VCP-VVF Practice Test 2 — 25 Questions

Question 1

An administrator is designing a multi-tenant vSphere Foundation 9.0 environment and needs to enforce strict isolation of management traffic, vMotion, and tenant workloads at Layer 2. Which feature should be used on a Distributed Switch to enforce this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Private VLANs (PVLANs) configured with isolated and community secondary VLAN IDs.. VLAN trunking and Private VLANs (PVLANs) on vSphere Distributed Switches provide secure Layer 2 isolation between different port groups.

Answer

Network I/O Control (NIOC) shares and reservation limits.

Answer

ESXi firewall rule adjustments via the Host Client.

Answer

Cross-vCenter vMotion encrypted transport tunnels.

Question 2

An administrator is designing a vSphere Foundation 9.0 cluster and needs to enable Enhanced Data Protection for virtual machines. Which vCenter feature works in conjunction with vSphere Trust Authority to ensure keys are released only to verified, trusted ESXi hosts?

Accepted Answer

vSphere Trust Authority (vTA). vSphere Trust Authority separates the key management duties by running a trusted cluster that attests the health and trustworthiness of worker ESXi hosts before releasing encryption keys.

Answer

Enhanced vMotion Compatibility baselines.

Answer

High Availability host isolation responses.

Answer

Storage DRS automated placement rules.

Question 3

An enterprise architect is designing a multi-site vSphere Foundation 9.0 environment with stretched clusters. When configuring vSAN stretched cluster witness traffic, what is the architectural recommendation regarding the witness network connection?

Accepted Answer

Ensure the witness network link meets minimum bandwidth requirements and maintains an RTT latency of 100 milliseconds or less.. The vSAN witness traffic must traverse a reliable, lower-latency IP network connection to the primary cluster nodes, with specific minimum bandwidth and latency thresholds (typically < 100ms RTT for witness traffic, < 5ms for data sites).

Answer

Configure the witness node to run on the exact same physical ESXi host as the primary storage controller.

Answer

Route witness traffic exclusively through unencrypted public dial-up modems.

Answer

Disable all IP keepalive heartbeats on the witness vmkernel adapter.

Question 4

An enterprise architect is planning virtual machine resource controls in a vSphere Foundation 9.0 cluster. Which THREE parameters can be configured on a virtual machine's CPU or memory settings? (Choose three.)

Accepted Answer

Shares. Virtual machine resource settings include Shares, Reservations, and Limits for both CPU and memory allocations.

Answer

Physical Socket Count Multiplexing

Answer

BIOS Voltage Scaling Factor

Question 5

When designing a vSphere Foundation 9.0 standard virtual switch (vSwitch) topology for a dual-port 25GbE network adapter configuration, what is the best practice for redundancy and bandwidth utilization?

Accepted Answer

Configure both uplinks as active and assign them to an appropriate load-balancing algorithm such as Route Based on Physical NIC Load.. Using Route Based on Physical NIC Load (or active/active with IP hash/LB mechanisms) provides resilient load distribution across multiple uplinks.

Answer

Connect each uplink to a completely different vCenter Server instance to achieve high availability.

Answer

Disable spanning tree on the ESXi vSwitch properties panel.

Answer

Designate one uplink as Active and the second uplink strictly as Standby to prevent packet duplication.

Question 6

A systems architect is reviewing the hardware compatibility list (HCL) for a vSphere Foundation 9.0 cluster upgrade. The target servers utilize a modern SmartNIC (DPU) architecture. Which architectural benefit does offloading network and storage virtualization tasks to the DPU provide?

Accepted Answer

Reclaiming host CPU cycles by offloading infrastructure tasks such as distributed firewalling, encapsulation, and crypto processing to the DPU hardware.. DPUs (Data Processing Units) offload CPU-intensive infrastructure tasks like NSX packet processing, firewalling, and storage crypto from host x86 CPU cores to dedicated onboard processors.

Answer

Eliminating the requirement for shared external storage arrays by converting the DPU into a vSAN witness node.

Answer

Enabling zero-latency synchronous replication across unlimited geographic distances.

Answer

Automating the physical switch firmware deployment via LLDP integration.

Question 7

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure network adapters for maximum fault tolerance and load distribution. When configuring an IP Hash load-balancing policy on a vSphere Distributed Switch, what is mandatory on the physical switch side?

