VCP-VVF IT Architectures Technologies Standards Practice Test 2 — 15 Questions

Question 1

An enterprise architect is planning virtual machine resource controls in a vSphere Foundation 9.0 cluster. Which THREE parameters can be configured on a virtual machine's CPU or memory settings? (Choose three.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Shares. In vSphere, a virtual machine's CPU and memory resource settings expose three standard allocation controls: Shares (B), Limit (C), and Reservation (D). Shares (B) set the relative priority of the VM within a resource pool or host when contention occurs, expressed as High/Normal/Low or a custom numeric value. Reservation (C) guarantees a minimum amount of CPU (MHz) or memory (MB) that the VM is entitled to, and Limit (D) caps the maximum CPU or memory the VM may consume, both configurable per VM. Physical Socket Count Multiplexing (A) is not a real vSphere VM CPU parameter — socket count is set via 'Number of virtual sockets' and cores per socket, not multiplexing. BIOS Voltage Scaling Factor (E) is not a vSphere resource control at all; power management is handled at the host/BIOS level, not as a per-VM CPU or memory setting.

Answer

Physical Socket Count Multiplexing

Answer

BIOS Voltage Scaling Factor

Question 2

An administrator is designing a vSphere Foundation 9.0 environment and needs to configure vCenter Server Single Sign-On (SSO) identity sources. Which THREE identity source types are natively supported by vCenter Server SSO? (Choose three.)

Accepted Answer

Local OS users (local vpxuser / local system accounts). Option B is correct because vCenter Server SSO natively supports Local OS users, allowing authentication against the local operating system accounts on the vCenter Server host (for example, local vpxuser/system accounts) as an identity source. Option D is correct because Active Directory is a natively supported SSO identity source, configurable either via Integrated Windows Authentication (IWA) or as Active Directory over LDAP. Option E is correct because OpenLDAP directory services are also natively supported as an SSO identity source type in vCenter Server. Option A does not belong because anonymous guest web tokens via public web scrapers are not an SSO identity source type. Option C does not belong because local Bluetooth pairing with mobile smartphones is not an authentication mechanism supported by vCenter Server SSO.

Answer

Anonymous guest web tokens via public web scrapers

Answer

Local Bluetooth pairing with mobile smartphones

Question 3

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere HA response actions. Which TWO configurable actions can vSphere HA take when a host isolation event is detected (Host Isolation Response)? (Choose two.)

Accepted Answer

Leave virtual machines powered on. The Host Isolation Response in vSphere HA defines what happens to VMs running on an ESXi host that has lost management network connectivity to the cluster. Option A (Leave virtual machines powered on) is correct because this is the default and recommended setting; the host keeps its VMs running, and the master host does not attempt to restart them elsewhere, avoiding unnecessary downtime and split-brain risk. Option B (Power off virtual machines) is also correct because vSphere HA can be configured to power off the isolated host's VMs, allowing the master host to restart them on healthy hosts in the cluster (or, in newer versions, the 'Power off and restart' behavior). Option C is wrong because reformatting datastores with VMFS-6 is not a vSphere HA isolation action and would destroy data. Option D is wrong because permanently decommissioning an ESXi motherboard is a hardware lifecycle task, not an HA response. Option E is wrong because vSphere HA does not migrate VMs to AWS EC2; that would require a separate hybrid-cloud or disaster-recovery solution.

Answer

Reformat all attached datastores with VMFS-6

Answer

Permanently decommission the ESXi motherboard

Answer

Instantly migrate all VMs to public cloud AWS EC2 instances

Question 4

An enterprise architect is planning a vSphere Foundation 9.0 upgrade using vSphere Lifecycle Manager (vLCM). Which THREE components can be managed and validated as part of a vLCM single cluster image? (Choose three.)

Accepted Answer

ESXi base image version. In vSphere Lifecycle Manager, a cluster image is composed of three managed layers: the ESXi base image (option A), which defines the ESXi version and its core VIBs; the Vendor Add-on (option C), which supplies the hardware vendor's driver and firmware bundle validated for that server platform; and Firmware and Driver Add-ons (option D), which deliver additional component-level firmware and driver updates beyond the vendor add-on. These three elements are exactly what vLCM composes, remediates, and validates against the desired state of the cluster image. Option B is incorrect because top-of-rack switch firmware is network infrastructure managed outside vLCM, not part of a cluster image. Option E is incorrect because guest OS patching is handled by tools like vSphere Configuration Profiles, vRealize/VMware Aria Operations, or Microsoft update mechanisms, not by vLCM cluster images.

