VCP-VVF IT Architectures Technologies Standards Practice Test 7 — 15 Questions

Question 1

An infrastructure architect is evaluating storage protocols and features for a vSphere Foundation 9.0 environment. Which THREE advanced vSphere storage features rely on VAAI (vStorage APIs for Array Integration)? (Choose three.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Block Zero / Full Copy (accelerated cloning and zeroing operations). VAAI (vStorage APIs for Array Integration) offloads specific storage operations to compliant arrays, and three of its primitive classes are represented here. Option A, Block Zero / Full Copy, is correct because VAAI's Block Zeroing primitive lets the array zero large blocks (e.g., for eager-zeroed thick disks) and its Full Copy primitive lets the array clone extents directly, avoiding host-side data movement. Option B, Thin Provisioning Space Reclamation (UNMAP), is correct because VAAI's UNMAP primitive allows the ESXi host to notify the array that previously used blocks are free so the array can reclaim them for thin-provisioned LUNs. Option C, Hardware-Accelerated Locking (Atomic Test and Set - ATS), is correct because VAAI's ATS primitive replaces SCSI-2 reservations with finer-grained atomic locking on VMFS datastores, reducing lock contention during metadata updates. Option D is not a VAAI feature; iSCSI checksum calculation is handled by the software iSCSI initiator or by NIC/TOE hardware offload, not by VAAI array primitives. Option E is unrelated to VAAI, as guest OS registry defragmentation is an in-guest maintenance task and has nothing to do with array-integrated storage offloads.

Answer

Software iSCSI software-based software checksum calculation

Answer

Guest operating system registry file defragmentation

Question 2

An enterprise architect is designing a backup and recovery architecture for vSphere Foundation 9.0 virtual machines. Which THREE data transport modes are supported by modern backup software leveraging VADP (vSphere APIs for Data Protection)? (Choose three.)

Accepted Answer

HotAdd mode (attaching virtual disks to a backup proxy virtual machine). VADP (vSphere APIs for Data Protection) supports three data transport modes for backing up VMs. Option B, HotAdd mode, is correct because it attaches the VM's virtual disks directly to a backup proxy VM running on the same ESXi host, allowing efficient SCSI-level access without traversing the network. Option C, SAN mode, is correct because the proxy can read VM disk blocks directly from shared Fibre Channel or iSCSI LUNs via its own HBAs, bypassing the ESXi host's I/O stack for high throughput. Option D, NBD/NBDSSL mode, is correct because it streams disk blocks over TCP/IP from the ESXi host's Network Block Device service, with NBDSSL adding TLS encryption; this is the fallback mode that works without shared storage or same-host placement. Option A (analog modem dial-up SLIP) and Option E (Bluetooth wireless PAN streaming) are not VADP transport modes at all—they are irrelevant legacy or personal-area network technologies with no role in vSphere data protection.

Answer

Analog modem dial-up SLIP protocol

Answer

Bluetooth wireless PAN streaming

Question 3

An infrastructure architect is designing a vSphere Foundation 9.0 environment and needs to configure advanced network security. Which THREE features are provided by VMware NSX when integrated with vSphere? (Choose three.)

Accepted Answer

Distributed Firewall (DFW) for micro-segmentation. VMware NSX provides distributed firewalling, overlay networking (Geneve), and advanced layer 4-7 load balancing/routing services.

Answer

Automatic physical power outlet rebooting via SNMP

Answer

Hardware RAID controller battery replacement scheduling

Question 4

An administrator is designing a vSphere Foundation 9.0 cluster and configuring ESXi firewall settings. Which TWO network services have built-in firewall rules that can be enabled or disabled in ESXi Security Profiles? (Choose two.)

Accepted Answer

NFS client. Option B (NFS client) is correct because ESXi's firewall configuration includes a predefined service rule for the NFS client, allowing administrators to enable or disable outbound NFS traffic through the ESXi Security Profile. Option D (SSH) is correct because the SSH server has a built-in firewall rule in ESXi that can be toggled on or off within the Security Profile, controlling access to the ESXi Shell over port 22. Option A is incorrect because Group Policy Editor is a Windows management tool, not a network service with an ESXi firewall rule. Option C is incorrect because the Apple iOS App Store daemon is unrelated to ESXi and has no firewall rule in its Security Profile. Option E is incorrect because a Linux kernel compilation makefile is a build artifact, not a network service, and is not represented in ESXi firewall rules.

