Courseiva

VMware Certified Professional Data Center Virtualization VCP-DCV (VCP-DCV) — Questions 76–150

498 questions total · 7pages · All types, answers revealed

Take a mock examExam hub
Page 1

Page 2 of 7

Page 3
76
Multi-Selecthard

An administrator is troubleshooting a vLCM cluster where remediation fails with 'Host cannot be updated due to missing VIB'. The desired image includes the VIB. Which THREE actions should the administrator take?

Select 3 answers
A.Verify that the software depot URL is accessible from vCenter.
B.Ensure that the host firmware is up to date.
C.Check the host's acceptance level for the VIB.
D.Review the host's current installed VIB list for conflicts.
E.Check if a baseline is attached that conflicts.
AnswersA, C, D

If the depot is unreachable, VIBs cannot be retrieved.

Why this answer

VLCM retrieves VIBs from a software depot URL configured in the desired image. If vCenter cannot reach that URL (e.g., due to network issues, firewall rules, or DNS resolution failure), the remediation process will fail with 'missing VIB' even though the VIB is listed in the image specification. Verifying accessibility ensures the depot is reachable via HTTP/HTTPS and that the repository metadata can be downloaded.

Exam trap

The trap here is that candidates confuse vLCM's desired image model with legacy baseline-based remediation, leading them to incorrectly select option E about conflicting baselines.

Full explanation →
77
Multi-Selectmedium

Which TWO of the following are required to configure vMotion encryption for a VM? (Choose two.)

Select 2 answers
A.The source and destination hosts must be from the same vendor.
B.The source and destination ESXi hosts must be version 6.5 or later.
C.A Key Management Server (KMS) must be configured in vCenter.
D.The virtual hardware version of the VM must be 11 or later.
E.The VM must have encryption enabled at the VM level.
AnswersB, D

vMotion encryption is supported from ESXi 6.5 onward.

Why this answer

Options B and D are correct. vMotion encryption requires that both source and destination ESXi hosts run version 6.5 or later (B), and the virtual machine must have virtual hardware version 11 or later (D). Option A is incorrect because vMotion encryption does not require hosts from the same vendor. Option C is incorrect because a Key Management Server (KMS) is not required for vMotion encryption; it is only required for VM-level encryption.

Option E is incorrect because the VM does not need encryption enabled at the VM level for vMotion encryption; vMotion encryption is configured at the cluster or host level.

Full explanation →
78
MCQhard

Refer to the exhibit. An administrator notices that two uplinks are down on the VDS. Which step should be taken first to restore redundancy?

A.Check the physical switch ports and cables for uplink2 and uplink3.
B.Increase the MTU to 9000 to improve performance.
C.Disable LACP on the VDS to allow single-uplink operation.
D.Remove the down uplinks from the VDS.
AnswerA

Physical connectivity issues are the most common cause of down uplinks.

Full explanation →
79
MCQeasy

Based on the Healthcheck output for a distributed port (DVS Port 1) on dvs0, what can be concluded?

A.The uplinks vmnic0 and vmnic1 are operating at 10 Gbps.
B.The physical switch is correctly configured for VLAN 100 and MTU 1500 on the uplinks connected to this host.
C.The load balancing policy is set to 'Route based on IP hash'.
D.The port is experiencing high packet loss due to misconfiguration.
AnswerB

The VLAN Status and MTU Status are both OK, indicating end-to-end connectivity matches.

Why this answer

The Healthcheck output shows 'VLAN 100' and 'MTU 1500' with status 'OK', indicating that the physical switch configuration matches the DVS port settings for VLAN and MTU. Option A is incorrect because Healthcheck doesn't report speed/duplex of uplinks. Option C is incorrect because the teaming policy shown is 'Route based on originating virtual port', not IP hash.

Option D is incorrect because Healthcheck checks configuration consistency, not packet loss.

Full explanation →
80
MCQhard

An administrator wants to deploy a new ESXi host using vSphere Lifecycle Manager (vLCM). The host has a different hardware version than the cluster baseline. Which action is required?

A.Use a host profile to apply the configuration.
B.Create a separate cluster with a compatible image specification for the new host.
C.Replace the host hardware to match the baseline.
D.Manually install the same ESXi version on the host before adding to the cluster.
AnswerB

Hardware differences may require a different image.

Why this answer

vSphere Lifecycle Manager (vLCM) uses image-based management, where a single image specification defines the exact software and firmware versions for all hosts in a cluster. If a host has a different hardware version, it cannot accept the same image because the hardware compatibility requirements differ. Creating a separate cluster with a compatible image specification allows the host to be managed independently with its own lifecycle baseline.

Exam trap

The trap here is that candidates confuse host profiles (which apply configuration) with vLCM image-based management (which enforces hardware compatibility), leading them to incorrectly choose host profiles as the solution.

How to eliminate wrong answers

Option A is wrong because host profiles apply configuration settings (e.g., networking, storage) but do not address hardware version incompatibility with vLCM images; vLCM requires a consistent hardware compatibility across all hosts in a cluster. Option C is wrong because replacing hardware is unnecessary and overly disruptive; vLCM supports heterogeneous hardware through separate clusters with tailored images. Option D is wrong because manually installing ESXi bypasses vLCM's automated image-based management and does not resolve the hardware version mismatch; vLCM requires hosts to be added to a cluster with a compatible image, not manually staged.

Full explanation →
81
Multi-Selecteasy

Which TWO are valid methods to monitor vSphere performance metrics?

Select 2 answers
A.PowerCLI scripts that retrieve performance data.
B.VMware Workstation.
C.vCenter Log Insight.
D.vSphere Performance Charts.
E.esxtop (or resxtop).
AnswersD, E

Built-in tool for performance monitoring.

Why this answer

D is correct because vSphere Performance Charts is a built-in feature of the vSphere Client that provides real-time and historical performance metrics for ESXi hosts, VMs, and other objects. It allows administrators to monitor CPU, memory, network, and disk utilization through customizable graphs and reports, directly integrated into the vCenter management interface.

Exam trap

The trap here is that candidates often confuse log analysis tools (like Log Insight) with performance monitoring tools, or assume that any scripting interface (like PowerCLI) qualifies as a monitoring method, when the VCP-DCV exam specifically tests knowledge of native vSphere monitoring utilities like Performance Charts and esxtop.

Full explanation →
82
MCQmedium

Refer to the exhibit. An administrator sees two DRS recommendations. Which action should the administrator take first to reduce cluster imbalance?

A.Migrate Web01 to host04 first
B.Migrate DB01 to host04 first
C.Migrate both VMs simultaneously
D.Ignore the recommendations; the cluster is balanced
AnswerB

DB01 provides a 15% benefit, which is higher, reducing imbalance faster.

Why this answer

The DB01 migration provides a higher benefit (15%) compared to Web01 (10%). Starting with the higher impact migration reduces imbalance more effectively.

Full explanation →
83
Multi-Selectmedium

Which TWO of the following are prerequisites for enabling jumbo frames on a vSphere host for storage traffic?

Select 2 answers
A.The virtual machine guest OS must support jumbo frames
B.The VMkernel port must be configured with MTU 9000
C.The storage array must support jumbo frames
D.The vCenter Server must be configured for jumbo frames
E.The physical switches must support jumbo frames
AnswersB, E

The VMkernel interface must have MTU set to 9000.

Why this answer

Jumbo frames require physical switch support and VMkernel port MTU configuration. The storage array, guest OS, and vCenter do not directly affect host-level jumbo frame operation.

