VCP-VVF Vmware Vsphere Foundation Fundamentals Practice Test 6 — 15 Questions

Question 1

An administrator wants to ensure that two production database virtual machines never run on the same physical ESXi host in a vSphere cluster to maximize fault tolerance. Which cluster rule should be created?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

VM-VM Anti-Affinity Rule. A VM-VM anti-affinity rule explicitly instructs DRS to keep the specified VMs on separate ESXi hosts, which is exactly what is needed to prevent two database VMs from sharing a host. This maximizes fault tolerance because a single host failure cannot take down both databases simultaneously.

Answer

VM-VM Affinity Rule

Answer

Storage DRS Anti-Affinity Rule

Answer

VM-Host Affinity Rule

Question 2

A vSphere Foundation administrator needs to configure Network I/O Control (NIOC) version 3 on a vSphere Distributed Switch to guarantee a specific bandwidth percentage for fault tolerance (FT) traffic during periods of high network utilization. Where must this share and reservation configuration be applied?

Accepted Answer

Under the Resource Allocation tab for System Traffic on the vSphere Distributed Switch.. Network I/O Control version 3 on a vSphere Distributed Switch exposes system traffic types (including Fault Tolerance, vMotion, iSCSI, NFS, etc.) under the switch's Resource Allocation tab. Shares, reservations, and limits for FT traffic must be configured there so that during contention the specified bandwidth percentage is guaranteed. This is the centralized location for NIOC v3 system traffic policies.

Answer

Inside the ESXi host firewall rule set configuration.

Answer

Inside the advanced properties of each individual virtual machine network adapter.

Answer

Within the physical switch CLI uplink configuration.

Question 3

An administrator is managing a vSphere Foundation environment with virtual machines utilizing persistent VMDKs. The underlying storage array fails, but vSphere HA is configured. What dictates how vSphere HA handles the response when a datastore hosting VM heartbeats or metadata becomes inaccessible (All Paths Down vs Permanent Device Loss)?

Accepted Answer

vSphere HA Datastore with Permanent Device Loss (PDL) and All Paths Down (APD) response policies.. vSphere HA includes specific response policies for datastore accessibility failures, distinguishing between Permanent Device Loss (PDL) and All Paths Down (APD). These policies dictate whether HA restarts affected VMs on other hosts, waits for the datastore to return, or takes no action, based on the type of storage failure. This is the mechanism that governs HA behavior when a datastore hosting heartbeats or metadata becomes inaccessible.

Answer

VMware Host Client alarm triggers configured via SNMP.

Answer

The guest operating system's internal disk timeout policies.

Answer

Storage DRS IO latency thresholds.

Question 4

An administrator is tasked with updating the ESXi hypervisor version and driver firmware across a cluster of 16 hosts uniformly. Which native tool in vSphere Foundation should be utilized to create a unified image-based baseline for cluster compliance and remediation?

Accepted Answer

vSphere Lifecycle Manager (vLCM). vSphere Lifecycle Manager (vLCM) is the native tool in vSphere Foundation (and vSphere 7+) that uses desired-state image-based baselines to manage ESXi hypervisor and firmware/driver versions uniformly across a cluster. It replaces the legacy VUM approach by allowing a single image to define the exact ESXi version, firmware add-ons, and drivers, then remediates all hosts in the cluster to match that image.

Answer

VMware Update Manager (VUM) legacy client

Answer

VMware Aria Operations for Networks

Answer

vRealize Automation orchestrator workflows

Question 5

An administrator needs to monitor CPU utilization trends across multiple virtual machines to determine if right-sizing is required. Which vSphere Foundation feature provides native performance charts, metrics collection, and historical reporting directly within the vCenter interface?

Accepted Answer

vSphere Performance Charts. vCenter Performance Charts provide built-in real-time and historical monitoring metrics for CPU, memory, network, and storage utilization.

