Courseiva

VMware Certified Professional Data Center Virtualization VCP-DCV (VCP-DCV) — Questions 1–75

498 questions total · 7pages · All types, answers revealed

Take a mock examExam hub

Page 1 of 7

Page 2
1
MCQhard

Refer to the exhibit. An administrator runs vmkfstools -Ph on a VSAN datastore. The output shows VMFS version 3.61 and a capacity of 2.0 TB. Which statement is true about this datastore?

A.The datastore is a VMFS datastore that has been upgraded to version 3.61.
B.The datastore is a Virtual Volumes datastore, which uses VMFS 3.61.
C.The datastore is an NFS datastore mounted as VMFS 3.61.
D.The datastore is a vSAN datastore, and the VMFS version shown is for compatibility with VMFS tools.
AnswerD

vSAN datastores appear as VMFS 3.61 to allow tools like vmkfstools to read them.

Why this answer

The exhibit shows a VSAN datastore displayed as VMFS version 3.61. vSAN datastores are presented as VMFS version 3.61 to maintain compatibility with VMFS tools. The actual vSAN object store is not formatted with VMFS, but vmkfstools reports this version for compatibility.

Full explanation →
2
MCQeasy

An administrator needs to expand a VMFS5 datastore that is currently 2 TB in size. The underlying LUN is 5 TB. What is the maximum size the datastore can be expanded to without involving additional LUNs?

A.64 TB
B.5 TB
C.4 TB
D.2 TB
AnswerB

Correct: The datastore can use the entire 5 TB LUN.

Why this answer

VMFS5 supports datastores up to 64 TB, but the underlying LUN size limits the datastore expansion. The LUN is 5 TB, so the datastore can be expanded to the full LUN size of 5 TB. Option A (64 TB) is incorrect because it exceeds the LUN capacity.

Option C (4 TB) is incorrect because it is less than the available LUN size. Option D (2 TB) is incorrect because it is the current size, not the maximum expansion.

Full explanation →
3
MCQhard

Refer to the exhibit. An administrator attempts to apply this cluster image to an ESXi 8.0.1 cluster, but the image validation fails. What is the most likely cause?

A.The 'nmlx5-core' component version is incompatible with the selected ESXi base image.
B.The vendor addon 'VXLAN/5.6.0' is not compatible with ESXi 8.0.1.
C.The firmware section is empty.
D.The 'Intel-i40en' component is missing a critical bug fix.
AnswerB

VXLAN 5.6.0 is designed for ESXi 7.x and is not supported on ESXi 8.0.1.

Why this answer

The vendor addon 'VXLAN/5.6.0' is explicitly listed as incompatible with the ESXi 8.0.1 base image. In vSphere Lifecycle Management, a cluster image consists of an ESXi base image, optional vendor addons, and firmware/driver components. If a vendor addon version is not certified or supported for the selected base image version, image validation will fail.

The error indicates that the VXLAN addon version 5.6.0 does not meet compatibility requirements for ESXi 8.0.1.

Exam trap

The trap here is that candidates often assume validation failures are caused by missing firmware or driver bugs, but vLCM strictly enforces vendor addon compatibility with the base image, and an empty firmware section is permissible.

How to eliminate wrong answers

Option A is wrong because the 'nmlx5-core' component version is not inherently incompatible with the ESXi 8.0.1 base image; the error message specifically points to the vendor addon, not a core driver. Option C is wrong because an empty firmware section does not cause image validation failure; firmware is optional and can be added later via a hardware support manager (HSM) or left empty without blocking validation. Option D is wrong because the 'Intel-i40en' component missing a critical bug fix would not cause a validation failure; missing bug fixes are typically flagged as warnings or non-critical issues, not hard validation errors.

Full explanation →
4
MCQmedium

An administrator runs vmkfstools on a VMFS datastore and receives the output shown. The datastore is backed by a single LUN from a SAN array. What is the most likely explanation for the multiple extents shown?

A.The LUN was presented to the host with multiple paths, and each path is treated as a separate extent.
B.The datastore was expanded by adding an extent from the same LUN.
C.The datastore is a VMFS6 datastore with three logical volumes aggregated into one namespace.
D.The virtual machine has a large VMDK file that spans multiple extents due to VMFS6 sub-block allocation.
AnswerB

When expanding a VMFS datastore, the system can add extents from the same LUN, leading to multiple extents as shown.

Why this answer

When a VMFS datastore is expanded using the same LUN, vmkfstools can show multiple extents because the additional space is added as a separate extent on the same physical LUN. This is a common practice to grow a datastore without reprovisioning a new LUN, and the output reflects the original and expanded extents both pointing to the same LUN identifier.

Exam trap

The trap here is that candidates confuse multipathing (multiple paths to a LUN) with multiple extents, or assume that VMFS6's sub-block allocation creates extents for VMDK files, when in fact extents are a datastore-level construct, not a virtual disk feature.

How to eliminate wrong answers

Option A is wrong because multiple paths to the same LUN are managed by the host's multipathing plugin (e.g., NMP or SATP) and do not create separate extents; vmkfstools would show a single extent with multiple paths. Option C is wrong because VMFS6 does not aggregate multiple logical volumes into one namespace; it uses a single volume with sub-blocks and block sizes, and extents are not logical volumes. Option D is wrong because a large VMDK file spanning extents is a characteristic of VMFS2/3's extent-based file system, not VMFS6, and vmkfstools output showing multiple extents refers to the datastore's extents, not the virtual disk's allocation.

Full explanation →
5
MCQeasy

An administrator wants to limit the amount of CPU resources a single VM can consume in a vSphere cluster. Which feature should be used?

A.CPU affinity
B.CPU reservation
C.Resource pools
D.CPU limit
AnswerD

CPU limit restricts the maximum CPU usage of a VM.

Why this answer

A CPU limit sets an upper bound on CPU usage, which is exactly what the administrator needs to limit a single VM's CPU consumption. Option D is correct. Option A (CPU affinity) binds vCPUs to specific physical cores, but does not limit usage.

Option B (CPU reservation) guarantees a minimum amount of CPU, not a limit. Option C (resource pools) can be used to set limits on a group of VMs, but for a single VM, a CPU limit is the direct feature.

Full explanation →
6
MCQmedium

An administrator wants to use vLCM to manage firmware for a cluster of Dell PowerEdge servers. What is required?

A.Manual download of firmware ISOs
B.Dell OpenManage Enterprise
C.vSphere Update Manager baseline
D.vCenter Server with vLCM and hardware support manager (HSM)
AnswerD

The HSM communicates with Dell's firmware catalog and is required to apply firmware updates via vLCM.

Why this answer

VLCM requires a vCenter Server with vLCM enabled and a hardware support manager (HSM) specific to the server vendor, such as Dell OpenManage Enterprise, to manage firmware updates. Option A is incorrect because vLCM handles firmware downloads via the HSM, not manual ISOs. Option B is incorrect because OpenManage Enterprise alone is not sufficient without vLCM integration.

Option C is incorrect because vLCM replaces vSphere Update Manager for firmware management in this context.

Full explanation →
7
Multi-Selecthard

An administrator is configuring a distributed switch with LACP. Which two statements are true regarding LACP support on vSphere distributed switches? (Choose two.)

Select 2 answers
A.LACP supports both active and passive modes.
B.LACP automatically distributes traffic based on IP hash.
C.LACP can be configured on standard vSwitches.
D.LACP requires a Link Aggregation Group (LAG) to be created on the distributed switch.
E.LACP is only supported for virtual machine traffic, not for management or vMotion.
AnswersA, D

DVS supports both LACP modes.

Why this answer

Options A and D are correct. LACP supports both active and passive modes (A). A LAG must be created on the distributed switch for LACP (D).

Option B is false because LACP does not automatically distribute traffic based on IP hash; the load balancing algorithm is configured on the LAG. Option C is false because LACP is only supported on distributed switches, not standard vSwitches. Option E is false because LACP can be used for all traffic types, including management and vMotion.

Full explanation →
8
MCQeasy

What is the maximum number of paths that vSphere supports for a single storage device?

A.8
B.256
C.32
D.4
AnswerC

vSphere supports up to 32 paths per device.

Why this answer

vSphere supports up to 32 paths per storage device. 4 paths is common for some arrays, 8 is typical but not the maximum, and 256 is too high.

Full explanation →
9
MCQmedium

An administrator is using vLCM to manage a cluster with a single image. The cluster contains four ESXi hosts. After updating the image to a new ESXi version, the administrator attempts to remediate the cluster but only three hosts are successfully remediated. The fourth host remains in a 'Non-Compliant' state with the message: 'Host does not have sufficient memory to perform remediation.' What should the administrator do to resolve this issue?

A.Use the 'Force Remediate' option in vLCM to bypass the check.
B.Place the host into maintenance mode to evacuate VMs before remediation.
C.Increase the physical memory of the host.
D.Reboot the host to free up memory.
AnswerB

Maintenance mode ensures no VMs are running, freeing memory for remediation.

Why this answer

VLCM requires the host to be in maintenance mode before remediation to free up memory resources for the update process. The error 'Host does not have sufficient memory to perform remediation' indicates that running VMs are consuming memory that is needed for the remediation operation. Placing the host into maintenance mode evacuates all VMs, releasing memory and allowing the remediation to proceed.

Exam trap

The trap here is that candidates may think the error is about insufficient physical memory and choose to increase memory or reboot, when the real issue is that the host is not in maintenance mode and running VMs are consuming the memory needed for remediation.

How to eliminate wrong answers

Option A is wrong because 'Force Remediate' does not bypass memory checks; it is used to override compliance warnings or errors related to hardware compatibility or driver issues, not memory constraints. Option C is wrong because increasing physical memory is unnecessary and does not address the immediate issue of memory being consumed by running VMs; the host likely has sufficient physical memory but it is occupied by workloads. Option D is wrong because rebooting the host will not free up memory if VMs are still running; it would only temporarily clear memory but VMs would restart and consume memory again, and the host must be in maintenance mode for vLCM remediation anyway.

Full explanation →
10
Multi-Selectmedium

Which TWO features are available only in the vSphere Enterprise Plus edition?

Select 2 answers
A.vSphere Fault Tolerance
B.Storage vMotion
C.vSphere HA
D.vSphere vMotion
E.vSphere DRS
AnswersA, E

Correct: FT requires Enterprise Plus.

Why this answer

vSphere Fault Tolerance (FT) is an Enterprise Plus exclusive feature that provides continuous availability for virtual machines by creating a secondary VM that runs in lockstep with the primary VM, using vLockstep technology to replicate CPU and memory state. This ensures zero data loss and zero downtime in the event of a host failure, but it requires the Enterprise Plus license tier because of the advanced resource management and coordination overhead.

Exam trap

The trap here is that candidates often confuse vSphere DRS as a Standard edition feature, but DRS is actually an Enterprise Plus exclusive, while vMotion and HA are available in lower editions, leading to incorrect selections.

Full explanation →
11
MCQhard

An administrator attempts to expand a VMFS datastore by increasing the LUN size, but the expand option is grayed out. What could be the reason?

A.The datastore is using block size 2 MB
B.The LUN is shared with another datastore
C.The host is not rescanned
D.The datastore is on a RDM
AnswerB

A LUN can only be used by one datastore; sharing prevents expansion.