Full explanation →
84
MCQhard

A vSphere administrator configures a VVol datastore on a Pure Storage array. The administrator creates a storage policy with a custom tag. After attaching the policy to a VM, the VM remains uncompliant. What is the most likely cause?

A.The storage array does not support the capability specified in the policy.
B.The storage array is not VASA-compliant.
C.The datastore cluster is not configured for Storage DRS.
D.The VVol datastore is using NFS protocol instead of iSCSI.
AnswerA

Correct: The policy tag must match a capability advertised by the array.

Why this answer

VVol storage policies rely on capabilities advertised by the array through VASA. If the array does not support the specific capability or tag used in the policy, the VM will be uncompliant. Option A is correct because the custom tag in the storage policy is not supported by the Pure Storage array.

Option B is incorrect: VVol datastores require VASA certification; if the array were not VASA-compliant, it could not host a VVol datastore at all. Option C is incorrect because Storage DRS is unrelated to VVol policy compliance. Option D is incorrect because VVol datastores can use either iSCSI or NFS protocols, and the protocol does not affect compliance.

Full explanation →
85
MCQmedium

A company has a vSphere cluster with ESXi hosts that are managed by vSphere Lifecycle Manager using a single image. The cluster includes hosts from different hardware vendors. After a recent hardware refresh, new hosts with a different network adapter are added. The administrator applies the cluster image, but the new hosts fail to enter maintenance mode for remediation. What is the most likely cause?

A.The cluster's DRS is set to fully automated, preventing manual maintenance mode.
B.The vCenter Server user account lacks the 'Host.Inventory.Create' permission.
C.The new hosts are not added to the vCenter Server inventory correctly.
D.The cluster image includes an incompatible driver for the new network adapter.
AnswerD

The image must include the correct driver for the host hardware.

Why this answer

The most likely cause is that the cluster image includes a driver that is incompatible with the new network adapter. When applying the image, vSphere Lifecycle Manager performs pre-remediation checks, and if the driver in the image does not support the new hardware, the host fails to enter maintenance mode. Option A is incorrect because DRS automation does not prevent maintenance mode; you can still manually put a host into maintenance mode.

Option B is incorrect because the 'Host.Inventory.Create' permission is not required for applying cluster images; permission issues would typically result in different errors. Option C is incorrect because if the hosts were not properly added to inventory, they would not appear in the cluster at all.

Full explanation →
86
MCQmedium

A vSphere administrator is troubleshooting connectivity issues for a virtual machine that is unable to communicate with other VMs on the same VLAN. The VM is connected to a distributed port group on a vSphere Distributed Switch (vDS). The administrator verifies that the VM's IP configuration is correct and that the port group is configured with the correct VLAN ID. However, the VM can only communicate with other VMs on the same ESXi host. What is the most likely cause?

A.The vDS is not configured with a VLAN trunking policy.
B.The VM's network adapter is configured with the wrong MAC address.
C.The distributed port group has forging transmits set to reject.
D.The physical switch ports connecting the ESXi hosts are not configured as trunk ports for the VLAN.
AnswerD

If physical switch ports are not trunking the VLAN, frames tagged with that VLAN will be dropped, preventing cross-host communication while intra-host communication (no physical switch) works.

Why this answer

The VM can communicate only with other VMs on the same ESXi host because VLAN-tagged frames cannot pass through the physical switch ports to other hosts. For VMs on the same VLAN to communicate across hosts, the physical switch ports connecting the ESXi hosts must be configured as trunk ports that allow the relevant VLAN. Option A is incorrect because the vDS does not require a separate VLAN trunking policy; the port group VLAN ID handles tagging.

Option B is incorrect because the MAC address is automatically assigned and would not cause host-only communication. Option C is incorrect because the 'forging transmits' security policy controls MAC address changes, not basic connectivity.

Full explanation →
87
MCQmedium

An organization has a vLCM-managed cluster with 5 ESXi 8.0 hosts. The desired image includes ESXi 8.0 U1 and a specific third-party storage driver VIB. The administrator recently updated the desired image to a new version of the storage driver. After remediation, three hosts show 'Compliant' but two hosts show 'Non-Compliant' with the error: 'VIB missing: storage-driver-vib'. The administrator confirms that the VIB is present in the image and that the hosts were recently added to the cluster. What is the most likely cause of the non-compliance on the two hosts?

A.The two hosts have incompatible firmware for the storage driver.
B.The two hosts have a host acceptance level set to 'CommunitySupported' while the VIB requires 'PartnerSupported'.
C.The VIB was not included in the image for those hosts.
D.The vCenter Server cannot reach the software depot for those hosts.
AnswerB

vLCM respects host acceptance levels; if lower, VIB is skipped.

Why this answer

When a host is added to a vLCM-managed cluster, the desired image is applied to it. If the host's acceptance level (e.g., 'CommunitySupported') is lower than the VIB's required acceptance level (e.g., 'PartnerSupported'), vLCM will refuse to install the VIB, causing a 'Non-Compliant' status with a 'VIB missing' error. This is a common issue when hosts are imported from environments with relaxed acceptance policies.

Exam trap

The trap here is that candidates assume 'VIB missing' means the VIB is not in the image, but the real issue is a host-level acceptance policy preventing the VIB from being installed.

How to eliminate wrong answers

Option A is wrong because incompatible firmware would typically cause a different error, such as a hardware compatibility or driver load failure, not a 'VIB missing' error. Option C is wrong because the administrator confirmed the VIB is present in the image, so it is included for all hosts in the cluster. Option D is wrong because vCenter Server cannot reach the software depot would affect all hosts, not just two, and would produce a different error related to download or connectivity failure.

Full explanation →
88
MCQeasy

A vSphere administrator needs to ensure that a critical VM restarts automatically if the ESXi host fails. Which feature should be configured?

A.vSphere vMotion
B.vSphere HA
C.vSphere DRS
D.vSphere Fault Tolerance
AnswerB

Correct: HA restarts VMs after host failure.

Why this answer

vSphere HA provides host failure detection and automatic restart of VMs.

Full explanation →
89
MCQhard

A financial institution operates a vSphere 7.0 environment with three vCenter Servers in linked mode, each managing separate clusters. The company uses vSAN encryption with an external KMS appliance from a third-party vendor. The KMS appliance has a certificate that expires every two years. The storage administrator recently renewed the KMS certificate as per the vendor's instructions. After the renewal, the vCenter Server's 'Key Management Servers' view shows the KMS status as 'Unhealthy'. The administrator attempts to decrypt a test virtual machine, but the operation fails with an error: 'No key providers are available'. The KMS appliance is reachable from the vCenter Server, and the new certificate is installed on the KMS. The administrator has confirmed that the KMS IP address and port are correctly configured in vCenter. What is the most likely cause of the failure?

A.The vSAN encryption keys were lost during the certificate renewal
B.The KMS cluster in vCenter needs to be recreated
C.The new KMS certificate has not been imported into the vCenter Server trust store
D.The vCenter Server services need to be restarted
AnswerC

vCenter must trust the KMS certificate to communicate; otherwise, it shows the KMS as unhealthy.

Why this answer

The most likely cause is that the new KMS certificate was not imported into the vCenter Server trust store. Even though the KMS appliance is reachable and the new certificate is installed on the KMS, vCenter Server must trust the KMS certificate to establish a secure connection. Without the certificate in the trust store, vCenter considers the KMS unhealthy, leading to the 'No key providers are available' error.

The vSAN encryption keys are not lost during certificate renewal—they remain stored on the KMS. Recreating the KMS cluster is unnecessary because the configuration is still valid, and restarting vCenter services would not resolve the trust issue.