Answer

vSphere Trust Authority

Answer

vSphere Fault Tolerance

Answer

Storage I/O Control (SIOC)

Question 6

An administrator is planning a vSphere Foundation deployment and needs to configure vSphere Distributed Switches (VDS). Which TWO benefits does a VDS provide compared to a standard vSwitch? (Choose two.)

Accepted Answer

Centralized management and backup of network configuration across all hosts associated with the switch. Option A is correct because a vSphere Distributed Switch is configured once at the vCenter Server level and that configuration is automatically propagated to every ESXi host associated with the switch, allowing centralized management and easy backup/restore of the network configuration across all hosts. Option B is correct because advanced capabilities such as Private VLANs (PVLANs), NetFlow, port mirroring, and Network I/O Control are only available on a VDS, not on a standard vSwitch. Option C is incorrect because a VDS still requires physical uplinks (vmnic) on each host to carry traffic to the physical network; it does not eliminate them. Option D is incorrect because a VDS depends on vCenter Server for configuration and management, so it cannot be fully managed independently of vCenter during host boot (standard vSwitches are the ones that operate locally without vCenter). Option E is incorrect because licensing of guest operating systems is unrelated to the type of virtual switch used.

Answer

Elimination of physical uplinks on ESXi hosts

Answer

Ability to function independently of vCenter Server during host boot sequences

Answer

Automatic licensing assignment for guest operating systems

Question 7

An administrator is troubleshooting a vSphere Foundation cluster where vSphere HA has failed to restart virtual machines after a host failure event. Which THREE conditions or settings could cause this behavior? (Choose three.)

Accepted Answer

The virtual machines are configured with an incompatible VM-Host affinity rule that cannot be satisfied on surviving hosts. Option B is correct because vSphere HA honors VM-Host affinity (and anti-affinity) rules during a failover restart; if a required affinity rule cannot be satisfied on the surviving hosts, HA will not power on the VM. Option C is correct because a strict Admission Control policy reserves capacity and can block HA from restarting VMs when the remaining hosts lack sufficient reserved resources, causing the restart to fail. Option E is correct because if the shared datastores are in an All Paths Down (APD) state on the surviving hosts, HA cannot access the VM files and therefore cannot restart the virtual machines. Option A is not relevant because Enhanced Linked Mode only affects cross-vCenter visibility and management, not HA restart capability within a single cluster. Option D is not relevant because vSphere HA works with both standard switches and distributed switches, so the switch type alone does not prevent HA restarts.

Answer

Enhanced Linked Mode is disabled between local vCenter servers

Answer

The ESXi hosts are configured with a standard switch instead of a distributed switch

Question 8

An administrator is configuring a cluster with vSphere DRS in a vSphere Foundation environment. Which TWO criteria can DRS use to balance virtual machine workloads across hosts? (Choose two.)

Accepted Answer

CPU utilization. DRS balances workloads by using host resource metrics, and CPU utilization (A) is one of the primary metrics it evaluates to determine whether a host is over- or under-committed and to generate migration recommendations. Active memory utilization (E) is the other key metric DRS uses, measuring the actively used memory on each host so it can move VMs away from memory-pressured hosts. These two resource dimensions are the standard DRS balance criteria in vSphere Foundation. The remaining options are not DRS metrics: BIOS serial number uniqueness (B) is a hardware identity attribute, assigned MAC address ranges (C) relate to network configuration rather than load, and guest OS disk partition type (D) is a VM storage/guest detail that DRS does not use for balancing.

Answer

BIOS serial number uniqueness

Answer

Assigned MAC address ranges

Answer

Guest operating system disk partition type

Question 9

An administrator needs to optimize storage performance and capacity utilization in a vSphere Foundation cluster. Which TWO features or capabilities should be implemented? (Choose two.)