Answer

Microsoft Active Directory Group Policy Editor

Answer

Apple iOS App Store daemon

Answer

Linux kernel compilation makefile service

Question 5

An infrastructure architect is designing a vSphere Foundation 9.0 environment with strict compliance standards. Which THREE capabilities are provided by vSphere Trust Authority (vTA)? (Choose three.)

Accepted Answer

Isolation of Key Management Server (KMS) access from general administrative networks. vSphere Trust Authority (vTA) is designed to separate trust and key-management duties from the general vSphere administrative domain, so option A is correct: it isolates KMS access from general administrative networks by placing the Key Management Servers in a separate, more trusted trust-domain that the regular vCenter administrators cannot reach. Option B is correct because vTA only releases encryption keys to ESXi hosts that have successfully proven their integrity, meaning keys are never loaded onto unverified hosts and encrypted workloads remain protected even if a host is compromised. Option D is correct because vTA relies on remote attestation of the ESXi worker hosts, using the host's TPM and attestation service to verify platform integrity (secure boot, measured boot, etc.) before any keys are released. Option C is not a vTA capability; real-time 4K transcoding is a graphics/media workload handled by other products (e.g., NVIDIA vGPU or media accelerators), not by a trust service. Option E is also unrelated: automated provisioning of AWS S3 buckets is a public-cloud storage task, whereas vTA is an on-premises key-release and attestation service for vSphere.

Answer

Real-time transcoding of 4K video files for virtual desktop sessions

Answer

Automated provisioning of public cloud AWS S3 storage buckets

Question 6

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere Distributed Switch (VDS) port groups. Which TWO traffic types are commonly assigned to distinct VLAN-backed port groups on a VDS? (Choose two.)

Accepted Answer

VMkernel Management traffic. Option D (VMkernel Management traffic) is correct because management traffic such as host configuration, vCenter communication, and ESXi Shell access is carried by a VMkernel adapter that must be placed on a port group, and best practice is to isolate it on its own VLAN-backed port group for security and traffic separation. Option E (vMotion migration traffic) is correct because vMotion live-migration streams are also carried by dedicated VMkernel adapters, and separating vMotion onto its own VLAN-backed port group prevents migration traffic from competing with management, VM, or storage traffic and allows specific QoS/security policies. The unmarked options A (CMOS clock pulses), B (power supply AC voltage feeds), and C (BIOS POST diagnostic code streams) are all hardware-level physical signals internal to a server, not network traffic types, so they cannot be assigned to a VDS port group.

Answer

Local motherboard CMOS clock pulses

Answer

Physical server power supply AC voltage feeds

Answer

BIOS POST diagnostic code streams

Question 7

An administrator is planning storage design for a vSphere Foundation 9.0 cluster. Which TWO file-level storage protocols are supported by ESXi for mounting external shared file datastores? (Choose two.)

Accepted Answer

Network File System (NFS) version 4.1. ESXi supports NFS version 3 and NFS version 4.1 for external file-level datastore mounting.

Answer

Hypertext Transfer Protocol Secure (HTTPS)

Answer

Secure File Transfer Protocol (SFTP)

Answer

Trivial File Transfer Protocol (TFTP)

Question 8

An enterprise architect is designing a vSphere Foundation 9.0 cluster and configuring vSphere DRS (Distributed Resource Scheduler). Which THREE migration triggers or automation levels can be configured in DRS? (Choose three.)

Accepted Answer

Manual (DRS generates recommendations but does not execute migrations automatically). The three configurable DRS automation levels in vSphere are Manual, Partially Automated, and Fully Automated. Option A is correct because Manual mode means DRS only generates migration recommendations and does not execute them automatically, leaving the administrator to apply them. Option C is correct because Partially Automated mode automatically places VMs at power-on but only recommends migrations for ongoing load balancing, which the administrator must approve. Option D is correct because Fully Automated mode automatically performs both initial placement and ongoing load-balancing migrations without administrator intervention. Options B and E are not real DRS automation levels or migration triggers; Randomized Chaos Mode and External Cloud Lock Mode do not exist in vSphere DRS configuration.