Full explanation →
90
MCQhard

A vSphere administrator uses vSphere Lifecycle Manager image to manage a cluster. The cluster image is based on ESXi 8.0 U2. The administrator wants to add a new host that is running ESXi 7.0 U3. The administrator adds the host to the cluster. When attempting to remediate the host with the cluster image, the remediation fails with the error: 'The host's current version is too low to be upgraded directly to the target version.' What is the most likely reason for this error?

A.The host's hardware is incompatible with ESXi 8.0.
B.The host must be upgraded to an intermediate version first.
C.The host is not connected to the vLCM depot.
D.The vLCM image does not include the necessary drivers for the host.
AnswerA

Correct. Hardware incompatibility is the most likely cause; vLCM checks hardware and may report a version error when the host is not certified for the target ESXi version.

Why this answer

The error 'The host's current version is too low to be upgraded directly to the target version' is misleading; upgrading from ESXi 7.0 U3 to ESXi 8.0 U2 is supported if the hardware is compatible. The most likely reason for the failure is that the host's hardware is not compatible with ESXi 8.0 U2. vSphere Lifecycle Manager (vLCM) checks hardware compatibility against the vSphere HCL and may generate this error if the hardware is not supported. Option B is incorrect because an intermediate version is not required; the direct upgrade path exists.

Option C is incorrect because the error does not relate to depot connectivity. Option D is incorrect because missing drivers would typically produce a different error (e.g., driver mismatch).

Exam trap

The trap is that the error message suggests a version gap, but the real issue is likely hardware incompatibility. Candidates may incorrectly assume an intermediate upgrade is needed.

Full explanation →
91
MCQeasy

An administrator needs to provide redundancy for VM traffic across multiple physical NICs on a vSphere Standard Switch. Which NIC teaming policy should be used to ensure fault tolerance without load balancing?

A.Route based on IP hash
B.Route based on originating virtual port
C.Use explicit failover order (Active/Standby)
D.Route based on source MAC hash
AnswerC

This provides fault tolerance without load balancing.

Why this answer

The 'Use explicit failover order (Active/Standby)' policy designates one or more NICs as active and the rest as standby, providing pure fault tolerance without any load balancing. When the active NIC fails, traffic automatically fails over to the standby NIC, ensuring redundancy without distributing traffic across multiple uplinks.

Exam trap

The trap here is that candidates often confuse 'fault tolerance without load balancing' with load-balancing policies like IP hash or source MAC hash, mistakenly thinking any teaming policy provides redundancy, but only the explicit failover order ensures a single active path with no traffic distribution.

How to eliminate wrong answers

Option A is wrong because 'Route based on IP hash' uses a hash of source and destination IP addresses to distribute traffic across multiple active NICs, which provides load balancing but not pure fault tolerance without load balancing. Option B is wrong because 'Route based on originating virtual port' distributes traffic based on the virtual switch port ID, which also load-balances across active NICs and does not guarantee a single active path for fault tolerance. Option D is wrong because 'Route based on source MAC hash' uses the source MAC address to distribute traffic across multiple active NICs, again providing load balancing rather than the required fault tolerance without load balancing.

Full explanation →
92
MCQhard

A vSphere administrator is implementing Lockdown Mode on an ESXi host that hosts critical VMs for a healthcare application. After enabling Normal Lockdown Mode, the administrator tests that vCenter can still manage the host, but the local DCUI root account is disabled. Later, a network outage occurs, causing vCenter to become unreachable. The administrator needs to access the host directly via DCUI to perform emergency troubleshooting. The host's DCUI is still running, but the local root account is disabled due to Lockdown Mode. What should the administrator have configured to ensure DCUI access during such an outage?

A.Use the vSphere Web Client to add the host as an exception before the outage.
B.Configure the DCUI access list with specific users or groups before enabling Lockdown Mode.
C.Enable Strict Lockdown Mode to allow vCenter access exclusively.
D.Disable Lockdown Mode only during the maintenance window.
AnswerB

This allows designated users to access DCUI even when Lockdown Mode is active.

Why this answer

Normal Lockdown Mode disables the local root account for DCUI access, but it allows you to pre-configure a DCUI access list with specific users or groups (local or AD) who can still log in via DCUI. By adding a user to this list before enabling Lockdown Mode, the administrator could have gained DCUI access during the outage. Option A is incorrect because the vSphere Web Client does not have an option to add host exceptions for DCUI; the DCUI access list must be configured directly on the host or via host profile.

Option C is incorrect because Strict Lockdown Mode disables all local accounts, including the DCUI access list, making DCUI entirely unavailable. Option D is incorrect because disabling Lockdown Mode requires vCenter Server access, which is unavailable during the outage.

Exam trap

The trap is confusing Normal Lockdown Mode with Strict Lockdown Mode. Normal Lockdown Mode only disables the root account and allows a preconfigured DCUI access list. Strict Lockdown Mode disables all local accounts, including the DCUI access list, preventing any direct DCUI login.

Full explanation →
93
MCQhard

A vSphere administrator notices that after replacing the vCenter Server machine SSL certificate, all vCenter services start, but from one ESXi host, the vCenter Server appears as disconnected. Other hosts connect fine. What is the most likely cause?

A.The vCenter certificate's Common Name does not match the host's IP address.
B.The ESXi host does not trust the signing certificate authority of the new vCenter certificate.
C.The ESXi host has a different system time than the vCenter Server.
D.The vCenter Server certificate was not imported into the SSO trusted domain.
AnswerB

The host needs the root CA certificate in its trusted store to validate the vCenter certificate.

Why this answer

When the vCenter Server machine SSL certificate is replaced, each ESXi host must trust the certificate's issuing CA. If one host's trusted root certificate store does not contain the new certificate's CA certificate, TLS verification fails, causing vCenter to appear disconnected from that host. Option A is incorrect because the Common Name is used for server identity, but it does not need to match the host's IP; the issue is trust of the CA, not name mismatch.

Option C is incorrect because system time differences would affect all hosts, not just one, and typically cause certificate validity errors, not trust issues. Option D is incorrect because the machine SSL certificate is distinct from SSO certificates; replacing it does not affect SSO if other certificates are unchanged.

Full explanation →
94
MCQmedium

A vSphere administrator deploys a new ESXi host and wants to ensure it is automatically added to a specific cluster and applies the correct host profiles. Which method should the administrator use?

A.Use Clone Host functionality in vSphere Client.
B.Use Auto Deploy with stateful installations.
C.Use Host Profiles to attach the profile to the cluster.
D.Use vCenter Server to add the host manually.
AnswerB

Correct: Auto Deploy automates provisioning and profile application.

Why this answer

Auto Deploy with stateful installations provisions hosts and applies profiles automatically during network boot.

Full explanation →
95
MCQhard

A company deploys a VDS with multiple uplinks and uses Route based on originating virtual port for load balancing. The network team reports that traffic from VMs on the same host is not balanced across uplinks. The administrator verifies that the physical switch ports are all in the same port-channel. What could be the cause?

A.The uplinks are configured in active/standby mode
B.The load balancing algorithm is not supported by the physical switch
C.The number of VMs is less than the number of uplinks
D.The teaming policy uses an explicit failover order
AnswerA

In active/standby mode, only one uplink is active, so no load balancing occurs.

Why this answer

When uplinks are configured in active/standby mode, only one uplink is active at a time, so no load balancing occurs regardless of the algorithm. Option B is incorrect because Route based on originating virtual port is a vSphere algorithm and does not depend on physical switch support. Option C is incorrect because having fewer VMs than uplinks might reduce distribution but does not prevent load balancing entirely; traffic could still be balanced across active uplinks.