Accepted Answer

Storage vMotion to migrate virtual disks between different datastore tiers without downtime. Storage vMotion (A) is correct because it lets the administrator non-disruptively relocate virtual disks between datastore tiers, enabling better capacity utilization and performance placement without VM downtime. Storage I/O Control (B) is correct because SIOC enforces per-VM or per-datastore share-based I/O prioritization when a datastore experiences high latency, protecting critical workloads and optimizing performance under contention. The other options do not fit: vSphere HA (C) provides VM restart on host failure, not block-level datastore replication; Host Profiles (D) enforce host configuration compliance, not datastore capacity alerting; and Network I/O Control (E) manages network bandwidth allocation, not SAN disk compression.

Answer

vSphere High Availability to replicate datastore blocks across the network

Answer

Host Profiles to manage datastore capacity alerts

Answer

Network I/O Control to compress virtual disk files on the SAN

Question 10

An administrator is managing virtual machine snapshots in a vSphere Foundation environment. Which TWO statements regarding snapshots are accurate? (Choose two.)

Accepted Answer

Running a virtual machine on delta disks (snapshots) for extended periods can negatively impact I/O performance.. Option A is correct because when a VM runs on snapshot delta disks, all writes go to the growing delta file and reads must traverse the snapshot chain, which adds I/O overhead and degrades performance over extended periods. Option E is correct because a vSphere snapshot captures the VM's disk state (a delta disk preserving the base VMDK), the VM settings/configuration, and optionally the memory state when 'Snapshot the virtual machine's memory' is selected. Option B is incorrect because snapshots do not alter the underlying UUID of the base virtual machine disk; the base VMDK retains its identity while changes are redirected to delta disks. Option C is incorrect because snapshots are not full, independent backups—they depend on the base VMDK and parent snapshots, so they are unsuitable for long-term disaster recovery. Option D is incorrect because vSphere does not automatically merge or consolidate snapshots every 24 hours; consolidation only occurs when initiated manually or via specific operations like Delete or Delete All.

Answer

Snapshots change the underlying UUID of the virtual machine disk.

Answer

Snapshots provide a full, independent backup copy of a virtual machine for long-term disaster recovery.

Answer

Snapshots automatically merge into the base VMDK every 24 hours by default.

Question 11

An administrator is managing user access and permissions within a vSphere Foundation vCenter Server environment. Which TWO best practices should be followed when assigning privileges? (Choose two.)

Accepted Answer

Assign permissions to Active Directory groups rather than local vCenter users when integrating directory services.. Option A is correct because when vCenter Server is integrated with Active Directory (via the vSphere Client's identity source configuration), assigning permissions to AD groups rather than individual local vCenter users centralizes account management, simplifies onboarding/offboarding, and ensures permissions are consistently inherited through group membership. Option B is correct because the principle of least privilege requires granting users only the minimum rights needed to perform their tasks, which is achieved by selecting built-in roles (e.g., Read Only, Virtual Machine User) or creating custom roles that contain only the required privileges rather than over-provisioning. Option C is not a best practice because the Administrator@vsphere.local account is the default SSO administrative account needed for recovery and break-glass scenarios; disabling it permanently can cause irrecoverable lockout, so it should instead be secured with a strong password and monitored. Option D is incorrect because assigning everyone the Global Administrator role violates least privilege and dramatically expands the attack surface; lockout prevention is better handled by maintaining a documented break-glass account. Option E is incorrect because assigning permissions directly to individual user accounts is harder to audit and maintain at scale, and best practice favors group-based permission assignment.

Answer

Disable the Administrator@vsphere.local account permanently immediately after installation.

Answer

Assign all administrators the Global Administrator role to prevent lockout scenarios.

Answer

Assign permissions directly to individual user accounts for easier tracking.

Question 12

An enterprise environment using vSphere Foundation requires strict regulatory compliance. Which THREE features can be leveraged to secure virtual machines and data at rest or in transit? (Choose three.)

