VCP-VVF Practice Test 28 — 15 Questions

Question 1

You are managing VVF and need to update the vCenter Server. Before performing the update, what is the most important step to perform on the VCSA?

Accepted Answer

Perform a VCSA file-based backup. Taking a file-based backup is critical for recovery in case the update fails.

Answer

Take a snapshot of the vCenter VM

Answer

Delete all templates to free space

Answer

Restart all services

Question 2

An administrator is configuring certificate management for a vSphere Foundation environment. They need to replace the vCenter Server machine certificate with one signed by a Subordinate CA. Which tool should be used to automate this process?

Accepted Answer

Certificate-manager CLI utility. The vSphere Certificate Manager utility (certificate-manager) is the supported tool for managing vCenter Server certificates.

Answer

vSphere Lifecycle Manager

Answer

vCenter Server Appliance Management Interface (VAMI)

Answer

PowerCLI Update-Certificate cmdlet

Question 3

When configuring alerts in Aria Operations for a vSphere Foundation environment, how can an administrator ensure that alerts are only sent during business hours?

Accepted Answer

By using Notification Rules with specified time windows.. Notification rules in Aria Operations allow for the definition of time-based constraints or 'Notification Triggers' with specific schedules.

Answer

By creating a custom dashboard.

Answer

By modifying the Alert Definition settings.

Answer

By configuring a Maintenance Window.

Question 4

Which THREE items are typically included in an Aria Operations dashboard for monitoring vSphere infrastructure? (Choose three.)

Accepted Answer

Host CPU and Memory utilization. Operations dashboards focus on health, risk, and efficiency metrics across the environment.

Answer

Physical switch port configuration

Answer

Individual user browser history

Question 5

An administrator is reviewing the physical networking design for a vSphere Foundation 9.0 cluster. What is the recommended standard for physical switch port configurations connecting to ESXi host network adapters that carry multiple VLANs (Trunk ports)?

Accepted Answer

Configure the physical switch ports as VLAN trunks allowing all required VLAN IDs required by the port groups.. Physical switch ports connecting to ESXi uplinks carrying multiple VLANs must be configured as trunks allowing the required VLAN IDs, with a native VLAN configured correctly or untagged traffic handled according to security standards.

Answer

Disable all VLAN tagging on physical switches and force flat Layer 2 flooding.

Answer

Configure the ports as restricted access ports carrying only VLAN 1.

Answer

Configure the physical switch ports in static 802.3ad link aggregation mode without LACP enabled on the vSwitch.

Question 6

An infrastructure architect is designing a high-security vSphere Foundation 9.0 environment. Which THREE architectural features contribute directly to hardening ESXi hosts and virtual machines against attacks? (Choose three.)

Accepted Answer

Trusted Platform Module (TPM) 2.0 chips providing hardware-root-of-trust measurements.. ESXi hardening involves features like TPM 2.0 for boot integrity, vSphere VM Encryption for data at rest, and Secure Boot enabled in UEFI firmware.

Answer

Unencrypted Telnet management daemons running on port 23.

Answer

Permitting root access via unauthenticated anonymous FTP sessions.

Question 7

An administrator is planning an ESXi host installation in a vSphere Foundation 9.0 environment. Which TWO installation methods are officially supported for deploying ESXi hosts at scale? (Choose two.)

Accepted Answer

Interactive installation using physical media or virtual media (ISO mounting via IPMI/iLO/iDRAC).. ESXi hosts can be deployed using interactive installations (media/ISO) or automated scripted/PXE (Auto Deploy) installations.

Answer

Extracting ESXi binaries inside a Microsoft Windows 11 desktop application.

Answer

Direct manual compilation of the ESXi Linux kernel source code on the target server.

Answer

Copying files via unencrypted floppy diskettes.

Question 8

An administrator notices that a virtual machine in a vSphere Foundation 9.0 environment is experiencing high CPU ready time. Which performance counter in vSphere Client best helps determine if the VM is being constrained by CPU limits imposed by vSphere DRS or administrator settings?