Option D is incorrect because an explicit failover order can still allow multiple active uplinks if multiple paths are set to active; it is not the same as active/standby.

Full explanation →
96
MCQhard

A vSphere administrator notices that a VM is performing poorly on a host with multiple NUMA nodes. The VM has 16 vCPUs and 64 GB of memory, but the host has only 32 GB of memory per NUMA node. Which action would MOST LIKELY improve performance?

A.Enable vNUMA in the VM settings.
B.Increase the memory reservation to 64 GB.
C.Reduce the number of vCPUs to 8.
D.Migrate the VM to a host with more memory per NUMA node.
AnswerA

vNUMA exposes the NUMA topology, allowing the guest OS to optimize memory access across nodes.

Why this answer

The VM's memory (64 GB) exceeds the per-NUMA-node memory capacity (32 GB), so the VM becomes a 'wide' VM that spans multiple NUMA nodes. Enabling vNUMA exposes this virtual NUMA topology to the guest OS, allowing it to optimize memory locality and improve performance. Increasing memory reservation does not address the NUMA issue, reducing vCPUs may help but is not the best solution, and migrating to a host with more memory per node is unnecessary if vNUMA is enabled.

Full explanation →
97
Multi-Selectmedium

A vSphere administrator is using vLCM and needs to ensure that all hosts are compliant with the desired image. Which TWO actions are valid when remediating a vLCM cluster?

Select 2 answers
A.Perform a pre-remediation check to validate the image.
B.Remediate without putting hosts into maintenance mode.
C.Remediate only hosts that are non-compliant.
D.Use Quick Boot to minimize host reboot time.
E.Remediate the cluster even if there are compliance issues.
AnswersA, D

vLCM validates the image before applying it.

Why this answer

VLCM requires a pre-remediation check to validate that the desired image can be applied successfully to all hosts in the cluster. This check verifies hardware compatibility, driver versions, and firmware prerequisites before any remediation begins, preventing partial or failed updates.

Exam trap

The trap here is that candidates often assume they can remediate only non-compliant hosts to save time, but vLCM enforces cluster-wide consistency by applying the same image to all hosts, even those already compliant, to prevent configuration drift.

Full explanation →
98
MCQhard

A vLCM-managed cluster fails remediation with the error: 'Failed to remediate host due to hardware compatibility check failure. The host hardware does not meet the requirements of the cluster image.' The administrator verifies that the host is on the vSphere Compatibility Guide (VCG). What else could cause this error?

A.The cluster image has hardware compatibility enforcement set to 'Strict'.
B.The host has a custom VIB installed that conflicts with the image.
C.The cluster image specifies an incorrect driver version.
D.The host is not in maintenance mode during remediation.
AnswerA

Strict enforcement will fail remediation if any hardware component is not in the VCG, even if the host overall is listed.

Why this answer

VLCM can enforce strict hardware compatibility checks; if the cluster image has a strict setting, even if the host is on VCG, it may fail if the specific configuration is not supported. Options B, C, D are not plausible causes for this specific error.

Full explanation →
99
MCQhard

A large financial institution runs a vSphere 7.0 environment with 100 ESXi hosts and 2,000 VMs. The security team has identified that several VMs are vulnerable to a critical side-channel attack that requires disabling hyperthreading on the ESXi hosts. The administrator needs to implement a solution that minimizes performance impact while ensuring compliance. The environment uses DRS clusters with varying workloads: some VMs are CPU-intensive (financial modeling) and others are memory-bound (database servers). The administrator cannot afford to take hosts offline for maintenance during business hours. The change must be implemented within 48 hours. Which course of action should the administrator take?

A.Use a vSphere DRS rule to disable hyperthreading for all VMs in the cluster, avoiding the need to modify host BIOS.
B.Place each host in maintenance mode individually, disable hyperthreading in the host BIOS, reboot the host, and then move to the next host. Rebalance VMs after all hosts are updated.
C.Delay the change and schedule a maintenance window for the next month when business impact is lower.
D.Disable hyperthreading on all hosts simultaneously using a vSphere Cluster feature, then reboot all hosts at once during off-peak hours.
AnswerB

This minimizes downtime as VMs are migrated off each host before reboot, and can be completed within 48 hours.

Why this answer

Disabling hyperthreading to mitigate side-channel attacks (e.g., L1TF or MDS) requires a host BIOS change, which necessitates a reboot. The only supported method in vSphere 7.0 is to place each host into maintenance mode, change the BIOS setting, reboot, and then repeat for all hosts. This approach minimizes performance impact by allowing VMs to be migrated via vMotion and avoids simultaneous downtime, meeting the 48-hour requirement without taking all hosts offline during business hours.

Exam trap

The trap here is that candidates mistakenly believe hyperthreading can be disabled via a vSphere software setting (like a DRS rule or cluster feature) without a host reboot, when in reality it requires a physical BIOS change and reboot per host.

How to eliminate wrong answers

Option A is wrong because vSphere DRS rules cannot disable hyperthreading at the VM or host level; hyperthreading is a hardware feature controlled only via BIOS or host-level CPU configuration, and DRS rules only influence VM placement and resource allocation. Option C is wrong because delaying the change for a month violates the explicit requirement to implement the fix within 48 hours, and the security vulnerability demands immediate remediation. Option D is wrong because there is no vSphere Cluster feature to disable hyperthreading across all hosts simultaneously; disabling hyperthreading requires a BIOS change and reboot per host, and rebooting all hosts at once would cause total cluster downtime, violating the constraint of no business-hour outages.

Full explanation →
100
Multi-Selecthard

Which THREE of the following are required components for setting up a vSphere Trust Authority (vTA) cluster?

Select 3 answers
A.A Key Provider, such as VMware Key Provider or an external KMS.
B.A dedicated Trust Authority cluster with at least one host.
C.NSX-T Data Center deployed for network segmentation.
D.A physical Trusted Platform Module (TPM) on each trusted host.
E.The Attestation Service and Key Cache services installed on the Trust Authority cluster.
AnswersB, D, E

The Trust Authority cluster hosts the attestation service.

Why this answer

Options B, D, and E are correct. A vTA deployment requires a dedicated Trust Authority cluster (B), a physical TPM on each trusted host (D), and the Attestation Service and Key Cache services (E). Option A is incorrect because a Key Provider is part of vSphere Trusted Infrastructure (vTPM) but not vTA.

Option C is incorrect because NSX-T is not required for vTA.

Full explanation →
101
MCQhard

An ESXi host has two VMkernel interfaces as shown in the exhibit. The iSCSI targets are on the same subnet as vmk1 and support jumbo frames. The administrator reports that iSCSI sessions are experiencing high error rates and poor performance. What is most likely the cause?

A.The management network (vmk0) is also using the vDS, causing traffic interference.
B.The iSCSI VMkernel port should not be bound to a vDS.
C.The iSCSI network (vmk1) is on a different subnet than the iSCSI targets.
D.The vDS port group for iSCSI does not have jumbo frames enabled (MTU 9000).
AnswerD

If the vDS port group MTU is 1500, packets up to 9000 will be fragmented, causing errors. The VMkernel interface has MTU 9000, so the port group must match.

Why this answer

The iSCSI targets support jumbo frames (MTU 9000), but if the vDS port group for iSCSI is configured with the default MTU of 1500, packets will be fragmented, leading to high error rates and poor performance. The exhibit shows vmk1 is on the vDS, and the iSCSI targets are on the same subnet as vmk1, so the mismatch in MTU settings is the most likely cause. Option A is incorrect because management traffic on vmk0 is separate and does not affect iSCSI.