Accepted Answer

Encrypted vMotion to secure virtual machine data in transit during migration. Option B (Encrypted vMotion) is correct because it encrypts the VM's memory and state data as it travels over the network during a live migration, protecting data in transit against interception. Option C (UEFI Secure Boot for VMs) is correct because it validates the boot loader and kernel signatures against trusted certificates, preventing unauthorized or tampered boot loaders from executing at VM startup. Option E (VM Encryption) is correct because it uses the vSphere encryption framework with a KMS to encrypt VM files, disks, and memory state at rest, satisfying data-at-rest protection requirements. Option A is incorrect because Fault Tolerance provides continuous availability via a secondary shadow VM, not encryption, and it does not encrypt physical NICs. Option D is incorrect because Storage DRS anti-affinity rules control placement of VMs across datastores for availability/performance, not encryption of storage pools.

Answer

Fault Tolerance dual-shadow replication to encrypt physical network cards

Answer

Storage DRS anti-affinity rules to encrypt storage pools

Question 13

An administrator needs to deploy a standardized set of virtual machines across multiple vSphere clusters within a vSphere Foundation environment. Which vSphere feature should be used to ensure consistent deployment configurations and lifecycle management of these VM templates?

Accepted Answer

Content Library. Content Library is the vSphere feature designed to store and manage VM templates, vApps, and other files in a centralized, synchronized repository. It ensures consistent deployment configurations by allowing administrators to publish a single library and subscribe to it across multiple vCenter Servers or clusters, so every deployment uses the same template version. It also supports lifecycle management through versioning and updates, making it ideal for standardized VM provisioning across a vSphere Foundation environment.

Answer

vSphere Lifecycle Manager (vLCM)

Answer

Storage Distributed Resource Scheduler (Storage DRS)

Answer

vSphere Auto Deploy

Question 14

An administrator manages a vSphere 9.0 cluster with vSphere DRS enabled. A critical database virtual machine running in the cluster is experiencing CPU performance degradation because it frequently contends for resources with less important batch processing VMs. Which action should the administrator take in the vSphere Client to prioritize this critical VM without changing the cluster-wide DRS automation level?

Accepted Answer

Navigate to the cluster, go to Configure > vSphere DRS > VM Overrides, and add the database VM with a custom automation level or adjusted shares.. The correct action is to use VM Overrides under the cluster's DRS configuration. This allows the administrator to set a custom automation level or adjust CPU shares for the database VM without altering the cluster-wide DRS automation level. By increasing the CPU shares, the database VM receives a higher priority relative to the batch processing VMs during resource contention. This is a targeted, non-disruptive change that respects the requirement to keep the cluster-wide automation level unchanged.

Answer

Enable vSphere Predictive DRS using VMware Aria Operations to manually migrate the batch processing VMs.

Answer

Edit the cluster settings and change the DRS Aggressiveness slider to Level 5 (Aggressive).

Answer

Create a new Host Affinity Rule to bind the database VM to a dedicated physical ESXi host within the cluster.

Question 15

An administrator is managing a vSphere 9.0 cluster configured with vSphere High Availability (HA). During a sudden network partition where ESXi management networks are severed between hosts, the isolated hosts cannot reach the primary HA node. If the host isolation response is set to 'Power off and restart VMs', what exact action will the isolated ESXi host take regarding the running virtual machines on that host?

Accepted Answer

It will power off the virtual machines locally, allowing other surviving hosts in the cluster to restart them.. With the host isolation response set to 'Power off and restart VMs', the isolated ESXi host powers off its running VMs locally. The surviving hosts in the cluster, coordinated by the HA master, then restart those VMs according to the cluster's admission control and restart priority settings. This prevents split-brain by ensuring only one instance of each VM runs.

Answer

It will immediately migrate all VMs to a healthy host via vMotion before shutting down.

Answer

It will reboot the ESXi host operating system without affecting the running virtual machines.

Answer

It will pause all virtual machines and wait indefinitely for the management network to recover.