Why this answer

If the LUN is shared with another datastore, it cannot be expanded because a LUN can belong to only one datastore. Block size does not affect expansion; RDMs are not used for VMFS; rescan is unrelated to the grayed-out option.

Full explanation →
12
MCQeasy

A company uses vSphere 7 with Distributed Resource Scheduler (DRS). They want to ensure that VMs are migrated to hosts with more available resources during peak load. Which default DRS setting controls the aggressiveness of initial placement and migration?

A.Migration threshold
B.VM monitoring sensitivity
C.EVC mode
D.HA admission control
AnswerA

The migration threshold controls DRS aggressiveness.

Why this answer

The DRS migration threshold (1-5) determines how aggressively DRS will recommend and apply migrations. Option A is correct. Options B, C, D are unrelated to DRS migration aggressiveness.

Full explanation →
13
MCQeasy

An administrator wants to ensure that no user can view or modify VMs in a particular folder except the folder owner. What is the proper method to achieve this?

A.Use the No Access permission on the folder for all other users.
B.Assign the folder owner with Administrator role on the folder.
C.Create a global role that denies access to all VMs except the folder owner.
D.On the folder, assign permissions to the folder owner with the desired role and ensure propagation is set to 'All children'.
AnswerD

Correct. Assigning the folder owner the desired role on the folder with propagation set to 'All children' ensures the owner has the necessary permissions on the folder and all VMs within it, while other users, lacking explicit permissions, cannot view or modify the VMs.

Why this answer

Assigning the folder owner the desired role on the folder with propagation set to 'All children' grants permissions to the folder and all VMs within it, while other users without explicit permissions cannot view or modify the VMs. Option A is incorrect because 'No Access' on the folder for all other users would block their access but does not grant the folder owner access unless also assigned. Option B is incorrect because the Administrator role is too broad and grants full administrative rights beyond the folder.

Option C is incorrect because a global role applies across the entire vCenter, not just a specific folder, and cannot be limited to a single folder owner.

Full explanation →
14
Multi-Selectmedium

Which TWO statements accurately describe vSphere Lifecycle Manager (vLCM) image-based management features?

Select 2 answers
A.An image includes ESXi version, firmware/driver version, and additional components.
B.Only vendor-specific images from OEMs are supported.
C.A single vLCM image can be applied to a maximum of 10 hosts in a cluster.
D.Offline bundles can be imported to create a custom image for the cluster.
E.Multiple images can be assigned to different hosts within the same cluster.
AnswersA, D

Image defines all components for a consistent cluster state.

Why this answer

Options A and D are correct. Image-based management in vLCM uses a single image per cluster, which includes ESXi version, firmware/driver versions, and additional components (A). Offline bundles can be imported to create custom images (D).

Option B is incorrect because you can use custom images, not only vendor-specific ones. Option C is incorrect because there is no limit of 10 hosts; a single image applies to all hosts in the cluster. Option E is incorrect because only one image can be assigned per cluster.

Full explanation →
15
MCQhard

A vSphere administrator is tasked with scaling a cluster to support a new workload that requires high network throughput. The existing hosts have 10GbE NICs and are using the default vmnic driver. Which technology can improve network performance without additional hardware?

A.Enable SR-IOV on the physical NICs.
B.Enable NetQueue and increase the number of RX queues.
C.Increase the number of vCPUs for each VM.
D.Use vSphere vMotion to balance load.
AnswerB

NetQueue distributes packet processing across multiple CPUs, improving network performance.

Why this answer

NetQueue is a VMware technology that distributes network packet processing across multiple CPU cores by increasing the number of receive (RX) queues on the physical NIC. This reduces CPU bottlenecks and improves throughput for high-bandwidth workloads without requiring additional hardware. The default vmnic driver in vSphere supports NetQueue, making it a software-only performance enhancement.

Exam trap

The trap here is that candidates often confuse SR-IOV as a software-only feature, but it requires hardware support and dedicated NIC configuration, whereas NetQueue is a native vSphere optimization that works with standard drivers and no extra hardware.

How to eliminate wrong answers

Option A is wrong because SR-IOV requires hardware support and configuration on the physical NIC to create virtual functions, and it is not a software-only improvement; it also bypasses the vSphere network stack, which can complicate management. Option C is wrong because increasing vCPUs for each VM does not directly improve network throughput; it addresses CPU-bound workloads, not network I/O bottlenecks. Option D is wrong because vSphere vMotion is used for live migration of VMs to balance compute load, not to improve network performance on existing hosts; it does not enhance throughput or reduce latency.

Full explanation →
16
MCQmedium

An organization uses a VDS with 4 hosts. They want to use Network I/O Control (NIOC) to prioritize vMotion traffic over management traffic. After configuring NIOC, the administrator notices that vMotion performance is not improved. What could be the cause?

A.The vMotion VMkernel adapter is not assigned to the correct network resource pool
B.The physical uplinks are oversubscribed
C.The vMotion traffic is not marked with the appropriate CoS tag
D.NIOC is not enabled on the VDS
AnswerA

Without assigning the adapter to the vMotion resource pool, NIOC cannot prioritize vMotion traffic.

Why this answer

NIOC uses network resource pools to apply QoS policies. If the vMotion VMkernel adapter is not assigned to the appropriate network resource pool (e.g., vMotion pool), NIOC will not prioritize vMotion traffic. Option B is incorrect because oversubscribed uplinks can cause congestion but do not prevent NIOC from working; NIOC would still apply its shares to the traffic.

Option C is incorrect because NIOC does not rely on CoS tags; it uses shares and limits defined in resource pools. Option D is incorrect because the administrator configured NIOC, implying it is enabled; if it were not enabled, no NIOC functionality would be available.

Full explanation →
17
MCQhard

A VMware vSphere cluster uses vSphere Fault Tolerance (FT) for a critical virtual machine with 4 vCPUs. The administrator notices increased latency and CPU ready time on the primary VM. What is the most likely cause?

A.The network between the primary and secondary VM uses jumbo frames.
B.The virtual disks are thinly provisioned, causing I/O latency.
C.The VM has more than 2 vCPUs, increasing the overhead of deterministic replay.
D.The FT logging traffic is sent over multicast, causing packet loss.
AnswerC

vSphere FT for multi-vCPU VMs uses deterministic record/replay, which increases overhead with more than 2 vCPUs.

Why this answer

VSphere FT for multi-vCPU VMs uses a deterministic record/replay mechanism that can introduce significant overhead, especially with 4 vCPUs. Option A is incorrect because jumbo frames do not cause FT overhead. Option B is incorrect because thin provisioning affects storage I/O, not CPU ready time.

Option D is incorrect because FT does not use multicast; it uses a dedicated network for logging traffic.

Full explanation →
18
MCQhard

An administrator is deploying a latency-sensitive application in a vSphere environment. The application requires consistent low-latency network access. Which configuration would be the best practice to minimize network latency for this VM?

A.Use a dedicated physical NIC for the VM using direct path I/O (passthrough).
B.Disable TCP segmentation offload on the VM.
C.Use a distributed virtual switch with Load-Based Teaming.
D.Enable the VM's network adapter to use e1000 emulation.
AnswerA

PCI passthrough eliminates virtualization overhead, reducing latency.

Why this answer

Direct path I/O (PCI passthrough) allows the VM to access the physical NIC directly, bypassing the hypervisor network stack and reducing latency. Option A is correct. Option C (Load-Based Teaming) is for load balancing, not latency reduction.

Option B (disabling TSO) increases CPU overhead and does not reduce latency. Option D (e1000 emulation) is slower than VMXNET3 and adds overhead.

Full explanation →
19
MCQmedium

Based on the exhibit, what is the compliance status of Host1?

A.Compliant
B.Both hosts are non-compliant.
C.Non-compliant
D.Compliance cannot be determined.
AnswerC

Host1 has an older base version.

Why this answer

Host1 is running a different version than the cluster image (5.5 vs 6.0), so it is non-compliant. Option A is wrong because Host1 is not compliant. Option B is wrong because both hosts are not compliant.

Option D is wrong because Host2 is compliant.

Full explanation →
20
MCQmedium

A company has a vLCM-managed cluster with hosts that have different hardware models (heterogeneous). The administrator needs to manage updates for all hosts. What is the correct approach?

A.Use vSphere baselines to manage each host individually.
B.Create a cluster image that includes all necessary drivers for both hardware models.
C.Use a single image and manually add missing drivers after remediation.
D.Create multiple host images, each tailored to a specific hardware model.
AnswerD

vLCM allows multiple host images in a cluster for heterogeneous environments.

Why this answer

VLCM supports heterogeneous clusters by creating multiple host images, one per host hardware configuration. Option A is wrong because baselines are a legacy method for managing updates, not recommended for vLCM. Option B is wrong because a single cluster image is intended for homogeneous clusters, not heterogeneous.

Option C is wrong because manually adding missing drivers after remediation is not a supported approach for vLCM.

Full explanation →
21
Drag & Dropmedium

Place the steps to create a resource pool in a cluster.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

Creating a resource pool in a vSphere cluster involves first initiating the creation by right-clicking the cluster and selecting New Resource Pool, then providing a name, followed by configuring CPU and memory resources including shares, reservation, and limit, optionally enabling expandable reservation, and finally confirming by clicking OK. This sequence ensures all required parameters are set before finalizing the resource pool.

Full explanation →
22
MCQhard

An administrator is troubleshooting SSH connectivity to an ESXi host from a management workstation at 10.10.10.2. The SSH session is established, but the administrator cannot ping the host's IP 10.10.10.1. Based on the exhibit, what is the most likely cause?

A.The default gateway is not set correctly.
B.ICMP traffic is blocked by the ESXi firewall.
C.The SSH service is not running on the host.
D.The management workstation is on a different VLAN.
AnswerB

ESXi firewall blocks ping by default.

Why this answer

The administrator can establish an SSH session, which proves that the ESXi host's SSH service is running and that TCP port 22 is reachable from the management workstation. However, the inability to ping the host's IP address (10.10.10.1) indicates that ICMP echo requests are being blocked. By default, the ESXi firewall blocks ICMP traffic, so the most likely cause is that ICMP is filtered by the host firewall.

Exam trap

The trap here is that candidates assume SSH connectivity implies full network reachability, but the ESXi firewall selectively permits services, so a successful SSH session does not guarantee that ICMP or other protocols are allowed.

How to eliminate wrong answers

Option A is wrong because the default gateway is not required for ping to succeed within the same subnet; the workstation (10.10.10.2) and the host (10.10.10.1) are on the same network segment, so no gateway is involved. Option C is wrong because the SSH session is established, which directly proves the SSH service is running and listening on TCP port 22. Option D is wrong because if the workstation were on a different VLAN, the SSH session would not be able to establish at all, as layer-3 routing would be required and the host's IP would be unreachable.

Full explanation →
23
MCQhard

A vSphere environment uses VMCA for certificate management. An administrator needs to replace the certificate for vCenter Server with a custom CA-signed certificate. The custom CA root certificate must be trusted by all ESXi hosts. Which method should the administrator use to distribute the custom CA root certificate to ESXi hosts?