Option B is incorrect because iSCSI VMkernel ports can be bound to a vDS. Option C is incorrect because the iSCSI network (vmk1) is on the same subnet as the iSCSI targets, so subnet mismatch is not the issue.

Full explanation →
102
MCQeasy

Which switch type requires a separate vCenter Server to manage its configuration?

A.Virtual Edge Gateway Switch
B.vSphere Distributed Switch
C.vSphere Standard Switch
D.vSphere Edge Switch
AnswerB

Requires vCenter Server for central management.

Why this answer

The vSphere Distributed Switch (VDS) requires a separate vCenter Server to manage its configuration because the VDS is a centralized virtual switch that spans multiple ESXi hosts, and its configuration is stored in the vCenter Server database rather than on individual hosts. Without vCenter, the VDS cannot be created, configured, or managed, as the ESXi hosts rely on vCenter to synchronize the distributed port group settings and network policies across the cluster.

Exam trap

The trap here is that candidates often confuse the vSphere Standard Switch (VSS) with the vSphere Distributed Switch (VDS), assuming both can be managed without vCenter, but the VDS explicitly requires vCenter for any configuration changes, while the VSS can be managed directly on the ESXi host.

How to eliminate wrong answers

Option A is wrong because a Virtual Edge Gateway Switch is not a standard VMware vSphere switch type; it is a component of VMware NSX (specifically the NSX Edge Gateway) used for north-south traffic routing and firewall services, and it does not require a separate vCenter Server for its configuration—it is managed through the NSX Manager, which itself integrates with vCenter. Option C is wrong because the vSphere Standard Switch (VSS) is a host-level virtual switch that is configured locally on each ESXi host using the vSphere Client directly connected to the host or via vCenter, but it does not require a separate vCenter Server to manage its configuration; each VSS is independent and its settings are stored on the individual ESXi host. Option D is wrong because a vSphere Edge Switch is not a recognized VMware product or switch type; the correct term is the NSX Edge virtual router or the VDS, and there is no standalone 'vSphere Edge Switch' that requires vCenter.

Full explanation →
103
Matchingmedium

Match each vSphere networking component to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Logical grouping of ports with common configuration

Network interface for vSphere services like vMotion

Physical NIC connected to a virtual switch

Segments network traffic at Layer 2

Combining multiple uplinks for load balancing or failover

Why these pairings

Key vSphere networking components: Distributed Switch (centralized, multi-host), Standard Switch (per-host), Port Group (logical grouping). Common confusion is mixing the switch types.

Full explanation →
104
MCQmedium

During a cluster upgrade using vLCM, the pre-check reports that Quick Boot is disabled. How does this affect the upgrade?

A.Quick Boot speeds up reboot
B.No effect
C.Hosts will reboot normally
D.Upgrade will fail
AnswerC

With Quick Boot disabled, each host will perform a full reboot, which is slower but still functional.

Why this answer

Quick Boot is an optional optimization that reduces reboot time by temporarily booting from a snapshot. When Quick Boot is disabled, hosts will reboot normally during remediation, and the upgrade proceeds without failure. Option A is incorrect because Quick Boot speeds up reboot, but its disablement does not cause upgrade failure; hosts just reboot normally.

Option B is incorrect because disabling Quick Boot does have an effect: hosts will reboot normally instead of using the faster Quick Boot method. Option D is incorrect because the upgrade will not fail due to Quick Boot being disabled.

Full explanation →
105
MCQhard

A vSphere cluster using vSAN is experiencing high latency for some VMs. The administrator checks the vSAN skyline health and finds that all disk groups are healthy. Which additional step should the administrator take to diagnose the issue?

A.Verify that the vSAN network is configured with jumbo frames.
B.Enable vSAN encryption to improve performance.
C.Increase the number of disk groups on each host.
D.Check the vSAN performance service for object latency breakdown.
AnswerD

Correct: Performance service provides detailed latency metrics.

Why this answer

The vSAN Performance Service provides granular, real-time and historical metrics for vSAN objects, including latency breakdowns at the VM, disk group, and physical disk levels. Since the skyline health check shows all disk groups as healthy, the next logical step is to use the Performance Service to pinpoint whether the high latency is due to congestion on a specific object, such as a VM virtual disk or a particular disk group component, rather than a hardware failure.

Exam trap

The trap here is that candidates assume a healthy skyline health check means there is no underlying performance issue, but vSAN skyline health primarily checks for hardware failures and configuration compliance, not performance bottlenecks, so they must use the Performance Service for latency analysis.

How to eliminate wrong answers

Option A is wrong because jumbo frames (MTU 9000) can improve network throughput but are not a diagnostic step; they are a configuration optimization that may reduce CPU overhead but do not directly reveal the source of latency. Option B is wrong because vSAN encryption adds CPU overhead and can increase latency, not improve performance; it is a security feature, not a performance tuning tool. Option C is wrong because increasing the number of disk groups per host can improve performance by distributing I/O, but it is a capacity planning or reconfiguration action, not a diagnostic step to identify the root cause of existing high latency.

Full explanation →
106
MCQeasy

An administrator is designing a new vSphere environment and wants to minimize manual effort for patching and upgrade. Which lifecycle management approach should they choose for vSphere 8 clusters?

A.Use vSphere baselines for granular control.
B.Enable vLCM for all clusters.
C.Use vSphere Update Manager for standalone hosts.
D.Use vLCM only for large clusters with more than 32 hosts.
AnswerB

vLCM is the recommended lifecycle management solution for vSphere 8.

Why this answer

VLCM (vSphere Lifecycle Manager) is the modern, image-based lifecycle management approach for vSphere 8 clusters, minimizing manual effort for patching and upgrades. Option A is incorrect because vSphere baselines are a legacy approach and require more manual effort. Option C is incorrect because vSphere Update Manager is replaced by vLCM in vSphere 8 and is not recommended for new environments.

Option D is incorrect because vLCM is recommended for all clusters, not just large ones.

Full explanation →
107
MCQeasy

An administrator deploys a new vCenter Server Appliance (VCSA) using the CLI installer. The administrator wants to ensure the appliance is highly available. Which deployment option should the administrator choose during the installation?

A.Deploy the VCSA with an embedded Platform Services Controller
B.Enable Enhanced vMotion Compatibility (EVC) on the cluster
C.Configure vSphere HA on the cluster that hosts the VCSA
D.Deploy the VCSA with an external Platform Services Controller and enable vCenter HA later
AnswerA

Correct. Deploying with an embedded PSC is the recommended approach in vSphere 7, and vCenter HA can be configured on such a deployment.

Why this answer

To ensure the VCSA is highly available, the administrator should choose option A. In vSphere 7, the external Platform Services Controller (PSC) is deprecated, and vCenter HA works with an embedded PSC. Deploying the VCSA with an embedded PSC allows vCenter HA to be configured later.

Option D is incorrect because an external PSC is no longer supported for new deployments and is not required for vCenter HA. Option B is incorrect because Enhanced vMotion Compatibility (EVC) is for CPU compatibility across hosts, not vCenter HA. Option C is incorrect because vSphere HA provides host-level failure protection, not vCenter-level high availability.

Full explanation →
108
MCQeasy

An administrator sees this health check output. What should be done to verify VLAN 100 connectivity?

