VCP-VVF Practice Test 8 — 10 Questions

Question 1

An enterprise architect is planning vCenter Server 9.0 High Availability (VCHA) in a vSphere Foundation environment. Which THREE nodes comprise a fully configured VCHA deployment? (Choose three.)

Accepted Answer

Active Node. A fully configured VCHA deployment consists of exactly three nodes: the Active Node (A), which runs the vCenter Server services and handles all management operations; the Passive Node (B), which continuously replicates the Active Node's state and is ready to take over if the Active fails; and the Witness Node (D), which acts as a quorum tie-breaker to prevent split-brain scenarios when the Active and Passive nodes lose connectivity with each other. These three roles together provide the automatic failover and quorum arbitration that define VCHA. Options C (Database Replica Node) and E (Proxy Controller Node) are not part of the VCHA architecture — VCHA does not use a separate database replica node (the Passive node itself replicates state), and there is no 'Proxy Controller Node' role in a VCHA deployment.

Answer

Database Replica Node

Answer

Proxy Controller Node

Question 2

You are managing certificate lifecycles in VVF. Where should you update the trusted root CA for the vCenter Server to ensure secure communication?

Accepted Answer

vSphere Client Certificate Management. The vSphere Certificate Authority (VMCA) or the vCenter Certificate Management tool is used to manage trusted roots.

Answer

Host Profile

Answer

vLCM Image

Answer

Aria Operations Settings

Question 3

A network architect is designing a multi-node vSphere Foundation 9.0 cluster where vMotion traffic must cross multiple routed IP subnets (Layer 3 vMotion). What configuration is required on the VMkernel adapters to support this design?

Accepted Answer

Configure each vMotion VMkernel adapter with an appropriate IP address, subnet mask, and a reachable default gateway.. Layer 3 vMotion requires that the VMkernel adapters participating in vMotion have correct default gateway settings configured on each host to route traffic across subnets.

Answer

Configure the vMotion TCP/IP stack with static MAC address spoofing enabled.

Answer

Establish BGP peering sessions directly between the ESXi VMkernel ports and the top-of-rack routers.

Answer

Enable Proxy ARP across all physical switch interfaces connecting to the ESXi hosts.

Question 4

An administrator is troubleshooting a vSphere HA cluster where virtual machines failed to restart after a simulated host failure. Which TWO cluster configurations should the administrator verify? (Choose two.)

Accepted Answer

Cluster network heartbeating and datastore heartbeat configurations.. Option C is correct because vSphere HA relies on both management-network heartbeats and datastore heartbeats to determine host liveness and to distinguish a failed host from a partitioned/isolated one; if the heartbeat network or the designated datastore heartbeating datastores are misconfigured or unreachable, HA may not detect the failure and therefore will not restart the VMs. Option E is correct because vSphere HA Admission Control enforces cluster capacity and resource reservations before allowing a failover restart; if the configured admission control policy (e.g., percentage-based, slot policy, or dedicated failover hosts) leaves insufficient unreserved CPU/memory capacity, HA will refuse to power on the affected VMs after a host failure. Option A is not relevant because vSphere Lifecycle Manager desired-state images govern host image compliance and remediation, not HA failover restarts. Option B is not relevant because Storage I/O Control latency thresholds only manage storage congestion and do not control HA restart decisions. Option D is not relevant because EVC CPU baselines affect vMotion compatibility and CPU feature masking, not whether HA can restart VMs after a host failure.

Answer

vSphere Lifecycle Manager desired state compliance images.

Answer

Storage I/O Control threshold latencies.

Answer

Enhanced vMotion Compatibility (EVC) CPU baseline levels.

Question 5

An administrator is troubleshooting an issue where SDDC Manager fails to execute a life-cycle upgrade task because a pre-check reports an invalid vCenter SSO administrator password. The password was recently rotated. Where must the administrator update the stored credentials in SDDC Manager so the upgrade can proceed?

Accepted Answer

Administration -> Credentials / Password Management in SDDC Manager.. SDDC Manager maintains its own credential store for all managed components, including vCenter Server SSO accounts, and life-cycle upgrade pre-checks validate against this store. When a password is rotated outside SDDC Manager, the stored credential becomes stale, causing the pre-check failure. The administrator must update the password in SDDC Manager's credential management interface, typically found under Administration -> Credentials / Password Management, so that SDDC Manager can authenticate and proceed with the upgrade.