A.Restart the rhttpproxy service on each ESXi host with a new configuration
B.Import the root CA certificate into vCenter Server and it will automatically push to hosts
C.Manually upload the root CA certificate to each ESXi host via SCP
D.Create a host profile containing the custom CA root certificate and apply it to the ESXi hosts
AnswerD

Host profiles provide consistent, policy-based distribution.

Why this answer

Using a host profile to apply the custom CA root certificate ensures consistent, policy-driven deployment across all ESXi hosts, leveraging vCenter's host profile functionality. Option A is incorrect: restarting the rhttpproxy service with a new configuration does not distribute certificates; it only restarts the proxy service. Option B is incorrect: while vCenter can manage machine SSL certificates, it does not automatically push root CA certificates to ESXi hosts; the administrator must explicitly import the root CA into the ESXi trust store, which is not done automatically by vCenter.

Option C is incorrect: manually uploading via SCP is not scalable and is not the recommended method for managing certificate trust across multiple hosts; host profiles provide a centralized, automated approach.

Full explanation →
24
MCQhard

An administrator manages a vSAN cluster with 5 ESXi hosts in a single failure domain. The cluster uses vSAN version 8 and is configured with a single disk group per host. A storage policy is applied to a group of VMs with 'Number of failures to tolerate = 1' and 'Primary level of failures = Host'. One host experiences a catastrophic hardware failure and is now marked as 'Absent' in the vSAN cluster. The administrator checks the vSAN health and finds that the affected host's disk group is completely lost. One of the VMs from that group previously had two replicas on different hosts and a witness component on a third host. The VM is still powered on, and the administrator sees that one replica was on the failed host. The other replica and witness are on surviving hosts. What is the current state of this VM regarding data accessibility?

A.The VM is accessible but performance is degraded because the disk group on the failed host is gone.
B.The VM is inaccessible because the lost replica cannot be rebuilt without a replacement host.
C.The VM is inaccessible because the witness component is now the only copy and cannot be used for reads.
D.The VM is fully accessible because it still has one replica and the witness.
AnswerD

The surviving replica and witness provide sufficient redundancy to maintain full data accessibility.

Why this answer

With FTT=1 and primary level of failures = Host, the VM's object has 2 replicas and 1 witness. The surviving replica and witness are sufficient to maintain full read/write access. vSAN can rebuild the lost replica on another host, but even before rebuild, the VM remains fully accessible because there is still a complete replica. Option D correctly states this.

Option A is incorrect because performance does not degrade; the VM uses the surviving replica. Option B is incorrect because the VM is accessible and can be rebuilt. Option C is incorrect because the witness is metadata; the VM has a full replica for reads.

Full explanation →
25
Multi-Selecteasy

An administrator is configuring a vSphere Standard Switch. Which two settings are essential for basic network connectivity of virtual machines?

Select 2 answers
A.Port group name
B.MTU
C.Network adapter type (e.g., E1000)
D.Security policy
E.VLAN ID
AnswersA, E

A unique name is required for the port group.

Why this answer

For basic network connectivity of virtual machines on a vSphere Standard Switch, a port group must be created. Two essential settings are the port group name (to identify the network) and a VLAN ID (to associate the VMs with the correct VLAN; VLAN 0 is the default untagged VLAN). Without a name, the port group cannot be created; without a VLAN ID, VMs may not be properly segmented or may lack network access.

Other options like MTU, network adapter type, and security policy are not essential for basic connectivity.

Full explanation →
26
MCQhard

A company runs a 3-node vSAN cluster with all-flash configuration. Each host has 2 CPUs (8 cores each) and 256 GB RAM. The cluster hosts 30 VMs, including a critical database VM with 8 vCPUs and 64 GB RAM. Recently, users report that the database VM is slow during peak hours. The administrator checks vCenter performance charts and sees that the VM's CPU ready time averages 10%, and the vSAN latency spikes to 15 ms during peak hours. The storage policy for the database VM is set to RAID-1 mirroring with 2 failures to tolerate (FTT=2). The cluster is configured with 3 disk groups per host, each with one 400 GB NVMe cache SSD and two 2 TB SAS SSD capacity drives. Which action would most improve the performance of the database VM?

A.Add one additional disk group to each host to increase storage performance.
B.Change the storage policy for the database VM to RAID-1 mirroring with FTT=1 (primary level of failures to tolerate).
C.Remove one host from the cluster to reduce network traffic.
D.Add a fourth host to the vSAN cluster to distribute the load.
AnswerB

Correct: Reducing FTT from 2 to 1 reduces the number of replicas from 3 to 2, decreasing write amplification and latency.

Why this answer

The database VM is experiencing high CPU ready time (10%) and vSAN latency spikes (15 ms). With FTT=2 and RAID-1 mirroring, each write must be replicated to three hosts (the primary and two mirrors), consuming significant storage and network resources. Reducing FTT to 1 lowers the write amplification from 3x to 2x, decreasing I/O latency and freeing up CPU cycles for the VM, directly addressing both symptoms.

Exam trap

The trap here is that candidates often focus on adding hardware (disk groups or hosts) to solve performance issues, overlooking that the storage policy's replication factor (FTT) directly controls write amplification and is the root cause of both CPU ready time and vSAN latency spikes.

How to eliminate wrong answers

Option A is wrong because adding a disk group per host would increase parallelism but does not reduce the write amplification caused by FTT=2; the bottleneck is the replication overhead, not raw disk group count. Option C is wrong because removing a host would reduce the cluster to 2 nodes, which cannot support FTT=2 (requires at least 3 hosts) and would likely cause data unavailability or performance degradation. Option D is wrong because adding a fourth host would distribute the load but still require the same FTT=2 replication factor, so the write amplification and latency issues would persist.

Full explanation →
27
Multi-Selecthard

Which THREE factors should be considered when planning a rolling upgrade of ESXi hosts in a vSphere cluster from version 7.0 to 8.0 using vLCM?

Select 3 answers
A.Check the compatibility of third-party VIBs with ESXi 8.0.
B.Ensure that the vCenter Server is upgraded to 8.0 before upgrading ESXi hosts.
C.Assume that all server hardware is supported by ESXi 8.0 since it is a major release.
D.Verify that the VUM rollback feature is configured to allow revert in case of failure.
E.Disable vSphere DRS to prevent VM migration during host maintenance.
AnswersA, B, D

Incompatible VIBs can cause hosts to fail after upgrade.

Why this answer

For a rolling upgrade of ESXi hosts from 7.0 to 8.0 using vLCM, you must check the compatibility of third-party VIBs with ESXi 8.0 (A). Additionally, the vCenter Server must be upgraded to 8.0 before upgrading ESXi hosts because vCenter manages the cluster (B). The VUM rollback feature, which is available in vLCM, should be configured to allow revert in case of failure (D).

Option C is incorrect because hardware compatibility must be verified via the VMware Compatibility Guide (HCL), not assumed just because it is a major release. Option E is incorrect because vSphere DRS should be enabled to allow automated VM migration during host maintenance, not disabled.

Full explanation →
28
Multi-Selectmedium

Which TWO conditions must be met for a successful Storage vMotion of a virtual machine with a raw device mapping (RDM) in physical compatibility mode?

Select 2 answers
A.The source and target datastores support SCSI-3 persistent reservations.
B.The source and target are on the same storage array.
C.The destination datastore is compatible with physical RDMs.
D.The virtual machine is using a shared virtual SCSI controller.
E.The virtual machine must be powered off.
AnswersA, C

Physical RDMs use SCSI-3 reservations.

Why this answer

The source and target datastores must support SCSI-3 persistent reservations for Storage vMotion with physical mode RDMs. Option C is correct because the destination datastore must be compatible with physical RDMs (i.e., support RDM in physical compatibility mode). Option B is incorrect because the source and target do not need to be on the same storage array; they can be different arrays.

Option D is incorrect because a shared virtual SCSI controller is not a requirement; the VM can use a standard controller. Option E is incorrect because the virtual machine can be powered on during Storage vMotion; it does not need to be powered off.

Full explanation →
29
Multi-Selecteasy

Which TWO actions are valid for optimizing network performance for vSphere clusters configured with Network I/O Control (NIOC)?

Select 2 answers
A.Allocate network shares to different traffic types based on business priority.
B.Enable traffic shaping on every virtual machine.
C.Disable NIOC on the virtual switch to reduce overhead.
D.Use host profiles to apply the same NIOC settings to all hosts in the cluster.
E.Set network resource pools with reservations for critical traffic types.
AnswersA, E

Shares determine bandwidth proportion during contention.

Why this answer

NIOC shares allocate bandwidth proportionally based on business priority. Option E is correct because network resource pools with reservations guarantee minimum bandwidth for critical traffic types. Option B is incorrect because traffic shaping is per-VM and not directly related to NIOC optimization; enabling it on every VM may cause overhead and is not a recommended NIOC practice.

Option C is incorrect because disabling NIOC removes the ability to prioritize traffic, which is counterproductive for optimization. Option D is incorrect because host profiles apply settings but are not a direct action for optimizing network performance; the correct action is to configure NIOC parameters themselves.

Full explanation →
30
MCQmedium

A vSphere cluster has DRS enabled with 'Partially automate' mode. A VM is consistently showing high CPU ready time. The administrator wants to ensure the VM is automatically migrated to a less loaded host. What must be done?

A.Enable EVC mode on the cluster
B.Set the VM's DRS automation level to 'Automatic'
C.Set the VM's DRS automation level to 'Manual'
D.Enable HA admission control
AnswerB

Automatic DRS level allows vCenter to automatically migrate the VM based on load.

Why this answer

In DRS 'Partially automated' mode, VMs are automatically placed on initial power-on, but migrations require manual intervention unless the VM's automation level is set to 'Automatic'. Setting it to 'Automatic' allows DRS to automatically migrate the VM to a less loaded host when high CPU ready time is detected. Option A is incorrect because EVC (Enhanced vMotion Compatibility) ensures CPU compatibility for vMotion but does not affect DRS migration decisions.

Option C is incorrect because 'Manual' would require an administrator to approve or manually trigger migrations. Option D is incorrect because HA admission control reserves resources for failover and does not address performance-based migrations.

Full explanation →
31
Matchingmedium

Match each vSphere component to its primary function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Centralized management of ESXi hosts and VMs

Hypervisor that runs VMs

Interface for managing vCenter and ESXi

Live migration of VMs without downtime

Automatic restart of VMs after host failure

Why these pairings

The correct matches: vCenter Server is the centralized management platform; ESXi is the hypervisor; vSphere vMotion enables live migration; vSphere HA provides high availability. Common confusions include mixing up management functions with migration or HA features.

Full explanation →
32
MCQmedium

An administrator is configuring a new iSCSI storage array for a vSphere cluster. The array supports multiple iSCSI targets. What is the recommended best practice for multipathing to ensure high availability and load balancing?

A.Use the management VMkernel port for iSCSI traffic to simplify configuration.
B.Create multiple VMkernel ports for iSCSI, each bound to a separate physical NIC, and configure multiple iSCSI targets.
C.Configure a single physical NIC with multiple VLANs for iSCSI traffic.
D.Use a single VMkernel port for iSCSI and assign multiple IP addresses to it.
AnswerB

This provides path redundancy and load balancing.