A.Create a VMkernel adapter on VLAN 100 and ping a gateway.
B.Enable VLAN pruning on the physical switch.
C.Configure a port group for VLAN 100 and connect a VM.
D.Restart the management agents.
AnswerA

A VMkernel adapter provides a layer 3 test on that VLAN.

Why this answer

To test VLAN 100, a VMkernel adapter with that VLAN should be created and used to ping a gateway. Option B is for pruning, not testing. Option C would test VM traffic, but VMkernel adapter is more direct for verification.

Option D is not necessary.

Full explanation →
109
MCQhard

A company operates a large vSphere environment with 32 ESXi hosts, each featuring 2 sockets, 12 cores per socket (2.6 GHz), and 256 GB RAM. The environment runs a mix of VMs, including several critical database VMs with 16 vCPUs and 128 GB RAM configured. After migrating these database VMs from an older cluster to a new cluster with identical hardware specifications, administrators observe significant performance degradation. vCenter performance charts show high memory ballooning and elevated CPU ready time for these VMs, while overall host utilization remains moderate (CPU 40%, RAM 60%). The new cluster's hosts have two NUMA nodes per socket (each NUMA node spans 6 cores and 64 GB RAM). The older cluster had hosts with a single NUMA node per socket. The administrator confirms that the VMs are running on hosts with sufficient free resources and that no other VMs are contending heavily. What is the most likely cause, and what should the administrator do to resolve the issue?

A.Reduce the number of vCPUs for the database VMs from 16 to 8.
B.Disable Hyper-Threading on the new cluster hosts.
C.Increase the memory reservation for each database VM to prevent ballooning.
D.Enable vNUMA for the database VMs to align with the physical NUMA topology.
AnswerD

vNUMA allows the guest OS to optimize memory access based on physical NUMA nodes, reducing remote memory access and improving performance.

Why this answer

The performance degradation is caused by a vCPU-to-NUMA topology mismatch. The database VMs have 16 vCPUs, but each NUMA node in the new cluster has only 6 cores. Without vNUMA enabled, the VM scheduler treats the guest as a single large NUMA domain, causing cross-NUMA memory accesses and high memory ballooning.

Enabling vNUMA exposes the physical NUMA topology to the guest OS, allowing it to optimize memory locality and reduce overhead.

Exam trap

The trap here is that candidates often attribute performance issues to CPU or memory oversubscription, overlooking the NUMA topology mismatch that occurs when VM vCPU count exceeds a single NUMA node's core count, especially after migrating to hosts with different NUMA configurations.

How to eliminate wrong answers

Option A is wrong because reducing vCPUs would lower the VM's processing capacity, which is not the root cause; the issue is NUMA misalignment, not CPU oversubscription. Option B is wrong because disabling Hyper-Threading would reduce available logical CPUs and worsen performance, and it does not address NUMA topology alignment. Option C is wrong because increasing memory reservation prevents ballooning only if the host is overcommitted, but the host has sufficient free resources (60% RAM used); the ballooning is a symptom of cross-NUMA memory access, not memory contention.

Full explanation →
110
MCQeasy

An administrator has created a custom role named 'VM Power User' with permissions to power on and off virtual machines. The role is assigned to a group of users at the datacenter level. A user from that group reports they cannot power on a VM in a particular cluster. What is the most likely reason?

A.The user must be assigned the role individually at the VM level
B.The cluster has a permission that blocks inheritance from the datacenter
C.The role is not assigned to a resource pool containing the VM
D.The user is not a member of the group assigned to the role
AnswerB

Blocked inheritance prevents the role from applying.

Why this answer

Permissions are not inherited by default if a child object has explicit permissions set that block propagation. Option A is wrong because the group is assigned the role; individual membership suffices. Option C is wrong because the role does not require resource assignment.

Option D is wrong because the user is part of the group; no separate assignment needed.

Full explanation →
111
MCQhard

During a vLCM health check, an administrator sees that the health status for a cluster is 'Error' with the message: 'Unable to connect to the depot service at https://depot.vmware.com'. The cluster is configured to use the online depot. What is the most likely cause?

A.DNS resolution is failing for the vCenter server.
B.The vCenter server's certificate is expired.
C.A firewall is blocking outbound HTTPS access to the internet.
D.The cluster image has an invalid URL.
AnswerC

vLCM needs internet access to the depot; firewall blocks cause connection timeouts.

Why this answer

A firewall blocking outbound HTTPS traffic to the internet would prevent the vCenter from connecting to the online depot at https://depot.vmware.com. Option A is incorrect because DNS resolution failure would typically result in a 'Name or service not known' error, not an inability to connect. Option B is incorrect because an expired certificate would cause SSL verification errors, not a connection error.

Option D is incorrect because the cluster image URL being invalid would cause an image-related error, not a depot connection error.

Full explanation →
112
MCQeasy

An administrator wants to apply a critical security patch to all ESXi hosts in a cluster that is managed by a baseline. The patch is not yet available as an update in the baseline group. What is the best approach to apply this patch quickly?

A.Remediate each host individually using CLI commands.
B.Attach the patch as a new baseline to the cluster alongside existing baselines.
C.Create a new baseline group that includes the patch and attach it to the cluster.
D.Download the patch as an offline bundle and use vLCM to apply it directly.
AnswerB

Attaching a patch baseline allows remediation of the cluster.

Why this answer

You can attach the patch as a new baseline to the cluster alongside the existing baseline group. This allows you to apply the critical patch immediately without waiting for it to be included in the baseline group. Option A is wrong because remediating each host individually with CLI commands is inefficient and not the best approach when baseline-based management is available.

Option C is wrong because creating a new baseline group is unnecessary; simply attaching the patch as a single baseline is sufficient. Option D is wrong because vLCM uses image-based management, not baselines; the question specifies baseline-based management.

Full explanation →
113
MCQmedium

A vCenter Server's SSL certificate has expired, causing all ESXi hosts to display a certificate warning and some management tasks to fail. The administrator needs to restore secure communication with minimal disruption. Which action should the administrator take?

A.Reboot the vCenter Server appliance to regenerate the certificate automatically.
B.Replace the vCenter Server certificate and then reconnect each ESXi host to vCenter.
C.Replace the SSL certificate on each ESXi host individually using the vSphere Web Client.
D.Use vSphere Auto Deploy to push new certificates to all hosts simultaneously.
AnswerB

Replacing the vCenter Server certificate is the correct first step. After replacement, each ESXi host must be reconnected to vCenter to establish trust with the new certificate.

Why this answer

Replacing the vCenter Server certificate and then reconnecting each ESXi host restores trust and secure communication. Option A is wrong because rebooting the vCenter Server appliance does not regenerate the SSL certificate automatically; the certificate remains expired. Option C is wrong because replacing certificates on each ESXi host individually does not address the expired vCenter certificate and is inefficient.

Option D is wrong because vSphere Auto Deploy is used for provisioning hosts, not for replacing vCenter certificates.

Full explanation →
114
MCQhard

An administrator notices that a VM with high I/O demands is experiencing performance issues because other VMs on the same datastore are consuming too many I/O operations. Which feature can be used to guarantee a minimum I/O share to this VM?

A.Multipathing policy
B.VM storage policy
C.Storage DRS
D.Storage I/O Control shares
AnswerD

SIOC uses shares to allocate relative I/O priority to VMs.

Why this answer

Storage I/O Control (SIOC) allows setting shares, limits, and reservations to allocate I/O bandwidth per VM. Storage DRS balances I/O across datastores, not per-VM; multipathing selects paths; VM storage policies manage provisioning.