Accepted Answer

Check the 'Max Limited' or 'CPU Limit' metric in the vSphere performance charts for the affected virtual machine.. CPU Limit restricts the maximum CPU resources a VM can consume, leading to high ready time if demand exceeds the limit. The metric 'Max Limited' or tracking the effective limit against usage helps identify limit constraints.

Answer

Review the 'Co-stop' metric to see if multiple vCPUs are misaligned.

Answer

Examine the 'Swapin rate' to check for memory pressure.

Answer

Verify the 'Kernel Memory' overhead counters.

Question 9

An administrator notices that a virtual machine's performance graph in vSphere Client shows flatlines or missing historical data. Which vCenter service is primarily responsible for collecting and storing performance statistics into the vCenter database?

Accepted Answer

The vCenter Statistics service (integrated into vpxd and the associated database backend).. The vCenter Statistics service (managed within the vpxd process and historical database jobs) handles performance metric collection and rollup.

Answer

The vRealize Log Insight forwarding agent.

Answer

The ESXi CIM server (sfcb).

Answer

The VMware Host Client daemon (hostd).

Question 10

Which TWO methods are available for adding a host to a vCenter inventory?

Accepted Answer

Using an IP address. You can add a host by its FQDN or IP address.

Answer

Using a USB thumb drive serial

Answer

Using the host's MAC address

Answer

Using the CPU serial number

Question 11

An administrator is setting up identity and access control for a multi-cluster environment. What is the benefit of using an Identity Provider (IdP) instead of local SSO users?

Accepted Answer

It eliminates the need for vCenter Server to be part of an Active Directory domain.. Integrating an external IdP (such as Okta or Active Directory Federation Services) allows for centralized authentication and consistent policy enforcement.

Answer

It allows local accounts to be converted to global accounts.

Answer

It bypasses the need for multi-factor authentication.

Answer

It automatically assigns permissions to all users in the organization.

Question 12

An administrator is managing vSphere Foundation licenses. If the cluster grows beyond the capacity covered by the current VVF license, what happens?

Accepted Answer

The cluster will enter a non-compliant state.. vSphere Foundation licensing is capacity-based; exceeding CPU count requires additional license purchase to maintain compliance, though the system will not immediately shut down.

Answer

The vCenter service will immediately shut down.

Answer

The host will lose network connectivity.

Answer

Virtual machines will be suspended.

Question 13

An administrator is designing a stretched vSphere Foundation 9.0 cluster across two data centers separated by 30km. According to vSphere clustering design best practices, where should the vCenter Server Appliance be placed?

Accepted Answer

Hosted in one of the primary data centers with vCenter High Availability (VCHA) configured across the sites, ensuring the active, passive, and witness nodes are appropriately distributed.. Placing vCenter Server on one of the preferred data centers or running it with high availability (such as vCenter HA) inside the primary site while ensuring database consistency is standard architecture, avoiding split-brain across sites without proper witness support.

Answer

Installed directly onto a physical laptop kept at the administrator's desk.

Answer

Split evenly across both data centers running active-active clustering simultaneously on the same IP address.

Answer

Running exclusively inside a public cloud AWS region with no local network connectivity to the ESXi hosts.

Question 14

When configuring log forwarding from vCenter to Aria Operations for Logs, which protocol is typically used?

Accepted Answer

Syslog (UDP/TCP). The LiAgent or Syslog protocol is standard for sending logs to the Operations for Logs server.

Answer

SNMP

Answer

SSH

Answer

HTTPS

Question 15

An infrastructure architect is configuring network security standards for a vSphere Foundation 9.0 environment. They want to ensure that all virtual machine traffic traversing a vSphere Distributed Switch cannot be sniffed by compromised guest operating systems using promiscuous mode. Which configuration setting must be enforced?

Accepted Answer

Set Promiscuous Mode, MAC Address Changes, and Forged Transmits to 'Reject' at the distributed port group security policy level.. Port group security policies on the vSphere Distributed Switch include Promiscuous Mode, MAC Address Changes, and Forged Transmits, which should be set to 'Reject' to prevent sniffing and spoofing.

Answer

Configure IP Source Guard on the physical switch access ports.

Answer

Deploy an external hardware tap appliance inline with the physical uplinks.

Answer

Enable BPDU Guard on all physical uplink switch ports connected to the ESXi host NICs.