Why this answer

VMware best practices for iSCSI multipathing require multiple VMkernel ports, each bound to a separate physical NIC, and multiple iSCSI targets to provide both path redundancy and load balancing. This configuration leverages the Pluggable Storage Architecture (PSA) and native multipathing plugins (NMP) to distribute I/O across active paths while maintaining high availability through automatic path failover. Using separate VMkernel ports and NICs ensures that no single point of failure exists in the storage network.

Exam trap

The trap here is that candidates often confuse logical separation (VLANs or multiple IPs on one NIC) with true physical path redundancy, leading them to select options that appear to provide multipathing but actually create a single point of failure.

How to eliminate wrong answers

Option A is wrong because using the management VMkernel port for iSCSI traffic violates the principle of network isolation and can cause performance contention, as management and storage traffic share the same network stack and resources. Option C is wrong because configuring a single physical NIC with multiple VLANs for iSCSI traffic does not provide true multipathing; a single NIC failure would still cause complete storage connectivity loss, and VLANs alone do not create separate physical paths. Option D is wrong because a single VMkernel port with multiple IP addresses does not create independent paths; all traffic still traverses the same physical NIC and network stack, offering no redundancy or load balancing.

Full explanation →
33
MCQmedium

An administrator wants to replicate a critical VM to a remote site with a Recovery Point Objective (RPO) of 15 minutes. Which vSphere feature should be used?

A.Storage vMotion
B.vSphere Replication
C.vSphere vMotion
D.Site Recovery Manager (SRM)
AnswerB

Supports low RPOs down to 5 minutes.

Why this answer

VSphere Replication supports RPO as low as 5 minutes (depending on configuration). vMotion is for live migration, not replication. Storage vMotion is for storage migration. SRM uses replication but is a disaster recovery orchestration platform, not a replication engine itself.

Full explanation →
34
MCQeasy

An administrator wants to schedule a recurring maintenance window for vSphere Lifecycle Manager image-based remediation of a cluster. Which feature should be used?

A.vSphere Lifecycle Manager cluster settings.
B.vSphere vMotion.
C.vCenter Server scheduled tasks.
D.vSphere DRS maintenance mode schedule.
AnswerC

Scheduled tasks can run vLCM remediation operations.

Why this answer

VCenter Server scheduled tasks can be used to schedule recurring vSphere Lifecycle Manager image-based remediation tasks. Option A is incorrect because vSphere Lifecycle Manager cluster settings do not include scheduling capabilities; they define the desired image and remediation settings but not the schedule. Option B is incorrect because vSphere vMotion is a live migration feature, not a scheduling tool.

Option D is incorrect because the vSphere DRS maintenance mode schedule is used to put hosts into maintenance mode at specific times, but it does not trigger vSphere Lifecycle Manager remediation.

Full explanation →
35
MCQhard

A vSAN stretched cluster is configured with two witness hosts to allow for site failures. Performance troubleshooting reveals that write latency for synchronous writes is higher than expected for cross-site operations. Which setting should be reviewed as a likely cause?

A.vSAN preferred fault domain configuration
B.vSAN deduplication and compression
C.vSAN object repair timer
D.vSAN network MTU setting
AnswerA

If the VM is not using the local site as preferred, writes may be sent to a remote site, increasing latency.

Why this answer

In a stretched cluster, if the network latency between sites is high, it can increase write latency. The preferred fault domain setting can also affect latency if the VM's data is not local.

Full explanation →
36
MCQhard

A company runs a large vSphere environment with multiple clusters using vSAN. The performance team observes that some VMs are experiencing high latency on reads. The vSAN cluster is configured with 5 hosts, each having one cache tier (NVMe) and one capacity tier (SATA SSD). The VMs are all-flash storage policies. What should the administrator check first?

A.Disable deduplication and compression on the vSAN datastore.
B.Check the vSAN cache hit ratio and verify that the cache tier size is adequate.
C.Reconfigure the disk groups to use multiple cache devices.
D.Increase the network bandwidth between hosts.
AnswerB

Low cache hit ratio leads to reads from capacity tier, increasing latency.

Why this answer

High read latency in an all-flash vSAN environment often indicates that the cache tier is being overwhelmed or is undersized. The cache hit ratio directly measures how often read requests are served from the fast NVMe cache versus the slower SATA SSD capacity tier. A low cache hit ratio means the capacity tier is handling too many reads, causing latency.

Checking this ratio is the first diagnostic step before making configuration changes.

Exam trap

The trap here is that candidates often jump to network or disk group reconfiguration (options C or D) without first using the built-in performance metrics to isolate the bottleneck, or they mistakenly think disabling deduplication/compression (option A) will improve read latency when those features primarily affect capacity tier write performance and space efficiency.

How to eliminate wrong answers

Option A is wrong because disabling deduplication and compression (which operate on the capacity tier) would not directly address read latency caused by cache misses; it might even increase capacity tier writes. Option C is wrong because reconfiguring disk groups to use multiple cache devices is a potential remediation, but it should only be considered after verifying that the current cache tier is indeed the bottleneck via the cache hit ratio. Option D is wrong because increasing network bandwidth addresses network congestion, not read latency from local disk I/O; vSAN read operations are primarily local unless the VM is on a different host and the read policy requires remote access.

Full explanation →
37
MCQhard

A company is designing a vSphere environment for a critical database application. The storage array supports both Fibre Channel (FC) and iSCSI. The application requires low latency and high IOPS. Which storage protocol and path policy should be recommended?

A.FC with Fixed path policy.
B.FC with Most Recently Used (MRU) path policy.
C.iSCSI with Round Robin path policy.
D.FC with Round Robin path policy.
AnswerD

FC is low latency; Round Robin balances I/O across paths.

Why this answer

FC provides lower latency and higher IOPS than iSCSI due to dedicated hardware and lower protocol overhead, making it ideal for critical database workloads. The Round Robin path policy is recommended for FC with active-active storage arrays because it distributes I/O across all available paths, maximizing throughput and load balancing, which aligns with the requirement for high IOPS.

Exam trap

The trap here is that candidates often assume MRU is the default for FC or that Fixed is sufficient, but the VCP-DCV exam tests the understanding that Round Robin is the recommended path policy for active-active arrays to achieve load balancing and high IOPS, especially for performance-sensitive workloads like databases.

How to eliminate wrong answers

Option A is wrong because the Fixed path policy uses a single preferred path and only switches on failure, which does not optimize for high IOPS or load balancing across multiple paths. Option B is wrong because the Most Recently Used (MRU) path policy is designed for active-passive arrays and can cause path thrashing or suboptimal performance in active-active environments, failing to meet low-latency and high-IOPS needs. Option C is wrong because iSCSI typically incurs higher latency and CPU overhead compared to FC due to TCP/IP processing, making it less suitable for a critical database application requiring low latency and high IOPS.

Full explanation →
38
MCQeasy

A vSphere cluster with 3 ESXi hosts (each with 2 sockets, 8 cores per socket, hyperthreading enabled, and 256 GB RAM) runs a set of web server VMs. The cluster is configured with DRS enabled and a migration threshold of 3 (conservative). The administrator notices that one host has consistently high CPU ready time (average 15%) while the other two hosts have ready time below 2%. The host with high ready time has 10 VMs, while the others have 6 each. CPU utilization on the busy host is 80%, while on the other hosts it is 40%. What should the administrator do to improve the situation with minimal disruption?

A.Disable Hyper-Threading on all hosts to reduce vCPU contention.
B.Manually migrate some VMs from the overloaded host to the other hosts using vMotion.
C.Add a fourth host to the cluster.
D.Increase the DRS migration threshold to a more aggressive value (e.g., 4 or 5).
AnswerD

A higher threshold allows DRS to balance the cluster more aggressively, moving VMs away from the overloaded host.

Why this answer

The cluster is unbalanced because DRS is not migrating VMs aggressively enough. Increasing the DRS migration threshold to a more aggressive level will allow DRS to move VMs from the overloaded host to the underutilized hosts. Option D is the best immediate step.

Option A would increase overhead and is not best practice. Option B would be effective but requires manual intervention and may not be the simplest. Option C would add capacity but is a longer-term solution.

Full explanation →
39
MCQhard

A large enterprise manages a vSphere cluster of 32 ESXi hosts using vLCM image-based management. The cluster spans two data centers (DC1 and DC2) with 16 hosts each. The administrator has configured a single cluster image for the entire cluster. Recently, the administrator added 4 new hosts in DC2 that have a newer generation of network cards requiring a specific driver. The administrator updated the cluster image to include the new driver component, then started remediation for the entire cluster. During remediation, the administrator noticed that hosts in DC1, which do not require the new driver, began to fail remediation with 'Component Not Applicable' errors. Additionally, several hosts in DC1 entered a non-responsive state and had to be manually recovered. The administrator needs to prevent such issues in the future while still managing all hosts with a single image. What is the best course of action?

A.Maintain a single image but remediate hosts in DC1 and DC2 separately by using vLCM pre-checks.
B.Create two separate clusters, one for each data center, each with its own image tailored to the hardware.
C.Use vLCM hardware compatibility checks to exclude the driver component for hosts that do not need it.
D.Add the driver component as an optional component in the image, not a required one.
AnswerD

Optional components are only installed on hosts that have the corresponding hardware.

Why this answer

Marking the driver component as optional allows vLCM to install it only on hosts where it is applicable, preventing 'Component Not Applicable' errors on hosts that do not require the driver. Option A is wrong because hardware compatibility checks cannot exclude a component per host; pre-checks only verify compatibility but do not change the required nature. Option B is wrong because splitting the cluster is unnecessary and adds management overhead; a single image with optional components can handle hardware diversity.

Option C is wrong because remediating separately does not resolve the issue that the component is required; if it is required, it will still fail on hosts where it is not applicable.

Full explanation →
40
MCQhard

Refer to the exhibit. An administrator configures a claim rule to use VMW_SATP_ALUA with VMW_PSP_RR and TPGS enabled. After applying the rule, the device shows one active and one standby path. However, the administrator notices that I/O is only sent to the active path. What is the most likely reason?

A.The PSP should be changed to VMW_PSP_MRU to use both paths.
B.The array is not properly configured to present both paths as active/optimized.
C.The claim rule should have used VMW_SATP_DEFAULT_AA instead.
D.The TPGS option should be disabled to force both paths active.
AnswerB

For RR to use multiple paths, the array must set both paths as active/optimized. One standby path will not receive I/O.

Why this answer

With ALUA, paths have asymmetric access states. The PSP RR distributes I/O across all active paths. If only one path is active and the other is standby, RR will only use the active path.

The standby path is not used for I/O. To utilize both paths, the array must present both paths as active/optimized. This is expected behavior for ALUA with one standby path.

Full explanation →
41
MCQhard

A vSphere environment uses vSAN and has VM encryption enabled. The administrator needs to recover a VM after an encrypted disk becomes corrupted. What is required?

A.The vSAN health service.
B.A recent backup of the VM files.
C.The key management server (KMS) and the KEK/Rekey.
D.The VM’s storage policy.
AnswerC

The key management server (KMS) and the encryption keys (KEK/Rekey) are required to decrypt the corrupted VM.