Answer

vCenter Server -> SSO -> Configuration -> Credentials.

Answer

Cloud Builder appliance configuration properties.

Answer

NSX Manager -> System -> Users -> Password Policy.

Question 6

An administrator is investigating a performance issue where an ESXi 9.0 host's physical network adapters are experiencing dropped packets due to buffer exhaustion. Which esxcli command or network tuning approach can be used to check or adjust receive (RX) ring buffer sizes on a physical network adapter (vmnic)?

Accepted Answer

esxcli network nic ring get -n vmnicX and esxcli network nic ring set. 'esxcli network nic ring get' and 'esxcli network nic ring set' allow administrators to inspect and modify RX/TX ring buffer sizes on supported physical network adapters in ESXi.

Answer

esxcli vswitch standard buffer modify

Answer

esxcli hardware pnic buffer get

Answer

esxcli network ip buffer list

Question 7

An administrator is preparing to deploy a new vSphere Foundation environment using vCenter Server. Which THREE initial foundational components must be established before creating a vSphere cluster and deploying virtual machines? (Choose three)

Accepted Answer

Configure vSphere networking (vSphere Standard Switch or vSphere Distributed Switch).. Option B is correct because a functioning vSphere networking layer (either a vSphere Standard Switch or a vSphere Distributed Switch) is required so that ESXi hosts, vCenter Server, and the VMs placed on the cluster have connectivity for management, vMotion, and VM traffic. Option D is correct because ESXi hosts provide the actual compute and memory resources; a vSphere cluster cannot be created and VMs cannot be deployed without at least one (typically multiple) ESXi hosts added to vCenter. Option E is correct because vCenter Server is the central management plane that must be installed and configured first, since cluster creation, host addition, and most VM management operations are performed through it. Option A does not belong because VMware Aria Automation is an optional cloud-management/self-service layer built on top of a working vSphere environment, not a prerequisite for creating a cluster. Option C does not belong because an external hardware load balancer is only relevant to specific vCenter High Availability or NSX-T designs, not to the basic foundational deployment of a vSphere cluster.

Answer

Configure VMware Aria Automation for multi-tenant self-service portals.

Answer

Configure an external hardware load balancer for vCenter High Availability.

Question 8

An administrator is configuring certificate management for a vSphere Foundation 9.0 environment using VMCA (VMware Certificate Authority) in hybrid mode. What is the design purpose of hybrid mode certification?

Accepted Answer

VMCA acts as an intermediate certificate authority signed by an external enterprise CA, automatically issuing subordinate certificates to ESXi and vCenter.. Hybrid mode allows VMCA to act as an intermediate CA signed by an enterprise third-party Certificate Authority (like Microsoft CA), rather than acting as a self-signed root CA or replacing all certificates manually.

Answer

VMCA delegates all cryptographic operations to an external hardware TPM chip on vCenter.

Answer

VMCA automatically disables all SSL verification to allow unencrypted communication with legacy ESXi 5.5 hosts.

Answer

VMCA alternates between self-signed certificates and public Let's Encrypt certificates every 90 days.

Question 9

An administrator is troubleshooting a virtual machine that cannot be powered on. The error message states: 'Failed to lock the file'. What does this error typically signify in vSphere?

Accepted Answer

Another ESXi host, a running process, or a stuck task currently holds an exclusive lock on the VM's configuration or disk files.. The 'Failed to lock the file' error in vSphere occurs when the ESXi host cannot obtain an exclusive lock on the VM's configuration file (.vmx) or virtual disk files (.vmdk). This lock is held by another ESXi host (in a shared-storage cluster), a running VM process, or a stuck/orphaned task. The lock mechanism prevents multiple hosts from simultaneously writing to the same VM files, which would cause corruption.

Answer

The VM's virtual disk has reached its maximum size limit of 62TB.

Answer

The virtual machine license has expired, causing the hypervisor to lock the VM files.

Answer

The guest operating system has activated its internal disk encryption lock.

Question 10

An administrator is designing the management network for a vSphere Foundation 9.0 cluster. Which protocol is standard for secure command-line administration and troubleshooting access to ESXi hosts?

Accepted Answer

Secure Shell (SSH). SSH (Secure Shell) is the standard encrypted protocol used for secure command-line management and troubleshooting access to ESXi hosts.

Answer

Telnet

Answer

Trivial File Transfer Protocol (TFTP)

Answer

Remote Desktop Protocol (RDP)