Full explanation →
115
MCQmedium

A company has a vSphere environment with a vCenter Server Appliance (VCSA) that is running low on disk space. The administrator notices that the /storage/archive partition is nearly full. Which action should the administrator take to reclaim space without impacting the functionality of vCenter Server?

A.Increase the size of the VCSA virtual disk using vSphere Web Client.
B.Run the 'vcenter-delete-archive' script from the command line.
C.Use the Windows Disk Cleanup utility on the VCSA.
D.Manually delete files from the /storage/archive directory using SSH.
AnswerB

This script is designed to safely clean up old archived data.

Why this answer

The VCSA runs on a Linux-based operating system, not Windows, so the Windows Disk Cleanup utility is irrelevant. The /storage/archive partition stores historical data such as stats, events, and tasks. VMware provides the 'vcenter-delete-archive' script as the supported method to safely purge old archived data from this partition without risking corruption of the vCenter Server database or services.

Manually deleting files via SSH can leave the database in an inconsistent state, while increasing the virtual disk only postpones the issue without reclaiming space.

Exam trap

The trap here is that candidates assume any manual deletion or disk expansion is acceptable, but VMware specifically tests the understanding that only the provided script can safely clean the archive without breaking vCenter Server functionality.

How to eliminate wrong answers

Option A is wrong because increasing the VCSA virtual disk size expands the partition but does not reclaim space; it only adds more storage, which is not a cleanup action. Option C is wrong because the VCSA is a Linux-based appliance, not a Windows system, so the Windows Disk Cleanup utility cannot be used. Option D is wrong because manually deleting files from /storage/archive via SSH can corrupt the vCenter Server database and is not a supported or safe method; the correct approach is to use the official VMware script.

Full explanation →
116
MCQhard

Refer to the exhibit. An administrator observes high latency on a VMFS datastore. Based on the vdbench and esxtop output, which component is most likely causing the latency?

A.The virtual machine or application is causing high latency due to inefficient I/O patterns.
B.The storage array is overloaded, causing high queue depth (DAQLEN=32).
C.The VMFS datastore is fragmented, causing increased seek times.
D.The ESXi host's HBA queue depth is insufficient, causing queuing on the host.
AnswerA

GAVG is high (8.2 ms) indicating latency at the guest OS level, likely from application I/O or driver issues.

Why this answer

The esxtop output shows KAVG (kernel latency) of 2.5 ms and GAVG (guest latency) of 8.2 ms. The total latency (QAVG) is 10.7 ms, but the reported datastore latency is 12 ms. The high GAVG relative to KAVG indicates latency at the guest/application level, not at the storage array.

The vdbench test shows 12 ms average latency, which matches the guest-level latency. The issue is likely due to application I/O patterns or queue depth, not the storage backend.

Full explanation →
117
MCQhard

A company runs a vSphere 7.0 U3 environment with 200 VMs across 10 ESXi hosts in a single cluster managed by vCenter 7.0. The cluster uses vSAN and vLCM with image-based management. The administrator plans to upgrade the entire environment to vSphere 8.0 U2. The vCenter Server is running on a virtual machine on the same cluster. During the pre-upgrade checks, the vCenter Server upgrade fails with an error stating that the 'vSphere ESXi Agent Manager' (EAM) is not compatible. The administrator checks the EAM service status on vCenter and it appears running. What should the administrator do to successfully perform the upgrade?

A.Manually update each ESXi host to 8.0 using a bootable ISO, then attempt the vCenter upgrade again.
B.Perform a clean installation of vCenter 8.0 on a new server and reconnect the existing hosts.
C.Use vLCM to upgrade vCenter by exporting and importing the configuration.
D.Downgrade to vCenter 7.0 U2 and then upgrade directly to 8.0 U2.
AnswerB

Clean install avoids EAM compatibility issues; the old vCenter can be decommissioned.

Why this answer

The EAM incompatibility error indicates that the current vCenter Server's EAM extension is not compatible with the target vSphere 8.0 U2 version. A clean installation of vCenter 8.0 on a new server ensures a fresh, compatible EAM service is deployed, and reconnecting the existing hosts allows the new vCenter to adopt them without the incompatible extension. This bypasses the upgrade path issue where the in-place upgrade cannot resolve EAM version mismatches.

Exam trap

The trap here is that candidates assume a running EAM service means it is compatible, but the pre-upgrade check specifically validates the extension version against the target build, and a clean installation is the only supported resolution when the in-place upgrade path is blocked by EAM incompatibility.

How to eliminate wrong answers

Option A is wrong because manually updating ESXi hosts to 8.0 via ISO does not address the vCenter Server's incompatible EAM service; the vCenter upgrade itself must succeed first, and EAM is a vCenter-side component. Option C is wrong because vLCM with image-based management handles ESXi host lifecycle, not vCenter Server upgrades; exporting/importing configuration does not fix EAM incompatibility. Option D is wrong because downgrading to vCenter 7.0 U2 and then upgrading directly to 8.0 U2 does not resolve the EAM compatibility issue, as the EAM extension remains incompatible with the target version regardless of the intermediate step.

Full explanation →
118
Multi-Selectmedium

An administrator is planning to upgrade ESXi hosts using vLCM. Which of the following are prerequisites for using vLCM? (Choose TWO)

Select 2 answers
A.All hosts must be connected to the internet.
B.The vCenter must have a valid vLCM license.
C.The hosts must be in a cluster.
D.The vCenter Server must be version 7.0 or later.
E.Each host must have a static IP address.
AnswersC, D

vLCM operates at the cluster level.

Why this answer

Options C and D are correct. C is correct because vLCM manages ESXi hosts at the cluster level; hosts must be part of a cluster to apply a desired image. D is correct because vLCM was introduced in vSphere 7.0; vCenter Server 7.0 or later is required.

A is incorrect because internet access is not mandatory; local depots can be used. B is incorrect because vLCM does not require a separate license; it is included with vSphere licenses such as Enterprise Plus. E is incorrect because static IP addresses are not required; hosts can use DHCP.

Full explanation →
119
MCQhard

An administrator attempts to export a vLCM image but gets an error: 'Export image operation is not supported for this image'. What could be the reason?

A.The vLCM database is corrupt.
B.The image contains a custom component.
C.The image is too large.
D.The vCenter version does not support export.
AnswerB

Custom components (user-generated) are not exportable.

Why this answer

VLCM does not support exporting images that contain custom components. Export is only available for images composed of vSphere base images and VMware add-ons. Option A is wrong because database corruption would cause different errors, not this specific export error.

Option C is wrong because image size is not a limitation for export. Option D is wrong because vCenter version supports export for images that meet the criteria.

Full explanation →
120
Multi-Selecteasy

An organization wants to use vLCM for lifecycle management. Which three components can be managed using vLCM images? (Choose THREE)

Select 3 answers
A.ESXi version
B.vCenter Server version
C.Add-ons like drivers
D.Firmware for supported hardware
E.VMware Tools
AnswersA, C, D

The base ESXi image is managed.

Why this answer

Options A, C, and D are correct. A is correct because ESXi version is a core component of the vLCM image. C is correct because add-ons like drivers and firmware can be included.

D is correct because firmware for supported hardware is managed via vLCM images. B is incorrect because vCenter Server is managed through vLCM baseline-based clusters, not images. E is incorrect because VMware Tools is managed per VM, not as part of the host image.

Full explanation →
121
MCQhard

Refer to the exhibit. An administrator runs the command on an ESXi host to check HTTPS connections. The host is running vCenter Server and several VMs. What is the most likely cause of the TIME_WAIT connection?