Why this answer

Recovering a VM from a corrupted encrypted disk in a vSAN environment with VM encryption enabled requires access to the key management server (KMS) and the encryption keys (KEK/Rekey). Without these keys, the encrypted data cannot be decrypted. Option A is incorrect because the vSAN health service monitors vSAN health but does not provide cryptographic keys.

Option B is incorrect because a backup of VM files alone is insufficient; the backup would still be encrypted and require the same keys to restore. Option D is incorrect because the VM's storage policy defines properties like encryption, but the policy itself does not contain the actual encryption keys needed for recovery.

Full explanation →
42
MCQeasy

An administrator notices that a VM with a 500 GB virtual disk stored on an NFS datastore is performing poorly during backup operations. The NFS datastore is mounted with default settings. Which change will most likely improve performance?

A.Move the VM to a cluster with more memory.
B.Enable jumbo frames on the ESXi host's VMkernel adapter for NFS.
C.Increase the size of the NFS datastore to 1 TB.
D.Configure the NFS datastore to use vStorage APIs for Array Integration (VAAI).
AnswerD

VAAI offloads storage operations to the array, improving performance.

Why this answer

VAAI for NFS offloads storage operations like hardware-assisted locking and full-file/clone operations to the NAS array, reducing CPU overhead on the ESXi host and improving performance during backup-intensive tasks. Since the NFS datastore is mounted with default settings, VAAI is not automatically enabled and must be explicitly configured to leverage array-based primitives.

Exam trap

The trap here is that candidates often assume jumbo frames (Option B) are the universal fix for NFS performance issues, but the question specifically points to backup operations, where VAAI offloads are the targeted solution for storage-level bottlenecks.

How to eliminate wrong answers

Option A is wrong because moving the VM to a cluster with more memory does not address the I/O bottleneck on the NFS datastore; backup performance is limited by storage latency and network throughput, not host memory. Option B is wrong because enabling jumbo frames on the VMkernel adapter for NFS can improve network efficiency for large transfers, but it does not directly optimize the storage operations (e.g., locking, cloning) that cause poor backup performance; the issue is likely due to software-based operations that VAAI can offload. Option C is wrong because increasing the NFS datastore size to 1 TB does not affect performance; it only provides more storage capacity, which does not resolve the underlying I/O or protocol overhead during backups.

Full explanation →
43
Multi-Selecthard

Which TWO statements about vCenter Single Sign-On (SSO) are true? (Choose two.)

Select 2 answers
A.It supports multiple identity sources such as Active Directory and LDAP
B.It uses Kerberos to authenticate users to vCenter Server
C.It stores user passwords in plaintext for faster authentication
D.It requires a Windows Active Directory domain to function
E.It uses SAML 2.0 tokens for authentication between vCenter services
AnswersA, E

SSO can integrate with various identity providers.

Why this answer

vCenter Single Sign-On (SSO) allows users to authenticate using multiple identity sources, including Active Directory and LDAP, making option A correct. SSO uses SAML 2.0 tokens for secure authentication between vCenter services, so option E is correct. Option B is incorrect because SSO does not primarily use Kerberos for user authentication to vCenter; it uses SAML tokens.

Option C is false as SSO never stores passwords in plaintext; they are hashed. Option D is wrong because SSO can function without a Windows Active Directory domain; it supports multiple identity sources.

Full explanation →
44
MCQhard

A large financial organization has a vSphere cluster with 10 ESXi hosts (8.x) connected to a pair of Nexus 9000 switches via two 10G LACP link aggregation groups (LAGs) per host. Each host has a vSphere Distributed Switch (vDS 7.0.3) with two LAGs (LAG1: vmnic0, vmnic1; LAG2: vmnic2, vmnic3). The vDS has three port groups: Production (VLAN 100-200), DMZ (VLAN 300), and Storage (VLAN 400). The port groups use LACP with load balancing 'Route based on IP hash'. Recently, the network team changed the physical switch port channels from mode 'active' to 'passive' on the downstream ports connected to host #3, without informing the virtualization team. Within hours, VMs on host #3 experience intermittent connectivity; some can communicate but others cannot, and vMotion between host #3 and other hosts fails with a network unreachable error. iSCSI storage traffic from host #3 is also unstable. The administrator verifies that the vDS LACP configuration on host #3 still expects 'active' mode. Which of the following actions is the most effective to restore full functionality while maintaining LACP?

A.Change the LACP mode on host #3's vDS from 'active' to 'passive' for both LAGs.
B.Disable LACP on host #3's vDS and use static EtherChannel instead.
C.Replace the vDS with multiple standard switches and use active/standby failover.
D.Remove and recreate the LAGs on host #3's vDS after verifying the physical switch's LACP configuration.
AnswerD

Recreating the LAGs on the vDS, after verifying the physical switch's LACP settings, ensures LAG IDs and modes are synchronized, restoring LACP functionality.

Why this answer

The root cause is a mismatch between the vDS LACP mode (active) and the physical switch's LACP mode (passive). Simply recreating the LAGs after verifying the switch configuration ensures both sides agree on the LACP mode, restoring proper negotiation and traffic flow. This maintains the existing LACP-based load balancing and avoids disrupting the rest of the cluster.

Exam trap

The trap here is that candidates assume changing the vDS LACP mode to passive (Option A) will fix the mismatch, but they overlook that passive-passive pairs never form a LAG, resulting in no link aggregation at all.

How to eliminate wrong answers

Option A is wrong because changing the vDS LACP mode to 'passive' would create a passive-passive pair, which never initiates LACP PDUs and results in no link aggregation, leaving the links as individual active/standby. Option B is wrong because disabling LACP and using static EtherChannel would require the physical switch ports to be configured as static on, which they are not, and would break the existing LACP-based load balancing for all port groups. Option C is wrong because replacing the vDS with standard switches and using active/standby failover would eliminate LACP entirely, reducing aggregate bandwidth and violating the requirement to maintain LACP.

Full explanation →
45
MCQmedium

Refer to the exhibit. A vSphere administrator is reviewing a cluster configuration JSON. What can be determined from the configuration?

A.The cluster uses a slot-based admission control policy.
B.vSphere DRS is set to partially automated.
C.The cluster can tolerate two host failures.
D.The cluster has admission control disabled.
AnswerA

Correct: 'fixedSlotPolicy' means slot-based.

Why this answer

The 'ha_admission_control_policy' is set to 'fixedSlotPolicy', indicating slot-based admission control.

Full explanation →
46
MCQhard

A security audit reveals that an ESXi host has been compromised due to an attacker gaining root access via the DCUI. The host is configured with a default DCUI password. Which security best practice should have been implemented to prevent this?

A.Configure the DCUI lockdown mode to 'Normal'
B.Disable the DCUI service
C.Set a strong password for the root account
D.Disable SSH access
AnswerA

Normal lockdown mode restricts DCUI access to local console only.

Why this answer

DCUI Lockdown Mode 'Normal' disables direct root access via the Direct Console User Interface (DCUI) by requiring authentication through vCenter Single Sign-On (SSO). This prevents an attacker from using the default or weak DCUI password to gain root access, as the root account is no longer accepted for DCUI login. The mode still allows authorized vCenter administrators to access the host via the DCUI using their SSO credentials, maintaining manageability while eliminating the root password attack vector.

Exam trap

The trap here is that candidates often choose 'Set a strong password for the root account' because they focus on password strength, but the question specifically highlights a default password being used, and the correct solution is to eliminate the root password as an authentication method for the DCUI entirely.

How to eliminate wrong answers

Option B is wrong because the DCUI service cannot be disabled; it is the console interface for local host management and is always available when the host is powered on. Option C is wrong because while a strong root password is a basic security measure, it does not prevent an attacker who already knows or guesses the default password from gaining root access via the DCUI; the core issue is that the default password is used, not its strength. Option D is wrong because disabling SSH does not affect DCUI access; the attack vector in this scenario is the DCUI, not SSH, so disabling SSH would not mitigate the compromise.

Full explanation →
47
MCQmedium

An administrator is planning a storage upgrade for a vSphere cluster. The cluster currently uses VMware vSAN as the primary datastore. The administrator wants to add capacity to the vSAN datastore without adding additional hosts. Which action should the administrator take?

A.Replace existing disks in each host with larger capacity disks and claim them to the same disk group
B.Combine disks from different hosts into a single disk group
C.Add a new disk group on each host with additional capacity disks
D.Add a new VMFS datastore and use Storage vMotion to move VMs
AnswerC

Adding a new disk group on each host with additional capacity disks directly increases vSAN capacity without adding hosts, preserving existing storage configurations.

Why this answer

Adding a new disk group on each host with additional capacity disks directly increases vSAN datastore capacity without requiring host replacement. This method allows you to add new capacity disks while preserving existing disk groups and data placement policies. Option A is incorrect because replacing existing disks with larger ones, while possible, typically requires data evacuation or is more disruptive, and it is not the recommended approach when disk slots are available.

Option B is invalid because disk groups are per-host; combining disks across hosts is not supported. Option D does not increase vSAN capacity and introduces a different datastore type.

Exam trap

The trap is that candidates might assume replacing disks (Option A) is the only method to increase capacity, overlooking that adding a new disk group (Option C) is a standard and often simpler approach that avoids data migration.

How to eliminate wrong answers

Option B is wrong because vSAN disk groups are per-host constructs; combining disks from different hosts into a single disk group is not supported by vSAN architecture, as each host maintains its own disk groups. Option C is wrong because adding a new disk group on each host with additional capacity disks would require available disk slots and may exceed the maximum number of disk groups per host (typically 5), but more importantly, it does not address the scenario where the administrator wants to add capacity without adding hosts—this option does add capacity but is not the only valid method; however, the question implies a simple capacity increase, and replacing disks is more straightforward and avoids potential disk group limits. Option D is wrong because adding a new VMFS datastore does not increase the vSAN datastore capacity; it creates a separate datastore that would require Storage vMotion to move VMs, which does not solve the requirement of adding capacity to the existing vSAN datastore.

Full explanation →
48
Multi-Selecthard

Which two of the following are characteristics of the vSphere Enhanced vMotion Compatibility (EVC) feature? (Choose two.)

Select 2 answers
A.It is configured at the host level
B.It allows vMotion between hosts of different CPU generations within the same cluster
C.It enables memory overcommit by default
D.It masks CPU features to a baseline level across all hosts in the cluster
E.It requires all VMs to be powered off before enabling
AnswersB, D

EVC enables vMotion across different CPU generations by masking features.

Why this answer

Options B and D are correct. EVC masks CPU features to a baseline level across all hosts in a cluster (D), enabling vMotion between hosts of different CPU generations (B). Option A is incorrect because EVC is configured at the cluster level, not the host level.

Option C is incorrect because EVC does not enable memory overcommit; memory overcommit is a separate feature. Option E is incorrect because EVC can be enabled with VMs powered on, though some CPUs may require VMs to be powered off if the baseline changes.

Full explanation →
49
Multi-Selectmedium

Which TWO statements are true regarding vSphere Lifecycle Manager (vLCM) clusters? (Choose two.)

