VCP-DCV vSphere Lifecycle Management Practice Question
A vSphere administrator needs to apply a critical ESXi security patch to a cluster of 10 hosts. The cluster is managed by vLCM using image-based management. What is the correct procedure to apply the patch?
⚠ Common exam trap
VCP-DCV often tests the confusion between legacy VUM baselines and modern vLCM images — candidates who default to 'create a baseline' miss that image-based clusters require updating the image itself, not attaching a baseline.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update the cluster image to include the patched version and remediate the cluster.
In vLCM image-based management, patches are applied by updating the cluster's image to a newer ESXi base image version that includes the patch, then remediating the cluster. vLCM computes the difference between the current host state and the desired image state and applies only the necessary changes, rolling through hosts per the remediation settings (e.g., maintenance mode, DRS). This is the correct image-based workflow.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a new baseline group with the patch and attach it to the cluster.
Why it's wrong here
Baseline groups belong to the legacy baseline-based vLCM workflow; image-based clusters are patched by editing the cluster image and remediating, so a baseline group cannot be attached. It is tempting because baselines are the familiar patching mechanism, and they would be correct for a cluster still managed with baselines rather than images.
- ✓
Update the cluster image to include the patched version and remediate the cluster.
Why this is correct
Updating the cluster image to include the patched ESXi version, then remediating the cluster, satisfies image-based management's requirement that desired state be declared at cluster level. vLCM compares each host against the image and applies only the delta, patching all 10 hosts consistently without per-host baselines.
- ✗
Manually update each host using the patch's ISO.
Why it's wrong here
Manual ISO updates bypass vLCM entirely, leaving the cluster's declared image and hosts out of sync, so compliance checks flag drift. It is tempting because ISO installation is a reliable fallback, and it would be correct for standalone hosts or clusters without vLCM image management.
- ✗
Use vCenter Update Manager to push the patch as a baseline.
Why it's wrong here
Update Manager baselines apply to the legacy baseline-based workflow; an image-managed cluster ignores baselines, so the patch never enters the desired image. It is tempting because Update Manager is the traditional patching tool, and it would be correct for clusters still using baseline-based vLCM.
Go deeper
Related to this question
About these practice questions
One of 281 original VCP-DCV practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official VMware exam blueprint
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.