VCP-VVF Practice Test 25 — 15 Questions

Question 1

When configuring identity sources, what is the primary benefit of using LDAPS over LDAP?

Accepted Answer

Encryption of the authentication traffic. LDAPS (LDAP over SSL) provides encryption for sensitive credentials during authentication.

Answer

Prevents domain controller overload

Answer

Allows usage of non-standard ports

Answer

Faster synchronization with Active Directory

Question 2

Which THREE items should be verified when a dashboard in Operations is not showing expected data?

Accepted Answer

Check network connectivity between the source and the collector. Collector health, connectivity, and user permissions are the most common causes.

Answer

Restart all VMs in the cluster

Answer

Modify the BIOS settings of the vCenter server

Question 3

An administrator is configuring custom alarms and alert notifications in vSphere Foundation 9.0. Which TWO actions can be configured directly as responses to an alarm trigger in vCenter Server? (Choose two.)

Accepted Answer

Run a command or script on the vCenter Server.. vCenter alarms support several native actions when a trigger fires, including sending email notifications and running a command/script on the vCenter server or management endpoint.

Answer

Automatically re-image the ESXi host using vSphere Lifecycle Manager.

Answer

Trigger an automatic failover of the vCenter HA cluster nodes.

Answer

Power off all virtual machines on the cluster immediately.

Question 4

An administrator is utilizing vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0 to maintain ESXi compliance. Which TWO prerequisites must be met before a cluster can be converted from baselines to a vLCM single image? (Choose two.)

Accepted Answer

The cluster must not contain legacy Update Manager baseline attachments that conflict with the target image.. Converting a cluster to image-based vLCM management requires all hosts in the cluster to run the exact same ESXi version and meet hardware compatibility requirements.

Answer

The vCenter Server must be downgraded to version 8.0 to support vLCM image translation.

Answer

All virtual machines in the cluster must be migrated to another cluster using vSphere vMotion.

Answer

All hosts in the cluster must be placed into maintenance mode during the conversion process.

Question 5

A VVF administrator is configuring Supervisor within a vSphere cluster to enable Kubernetes workload management. During the configuration wizard in the vSphere Client, the administrator must provide a dedicated network range for pods. What is a critical requirement for this Workload Management pod network?

Accepted Answer

It must use a private IPv4 block that does not overlap with existing infrastructure subnets.. The pod network CIDR block must not overlap with any existing corporate network, ESXi management network, or vMotion network routed in the datacenter to prevent IP routing conflicts.

Answer

It must be configured using public routable IP addresses assigned by the RIR.

Answer

It must be identical to the primary vSphere Distributed Switch uplink subnet.

Answer

It must overlap with the ESXi management network for direct API accessibility.

Question 6

A network architect is designing a multi-node vSphere Foundation 9.0 cluster where vMotion traffic must cross multiple routed IP subnets (Layer 3 vMotion). What configuration is required on the VMkernel adapters to support this design?

Accepted Answer

Configure each vMotion VMkernel adapter with an appropriate IP address, subnet mask, and a reachable default gateway.. Layer 3 vMotion requires that the VMkernel adapters participating in vMotion have correct default gateway settings configured on each host to route traffic across subnets.

Answer

Configure the vMotion TCP/IP stack with static MAC address spoofing enabled.

Answer

Establish BGP peering sessions directly between the ESXi VMkernel ports and the top-of-rack routers.

Answer

Enable Proxy ARP across all physical switch interfaces connecting to the ESXi hosts.

Question 7

An administrator is deploying a new vSphere Foundation 9.0 cluster. Which component provides centralized lifecycle management, image-based cluster updates, and compliance monitoring for ESXi hosts?

Accepted Answer

vSphere Lifecycle Manager (vLCM). vSphere Lifecycle Manager (vLCM) provides image-based and baseline-based lifecycle management for ESXi clusters, including firmware and driver validation.

Answer

vRealize Operations / Aria Operations.

Answer

vCenter Server Update Planner.

Answer

VMware Host Client.

Question 8

An enterprise architect is designing a multi-cluster vSphere Foundation 9.0 environment and needs to implement Content Library synchronization. What is the architectural purpose of a subscribed Content Library?

Accepted Answer

To automatically synchronize and maintain identical golden VM templates and ISOs from a published library source across clusters or vCenters.. A subscribed Content Library syncs templates and ISO images from a published library (either locally or across vCenters), ensuring standardized deployments across the enterprise.