Select 2 answers
A.vLCM can manage vSAN clusters using a single image.
B.vLCM only supports clusters with identical hardware.
C.vLCM can only remediate hosts that are part of a cluster.
D.vLCM requires vCenter Server to be in Enhanced Linked Mode.
E.vLCM supports both single image and baseline-based cluster management.
AnswersA, E

vLCM fully supports vSAN clusters with single image.

Why this answer

VLCM can manage vSAN clusters using a single image, which ensures that all hosts in the cluster run the same software version and driver/firmware combinations, including vSAN-specific components. This simplifies lifecycle management by eliminating the need for separate baselines and reduces compatibility issues.

Exam trap

The trap here is that candidates often assume vLCM requires homogeneous hardware or cluster membership, but vLCM actually supports heterogeneous hardware and standalone hosts, and Enhanced Linked Mode is not a requirement.

Full explanation →
50
MCQmedium

An administrator is configuring a distributed switch for a cluster of ESXi hosts. The requirements are: VLAN 100 for production, VLAN 200 for management, and a separate VLAN 300 for vMotion. The management network should be isolated from production traffic. What is the best practice for configuring these networks on the distributed switch?

A.Create three separate distributed port groups, each with the appropriate VLAN ID, and assign each VM kernel adapter or VM to the correct port group.
B.Create one distributed port group with VLAN 100, and use VLAN tagging on the VMs for management and vMotion.
C.Use standard switches for management and vMotion to avoid complexity.
D.Create one distributed port group with VLAN trunk (4095) and use port-based VLAN filtering on the VMs.
E.Create two port groups: one for production (VLAN 100) and one for management+vMotion (VLAN 200) because vMotion can share VLAN with management.
AnswerA

Correct: Separate port groups with specific VLAN IDs for each traffic type (VLAN 100 production, VLAN 200 management, VLAN 300 vMotion) isolate traffic and follow best practices.

Why this answer

Best practice for segmenting different traffic types (production, management, vMotion) on a distributed switch is to create separate distributed port groups, each assigned a unique VLAN ID. This isolates traffic at Layer 2, enhances security, and prevents interference. VMkernel adapters for management and vMotion, as well as VMs for production, are then attached to their respective port groups.

Option B is incorrect because VLAN tagging on VMs is not suitable for VMkernel adapters, which require dedicated port groups. Option C is incorrect because using standard switches defeats the purpose of a distributed switch and adds management complexity. Option D is incorrect because VLAN trunk (4095) is used for guest-level tagging, not for isolating kernel traffic.

Option E is incorrect because management and vMotion should be on separate VLANs to avoid resource contention and security risks.

Exam trap

A common trap is assuming that management and vMotion can share a VLAN or that VLAN trunking simplifies configuration. In reality, each VMkernel service type should have its own VLAN and port group for isolation and performance.

Full explanation →
51
Multi-Selecthard

An administrator is troubleshooting a VM that is running slowly. Esxtop shows the VM has high %SWPWV (swap wait). Which three conditions could cause this? (Choose three.)

Select 3 answers
A.The host is overcommitted on memory
B.The VM has a memory limit that is lower than its active memory
C.The VM's vswap file is stored on slow storage
D.The VM has a memory reservation equal to its configured size
E.The host is overcommitted on CPU
AnswersA, B, C

Host memory overcommitment leads to VM swapping when physical memory is exhausted.

Why this answer

Swap wait (%SWPWV) indicates the VM is waiting for memory pages that have been swapped out. Three conditions can cause this: (A) The host is overcommitted on memory, forcing the hypervisor to reclaim memory by swapping. (B) The VM has a memory limit lower than its active memory, causing the VM to exceed its limit and resulting in swapping. (C) The vswap file is stored on slow storage, increasing the latency of swapping operations. Option D is incorrect because a memory reservation equal to the configured size prevents swapping.

Option E is incorrect because CPU overcommitment does not directly cause memory swap wait.

Full explanation →
52
MCQhard

An administrator sees the exhibit log entry while remediating a cluster with a single image. The cluster image is based on ESXi 7.0 Update 3 (build 789012). The host esxi-05 has build 123456. The admin has verified that the host is compatible with the image. What is the most likely reason for the mismatch?

A.The host should be upgraded to ESXi 8.0.
B.The host's hardware is incompatible with the build.
C.The cluster image was incorrectly created with a wrong build number.
D.The host has not been updated to the latest patch for ESXi 7.0 U3.
AnswerD

The host is on an older build of the same version; updating to the image's build will resolve compliance.

Why this answer

The cluster image expects ESXi 7.0 Update 3 build 789012. The host esxi-05 is on build 123456, which is a lower build number for the same version (7.0 U3). Since the admin has verified hardware compatibility, the mismatch is most likely because the host is missing patches included in the expected build.

Therefore, the host needs to be updated to the latest patch for ESXi 7.0 U3 (build 789012). Option D correctly identifies this. Option A is incorrect because the host is already on 7.0 U3 and upgrading to 8.0 would not resolve a build mismatch.

Option B is incorrect because hardware compatibility was verified. Option C is incorrect because the cluster image was correctly created with a valid build number.

Full explanation →
53
MCQeasy

A company has a vSphere cluster with vSphere HA enabled. During a host failure, virtual machines on the failed host do not restart. The administrator checks the HA agent log and sees the error message: 'HA agent on host <hostname> has no master detected'. Which of the following is the most likely cause?

A.Datastore heartbeats are failing on the failed host
B.The management network is isolated and HA isolation response is not configured
C.vCenter Server service is stopped
D.The VDS uplink failure detection policy is set to 'Link Status only'
AnswerB

HA agents rely on management network for master election; isolation prevents master detection.

Why this answer

The error 'HA agent on host <hostname> has no master detected' indicates that the host cannot communicate with the HA master. This is typically caused by management network isolation. If the isolation response is not configured, the host may not take corrective action (e.g., attempt to contact master via datastore heartbeats).

Option A is incorrect because datastore heartbeats are a secondary mechanism for detecting isolation, not the primary cause of the error. Option C is incorrect because vCenter Server being stopped does not prevent HA agents from electing a master among themselves. Option D is incorrect because VDS uplink failure detection policy is related to network teaming and failover, not directly to HA agent communication.

Full explanation →
54
MCQhard

A managed hosting provider uses vSphere 7 with vSAN to run customer VMs. One customer's VM is a SQL Server database with 8 vCPUs and 128 GB RAM. The administrator notices that the VM's performance during peak hours is poor, with high disk latency and occasional disconnects. The cluster has 4 hosts, each with 10 cores (HT enabled) and 256 GB RAM. vSAN is configured with a hybrid disk group (SSD cache, HDD capacity) per host. The VM's storage policy is set to 'Performance' with RAID-1 mirroring (2 copies). The administrator runs esxtop and sees high %DAVG (device average latency) for the VM's vmdk. The observed latency averages 30 ms, but spikes to 100 ms. The host where the VM is running has relatively low CPU and memory usage, and the vSAN cache is not full. Which of the following is the most likely root cause and recommended solution?

A.Cause: vSAN disk group has a single SSD cache leading to high latency during heavy writes. Solution: Convert to all-flash vSAN.
B.Cause: vSAN cache is unable to handle the write burst. Solution: Add more cache capacity by using larger SSDs.
C.Cause: The VM's memory ballooning is causing excessive swapping to vSAN, which is slow. Solution: Increase the VM's memory reservation.
D.Cause: vSAN is encountering disk contention due to multiple VMs sharing the same disk. Solution: Deploy a dedicated vSAN datastore for the customer.
AnswerA

Hybrid vSAN uses SSDs as cache and HDDs as capacity; write bursts can exceed the cache flush rate to HDDs, causing latency spikes. All-flash eliminates the HDD bottleneck.

Why this answer

The VM's high %DAVG spikes (up to 100ms) indicate that write bursts are overwhelming the single SSD cache in the hybrid disk group, forcing destaging to the slower HDD tier. The cache is not full (capacity is not the issue), so adding more cache (Option B) would not help; the problem is the write buffer exhaustion inherent to a single SSD cache. Memory ballooning (Option C) would cause swapping but would not directly cause high device latency; also the host has low memory usage, making ballooning unlikely.

Disk contention from multiple VMs (Option D) is possible but not the most likely root cause given that the cache is not full and the latency spikes correlate with write bursts. Converting to all-flash vSAN (Option A) eliminates the HDD tier, providing consistent low latency even during heavy writes.

Full explanation →
55
MCQmedium

A vSphere cluster has 10 ESXi hosts configured with vSphere DRS. The administrator wants to ensure that a group of VMs running a latency-sensitive application are always placed on the same host. Which DRS rule should be created?

A.VM-to-Host affinity rule with a 'should run on hosts in group' constraint.
B.VM-VM affinity rule with a 'must run on the same host' constraint.
C.VM-VM affinity rule with a 'should run on the same host' constraint.
D.VM-VM anti-affinity rule with a 'separate VMs' constraint.
AnswerB

This ensures the VMs are always on the same host.

Why this answer

A VM-VM affinity rule (Must run on the same host) ensures that VMs in a group are kept together. Option A is incorrect because host affinity rules affect VM-host relationships, not VM-VM. Option C is incorrect because should run on hosts is a preference, not mandatory.

Option D is incorrect because Separate VMs rule does the opposite.

Full explanation →
56
MCQhard

An administrator checks the compliance status of a vLCM-managed cluster and sees that several hosts are marked as non-compliant even though the cluster image has not been changed recently. The hosts are currently running a version that matches the cluster image. What is the most likely cause of this non-compliance?

A.A new baseline was created and applied to the hosts.
B.The compliance cache is outdated; a manual rescan is needed.
C.VMware Tools was upgraded on the hosts without updating the cluster image.
D.The cluster image was updated but the hosts were not remediated.
AnswerB

vLCM caches compliance data; if the cache is stale, a rescan will update it and show correct compliance.

Why this answer

VLCM uses a compliance cache that may become outdated if hosts have not been rescanned recently. Even if the cluster image is unchanged and hosts match it, the cache can report non-compliance until a manual rescan is performed. Option A is incorrect because vLCM does not use baselines; it uses cluster images.

Option C is incorrect because VMware Tools upgrades do not affect host compliance with the cluster image. Option D is incorrect because the cluster image has not been changed recently, so this cannot be the cause of non-compliance.

Full explanation →
57
MCQmedium

An administrator is troubleshooting an issue where a VM on a vSphere Distributed Switch cannot receive traffic from outside its subnet. The VM can send traffic out and receive replies from hosts on the same subnet. The default gateway is configured correctly. What is the most likely cause?

A.The VXLAN Tunnel Endpoint (VTEP) IP is not reachable from the remote subnet.
B.The ESXi host's default gateway is misconfigured.
C.The router does not have a route back to the VM's subnet.
D.The port group VLAN ID is different from the physical switch trunk allowed VLAN.
AnswerC

If the upstream router lacks a return route, packets destined to the VM are dropped, causing asymmetric routing where outbound succeeds but inbound fails.

Why this answer

The VM can send traffic out and receive replies from hosts on the same subnet, indicating that its network configuration and the switch are functioning correctly. However, traffic from outside the subnet is not reaching the VM. This typically occurs when the router that connects the subnets does not have a route back to the VM's subnet.