Answer

Top-of-rack physical switch firmware images

Answer

Microsoft Windows Server guest operating system patches

Question 5

An infrastructure architect is designing a vSphere Foundation 9.0 cluster and evaluating advanced storage policies for vSAN. Which THREE data services are native to vSAN and configurable via storage policies? (Choose three.)

Accepted Answer

Deduplication and Compression. Option A (Deduplication and Compression) is correct because vSAN natively supports space efficiency features that can be enabled and controlled through vSAN storage policies, allowing block-level deduplication and compression on supported all-flash configurations. Option C (Encryption, Data-at-Rest Encryption) is correct because vSAN provides native data-at-rest encryption, and enabling it is governed by storage policy settings such as the encryption rule tied to a KMS. Option E (Checksum, automatic integrity checking and self-healing) is correct because vSAN performs automatic checksum verification and self-healing to detect and repair silent data corruption, and these integrity behaviors are part of vSAN's native data services configurable via policy. Option B is incorrect because replacing a failed physical server chassis motherboard is a hardware service action, not a vSAN data service or storage policy setting. Option D is incorrect because automatic physical fibre channel cable weaving is not a vSAN capability; vSAN is a software-defined storage solution and does not manage physical FC cabling.

Answer

Automated replacement of failed physical server chassis motherboards

Answer

Automatic physical fibre channel cable weaving

Question 6

An enterprise architect is planning high availability for a vSphere Foundation 9.0 cluster. Which THREE methods does vSphere HA use to detect host failures? (Choose three.)

Accepted Answer

Network heartbeats exchanged between Master and Slave ESXi hosts. vSphere HA detects host failures through three complementary mechanisms. Option A is correct because the Master ESXi host and Slave hosts exchange network heartbeats over the management network; loss of these heartbeats is the primary failure signal. Option B is correct because datastore heartbeats are written to shared datastores, allowing HA to distinguish a genuinely failed host from one that is merely isolated from the management network. Option C is correct because storage reachability checks verify that the host still has active paths to its datastores, which helps confirm whether a host is truly down or just network-partitioned. Option D is incorrect because Bluetooth proximity scanning is not a vSphere HA mechanism and has no role in host failure detection. Option E is incorrect because vSphere HA does not rely on pinging external public DNS servers such as 8.8.8.8; it uses internal network and datastore heartbeats within the cluster.

Answer

Bluetooth proximity scans of administrator mobile phones

Answer

Continuous ping checks sent to external public DNS servers like 8.8.8.8

Question 7

An infrastructure architect is designing a high-performance vSphere Foundation 9.0 environment. Which THREE architectural configurations optimize virtual machine memory performance and reduce latency? (Choose three.)

Accepted Answer

Reserving 100% of guest virtual machine memory to prevent swapping and ballooning overhead. Option A is correct because reserving 100% of guest memory guarantees that the VM's pages are backed by physical RAM, eliminating ESXi swapping and ballooning overhead that would otherwise add latency. Option B is correct because enabling Large Pages (Transparent Huge Pages / 2MB pages) reduces TLB miss overhead by covering more memory per TLB entry, improving memory access efficiency for high-performance workloads. Option D is correct because sizing a VM's memory to fit within a single physical NUMA node boundary keeps memory accesses local to the CPU socket, avoiding costly remote NUMA memory latency. Option C is incorrect because aggressive memory overcommitment above 300% on database nodes increases swapping, ballooning, and memory compression, which degrades performance rather than optimizing it. Option E is incorrect because disabling RAM interleaving in BIOS reduces memory channel parallelism and bandwidth, which would hurt rather than improve memory performance.

Answer

Configuring aggressive memory overcommitment exceeding 300% on database nodes

Answer

Disabling physical server RAM interleaving in the BIOS

Question 8

An enterprise architect is planning the deployment of vSphere Fault Tolerance (FT) in a vSphere Foundation 9.0 cluster. Which THREE requirements or limitations apply to virtual machines configured with vSphere FT? (Choose three.)