Answer

To provide automatic load balancing of virtual machine swap files during memory contention.

Answer

To mirror the vCenter PostgreSQL database in real-time across wide-area networks.

Answer

To cache physical switch firmware binaries for top-of-rack automated updates.

Question 9

An administrator is troubleshooting identity and access management in vSphere Foundation 9.0 where Active Directory over LDAP is used as an Identity Provider. Users report intermittent login failures with 'Invalid Credentials' errors even though their passwords are correct. Which THREE troubleshooting steps should the administrator perform? (Choose three.)

Accepted Answer

Check the vCenter Single Sign-On logs (`sso.log`) located in `/var/log/vmware/sso/` for LDAP binding errors.. Troubleshooting AD over LDAP issues involves verifying identity source settings, checking clock synchronization across domain controllers and vCenter, and testing group membership mappings.

Answer

Convert the identity source to use Local OS users instead of Active Directory.

Answer

Reinstall the vCenter Server Appliance from scratch to regenerate the security token service (STS) certificates.

Question 10

You want to automate the deployment of several similar VMs. Which feature in vCenter allows you to create a template and manage its versioning?

Accepted Answer

Content Library. Content Libraries are the designated way to store and version templates in vSphere.

Answer

Datastore Browser

Answer

VMware Tools update manager

Answer

Virtual Machine Snapshots

Question 11

An administrator is deploying a Supervisor cluster in VMware vSphere Foundation. During the initial configuration of the Workload Management service, which network requirement must be met for the Supervisor control plane VMs?

Accepted Answer

The network must support a dedicated IP pool for the Supervisor control plane VMs.. The Supervisor control plane VMs require a dedicated IP range for the Kubernetes API server and a specific Load Balancer configuration to handle ingress traffic for the control plane.

Answer

All Supervisor VMs must be placed in a single DRS affinity rule to ensure high availability.

Answer

The control plane VMs must reside on a distributed switch with LACP enabled.

Answer

Each ESXi host must have a dedicated physical NIC connected to a separate management VLAN.

Question 12

An infrastructure architect is designing a high-security vSphere Foundation 9.0 environment where virtual machines must be protected against malicious inspection of memory while running. Which hypervisor security feature satisfies this requirement?

Accepted Answer

vSphere Confidential VMs utilizing hardware-based CPU memory encryption (such as AMD SEV-SNP or Intel TDX).. vSphere Confidential VMs leverage hardware-based Trusted Execution Environments (like AMD SEV-SNP or Intel TDX) to encrypt VM memory and CPU state.

Answer

NIC-level MACsec encapsulation.

Answer

Software-based memory overcommit compression algorithms.

Answer

Guest OS pagefile encryption using BitLocker.

Question 13

An architect is planning the port requirements for a vSphere Foundation 9.0 environment. Which standard TCP port must be open on firewalls between ESXi hosts and vCenter Server for primary agent communication (vpxa)?

Accepted Answer

TCP port 902. TCP port 902 is used by vCenter Server to communicate with the heartbeat agent (vpxa) on ESXi hosts.

Answer

TCP port 1433

Answer

TCP port 3389

Answer

TCP port 80

Question 14

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that when an ESXi host loses its connection to all storage devices (All Paths Down - APD), affected virtual machines are handled appropriately. Which vSphere HA setting configures this behavior?

Accepted Answer

VM Component Protection (VMCP). VM Component Protection (VMCP) in vSphere HA manages storage failure conditions such as All Paths Down (APD) and Permanent Device Loss (PDL), allowing automated restart policies for affected VMs.

Answer

Storage DRS placement aggregation rules.

Answer

Network I/O Control bandwidth reservations.

Answer

Enhanced vMotion Compatibility baselines.

Question 15

An infrastructure architect is designing a secure vSphere Foundation 9.0 environment and needs to enforce a strict zero-trust posture for ESXi host shells. Which standard configuration should be applied to ESXi local and remote shells?

Accepted Answer

Disable ESXi Shell (TSM) and SSH (TSM-SSH) services by default, enabling them only temporarily during active troubleshooting.. Best practice security hardening dictates that SSH (TSM-SSH) and the ESXi Shell (TSM) should be disabled when not actively in use, and idle timeout intervals should be enforced.

Answer

Configure SSH to permit root login using unencrypted password authentication over the public internet.

Answer

Replace the ESXi shell binary with an unauthenticated Telnet daemon.

Answer

Grant permanent shell access to all domain user accounts.