion (Option E) is likewise a standard VMkernel service checkbox that designates the interface for live migration traffic, including encrypted vMotion and vMotion over different subnets. Options B, C, and D are not vSphere VMkernel system traffic types: Active Directory replication, Linux kernel compilation, and AirPlay streaming are application-level or unrelated workloads that do not have dedicated VMkernel service checkboxes in ESXi networking.

Answer

Microsoft Active Directory Domain Controller replication

Answer

Linux kernel makefile compilation

Answer

Apple AirPlay media streaming

Question 10

An administrator is configuring identity federation in vSphere Foundation 9.0 using an OIDC-compliant identity provider. Which THREE configuration parameters must be supplied in the vSphere Client under Identity Provider settings? (Choose three)

Accepted Answer

Issuer URI (Discovery endpoint). In vSphere Foundation 9.0, configuring an OIDC-compliant identity provider in the vSphere Client requires the OIDC client registration details that the identity provider issues and the endpoints vCenter uses to communicate with it. Option C (Issuer URI / Discovery endpoint) is correct because vCenter uses this URL to fetch the OIDC discovery document (/.well-known/openid-configuration) to learn the provider's authorization, token, and JWKS endpoints. Option D (Redirect URI / Callback URL) is correct because this is the vCenter callback address that must be registered with the identity provider so the authorization code can be returned to vCenter after user authentication. Option E (Client ID and Client Secret) is correct because these credentials identify and authenticate the vCenter OIDC client to the identity provider during the authorization code flow. Options A and B are incorrect because an ESXi host SSH root password and a Top-of-Rack switch IP address are unrelated to OIDC identity federation configuration in the vSphere Client.

Answer

Root ESXi host administrative SSH password

Answer

Physical Top-of-Rack switch IP address

Question 11

Which TWO items are required to configure an Active Directory identity source in vCenter?

Accepted Answer

Active Directory Domain Name. To join vCenter to an Active Directory domain as an identity source, you must supply the Active Directory Domain Name (option B), which tells vCenter which AD domain to authenticate against via LDAP/LDAPS. You must also provide Active Directory Service Account Credentials (option D), a user principal name (UPN) or domain\user with a password that vCenter uses to bind to AD and query users and groups. The vCenter Server license key (option A) is unrelated to identity source configuration; licensing is handled separately and does not affect AD integration. A vSAN datastore path (option C) is storage configuration, not authentication, and an SNMP community string (option E) is for monitoring/traps, not directory services.

Answer

vCenter Server license key

Answer

vSAN datastore path

Answer

SNMP community string

Question 12

An administrator is designing a stretched vSphere Foundation 9.0 cluster across two data centers separated by 30km. According to vSphere clustering design best practices, where should the vCenter Server Appliance be placed?

Accepted Answer

Hosted in one of the primary data centers with vCenter High Availability (VCHA) configured across the sites, ensuring the active, passive, and witness nodes are appropriately distributed.. Placing vCenter Server on one of the preferred data centers or running it with high availability (such as vCenter HA) inside the primary site while ensuring database consistency is standard architecture, avoiding split-brain across sites without proper witness support.

Answer

Installed directly onto a physical laptop kept at the administrator's desk.

Answer

Split evenly across both data centers running active-active clustering simultaneously on the same IP address.

Answer

Running exclusively inside a public cloud AWS region with no local network connectivity to the ESXi hosts.

Question 13

An administrator is reviewing vSphere Foundation 9.0 licensing and deployment components. Which TWO features are typically unlocked or enhanced when deploying the complete vSphere Foundation suite compared to standalone vSphere Standard? (Choose two)

Accepted Answer

VMware Aria Operations and Aria Operations for Logs integration. Option D is correct because vSphere Foundation bundles VMware Aria Operations and Aria Operations for Logs, giving centralized performance monitoring, capacity analytics, and log management that standalone vSphere Standard does not include. Option E is correct because vSphere Foundation unlocks the full image-based cluster lifecycle management in vSphere Lifecycle Manager (vLCM), including desired-state images, firmware add-ons via Hardware Support Managers, and cluster remediation, whereas vSphere Standard is limited to baseline-based patching. Option A is wrong because hardware warranties are contractual offerings from server OEMs and are never unlocked by a software license. Option B is wrong because rack assembly and cabling are physical data center services, not software features of any vSphere edition. Option C is wrong because direct write access to the vCenter embedded PostgreSQL database is neither provided nor supported in vSphere Foundation; database access is restricted to protect vCenter integrity.

Answer

Free unlimited perpetual hardware warranties from server vendors

Answer

Automatic physical server rack assembly and cabling automation

Answer

Direct database write access to the vCenter embedded PostgreSQL database

Question 14

An administrator is replacing certificates in a vSphere Foundation 9.0 environment and needs to verify the status of the VMware Certificate Authority (VMCA). Which CLI command executed via SSH on the vCenter Server Appliance checks the VMCA service status?

Accepted Answer

service-control --status vmware-vmca. The correct command is `service-control --status vmware-vmca`, executed via SSH on the VCSA, because VMCA runs as a VMware service managed by the service-control framework (vmon). This command reports whether the vmware-vmca service is running, stopped, or in an error state, which is exactly what's needed to verify VMCA status.

Answer

certool --query-status

Answer

vpxd -check-vmca-status

Answer

esxcli vmca status get

Question 15

You are deploying a VVF cluster and need to configure the Supervisor. Which tool is primarily used to enable the Supervisor service on a vSphere Cluster?

Accepted Answer

vSphere Client. The vSphere Client is the primary administrative interface for enabling and configuring the Supervisor service on a cluster.

Answer

vSphere Lifecycle Manager

Answer

vCenter Server CLI

Answer

Aria Operations