Accepted Answer

Compliance with maximum vCPU limits supported by the specific vSphere FT release. Option A is correct because vSphere FT enforces a maximum number of vCPUs per protected VM that varies by release (for example, 8 vCPUs on many recent versions), so the architect must verify the VM's vCPU count complies with the limit supported by the specific vSphere FT release. Option B is correct because FT requires a dedicated FT logging VMkernel adapter on each participating ESXi host to carry the continuous FT logging traffic that keeps the primary and secondary VMs in lockstep. Option E is correct because the primary and secondary VMs must both access the same shared storage (such as VMFS or vSAN) simultaneously, since FT relies on shared storage for the VM's files and disk state. Option C is not required and is in fact counterproductive, as FT does not mandate disabling network redundancy and doing so would reduce availability. Option D is wrong because FT does not require hosting the primary VM on a local unshared USB drive; FT requires shared storage, not local unshared media.

Answer

Disabling all network redundancy across the cluster uplinks

Answer

Hosting the primary VM exclusively on a local unshared USB drive

Question 9

An IT architect is standardizing the time synchronization design for a vSphere Foundation 9.0 environment that includes multiple ESXi 9.0 hosts, a vCenter Server Appliance, and a vSphere cluster running vSAN. The security team mandates that all infrastructure components use authenticated, encrypted time synchronization to a redundant pair of internal NTP servers. Which configuration should the architect standardize on?

Accepted Answer

Configure each ESXi host to synchronize with the internal NTP servers using NTP authentication (symmetric key) via the esxcli system ntp command set, and configure the vCenter Server Appliance to use the same internal NTP servers with chrony NTP authentication.. Authenticated NTP is required to meet the security mandate for encrypted and verified time synchronization. Both ESXi 9.0 and the vCenter Server Appliance support NTP authentication with symmetric keys, so standardizing on the internal NTP servers with authentication across all components satisfies the requirement and maintains consistent time for vSAN, certificates, and audit logs.

Answer

Configure ESXi hosts to synchronize with each other in a peer-to-peer NTP mesh, and configure the vCenter Server Appliance to synchronize with one designated ESXi host as its NTP server.

Answer

Configure ESXi hosts to use VMware Tools time synchronization with a central Windows domain controller, and configure the vCenter Server Appliance to use the same domain controller as its time source.

Answer

Configure all ESXi hosts to synchronize with an external public NTP pool, and configure the vCenter Server Appliance to synchronize with the same public pool, relying on the default NTP authentication settings.

Question 10

An IT architect is designing a vSphere Foundation 9.0 environment that must meet a regulatory requirement for strong cryptographic protection of vMotion traffic between ESXi 9 hosts. The design must avoid relying on self-signed certificates and must support automated certificate rotation. Which standard mechanism should be implemented?

Accepted Answer

Configure vMotion to use encrypted vMotion with VMCA-issued certificates and enable TLS 1.3 for the vMotion network.. Encrypted vMotion relies on TLS and certificates rather than shared secrets or network segmentation. Using VMCA-issued certificates avoids self-signed certificates and supports automated renewal, while TLS 1.3 supplies strong cryptography. Together these meet the compliance requirement for protecting live migration traffic between ESXi 9 hosts in a vSphere Foundation 9.0 environment.

Answer

Enable vMotion encryption using a pre-shared key distributed manually to each ESXi host in the cluster.

Answer

Place all vMotion traffic on an isolated VLAN and rely on network segmentation instead of encryption.

Answer

Configure each ESXi host to use SSH tunneling for vMotion and enable FIPS mode on the vCenter Server Appliance.

Question 11

An IT architect is designing a vSphere Foundation 9.0 environment that must integrate with an existing enterprise storage area network. The storage team requires that LUN masking and zoning be enforced at the fabric level and that ESXi hosts present a globally unique identifier to the array for consistent multipathing. Which storage architecture technology should the architect standardize on?