Accepted Answer

Configure a Port Channel (EtherChannel) on the physical switch ports connected to the ESXi uplinks.. Route Based on IP Hash requires an EtherChannel (Port Channel - LACP or static) configured on the physical switch ports connecting to the ESXi host uplinks.

Answer

Disable all spanning tree protocols across every switch in the entire enterprise data center.

Answer

Assign a distinct IP address to every individual physical cable connecting the NICs.

Answer

Configure the physical switch ports as unmanaged hub ports.

Question 8

An administrator is planning an upgrade of ESXi hosts in a vSphere Foundation 9.0 cluster using vSphere Lifecycle Manager. What is the role of a hardware support manager (HSM) or vendor add-on in vLCM?

Accepted Answer

To provide vendor-validated firmware and driver packages that integrate into the unified ESXi cluster software image.. Vendor add-ons supplied by hardware partners (like Dell, HPE, Lenovo) provide validated firmware and driver bundles that integrate into vLCM image management.

Answer

To manage physical switch port VLAN assignments via SNMP traps.

Answer

To act as an external license server for Microsoft Windows guest operating systems.

Answer

To provide active directory domain controller replication services.

Question 9

An administrator is designing a vSphere Foundation 9.0 environment with high availability. Which component acts as the primary orchestrator for cluster-wide high availability (HA) failover actions if an ESXi host suffers a sudden power failure?

Accepted Answer

The elected HA Master ESXi host in the cluster.. In a vSphere HA cluster, one host is elected as the Master host, while the remaining hosts act as Slaves. The Master monitors the cluster state and orchestrates failovers.

Answer

The vSAN Witness Appliance residing at the secondary site.

Answer

The Platform Services Controller embedded in vCenter Server.

Answer

The external hardware load balancer connected to the vCenter Appliance.

Question 10

An enterprise storage architect is evaluating the use of NVMe over Fabrics (NVMe-oF) with Fibre Channel (FC-NVMe) in a vSphere Foundation 9.0 architecture. What is the primary architectural advantage of FC-NVMe over traditional FCP (Fibre Channel Protocol SCSI)?

Accepted Answer

Support for a vastly increased number of parallel queues and command depths, matching the parallelism of NVMe storage devices.. FC-NVMe supports massive parallelism (up to 64k queues with 64k commands per queue) compared to traditional SCSI queues, reducing command latency and fully utilizing modern multi-queue NVMe storage controllers.

Answer

Mandatory integration with public cloud AWS S3 object storage buckets.

Answer

Automatic conversion of block storage LUNs into NFS v4.1 file shares at the host bus adapter.

Answer

Elimination of all physical cabling requirements by utilizing wireless optical lasers.

Question 11

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere HA response actions. Which TWO configurable actions can vSphere HA take when a host isolation event is detected (Host Isolation Response)? (Choose two.)

Accepted Answer

Leave virtual machines powered on. When an ESXi host becomes isolated from the rest of the HA cluster network, it can be configured to Power off VMs, Shut down guest OS, or Leave VMs powered on.

Answer

Reformat all attached datastores with VMFS-6

Answer

Permanently decommission the ESXi motherboard

Answer

Instantly migrate all VMs to public cloud AWS EC2 instances

Question 12

An IT architect is designing the time synchronization architecture for a vSphere Foundation 9.0 data center. Which standard protocol and hierarchy should be established across vCenter Server and ESXi hosts?

Accepted Answer

Configure all ESXi hosts and vCenter appliances to synchronize time with authoritative local NTP servers.. Network Time Protocol (NTP) must be configured pointing to reliable internal or external stratum time sources to ensure accurate logging and authentication tokens.

Answer

Deploy Precision Time Protocol (PTP) exclusively for basic log file timestamping.

Answer

Rely on the local CMOS hardware clock of each server without external timekeeping.

Answer

Configure the ESXi hosts to synchronize time exclusively from the guest operating system of running VMs.

Question 13

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that virtual machines are automatically balanced across hosts based on active memory and CPU utilization rather than just static allocation. Which DRS metric setting should be emphasized?

Accepted Answer

Default DRS load balancing utilizing active memory and CPU metrics.. VMware DRS uses active metric data to evaluate real-time workload demand and perform load-balancing migrations when inequality thresholds are crossed.

Answer

Storage DRS space utilization thresholds.

Answer

Host hardware fan speed and ambient thermal telemetry.

Answer

Fault Tolerance secondary heartbeat intervals.

Question 14

An administrator is designing a vSphere Foundation 9.0 environment and needs to deploy the vCenter Server Appliance. Which deployment size should be selected for a medium enterprise environment managing up to 400 hosts and 4,000 virtual machines?