Answer

Randomized Chaos Mode (DRS migrates every VM every 30 seconds regardless of load)

Answer

External Cloud Lock Mode (DRS locks all hosts and prevents any migrations)

Question 9

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere DRS affinity rules. Which TWO types of DRS affinity/anti-affinity rules can be established? (Choose two.)

Accepted Answer

VM-Host Affinity / Anti-Affinity rules. In vSphere DRS, the two supported rule categories are VM-Host affinity/anti-affinity rules and VM-VM affinity/anti-affinity rules. Option C is correct because VM-Host rules define whether specified virtual machines must run on or must not run on a particular group of ESXi hosts, using host groups and VM groups to enforce placement. Option D is correct because VM-VM rules control whether designated virtual machines should be kept together on the same host or separated onto different hosts, which is used for availability, licensing, or performance constraints. Option A is not a DRS rule type; datastore and datacenter geolocation is not part of DRS affinity configuration. Option B is unrelated to DRS; Active Directory password policy is an identity and authentication concern, not a placement rule. Option E is also not a DRS rule type; switch-port MAC binding is a network security feature, not a vSphere DRS affinity/anti-affinity rule.

Answer

Datastore-Datacenter Geolocation rules

Answer

User-Group Active Directory Password rules

Answer

Switch-Port MAC Binding rules

Question 10

An infrastructure architect is designing a vSphere Foundation 9.0 cluster using modern NVMe-oF (NVMe over Fabrics) storage. Which THREE network architectural requirements are critical for deploying NVMe-oF with RDMA (RoCEv2)? (Choose three.)

Accepted Answer

Lossless Ethernet fabric configuration utilizing Priority Flow Control (PFC) and Explicit Congestion Notification (ECN). Option A is correct because RoCEv2 requires a lossless Ethernet fabric: Priority Flow Control (PFC) prevents frame drops for the storage traffic class, and Explicit Congestion Notification (ECN) provides end-to-end congestion signaling so RDMA senders can throttle before drops occur, which is essential for NVMe-oF RDMA performance and reliability. Option C is correct because Data Center Bridging (DCB) QoS must be configured consistently on ESXi and the physical switches, mapping the NVMe-oF/RoCE traffic to the same priority/traffic class (e.g., DSCP/CoS values) so PFC and ECN operate on the intended flows. Option E is correct because Jumbo Frames at MTU 9000 bytes on the physical switches and ESXi VMkernel adapters reduce per-packet overhead and packet count, improving RDMA throughput and lowering CPU cost for NVMe-oF traffic. Option B is wrong because analog dial-up lines are not an Ethernet/RDMA transport and provide no RoCEv2 capability, and unencrypted public links are inappropriate for storage traffic. Option D is wrong because disabling all physical switch uplinks would break the fabric connectivity NVMe-oF requires; air-gapped isolation is not achieved by removing uplinks, and it would prevent the cluster from communicating with the storage array.

Answer

Routing all storage traffic through unencrypted public dial-up analog lines

Answer

Disabling all physical switch uplinks to enforce air-gapped isolation

Question 11

An administrator is designing a vSphere Foundation 9.0 cluster and configuring VMkernel networking. Which TWO system traffic types can be enabled with a dedicated VMkernel network service checkbox? (Choose two.)

Accepted Answer

vSAN. In vSphere, VMkernel adapters are configured with specific system traffic types via checkboxes in the VMkernel NIC settings, and vSAN (Option A) is one such type—enabling it allows the host to carry vSAN storage I/O over that VMkernel interface, which is required for vSAN cluster communication. vMotion (Option E) is likewise a standard VMkernel service checkbox that designates the interface for live migration traffic, including encrypted vMotion and vMotion over different subnets. Options B, C, and D are not vSphere VMkernel system traffic types: Active Directory replication, Linux kernel compilation, and AirPlay streaming are application-level or unrelated workloads that do not have dedicated VMkernel service checkboxes in ESXi networking.

Answer

Microsoft Active Directory Domain Controller replication

Answer

Linux kernel makefile compilation

Answer

Apple AirPlay media streaming

Question 12

An enterprise architect is planning a vSphere Foundation 9.0 deployment and evaluating storage architecture choices. Which THREE storage types are fully supported as primary datastores for ESXi hosts? (Choose three.)

