VCP-VVF Practice Test 24 — 15 Questions

Question 1

An enterprise architect is planning the network architecture for a vSphere Foundation 9.0 cluster running vSAN. Which THREE network design practices are recommended for vSAN VMkernel adapters? (Choose three.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure dedicated physical NIC uplinks or use Network I/O Control (NIOC) to prioritize vSAN bandwidth.. vSAN network best practices include isolating vSAN traffic on dedicated VLANs, using Jumbo Frames (MTU 9000), and configuring dedicated physical uplinks or NIOC shares to prevent contention.

Answer

Route all vSAN storage traffic through public unencrypted internet gateways.

Answer

Disable TCP checksum offloading on all ESXi host physical network adapters.

Question 2

An administrator is configuring identity federation in vSphere Foundation 9.0 using an OIDC-compliant identity provider. Which THREE configuration parameters must be supplied in the vSphere Client under Identity Provider settings? (Choose three)

Accepted Answer

Issuer URI (Discovery endpoint). Configuring an OIDC identity provider in vCenter requires parameters such as the Issuer URI, Client ID, Client Secret, and redirect URIs.

Answer

Root ESXi host administrative SSH password

Answer

Physical Top-of-Rack switch IP address

Question 3

During a firmware update via vSphere Lifecycle Manager, an ESXi host enters a non-compliant state. What is the first step the administrator should take to identify the root cause?

Accepted Answer

Check the Image Compliance status in the Updates tab. Viewing the 'Image Compliance' status in the cluster's 'Updates' tab provides detailed information about why a host is non-compliant.

Answer

Remove the host from the cluster

Answer

Reboot the host

Answer

Refresh the inventory

Question 4

Which TWO actions are necessary to ensure proper lifecycle management of ESXi hosts via vSphere Lifecycle Manager?

Accepted Answer

Create a cluster image. Image creation and compliance checks are core vLCM tasks.

Answer

Update the vCenter Server appliance

Answer

Install VMware Tools

Answer

Disable DRS

Question 5

When configuring identity for VVF, which identity source type is recommended for seamless integration with enterprise-grade directory services?

Accepted Answer

Identity Federation (OIDC/SAML). LDAP over SSL or Identity Federation (OIDC/SAML) are standard for modern VVF deployments.

Answer

OpenLDAP

Answer

Workgroup

Answer

Local OS users

Question 6

An administrator needs to back up the vCenter Server Appliance configuration in a vSphere Foundation 9.0 deployment. Where is this backup feature accessed and initiated?

Accepted Answer

Access the vCenter Server Appliance Management Interface (VAMI) at port 5480, log in as root, and select Backup to configure scheduled or manual backups.. vCenter Server Appliance native file-based backups are managed through the vCenter Server Appliance Management Interface (VAMI) accessible on port 5480.

Answer

Navigate to Lifecycle Manager in the vSphere Client and create a Backup Baseline.

Answer

Open the vSphere Client, right-click the vCenter root object, and select Export vCenter Appliance Backup.

Answer

Log in to the ESXi host hosting the vCenter VM and run `vim-cmd vcenter/backup`.

Question 7

An administrator is managing certificates in a vSphere Foundation 9.0 environment and needs to renew or replace certificates using the certificate management utility. Which THREE certificate types are managed by vSphere Certificate Manager? (Choose three.)

Accepted Answer

VMCA Root Certificate (acting as the internal certificate authority). vSphere Certificate Manager manages Machine SSL certificates, VMCA root certificates, and Solution User certificates (vpxd, rhttpproxy, etc.).

Answer

Aria Operations collector SSL certificate

Answer

ESXi Host Hardware IPMI Management Controller SSL certificate

Question 8

An administrator needs to configure secure access to a vCenter Server instance in VVF using an external Identity Provider (IdP) via OIDC/OAuth 2.0. In the vSphere Client, under Administration > Single Sign-On > Configuration, which tab must the administrator navigate to register the external IdP?

Accepted Answer

Configuration > Identity Providers. Identity Providers is the correct tab in vCenter SSO configuration to set up OIDC-based identity providers like Azure AD or Okta.

Answer

Access Control > Roles

Answer

Advanced Tokens

Answer

Identity Sources

Question 9

You are managing certificate lifecycles in VVF. Where should you update the trusted root CA for the vCenter Server to ensure secure communication?

Accepted Answer

vSphere Client Certificate Management. The vSphere Certificate Authority (VMCA) or the vCenter Certificate Management tool is used to manage trusted roots.

Answer

Host Profile

Answer

vLCM Image

Answer

Aria Operations Settings

Question 10

Which interface is used to perform basic operational tasks like host shutdown, management network configuration, and service restarts on an individual ESXi host?

Accepted Answer

Direct Console User Interface (DCUI). The Direct Console User Interface (DCUI) provides direct local access for these fundamental management tasks.

Answer

vSphere Client

Answer

vCenter Management Portal

Answer

ESXi Shell

Question 11

Where do you configure the time settings (NTP) for an ESXi host?

Accepted Answer

Host > Configure > System > Time Configuration. Time configuration is found in the Host configuration settings.

Answer

vCenter > Settings > Time

Answer

DCUI > System > Time

Answer

Host > Settings > NTP

Question 12

An administrator is designing the management network for a vSphere Foundation 9.0 cluster. Which protocol is standard for secure command-line administration and troubleshooting access to ESXi hosts?

Accepted Answer

Secure Shell (SSH). SSH (Secure Shell) is the standard encrypted protocol used for secure command-line management and troubleshooting access to ESXi hosts.

Answer

Telnet

Answer

Trivial File Transfer Protocol (TFTP)

Answer

Remote Desktop Protocol (RDP)

Question 13

An infrastructure architect is designing a vSphere Foundation 9.0 environment and needs to configure advanced network security. Which THREE features are provided by VMware NSX when integrated with vSphere? (Choose three.)

Accepted Answer

Distributed Firewall (DFW) for micro-segmentation. VMware NSX provides distributed firewalling, overlay networking (Geneve), and advanced layer 4-7 load balancing/routing services.

Answer

Automatic physical power outlet rebooting via SNMP

Answer

Hardware RAID controller battery replacement scheduling

Question 14

Which THREE components are required for successful Supervisor deployment in a VVF environment?

Accepted Answer

vSAN datastore. The Supervisor requires distributed switches, specific licensing, and storage policies.

Answer

NSX Manager

Answer

Aria Automation

Question 15

You are deploying a VVF Supervisor cluster. During the initial configuration of the Workload Management service, which prerequisite must be satisfied to allow the control plane VMs to communicate with the management network?

Accepted Answer

Define a dedicated IP address range for the control plane VMs in the workload network. The Supervisor cluster requires a dedicated IP range for the control plane VMs that is routable to the vCenter Server and NSX Manager instances.

Answer

Configure an ephemeral port group for the management network

Answer

Disable DRS on the cluster before initiating the Supervisor deployment

Answer

Enable vSAN integration on the management VMkernel interface