VCP-VVF Practice Test 28 — 15 Questions

Question 1

An administrator is configuring a vSphere Foundation cluster and notices that virtual machines are migrating too frequently between ESXi hosts due to minor load fluctuations. Which DRS advanced option should the administrator adjust to reduce the sensitivity of migration recommendations?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Set the DRS Migration Threshold slider to a less aggressive level (e.g., Priority 1 instead of Priority 5).. The DRS Migration Threshold slider controls how aggressive DRS is about generating migration recommendations. Setting it to Priority 1 (most conservative) means DRS only migrates VMs when the cluster imbalance is severe, reducing migrations caused by minor load fluctuations. Priority 5 is the most aggressive setting and produces the most migrations.

Answer

Increase the memory overcommit ratio to 300%.

Answer

Set the VM/Host affinity rule state to 'Disabled'.

Answer

Disable vSphere HA datastore heartbeating for the cluster.

Question 2

An administrator wants to ensure that two production database virtual machines never run on the same physical ESXi host in a vSphere cluster to maximize fault tolerance. Which cluster rule should be created?

Accepted Answer

VM-VM Anti-Affinity Rule. A VM-VM anti-affinity rule explicitly instructs DRS to keep the specified VMs on separate ESXi hosts, which is exactly what is needed to prevent two database VMs from sharing a host. This maximizes fault tolerance because a single host failure cannot take down both databases simultaneously.

Answer

VM-VM Affinity Rule

Answer

Storage DRS Anti-Affinity Rule

Answer

VM-Host Affinity Rule

Question 3

An administrator is configuring an alert in vSphere Foundation 9.0 to notify them when an ESXi host loses its connection to primary storage (datastore heartbeat loss). Which type of default alarm in vCenter covers this condition?

Accepted Answer

Datastore accessibility alarm. The Datastore accessibility alarm in vCenter is designed to monitor the connectivity state of datastores. When an ESXi host loses its connection to primary storage, the datastore becomes inaccessible, triggering this alarm. This directly matches the condition of datastore heartbeat loss, as the alarm fires when the host cannot reach the datastore. Thus, option D is the correct default alarm for this scenario.

Answer

Host power state change alarm

Answer

Virtual machine high availability failover event

Answer

Storage I/O control congestion threshold alarm

Question 4

An administrator is troubleshooting network performance bottlenecks on a vSphere Distributed Switch (vDS). Which TWO metrics or features in vSphere Client and esxtop help identify network packet drops or congestion? (Choose two.)

Accepted Answer

vSphere Client network performance charts tracking dropped packets and packet error rates.. Option A is correct because vSphere Client performance charts for a vDS or its uplinks expose network metrics such as dropped packets (packets dropped on transmit/receive) and packet error rates, which directly reveal congestion or physical-layer problems causing packet loss. Option B is correct because esxtop's Network view (invoked by pressing 'n') displays per-vNIC and per-uplink counters including DRPTX and DRPRX, the transmit and receive packet drop counters, letting an administrator pinpoint which adapter is dropping packets. Option C is incorrect because Enhanced vMotion Compatibility (EVC) masks CPU feature sets for vMotion compatibility and has no packet-drop or congestion logging. Option D is incorrect because Storage I/O Control queue depth and latency metrics address storage congestion, not network packet drops. Option E is incorrect because vSphere HA datastore heartbeat counters relate to HA cluster liveness detection, not network performance or packet loss analysis.

Answer

Enhanced vMotion Compatibility (EVC) CPU drop log.

Answer

Storage I/O Control queue depth latency metrics.

Answer

vSphere HA datastore heartbeat counter graphs.

Question 5

An organization requires integration of vSphere Foundation 9.0 identity services with an external Enterprise Identity Provider (IDP) using OpenID Connect (OIDC). Where must the administrator configure the OIDC provider settings within vCenter Server 9.0?

Accepted Answer

Navigate to vCenter Server > Administration > Single Sign-On > Configuration > Identity Providers and add a new OIDC provider.. In vCenter Server 9.0, external identity provider integration via OIDC is configured through the vSphere Client under Administration > Single Sign-On > Configuration > Identity Providers. This is the dedicated UI for registering an OIDC provider, where you supply the issuer URL, client ID, client secret, and other metadata required for the OIDC handshake. The other options reference unrelated features or unsupported configuration methods.

Answer

Use the vSphere Client Global Inventory Lists to import the IDP SSL certificate into the trusted root store.