Accepted Answer

NFS (Network File System) datastores. Option A (NFS datastores) is correct because ESXi natively supports NFS v3 and NFS v4.1 as primary datastores for hosting VMs, making it a fully supported storage architecture in vSphere Foundation 9.0. Option B (VMFS on Fibre Channel or iSCSI block storage) is correct because VMFS is VMware's clustered file system designed for block storage over FC, iSCSI, or FCoE, and remains a core supported datastore type for ESXi hosts. Option E (vSAN datastores) is correct because vSAN is VMware's software-defined storage solution that aggregates local disks into a distributed, shared datastore fully supported as a primary storage type in vSphere Foundation 9.0. Option C (audio CD-DA tracks) is not a supported datastore format since CD-DA is a consumer audio standard with no block-level filesystem or VM storage capability. Option D (FAT16 floppy diskettes) is not supported because FAT16 is a legacy filesystem limited to small capacities and lacks the clustering, locking, and performance features required for ESXi datastores.

Answer

Audio compact disc (CD-DA) tracks

Answer

FAT16 formatted floppy diskettes

Question 13

An infrastructure architect is planning disaster recovery and migration strategies in a vSphere Foundation 9.0 environment. Which THREE migration methods are natively supported by vCenter Server for moving running virtual machines? (Choose three.)

Accepted Answer

Storage vMotion (migrating virtual disk files between datastores without downtime). Option C (Storage vMotion) is correct because vCenter Server natively supports relocating a running VM's virtual disk files between datastores with no downtime, which is a core live-migration capability. Option D (Enhanced vMotion) is correct because it combines a compute-host change and a datastore change in a single simultaneous live migration operation, and vCenter orchestrates this natively. Option E (vMotion) is correct because it live-migrates a running VM's compute execution (CPU/memory state) from one ESXi host to another without downtime, directly supported by vCenter Server. Option A is not a supported migration method—manually unzipping and FTP-uploading VMDK files is an out-of-band file copy, not a vCenter-orchestrated running-VM migration, and it risks corruption. Option B is also not a native vCenter migration method; physically shipping drives is a manual logistics approach, not a live migration capability for running VMs.

Answer

Physical unzipping of VMDK files via manual FTP client uploads

Answer

Physical courier shipping of hard drives via postal mail services

Question 14

An IT architect is designing a new vSphere Foundation 9.0 environment that must support a 25 GbE storage network with end-to-end lossless Ethernet for iSCSI traffic. The physical switches are already configured for Priority Flow Control and Data Center Bridging. Which ESXi network construct should the architect design to meet this requirement?

Accepted Answer

A vSphere Distributed Switch with a dedicated VMkernel adapter and Data Center Bridging enabled for the iSCSI traffic class. Lossless Ethernet for iSCSI on ESXi requires the host to participate in Data Center Bridging so that Priority Flow Control can be negotiated with the upstream switches. Only the vSphere Distributed Switch exposes DCB configuration in vSphere Foundation 9.0, and pairing it with a dedicated VMkernel adapter keeps storage traffic isolated. Standard switches and NIOC-based prioritization cannot deliver the lossless guarantee the scenario demands.

Answer

A standard vSphere Standard Switch with a dedicated VMkernel adapter and jumbo frames enabled

Answer

A vSphere Distributed Switch with Network I/O Control version 3 enabled and shares set to High for the iSCSI VMkernel adapter

Answer

A vSphere Distributed Switch with a dedicated VMkernel adapter on a VLAN that has no teaming policy applied

Question 15

An IT architect is designing a vSphere Foundation 9.0 environment that must support virtual machine mobility across data centers while preserving Layer 2 adjacency for legacy workloads. The design team proposes using an NSX overlay segment that spans the sites. Which VMware technology underpins this design by decoupling the virtual network from the physical topology?

Accepted Answer

VMware NSX Geneve-based overlay networks. Geneve-based overlay networks in NSX decouple the logical network from the physical underlay by encapsulating Layer 2 frames in UDP tunnels. This allows a segment to span data centers over routed infrastructure, preserving Layer 2 adjacency and IP addresses for legacy workloads. The other options are host-local or QoS-focused features that cannot extend a Layer 2 domain across sites.

Answer

VMware vSphere Standard Switch with beacon probing

Answer

VMware vSphere Network I/O Control with NIOC shares

Answer

VMware vSphere Distributed Switch with private VLANs