Even though the VM's default gateway is correctly configured, the router must know how to reach the VM's subnet to forward return traffic. Option A is incorrect because the VTEP IP is used for VXLAN overlay networks, not for standard IP routing. Option B is incorrect because the ESXi host's default gateway is for host management traffic and does not affect VM traffic.

Option D is incorrect because a VLAN ID mismatch between the port group and the physical switch would cause issues with all traffic, including same-subnet communication.

Full explanation →
58
MCQhard

A company runs a three-tier application on vSphere 7.0. The web tier uses VLAN 100, app tier VLAN 200, and database tier VLAN 300. Each tier is on a separate port group on a vSphere distributed switch. The environment uses Network I/O Control (NIOC) with shares set to: Web (50), App (30), Database (20). The physical uplinks are two 10 GbE NICs in a team. Recently, the database team reports slow performance during peak hours. The network team checks the physical switches and finds no congestion. The ESXi host shows the two uplinks are heavily utilized with many dropped packets on the database port group. The administrator suspects that the database traffic is being starved by other traffic. Which action should the administrator take to resolve the issue? A. Increase the number of physical uplinks to four 10 GbE NICs. B. Change the NIOC shares to Web (10), App (30), Database (60). C. Create a separate vSphere standard switch for the database tier. D. Enable SR-IOV on the physical NICs and assign virtual functions to database VMs.

A.Create a separate vSphere standard switch for the database tier.
B.Enable SR-IOV on the physical NICs and assign virtual functions to database VMs.
C.Increase the number of physical uplinks to four 10 GbE NICs.
D.Change the NIOC shares to Web (10), App (30), Database (60).
AnswerD

Increases database shares, giving it higher priority.

Why this answer

The database traffic is being starved due to low NIOC shares relative to the web and app tiers. By increasing the database shares to 60 and reducing web to 10, the database port group will receive a higher proportion of the available bandwidth during congestion, alleviating the dropped packets and slow performance. NIOC shares are relative and only take effect when there is contention, so adjusting them directly addresses the starvation without requiring additional hardware.

Exam trap

The trap here is that candidates often assume adding more physical uplinks or isolating traffic on a separate switch will solve performance issues, but they overlook that NIOC shares directly control bandwidth allocation during congestion, and adjusting them is the most efficient and cost-effective solution.

How to eliminate wrong answers

Option A is wrong because increasing the number of physical uplinks to four 10 GbE NICs does not address the root cause of traffic starvation; it only adds more bandwidth, which may not help if the existing bandwidth is not being fairly allocated due to NIOC share settings. Option B is wrong because enabling SR-IOV on the physical NICs and assigning virtual functions to database VMs bypasses the vSphere network stack, but it does not resolve the contention on the shared uplinks; it could introduce complexity and is not a direct fix for NIOC share misconfiguration. Option C is wrong because creating a separate vSphere standard switch for the database tier would isolate the traffic but would still share the same physical uplinks unless dedicated uplinks are assigned, which is not mentioned; it also does not leverage NIOC's traffic shaping capabilities and may lead to underutilization of resources.

Full explanation →
59
Multi-Selectmedium

Which THREE security features are available in vSphere Trust Authority (vTA)?

Select 3 answers
A.Attestation of ESXi hosts
B.Integration with Active Directory for authentication
C.Trusted Platform Module (TPM) based attestation
D.Encryption of vMotion traffic
E.Key provider services for virtual machines
AnswersA, C, E

vTA attests host integrity.

Why this answer

VSphere Trust Authority (vTA) uses attestation to verify the integrity of ESXi hosts before allowing them to interact with trusted infrastructure. This attestation process confirms that the host is running genuine, untampered VMware code, which is a core security feature of vTA.

Exam trap

The trap here is that candidates often confuse general vSphere security features (like vMotion encryption or AD integration) with vTA-specific capabilities, which are narrowly focused on attestation and key provider services.

Full explanation →
60
MCQeasy

A vSphere administrator has a VMFS6 datastore that is running low on space. The storage array has additional unallocated LUNs. The administrator attaches a new 2 TB LUN to the ESXi host. What is the correct procedure to increase the datastore capacity?

A.Use the 'Increase datastore capacity' wizard to add the LUN as an extent
B.Unmount the datastore, expand the VMFS partition, then remount
C.Recreate the datastore with a larger block size and restore from backup
D.Create a new datastore on the LUN and use Storage vMotion to migrate VMs
AnswerA

VMFS can be extended online by adding an extent.

Why this answer

The correct procedure is to use the 'Increase datastore capacity' wizard to add the new LUN as an extent to the existing VMFS6 datastore. VMFS6 supports online extension, allowing the datastore to be expanded without unmounting or disrupting running VMs. Option B is incorrect because unmounting and extending the partition is unnecessary; VMFS6 handles this dynamically.

Option C is incorrect because recreating the datastore with a larger block size is disruptive and not required—adding an extent achieves the capacity increase. Option D is incorrect because creating a new datastore and migrating VMs is unnecessary and adds complexity; the existing datastore can be extended seamlessly.

Full explanation →
61
MCQeasy

A company manages a vSphere cluster of 200 ESXi hosts using vSphere Lifecycle Manager baselines (baseline-based remediation). They decide to migrate to vLCM image-based management. The administrator selects one host as a reference host, generates a cluster image from it, and attempts to apply the image to the entire cluster. Most hosts remediate successfully, but 20 hosts fail with the error: "Image deployment failed: Error retrieving VIBs from repository." The failed hosts are all from a different hardware vendor than the reference host but are on the vSphere HCL. The administrator confirms that the repository URL is reachable from the failed hosts and that there are no network connectivity issues. What should the administrator do first to resolve the issue?

A.Check the vLCM cluster image for any components specific to the reference host's hardware that are not present in the failed hosts.
B.Reboot the failed hosts and retry the remediation.
C.Verify that the failed hosts have sufficient disk space in the /scratch partition.
D.Manually upload the required VIBs to the local depot on each failed host.
AnswerA

The image likely includes hardware-specific VIBs from the reference host that are incompatible or missing for the other hardware models; removing unnecessary components resolves the issue.

Why this answer

The error 'Error retrieving VIBs from repository' when applying a cluster image generated from a reference host indicates that the image contains hardware-specific VIBs (e.g., drivers, CIM providers) that are present on the reference host but not compatible with the failed hosts from a different hardware vendor. vLCM cluster images are derived from the reference host's software specification, including any vendor-specific components, and when applied to hosts lacking that hardware, the VIB retrieval fails because the repository does not contain matching VIBs for those hosts. The first step is to check the cluster image for such components and remove or replace them with hardware-independent versions to ensure compatibility across the heterogeneous cluster.

Exam trap

The trap here is that candidates often assume network or repository issues are the cause, but the error specifically points to VIB retrieval failure due to incompatible hardware-specific components in the image, not connectivity problems.

How to eliminate wrong answers

Option B is wrong because rebooting the hosts does not address the root cause of missing or incompatible VIBs in the image; it would only retry the same failing operation. Option C is wrong because insufficient disk space in /scratch would typically cause a different error (e.g., 'Insufficient disk space'), not a VIB retrieval failure from a repository, and the administrator already confirmed network connectivity. Option D is wrong because manually uploading VIBs to a local depot is unnecessary and bypasses vLCM's centralized image management; the correct approach is to modify the cluster image to remove hardware-specific components, not to manually stage VIBs on each host.

Full explanation →
62
MCQhard

An administrator is troubleshooting a virtual machine that experiences intermittent performance issues. The VM is configured with 8 vCPUs and 32 GB memory. The administrator runs esxtop and sees that the %RDY for the VM is consistently above 20%. What does this indicate?

A.The VM is contending for CPU resources due to overallocation of vCPUs.
B.The VM's virtual disks are experiencing high latency.
C.The VM is experiencing memory ballooning.
D.The VM is using its CPU resources efficiently.
AnswerA

High %RDY typically means the host's CPU is oversubscribed.

Why this answer

High %RDY indicates that the VM is ready to run but is waiting for CPU resources, meaning the CPU scheduler cannot allocate physical cores quickly enough. This is typically caused by over-allocation of vCPUs relative to available physical cores, leading to contention. Option A correctly identifies this condition.

Option B is incorrect because high %RDY is not related to disk latency; disk latency is measured by other metrics like DAVG/GAVG. Option C is incorrect because memory ballooning is a memory management technique, not directly indicated by %RDY. Option D is incorrect because high %RDY signifies inefficient CPU scheduling, not efficient utilization.

Full explanation →
63
MCQhard

A vSphere environment uses a vSphere Distributed Switch (vDS) with 10G uplinks and Network I/O Control (NIOC) enabled. Administrators report that during peak traffic, NFS storage traffic is experiencing high latency, while other traffic types remain unaffected. The vDS has default NIOC shares and limits. Which action should be taken to prioritize NFS traffic without completely starving other traffic?

A.Set a low bandwidth limit for the NFS traffic class.
B.Increase the shares for the NFS traffic class.
C.Set a high bandwidth reservation for the NFS traffic class.
D.Disable Network I/O Control on the vDS.
AnswerB

Increasing shares gives NFS higher relative weight during contention, ensuring it gets more bandwidth without hard limits, thus reducing latency while allowing other traffic to still use remaining bandwidth.

Why this answer

Increasing the shares for the NFS traffic class gives it a higher proportion of bandwidth during contention, without imposing a hard limit. Option A is incorrect because setting a low bandwidth limit would cap NFS traffic, potentially worsening performance. Option C is incorrect because setting a high bandwidth reservation could reserve bandwidth for NFS even when not needed, potentially wasting resources, and does not prioritize dynamically like shares do.

Option D is incorrect because disabling NIOC removes all traffic prioritization, eliminating the ability to differentiate NFS traffic.

Full explanation →
64
Multi-Selectmedium

Which TWO options are valid methods to reduce vSphere storage latency? (Select two.)

Select 2 answers
A.Enable Storage I/O Control (SIOC).
B.Increase the number of storage adapters.
C.Use VMFS-6 with automatic space reclamation.
D.Use larger block sizes in VMFS.
E.Use vSAN with deduplication and compression.
AnswersA, B

SIOC provides I/O prioritization to reduce latency for important VMs.

Why this answer

Correct answers are A (Enable Storage I/O Control) and B (Increase the number of storage adapters). SIOC manages I/O queues and prioritizes critical VMs, reducing latency during contention. More storage adapters increase parallelism, allowing more concurrent I/O operations and reducing wait times.

Option C (VMFS-6 automatic space reclamation) improves storage efficiency but does not directly reduce latency. Option D (larger block sizes) can help sequential throughput but may increase latency for random I/O. Option E (vSAN deduplication and compression) adds CPU overhead that can increase latency.

Full explanation →
65
Multi-Selectmedium

Which TWO of the following are best practices for securing ESXi hosts? (Choose two.)

Select 2 answers
A.Grant the root user direct permissions on all hosts.
B.Disable the ESXi firewall to simplify management.
C.Enable lockdown mode on the host.
D.Allow DCUI access from trusted management networks.
E.Configure Active Directory integration for host authentication.
AnswersC, E

Lockdown mode disables direct root access via SSH and DCUI.

