VCP-VVF Practice Test 30 — 15 Questions

Question 1

An administrator is troubleshooting a vSphere Distributed Switch (vDS) where network I/O control (NIOC) is being used. Which TWO benefits or capabilities does Network I/O Control provide in vSphere Foundation? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Bandwidth limit enforcement for individual virtual machine network adapters (vNICs) or distributed port groups.. Network I/O Control (NIOC) provides bandwidth allocation based on shares and reservations for different system traffic types (e.g., vMotion, vSAN, fault tolerance, VM traffic) and enforces bandwidth limits on physical uplinks.

Answer

Automatic generation of IP addresses for guest operating systems.

Answer

Automatic conversion of standard virtual switches into physical core routers.

Answer

Automatic physical switch firmware flashing.

Question 2

An infrastructure architect is designing a vSphere Foundation 9.0 environment where virtual machines running cryptographic workloads require hardware random number generator access. Which design approach satisfies this requirement?

Accepted Answer

Configure virtual machines with a virtual hardware random number generator (vHRNG) device backed by the host hardware entropy source.. Providing virtual machines with access to a virtual hardware random number generator (vHRNG) allows guest operating systems to draw entropy from the ESXi host's hardware RNG or TPM.

Answer

Configure software iSCSI multipathing with round-robin load balancing.

Answer

Set the virtual machine CPU hot-add setting to active.

Answer

Install a third-party USB entropy dongle directly into every virtual machine via software USB redirection.

Question 3

A newly deployed virtual machine is unable to communicate with other VMs on the same vSphere Distributed Switch (vDS), although it shares the same port group. What is the most common misconfiguration to check on the vDS port group settings?

Accepted Answer

Verify the VLAN ID configured on the distributed port group matches the physical switch trunk configuration for that network.. VLAN tagging mismatches or incorrect VLAN IDs assigned to the port group are frequent causes of isolation. Alternatively, security policies like Promiscuous Mode or MAC address changes might block traffic, but VLAN configuration is the primary layer-2 requirement.

Answer

Ensure that NetFlow is enabled on the distributed switch uplinks.

Answer

Confirm that Link Aggregation Control Protocol (LACP) is disabled on all host physical adapters.

Answer

Check whether the port group is configured with static binding instead of ephemeral binding.

Question 4

An administrator is designing a vSphere Foundation 9.0 cluster. When configuring high availability (HA) admission control, which admission control policy is recommended to ensure sufficient resources are reserved for failover without over-complicating capacity math?

Accepted Answer

Percentage of Cluster Resources reserved for CPU and Memory.. Host failures to tolerate (FTT) or Percentage of Cluster Resources are standard, modern HA admission control policies that automatically scale as cluster size changes.

Answer

Static manual reservation of 32 physical CPU cores per virtual machine.

Answer

Routing failover requests through an external public cloud broker.

Answer

Disabling admission control entirely to allow 100% resource overcommit.

Question 5

A systems architect is evaluating storage policy designs for a vSAN datastore in a vSphere Foundation 9.0 cluster. When configuring the Failures to Resist (FTT) policy using Erasure Coding (RAID-5/6), what is the minimum number of host fault domains required for a RAID-5 storage policy?

Accepted Answer

At least 4 fault domains (hosts). RAID-5 Erasure Coding in vSAN requires a minimum of 4 fault domains (hosts) to distribute data and parity blocks effectively.

Answer

At least 3 fault domains (hosts)

Answer

At least 6 fault domains (hosts)

Answer

At least 2 fault domains (hosts)

Question 6

An infrastructure architect is designing a vSphere Foundation 9.0 environment with strict compliance requirements. They need to ensure that all API traffic and administrative sessions to vCenter Server are audited and forwarded to a centralized SIEM (Security Information and Event Management) system. Which architectural feature should be configured?

Accepted Answer

Configure vCenter Server syslog forwarding to stream audit and access logs securely to the enterprise SIEM collector.. vCenter Server supports forwarding audit logs and syslog events directly to external syslog collectors using secure TLS or UDP/TCP transport.

Answer

Enable Fault Tolerance replication on the vCenter database tables.

Answer

Configure Storage DRS to clone audit log files every hour.

Answer

Install an unencrypted FTP server on every ESXi host to dump core dumps.

Question 7

An IT architect is planning network security for a vSphere Foundation 9.0 environment. They want to ensure that inter-VM traffic within the same virtual network is inspected and filtered by distributed firewall rules without having to hairpin traffic out to a physical firewall appliance. Which architectural feature should be deployed?

Accepted Answer

NSX Distributed Firewall (DFW). VMware NSX Distributed Firewall (DFW) inspects traffic directly at the vnic level of each virtual machine within the ESXi kernel, enforcing micro-segmentation without physical hairpinning.

Answer

Physical top-of-rack access control lists (ACLs).

Answer

Storage I/O Control traffic shaping rules.

Answer

vCenter Server Appliance software firewall.

Question 8

An administrator is planning storage connectivity for a vSphere Foundation 9.0 cluster. Which TWO block storage protocols are natively supported by ESXi for connecting external enterprise storage arrays? (Choose two.)

