VCP-VVF IT Architectures Technologies Standards Practice Test 5 — 15 Questions

Question 1

An administrator is planning an upgrade of ESXi hosts in a vSphere Foundation 9.0 cluster using vSphere Lifecycle Manager. What is the role of a hardware support manager (HSM) or vendor add-on in vLCM?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

To provide vendor-validated firmware and driver packages that integrate into the unified ESXi cluster software image.. Vendor add-ons supplied by hardware partners (like Dell, HPE, Lenovo) provide validated firmware and driver bundles that integrate into vLCM image management.

Answer

To manage physical switch port VLAN assignments via SNMP traps.

Answer

To act as an external license server for Microsoft Windows guest operating systems.

Answer

To provide active directory domain controller replication services.

Question 2

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure network adapters for maximum fault tolerance and load distribution. When configuring an IP Hash load-balancing policy on a vSphere Distributed Switch, what is mandatory on the physical switch side?

Accepted Answer

Configure a Port Channel (EtherChannel) on the physical switch ports connected to the ESXi uplinks.. Route Based on IP Hash requires an EtherChannel (Port Channel - LACP or static) configured on the physical switch ports connecting to the ESXi host uplinks.

Answer

Disable all spanning tree protocols across every switch in the entire enterprise data center.

Answer

Assign a distinct IP address to every individual physical cable connecting the NICs.

Answer

Configure the physical switch ports as unmanaged hub ports.

Question 3

An infrastructure architect is designing a secure vSphere Foundation 9.0 environment and needs to enforce a strict zero-trust posture for ESXi host shells. Which standard configuration should be applied to ESXi local and remote shells?

Accepted Answer

Disable ESXi Shell (TSM) and SSH (TSM-SSH) services by default, enabling them only temporarily during active troubleshooting.. Best practice security hardening dictates that SSH (TSM-SSH) and the ESXi Shell (TSM) should be disabled when not actively in use, and idle timeout intervals should be enforced.

Answer

Configure SSH to permit root login using unencrypted password authentication over the public internet.

Answer

Replace the ESXi shell binary with an unauthenticated Telnet daemon.

Answer

Grant permanent shell access to all domain user accounts.

Question 4

An administrator is designing a vSphere Foundation 9.0 standard virtual switch (vSwitch) topology and needs to configure security policies for a port group. Which TWO security settings are available by default on a vSwitch port group? (Choose two.)

Accepted Answer

MAC Address Changes. The three configurable security settings on vSphere standard and distributed switch port groups are Promiscuous Mode, MAC Address Changes, and Forged Transmits.

Answer

IP Source Guard Filtering

Answer

Dynamic ARP Inspection Guard

Answer

BPDU Filter Activation

Question 5

An infrastructure architect is designing a high-security vSphere Foundation 9.0 environment. Which THREE architectural features contribute directly to hardening ESXi hosts and virtual machines against attacks? (Choose three.)

Accepted Answer

Trusted Platform Module (TPM) 2.0 chips providing hardware-root-of-trust measurements.. ESXi hardening involves features like TPM 2.0 for boot integrity, vSphere VM Encryption for data at rest, and Secure Boot enabled in UEFI firmware.

Answer

Unencrypted Telnet management daemons running on port 23.

Answer

Permitting root access via unauthenticated anonymous FTP sessions.

Question 6

An enterprise architect is planning the network architecture for a vSphere Foundation 9.0 cluster running vSAN. Which THREE network design practices are recommended for vSAN VMkernel adapters? (Choose three.)

Accepted Answer

Configure dedicated physical NIC uplinks or use Network I/O Control (NIOC) to prioritize vSAN bandwidth.. vSAN network best practices include isolating vSAN traffic on dedicated VLANs, using Jumbo Frames (MTU 9000), and configuring dedicated physical uplinks or NIOC shares to prevent contention.

Answer

Route all vSAN storage traffic through public unencrypted internet gateways.

Answer

Disable TCP checksum offloading on all ESXi host physical network adapters.

Question 7

An administrator is planning storage connectivity for a vSphere Foundation 9.0 cluster. Which TWO block storage protocols are natively supported by ESXi for connecting external enterprise storage arrays? (Choose two.)

Accepted Answer

Fibre Channel (FC). ESXi natively supports Fibre Channel (FC) and iSCSI for block storage connectivity out of the box.