Accepted Answer

Fibre Channel (FC) SAN with unique worldwide port names. Fibre Channel SANs provide globally unique worldwide port names on each HBA port and enforce access through fabric zoning combined with array-side LUN masking. The scenario requires fabric-enforced masking and a stable host identity for multipathing, which FC satisfies directly. IP-based transports and NPIV do not deliver the same zoning and masking model the storage team mandated.

Answer

Fibre Channel (FC) SAN with N_Port ID Virtualization

Answer

iSCSI SAN with CHAP authentication

Answer

NVMe over Fabrics using TCP transport

Question 12

An administrator is designing a vSphere Foundation 9.0 environment that must meet a strict compliance standard requiring all management traffic to be encrypted in transit. The design team wants to enforce encryption for the ESXi management interface without relying on external PKI. Which VMware feature should be enabled to encrypt the host management traffic?

Accepted Answer

ESXi TLS certificate and HTTPS enforcement. ESXi secures management access with TLS certificates and enforces HTTPS by default for the host client and API. Enabling and maintaining a valid certificate ensures that management traffic is encrypted in transit. VLAN tagging and authentication proxy settings address isolation and authentication, not encryption, and the shell timeout is unrelated to transport security.

Answer

vSphere Authentication Proxy

Answer

VMkernel port VLAN tagging

Answer

ESXi Shell timeout

Question 13

An IT architect is designing the management network for a vSphere Foundation 9.0 environment that must support a routed Layer 3 topology between the management VLAN and the vMotion VLAN. The design requires that vMotion traffic be able to cross a Layer 3 boundary without relying on a single subnet. Which ESXi feature should the architect include?

Accepted Answer

Routed vMotion, which allows vMotion traffic to cross Layer 3 boundaries. Routed vMotion is the feature that allows vMotion traffic to cross Layer 3 boundaries, so the source and destination hosts do not need to share a subnet. Enabling it on the VMkernel adapters used for vMotion lets the migration traffic be routed, which is exactly what a routed management and vMotion topology requires. Bandwidth controls and private VLANs address different concerns and cannot substitute for it.

Answer

Network I/O Control with a dedicated vMotion traffic class and high shares

Answer

vSphere Distributed Switch with private VLANs configured for the vMotion VMkernel adapter

Answer

vMotion with a dedicated VMkernel adapter on the same subnet as vCenter

Question 14

An enterprise architect is designing a vSphere Foundation 9.0 environment that will use vSphere Distributed Resource Scheduler (DRS) to maintain performance during hardware maintenance. The design must ensure that DRS can evacuate workloads automatically when an ESXi host enters maintenance mode, and that it respects operational constraints. Which TWO DRS settings must be configured to meet these goals? (Choose two.)

Accepted Answer

Set the DRS migration threshold to the most aggressive setting to allow frequent migrations.. Automatic evacuation during maintenance mode requires DRS to act without manual approval, which is provided by Fully Automated mode. The migration threshold controls how aggressively DRS moves workloads, and a more aggressive setting supports prompt evacuation. Together these settings let DRS relocate virtual machines when a host enters maintenance mode while respecting operational constraints.

Answer

Disable Distributed Power Management (DPM) for the cluster.

Answer

Enable vSphere HA admission control with the cluster resource percentage policy.

Answer

Configure DRS affinity rules to keep critical virtual machines together on the same host.

Question 15

An enterprise architect is designing a vSphere Foundation 9.0 environment that must support standards-based, vendor-neutral storage management and multi-pathing across heterogeneous arrays. The design must also provide a common framework for array discovery, health monitoring, and path failover. Which TWO standards should be incorporated into the architecture? (Choose two.)

Accepted Answer

TPGS (Target Port Group Support) with ALUA. VASA provides the standards-based management and health-monitoring framework between vSphere and storage arrays, while TPGS with ALUA defines how hosts discover and fail over across optimized and non-optimized paths. Together they deliver vendor-neutral discovery, monitoring, and multi-pathing. VAAI, vVols, and NFS address performance offload, VMware-specific disk abstraction, and file access, respectively, not the required standards framework.

Answer

VMware vSphere Virtual Volumes (vVols)

Answer

NFS version 3 with Kerberos authentication

Answer

VMware vSphere Storage APIs for Array Integration (VAAI)