Answer

Modify the vpxd.properties file on the vCenter appliance to include the OIDC client secret.

Answer

Navigate to vCenter Server > Hosts and Clusters > Configure > Access Control > Authentication Services.

Question 6

An administrator is troubleshooting an issue where virtual machines on a vSphere Distributed Switch (vDS) lose connectivity intermittently after a network team changes physical switch configurations. Which vDS feature can help detect and diagnose VLAN or MTU misconfigurations between the ESXi host uplinks and the physical switch?

Accepted Answer

vDS Health Check (MTU and VLAN configuration verification). vSphere Health Check (specifically VLAN and MTU health checks) validates that the VLAN IDs and MTU settings configured on the vDS match the physical switch port settings.

Answer

Storage I/O Control (SIOC)

Answer

vSphere HA Datastore Heartbeating

Answer

Enhanced vMotion Compatibility (EVC)

Question 7

An administrator is configuring vSphere HA on a newly built cluster. Which THREE settings or components are critical for ensuring proper HA cluster operation? (Choose three.)

Accepted Answer

Properly configured DNS and static IP addresses for all ESXi hosts and vCenter Server.. Option B is correct because vSphere HA relies on name resolution and stable addressing: each ESXi host and the vCenter Server must have resolvable FQDNs and static IP addresses so HA agents can communicate, elect a master host, and vCenter can manage the cluster without address changes breaking connectivity. Option C is correct because a shared datastore used for datastore heartbeating lets the master host distinguish a genuinely failed host from an isolated host when the management network is partitioned, which is essential for correct HA response. Option E is correct because HA agent communication and host isolation detection depend on the management network, so redundant VMkernel adapters (for example, NIC teaming or multiple uplinks) prevent a single link failure from causing false isolation or loss of HA communication. Option A is not required because Storage DRS is a storage-balancing feature and is unrelated to core HA operation. Option D is not required because EVC only masks CPU feature differences for vMotion compatibility and is not a prerequisite for HA to function.

Answer

Fully automated Storage DRS enabled on all datastores in the cluster.

Answer

Enhanced vMotion Compatibility enabled across all participating cluster nodes.

Question 8

An administrator is documenting the DNS and time synchronization requirements for a new vSphere Foundation 9.0 deployment. The architect wants to state which standard protocol vCenter Server and ESXi hosts use for time synchronization in a supported configuration. Which protocol should be specified?

Accepted Answer

Network Time Protocol (NTP). NTP is the standard time synchronization protocol for vSphere Foundation 9.0. Both ESXi hosts and vCenter Server use it to maintain consistent clocks, which is essential for certificate validity checks, Kerberos-based authentication, and reliable event correlation across the environment. PTP is reserved for specialized workloads, while SNTP and any HTTP-based time service are not supported substitutes for the management plane.

Answer

Simple Network Time Protocol (SNTP)

Answer

Precision Time Protocol (PTP)

Answer

Hypertext Transfer Protocol Secure (HTTPS) time service

Question 9

An IT architect is defining the standard virtual hardware baseline for a vSphere Foundation 9.0 environment. The baseline must include virtual machine capabilities that are supported across the platform for new workloads. Which TWO capabilities should be included in the baseline? (Choose two.)

Accepted Answer

Virtual Trusted Platform Module (vTPM) 2.0 for guest encryption and measured boot. A sound virtual hardware baseline for vSphere Foundation 9.0 includes capabilities that are broadly supported and improve security without breaking guest compatibility. Virtual TPM 2.0 and UEFI with Secure Boot both meet that test and enable encryption, measured boot, and boot integrity for supported guests. NVMe controllers, paravirtual SCSI for all guests, and shared PCIe devices are situation-dependent and cannot be mandated platform-wide.

Answer

Virtual Shared PCIe devices assigned directly to each virtual machine by default

Answer

Virtual NVMe controllers as the default storage controller for all guest operating systems

Answer

Paravirtual SCSI adapters for all virtual machines, including those running unsupported legacy guests

Question 10

An administrator is configuring vSphere Lifecycle Manager (vLCM) in a VVF 9.0 environment. The administrator wants to ensure that all hosts in a cluster are remediated to the same ESXi version and firmware level, and that any drift is automatically detected. Which vLCM feature should the administrator use?

Accepted Answer

Image-based remediation. Image-based remediation in vLCM uses a cluster-wide image that specifies the exact ESXi base image, firmware add-ons, and OEM add-ons. vLCM checks hosts against this image and reports compliance. Remediation applies the image to any non-compliant host, ensuring all hosts run the same software and firmware. This provides automatic drift detection and enforcement of a uniform state.