Why this answer

Options C and E are correct. Enabling lockdown mode (C) restricts direct root access to the host, requiring administrators to use vCenter Server for management, which is a security best practice. Configuring Active Directory integration (E) allows centralized user management and authentication, avoiding the need for local accounts.

Option A is incorrect because granting root user direct permissions on all hosts bypasses security controls. Option B is incorrect because disabling the ESXi firewall exposes the host to network threats. Option D is incorrect because DCUI (Direct Console User Interface) should be accessed only via the local console, not from the network; allowing DCUI access from trusted management networks still poses a security risk.

Full explanation →
66
MCQmedium

A company manages a vSphere 8 cluster with vLCM enabled. The administrator needs to remediate the cluster to apply a security patch. What should the administrator do to minimize performance impact on running workloads?

A.Enable Quick Boot in the cluster image configuration.
B.Use vSphere Live Migration to move workloads before remediation.
C.Use legacy baselines instead of vLCM to allow rolling updates.
D.Disable Distributed Power Management (DPM) to prevent hosts from powering off during remediation.
AnswerA

Quick Boot reduces the host reboot time by skipping hardware reinitialization, thus minimizing the time in maintenance mode.

Why this answer

Quick Boot significantly reduces host reboot time during remediation, minimizing the time hosts spend in maintenance mode and thus reducing performance impact on running workloads. Options B, C, and D are incorrect: vSphere Live Migration (B) is for vMotion, not patching; legacy baselines (C) are deprecated with vLCM; disabling DPM (D) does not directly address remediation performance impact.

Exam trap

A common trap is to think that moving workloads off hosts reduces impact, but Quick Boot is more efficient because it reduces the actual reboot time within maintenance mode.

Full explanation →
67
Drag & Dropmedium

Arrange the steps to create a new virtual machine in vSphere Client.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The standard workflow: initiate creation, choose type, name/place, select compute, then storage and settings.

Full explanation →
68
MCQeasy

An administrator needs to lock down an ESXi host for FIPS 140-2 compliance. Which step must be taken?

A.Disable the ESXi Shell and SSH services.
B.Enable lockdown mode on the ESXi host.
C.Configure a host profile with a security policy.
D.Enable FIPS mode in the host's BIOS.
AnswerB

Lockdown mode restricts direct console and SSH access, enforcing FIPS requirements.

Why this answer

For FIPS 140-2 compliance, the ESXi host must be placed in lockdown mode to restrict direct root access and ensure only authorized users via vCenter can manage the host. Option A is incorrect because disabling the ESXi Shell and SSH services alone does not achieve FIPS compliance; lockdown mode is the required step. Option C is incorrect because host profiles can apply security settings but do not enforce lockdown mode for FIPS.

Option D is incorrect because FIPS mode is not configured in the host's BIOS; it is a software-level cryptographic compliance enforced by ESXi lockdown and other settings.

Full explanation →
69
MCQhard

A vSphere administrator is configuring Network I/O Control (NIOC) on a vSphere Distributed Switch to prioritize vMotion traffic during maintenance windows. The environment has three system traffic classes: Management, NFS, and vMotion. The administrator wants to ensure that when the network is congested, vMotion gets at least 50% of the available bandwidth, while Management and NFS each get at least 25%. Which NIOC configuration achieves this?

A.Set a limit of 500 Mbps for Management and NFS, and no limit for vMotion.
B.Set the vMotion traffic class shares to 50, Management shares to 25, and NFS shares to 25.
C.Set a reservation of 500 Mbps for vMotion, 250 Mbps for Management, and 250 Mbps for NFS.
D.Do nothing; NIOC is not needed because all traffic types are equally important.
AnswerB

Shares define relative priority; with these values, vMotion gets 50/100 = 50% during congestion, fulfilling the requirement.

Why this answer

Shares allocate bandwidth proportionally during contention. Setting the vMotion shares to 50, Management to 25, and NFS to 25 ensures that vMotion receives 50% of available bandwidth when all traffic classes are congested, while Management and NFS each get 25%. Option A is incorrect because limits cap bandwidth and do not guarantee proportional allocation; they would restrict vMotion to at most 500 Mbps regardless of available bandwidth.

Option C is incorrect because reservations guarantee a minimum bandwidth but do not enforce proportional sharing during congestion; they would ensure each class gets at least the reserved amount but not necessarily the desired percentages when the total bandwidth exceeds the sum of reservations. Option D is incorrect because without NIOC, all traffic classes are treated equally, so vMotion would not get prioritized bandwidth.

Full explanation →
70
MCQhard

Refer to the exhibit. The ESXi host has three VMkernel interfaces. A vMotion operation fails with a routing error. Which is the most likely cause?

A.The vMotion VMkernel interface uses DHCP.
B.The vMotion VMkernel interface is on vmk1, but the default gateway points to vmk0.
C.The vMotion VMkernel interface is on vmk0, but the gateway is incorrect.
D.The vMotion VMkernel interface is on vmk2, but no route exists for the vMotion destination network.
AnswerD

If the destination is not on the same subnet as vmk2, a route is needed but missing.

Full explanation →
71
MCQeasy

Refer to the exhibit. The administrator is troubleshooting performance for VM 'vm2'. Based on the log, what is the performance issue?

A.The host is overloaded with too many VMs
B.The VM is not experiencing significant CPU performance issues
C.The VM is experiencing high CPU ready time indicating starvation
D.The VM has a memory balloon driver issue
AnswerB

Ready time below 5% is normal; no issue.

Why this answer

The CPU ready time values (around 3%) are within acceptable thresholds (typically under 5%). There is no indication of contention or overcommitment.

Full explanation →
72
MCQmedium

Refer to the exhibit. An administrator tries to enable vSAN on a host and receives this error. What is the most likely cause?

A.The vSAN cluster has insufficient hosts (needs at least 2).
B.The host does not have any disks installed.
C.The host has disks but they are not claimed for vSAN or not configured in a disk group.
D.The host's disks are all SSD and vSAN requires HDD for capacity tier.
AnswerC

vSAN disk groups must be created; just having disks is insufficient.

Why this answer

vSAN requires at least one disk group consisting of one or more capacity disks (and optionally a cache disk). The error indicates that no disk group is present or the disks are not properly claimed.

Full explanation →
73
MCQhard

An administrator is configuring persistent memory (PMem) for a critical database VM. The host has 512 GB of Intel Optane PMem. The VM must be able to vMotion while PMem is used. Which configuration meets this requirement?

A.Use NVDIMM labels and create a datastore for PMem
B.Add a vPMem device to the VM and ensure the destination host has compatible PMem
C.Configure the VM to use PMem in hardware passthrough mode
D.Emulate PMem using SSD-backed virtual disks
AnswerB

vPMem (virtual PMem) allows vMotion between hosts with PMem capacity.

Why this answer

vMotion with PMem is supported only when the PMem is presented as a virtual persistent memory (vPMem) device. Adding a vPMem device to the VM and ensuring the destination host has compatible PMem capacity allows the VM to vMotion while using PMem. Option A (NVDIMM labels and datastore) is incorrect because PMem cannot be used as a datastore for vMotion; vMotion requires direct vPMem attachment.

Option C (hardware passthrough mode) prevents vMotion because the VM has direct hardware access. Option D (SSD-backed virtual disks) does not use actual PMem, so it does not fulfill the requirement.

Full explanation →
74
MCQhard

A company has a vSphere cluster with 10 ESXi hosts managed by vLCM. They use a custom image that includes a third-party network driver. After updating the image to include a new version of the driver, remediation fails on all hosts with the error: 'The software specification contains a VIB that is not compatible with the host platform.' What is the most likely cause?

A.The new driver VIB is not compatible with the ESXi version in the image.
B.The vLCM image depot is corrupted.
C.The hosts have incompatible firmware.
D.The custom image is not signed by VMware.
AnswerA

The VIB must match the ESXi build; an incompatible version causes this error.

Why this answer

The error 'The software specification contains a VIB that is not compatible with the host platform' indicates that the VIB (vSphere Installation Bundle) in the custom image is not designed to run on the ESXi version specified in the image. vLCM validates VIB compatibility against the ESXi base image version, and a third-party driver VIB must be built for that exact ESXi build. Since the new driver version is incompatible with the ESXi version, remediation fails on all hosts.

Exam trap

The trap here is that candidates often assume the error is about signing or corruption, but vLCM specifically checks VIB-to-platform compatibility at the VIB metadata level, not the image's signature or depot integrity.

How to eliminate wrong answers

Option B is wrong because a corrupted vLCM image depot would typically cause download or checksum errors, not a specific VIB compatibility message. Option C is wrong because incompatible firmware would generate hardware-related errors (e.g., driver/firmware mismatch), not a VIB platform compatibility error. Option D is wrong because vLCM does not require custom images to be signed by VMware; it only validates VIB acceptance levels (e.g., VMwareCertified, PartnerSupported) and host acceptance levels, not a VMware signature on the entire image.

Full explanation →
75
MCQeasy

An administrator needs to expand a VMFS6 datastore that is currently 2 TB in size. The LUN presented to the ESXi host has been expanded to 3 TB from the storage array. Which command should the administrator use to extend the datastore?

A.esxcli storage vmfs extend -l naa.60050768018603e1b800000000000001
B.esxcli storage vmfs grow -l naa.60050768018603e1b800000000000001
C.vmkfstools --extend /vmfs/devices/disks/naa.60050768018603e1b800000000000001
D.vmkfstools --growfs /vmfs/devices/disks/naa.60050768018603e1b800000000000001
AnswerD

This command extends the VMFS datastore to the full LUN size.

Why this answer

The correct command is `vmkfstools --growfs` because it is the only VMware-supported method to expand a VMFS6 datastore after the underlying LUN has been resized. This command grows the file system to use the newly available unpartitioned space on the device, without requiring a new partition. The `--growfs` option specifically targets the VMFS file system, not the partition, which is essential for VMFS6 datastores.

Exam trap

The trap here is that candidates often confuse the `esxcli storage vmfs` commands with the `vmkfstools` commands, mistakenly thinking `esxcli storage vmfs grow` is valid, or they assume `vmkfstools --extend` applies to datastores when it is actually for VMDK files.

How to eliminate wrong answers

Option A is wrong because `esxcli storage vmfs extend` is used to extend a VMFS datastore by adding a new extent (i.e., a new LUN or partition), not to grow the existing file system into unpartitioned space on the same LUN. Option B is wrong because `esxcli storage vmfs grow` is not a valid command; the correct `esxcli` subcommand for growing a VMFS datastore into unpartitioned space is `esxcli storage vmfs growfs`. Option C is wrong because `vmkfstools --extend` is used to extend a VMDK file, not a VMFS datastore; it operates on virtual disk files, not on the underlying storage device.

Full explanation →

Page 1 of 7

Page 2

All pages

1234567

Practice VCP-DCV by domain

Target a specific domain to shore up weak areas.

vSphere Architecture, Products and SolutionsConfigure and Manage vSphere NetworkingConfigure and Manage vSphere StoragevSphere Lifecycle ManagementvSphere SecurityvSphere Performance and Scaling
See all domains with question counts →