Accepted Answer

Fibre Channel (FC). ESXi natively supports Fibre Channel (FC) and iSCSI for block storage connectivity out of the box.

Answer

Apple Filing Protocol (AFP)

Answer

IDE parallel ATA bus protocols

Answer

Server Message Block (SMB) version 1

Question 9

A vSphere administrator notices that a high-priority virtual machine is experiencing CPU contention on an eight-socket ESXi host. The virtual machine is configured with 16 vCPUs and the host has physical NUMA nodes containing 8 cores each. Which configuration step will best mitigate performance degradation caused by remote memory accesses?

Accepted Answer

Resize the virtual machine to 8 vCPUs to match the physical NUMA node size.. Aligning the vCPU count of a virtual machine to fit within a single physical NUMA node (or multiples thereof) prevents wide NUMA spanning and reduces remote memory latency.

Answer

Configure CPU shares to High for the affected virtual machine.

Answer

Increase the reservation on the virtual machine's memory settings to maximum.

Answer

Enable hyperthreading globally on the ESXi host cluster.

Question 10

An ESXi 9.0 host in a vSphere cluster experiences a purple diagnostic screen (PSOD). Where should the administrator navigate in vSphere Client or use via CLI to locate the core dump file for analysis by VMware Support?

Accepted Answer

Generate a support bundle from the vSphere Client or examine the configured diagnostic partition / scratch partition using 'esxcli system coredump file get'.. ESXi stores VMkernel core dumps either locally or configured via esxcli system coredump. By default, host core dumps are directed to a shared scratch/core location or a local diagnostic partition. Administrators can also check vCenter events or retrieve logs via the vSphere Client support bundle generator.

Answer

Open Aria Operations and download the 'Host Crash Archive' report from the administration tab.

Answer

Navigate to the VMFS datastore root folder and open the 'vmware-psod.log' text file.

Answer

Log into the vCenter Server appliance shell and check '/var/log/vmware/vpxd/psod/' directory.

Question 11

An administrator is troubleshooting a vSphere Distributed Switch (vDS) where network I/O control (NIOC) is being used. Which TWO benefits or capabilities does Network I/O Control provide in vSphere Foundation? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

If the disk has failed permanently, replace the physical drive and rebuild or recreate the vSAN disk group, allowing vSAN to automatically rebuild missing components based on storage policies.. When vSAN components are absent, investigating via health checks, checking disk state using esxcli or vSAN health UI, and understanding whether the host/disk is permanently lost or temporarily offline (e.g., maintenance mode vs disk failure) is critical. If permanently lost, allowing object repair or replacing the disk is necessary.

Answer

Reboot vCenter Server, which automatically forces vSAN to recreate lost disk groups.

Answer

Reformat the entire vSAN datastore to factory defaults.

Question 12

An administrator notices that an ESXi host is displaying a warning banner in the Direct Console User Interface (DCUI) indicating that the evaluation license is about to expire. Where should the administrator navigate in the vSphere Client to assign a permanent vSphere Foundation license key?

Accepted Answer

Navigate to vCenter Administration -> Licensing -> Assets -> Licenses and add/assign the new license key.. Assigning and managing vSphere license keys is performed under vCenter Administration -> Licensing or Host -> Configure -> Licensing.

Answer

Edit the virtual machine hardware settings to include a license key vNIC.

Answer

Open vSphere Lifecycle Manager -> Baseline Management -> Licenses.

Answer

Log into the ESXi DCUI, select 'Troubleshooting Options', and enter the license key.

Question 13

An administrator is troubleshooting an issue where an ESXi host cannot communicate with other hosts on a different subnet. The administrator suspects an incorrect default gateway. Which esxcli command can the administrator use to inspect the current IPv4 default gateway configuration on the ESXi host?

Accepted Answer

esxcli network ip route ipv4 list. To view the IPv4 default gateway on an ESXi host, administrators use 'esxcli network ip route ipv4 list' or check the network ip interface config.

Answer

esxcli storage core gateway list

Answer

esxcli network vswitch standard gateway show

Answer

esxcli gateway get

Question 14

An enterprise administrator is configuring vSphere Proactive HA in a vSphere Foundation 9.0 cluster. How does Proactive HA interact with hardware health monitoring systems from vendors like Dell, HPE, or Cisco?

Accepted Answer

By receiving hardware vendor provider alerts (such as memory or fan degradation) and automatically placing degraded hosts into maintenance or quarantine mode.. Proactive HA receives provider-generated health events via vCenter hardware integrations and takes automated mitigation actions (such as evacuating hosts) before hardware failures lead to full outages.

Answer

By adjusting physical server CPU voltage regulators to save electricity.

Answer

By executing firmware flashing routines on physical RAID controllers during peak business hours.

Answer

By rebooting the top-of-rack physical network switches when BGP convergence fails.

Question 15

An administrator is troubleshooting a storage performance bottleneck in a vSphere cluster using esxtop. Which THREE esxtop metrics should the administrator analyze when investigating storage latency issues? (Choose three.)

Accepted Answer

DAVG (Device Average Latency). DAVG, KAVG, and GAVG are the core storage latency metrics in esxtop (viewed in disk device mode).

Answer

%RDY (Ready Time percentage)

Answer

SWCUR (Current Swap Space)