Answer

vSphere Configuration Profiles

Answer

Baseline-based remediation

Answer

Host profiles

Question 11

An administrator is designing the storage multipathing standard for a vSphere Foundation 9.0 cluster connected to an external Fibre Channel array. The architect wants to select a path selection policy that uses all active paths simultaneously and is the recommended default for active-active arrays. Which policy should be specified?

Accepted Answer

Round Robin. Round Robin is the recommended default path selection policy for active-active storage arrays because it distributes I/O across all active paths. Fixed and Most Recently Used concentrate traffic on a single preferred or recent path, and ALUA is designed for arrays that report asymmetric path states. For the described active-active Fibre Channel array, Round Robin is the policy that meets the design requirement.

Answer

Fixed

Answer

Asymmetric Logical Unit Access (ALUA)

Answer

Most Recently Used

Question 12

An enterprise architect is evaluating storage protocols for a vSphere Foundation 9.0 cluster that will host latency-sensitive databases. The array supports NVMe over Fabrics, and the design must minimize CPU overhead on ESXi hosts while providing end-to-end congestion control. Which storage protocol should be selected to meet these requirements?

Accepted Answer

NVMe over RDMA (RoCEv2). NVMe over RDMA with RoCEv2 is designed for high-performance, low-latency storage by using Remote Direct Memory Access to bypass the host CPU and TCP/IP stack. RoCEv2 adds routable IP encapsulation and supports congestion control through ECN and PFC on a lossless Ethernet fabric. This combination minimizes CPU overhead and provides the end-to-end congestion control required for latency-sensitive databases.

Answer

iSCSI with software initiator

Answer

NFS version 4.1 with pNFS

Answer

NVMe over Fibre Channel (FC-NVMe)

Question 13

An administrator manages a vSphere Foundation 9.0 cluster where a virtual machine must never run on a specific set of ESXi hosts because those hosts are reserved for a licensed application. The administrator needs a rule that prevents placement on those hosts but does not restrict the virtual machine to any particular host. Which DRS rule type should the administrator create?

Accepted Answer

VM-Host anti-affinity rule with a must rule. A VM-Host anti-affinity rule with must enforcement strictly prevents the selected virtual machines from running on the selected hosts, without requiring them to run anywhere specific. A should rule only expresses preference, a VM-VM anti-affinity rule ignores hosts, and a VM-Host affinity must rule would pin the virtual machine to the reserved hosts instead of excluding them.

Answer

VM-VM anti-affinity rule

Answer

VM-Host affinity rule with a must rule

Answer

VM-Host affinity rule with a should rule

Question 14

An administrator is planning networking for a vSphere Foundation 9.0 cluster that will run NSX-backed workloads and requires consistent policy across many hosts. The design must support centralized configuration and per-virtual-machine granularity. Which two components should be included in the design? (Choose two.)

Accepted Answer

vSphere Distributed Switch providing a single control plane for host networking across the cluster. Centralized configuration across many hosts and per-virtual-machine granularity are delivered by a vSphere Distributed Switch plus distributed port groups with per-port policies. The distributed switch provides one control plane replicated to all member hosts, while distributed port groups allow individual NIC-level policy. Per-host standard switches cannot meet the centralization goal, and disabling Network I/O Control removes useful capabilities.

Answer

Network I/O Control disabled on all switches to avoid policy conflicts with NSX

Answer

vSphere Standard Switch configured identically on every host with matching port group names

Answer

A dedicated vSphere Standard Switch used exclusively for vMotion traffic on each host

Question 15

An administrator is troubleshooting intermittent purple diagnostic screens on an ESXi 9.0 host. The host has been stable for months, but after a recent firmware update to the storage controller, the PSODs began. The administrator has already collected a vm-support bundle. Which log file or artifact within the bundle is MOST likely to contain the specific exception and stack trace that triggered the PSOD?

Accepted Answer

vmkernel-zdump.1. A purple diagnostic screen indicates a VMkernel panic, and the corresponding crash dump is stored in the vmkernel-zdump file within the vm-support bundle. This file holds the exception details, stack trace, and module information needed to identify the faulty component. General logs like vmkernel.log or vmksummary.log lack the low-level crash context. The zdump is the primary artifact for root-cause analysis of PSODs.

Answer

vmkernel.log

Answer

vpxa.log

Answer

vmksummary.log