Answer

Apple Filing Protocol (AFP)

Answer

IDE parallel ATA bus protocols

Answer

Server Message Block (SMB) version 1

Question 8

An enterprise architect is planning vCenter Server 9.0 High Availability (VCHA) in a vSphere Foundation environment. Which THREE nodes comprise a fully configured VCHA deployment? (Choose three.)

Accepted Answer

Active Node. vCenter High Availability consists of three nodes: Active, Passive, and Witness, which provide automated failover protection for the management plane.

Answer

Database Replica Node

Answer

Proxy Controller Node

Question 9

An IT architect is evaluating storage policy options for a vSAN datastore in a vSphere Foundation 9.0 cluster. Which THREE storage policy rules can be enforced via vSAN storage policies? (Choose three.)

Accepted Answer

Failures to Resist (FTT / RAID level configuration). vSAN storage policies allow administrators to configure rules such as Failures to Resist (FTT), stripe width, and object space reservation.

Answer

Automatic physical switch port VLAN reconfiguration

Answer

Active Directory domain controller password complexity rules

Question 10

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure networking redundancy. Which TWO teaming and failover methods are supported on vSphere Distributed Switches? (Choose two.)

Accepted Answer

Route Based on Originating Virtual Port. VDS support multiple teaming policies including Route Based on Originating Virtual Port and Route Based on IP Hash.

Answer

Border Gateway Protocol Autonomous System Path Prepending

Answer

Spanning Tree Protocol Root Bridge Selection

Answer

Point-to-Point Serial Line Framing

Question 11

An enterprise architect is planning virtual machine resource controls in a vSphere Foundation 9.0 cluster. Which THREE parameters can be configured on a virtual machine's CPU or memory settings? (Choose three.)

Accepted Answer

Shares. Virtual machine resource settings include Shares, Reservations, and Limits for both CPU and memory allocations.

Answer

Physical Socket Count Multiplexing

Answer

BIOS Voltage Scaling Factor

Question 12

An infrastructure architect is designing a multi-site vSphere Foundation 9.0 environment with stretched clusters. Which THREE challenges or requirements must be accounted for in a stretched cluster design? (Choose three.)

Accepted Answer

Redundant, high-bandwidth inter-site ISL (Inter-Switch Links) for vMotion and storage traffic.. Stretched clusters require strict RTT latency limits for storage, reliable witness placement, and redundant high-bandwidth inter-site networking.

Answer

Complete elimination of all network gateways across the entire enterprise.

Answer

Converting all virtual machine disks into read-only ISO files.

Question 13

An administrator is designing a vSphere Foundation 9.0 environment and needs to configure vCenter Server Single Sign-On (SSO) identity sources. Which THREE identity source types are natively supported by vCenter Server SSO? (Choose three.)

Accepted Answer

Local OS users (local vpxuser / local system accounts). vCenter Server SSO supports Active Directory, OpenID Connect (OIDC), Open LDAP, and Local OS as identity sources.

Answer

Anonymous guest web tokens via public web scrapers

Answer

Local Bluetooth pairing with mobile smartphones

Question 14

An administrator is planning an ESXi host installation in a vSphere Foundation 9.0 environment. Which TWO installation methods are officially supported for deploying ESXi hosts at scale? (Choose two.)

Accepted Answer

Interactive installation using physical media or virtual media (ISO mounting via IPMI/iLO/iDRAC).. ESXi hosts can be deployed using interactive installations (media/ISO) or automated scripted/PXE (Auto Deploy) installations.

Answer

Extracting ESXi binaries inside a Microsoft Windows 11 desktop application.

Answer

Direct manual compilation of the ESXi Linux kernel source code on the target server.

Answer

Copying files via unencrypted floppy diskettes.

Question 15

An infrastructure architect is evaluating storage protocols and features for a vSphere Foundation 9.0 environment. Which THREE advanced vSphere storage features rely on VAAI (vStorage APIs for Array Integration)? (Choose three.)

Accepted Answer

Block Zero / Full Copy (accelerated cloning and zeroing operations). VAAI offloads storage operations to hardware arrays, supporting features like Hardware Accelerated Locking (ATS), Block Zero (Full Copy/Zeroing), and Thin Provisioning reclaim.

Answer

Software iSCSI software-based software checksum calculation

Answer

Guest operating system registry file defragmentation