Accepted Answer

Select the appropriate deployment size (such as Small or Medium) matching the host and VM count guidelines in the VMware Configuration Maximums documentation.. VMware provides predefined deployment sizes (Tiny, Small, Medium, Large, Extra Large) for vCenter Server based on host and VM counts. Small or Medium fits this specification.

Answer

Utilize the unconfigured default template without assigning any CPU or memory resources.

Answer

Deploy vCenter as a physical Windows Server 2025 cluster with SQL Server.

Answer

Always select the 'Tiny' deployment size to conserve disk space regardless of host counts.

Question 15

An enterprise architect is planning high availability for a vSphere Foundation 9.0 cluster. Which THREE methods does vSphere HA use to detect host failures? (Choose three.)

Accepted Answer

Network heartbeats exchanged between Master and Slave ESXi hosts. vSphere HA detects host failures using network heartbeats sent between the Master and Slave hosts, datastore heartbeats for partitioned hosts, and storage reachability checks.

Answer

Bluetooth proximity scans of administrator mobile phones

Answer

Continuous ping checks sent to external public DNS servers like 8.8.8.8

Question 16

An infrastructure architect is planning disaster recovery and migration strategies in a vSphere Foundation 9.0 environment. Which THREE migration methods are natively supported by vCenter Server for moving running virtual machines? (Choose three.)

Accepted Answer

Storage vMotion (migrating virtual disk files between datastores without downtime). vCenter Server natively supports vMotion (compute only), Storage vMotion (storage only), and Enhanced vMotion (both compute and storage simultaneously across clusters or vCenters).

Answer

Physical unzipping of VMDK files via manual FTP client uploads

Answer

Physical courier shipping of hard drives via postal mail services

Question 17

An administrator is planning an upgrade of a vSphere Foundation 9.0 cluster that includes hardware accelerators (GPUs). When utilizing vSphere vMotion with NVIDIA vGPU enabled virtual machines, what architectural requirement must be verified?

Accepted Answer

The destination ESXi host must possess matching physical GPU hardware models, compatible NVIDIA driver/GRID software versions, and available vGPU profile capacity.. Live vMotion of VMs with assigned NVIDIA vGPU devices requires compatible physical GPU hardware profiles, matching driver versions, and sufficient framebuffer resources on the destination host.

Answer

The virtual machine must be powered off, migrated via cold migration, and powered back on.

Answer

The vMotion network must be configured to use Fibre Channel protocol encapsulation.

Answer

GPU acceleration must be completely uninstalled from the guest OS before initiating vMotion.

Question 18

An administrator is planning a vSphere Foundation deployment and needs to configure vSphere High Availability (HA) in a cluster containing production virtual machines. Which TWO configuration steps or behaviors are associated with vSphere HA cluster design and operation? (Choose two)

Accepted Answer

vSphere HA requires a minimum of two ESXi hosts in the cluster to provide failover capability.. vSphere HA requires at least two ESXi hosts to function properly for failover, and it relies on datastore heartbeating when network heartbeats are lost during a network partition.

Answer

vSphere HA requires dedicated physical switches that support spanning tree protocol configuration.

Answer

vSphere HA automatically migrates powered-on VMs using live vMotion when host CPU utilization exceeds 80%.

Answer

Configuring Admission Control is optional and has no impact on virtual machine power-on operations.

Question 19

An administrator is designing a vSphere Foundation 9.0 standard virtual switch (vSwitch) topology and needs to configure security policies for a port group. Which TWO security settings are available by default on a vSwitch port group? (Choose two.)

Accepted Answer

MAC Address Changes. The three configurable security settings on vSphere standard and distributed switch port groups are Promiscuous Mode, MAC Address Changes, and Forged Transmits.

Answer

IP Source Guard Filtering

Answer

Dynamic ARP Inspection Guard

Answer

BPDU Filter Activation

Question 20

An administrator is designing a vSphere Foundation 9.0 cluster and configuring ESXi firewall settings. Which TWO network services have built-in firewall rules that can be enabled or disabled in ESXi Security Profiles? (Choose two.)

Accepted Answer

NFS client. ESXi built-in firewall profiles manage access for services such as SSH, ESXi Shell, vMotion, and NFS client connections.

Answer

Microsoft Active Directory Group Policy Editor

Answer

Apple iOS App Store daemon

Answer

Linux kernel compilation makefile service