A.A firewall is blocking return traffic from that client.
B.The host's TCP stack is misconfigured for high traffic.
C.The host is under memory pressure and dropping connections.
D.A client closed the HTTPS connection and the host is in TIME_WAIT state.
AnswerD

TIME_WAIT is normal after a client disconnects.

Why this answer

The TIME_WAIT state is a normal part of TCP connection termination. When a client closes an HTTPS connection, the ESXi host (as the server) enters TIME_WAIT to ensure any delayed segments are not misinterpreted by a new connection. This state is expected and not indicative of a problem.

Exam trap

The trap here is that candidates often associate TIME_WAIT with a network or host problem, when in fact it is a standard TCP state indicating a clean connection closure initiated by the remote client.

How to eliminate wrong answers

Option A is wrong because a firewall blocking return traffic would cause connections to remain in SYN_SENT or ESTABLISHED state, not TIME_WAIT, which only occurs after a clean four-way closure. Option B is wrong because a misconfigured TCP stack for high traffic would manifest as excessive retransmissions, connection resets, or SYN drops, not a specific TIME_WAIT state for a single connection. Option C is wrong because memory pressure leads to connection resets (RST) or socket allocation failures, not the orderly TIME_WAIT state, which requires a completed FIN/ACK exchange.

Full explanation →
122
MCQmedium

During a vulnerability scan, an ESXi host is found to have the SSLv3 protocol enabled. The administrator wants to disable SSLv3 and enforce TLS 1.2 for all network services on the host. Which approach is most effective?

A.Update the TLS configuration in vCenter Server and reboot the host.
B.Change the host's security settings in the DCUI to require TLS 1.2.
C.Disable all unnecessary services on the host via the DCUI.
D.Set the advanced system option 'SSLv3.Enabled' to false and 'TLSv1.2.Enabled' to true.
AnswerD

Setting the advanced system options 'SSLv3.Enabled' to false and 'TLSv1.2.Enabled' to true directly controls which protocols are used by the host's network services.

Why this answer

The most effective approach is to set the advanced system option 'SSLv3.Enabled' to false and 'TLSv1.2.Enabled' to true. This directly modifies the ESXi host's SSL/TLS configuration. Option A is incorrect because vCenter Server's TLS settings do not override the host's own configuration.

Option B is incorrect because the DCUI does not have a direct setting to enforce TLS 1.2; it only allows basic security settings. Option C is incorrect because disabling services does not change the protocol version used by remaining services.

Full explanation →
123
MCQhard

A vSphere administrator is deploying a vSphere Distributed Switch (vDS) version 7.0. The environment has ESXi hosts with hardware version 7.0. The administrator needs to ensure that the vDS supports Network I/O Control version 3 (NIOCv3). What must be true for NIOCv3 to function correctly?

A.All hosts must be running ESXi 7.0 or later.
B.The vDS must be configured with Route based on IP hash teaming.
C.All hosts must have the vDS in Link Aggregation Control Protocol (LACP) mode.
D.The vDS must have a Network Resource Pool configured.
AnswerA

NIOCv3 requires ESXi 7.0 or later.

Why this answer

NIOCv3 is a feature introduced with vSphere 7.0 that provides granular bandwidth allocation and reservation for network traffic. For NIOCv3 to function correctly, all ESXi hosts attached to the vDS must be running ESXi 7.0 or later because the feature relies on kernel-level enhancements and the vSphere Network Resource Management (vNRM) agent that are only present in that version. Hosts on earlier versions lack the necessary drivers and scheduling capabilities, causing NIOCv3 to be unavailable or non-functional.

Exam trap

The trap here is that candidates often assume upgrading the vDS version alone is sufficient to enable NIOCv3, overlooking the critical requirement that every host in the cluster must also be running ESXi 7.0 or later for the feature to function.

How to eliminate wrong answers

Option B is wrong because Route based on IP hash teaming is a load-balancing policy, not a prerequisite for NIOCv3; NIOCv3 works independently of the teaming algorithm and does not require IP hash. Option C is wrong because LACP mode is a link aggregation configuration that is unrelated to NIOCv3; NIOCv3 can function with or without LACP, and forcing LACP is not a requirement. Option D is wrong because a Network Resource Pool is a construct used to allocate bandwidth to specific traffic types within NIOC, but it is not a prerequisite for NIOCv3 to function; NIOCv3 can operate with default resource pools or custom ones, but the feature itself must first be enabled on a vDS that meets the host version requirement.

Full explanation →
124
MCQmedium

An administrator has configured a vSphere Distributed Switch (VDS) with Network I/O Control. They need to guarantee bandwidth for a specific set of virtual machines. Which method should be used?

A.Create a port group with a custom network resource pool.
B.Enable SR-IOV on the physical NICs.
C.Set the virtual machine's network adapter to use a specific VLAN.
D.Configure Traffic Shaping on the distributed switch.
AnswerA

Network Resource Pools allow bandwidth reservation and guarantee.

Why this answer

Create a port group with a custom network resource pool. Network I/O Control allows administrators to create network resource pools to guarantee bandwidth for specific virtual machines or port groups. By creating a custom network resource pool and assigning it to a port group, you can reserve a certain amount of bandwidth.

Option B is incorrect because SR-IOV provides direct hardware passthrough but does not manage bandwidth guarantees; it can actually bypass Network I/O Control. Option C is incorrect because setting a VLAN tag does not guarantee bandwidth; it only separates traffic. Option D is incorrect because traffic shaping is used to limit bandwidth (throttle outgoing traffic) but does not guarantee a minimum bandwidth; it only caps it.

Full explanation →
125
MCQhard

In a vSphere 8 environment with vGPU vMotion enabled, an administrator attempts a vMotion of a VM that has a NVIDIA vGPU profile assigned. The vMotion fails with an error. What is the most likely cause?

A.Insufficient network bandwidth between the hosts
B.The destination host has a different GPU model
C.The vGPU license is not assigned to the VM
D.The VM's virtual hardware version is not supported for vGPU vMotion
AnswerD

vGPU vMotion requires hardware version 19 or later; older versions are incompatible.

Why this answer

vGPU vMotion has specific requirements; the VM must use virtual hardware version 19 or later. If the VM uses an older version, vMotion will fail.

Full explanation →
126
MCQeasy

An administrator runs the above command on an ESXi host. Which of the following is true about this host?

A.Root user can still access the DCUI or SSH using the allowed exception commands.
B.Lockdown mode is not enabled.
C.The exception user can run any command via the DCUI.
D.The host is in strict lockdown mode.
AnswerA

Root is an exception and has access to term and vimsh.

Why this answer

The command output shows that lockdown mode is enabled, root is listed as an exception user, and the allowed exception commands are 'terminal' and 'vimsh'. In normal lockdown mode (not strict), exception users retain access to the DCUI and SSH using only the permitted commands. Therefore, root can still access the DCUI or SSH via the allowed commands, making option A correct.

Option B is incorrect because lockdown mode is indeed enabled. Option C is incorrect because the exception user can only run the specified commands, not any command. Option D is incorrect because the presence of exception commands indicates normal lockdown mode, not strict lockdown.

Full explanation →
127
MCQeasy

A vSphere administrator needs to provide redundancy for VM traffic on a vSphere Standard Switch by using multiple physical uplinks. Which teaming configuration should be used to ensure that if one uplink fails, traffic automatically fails over to another?

A.Set load balancing to 'Route based on IP hash' and make both uplinks active.
B.Enable 'Use explicit failover order' and configure 'Network failures' detection.
C.Set load balancing to 'Explicit failover order' and set one uplink as active.
D.Set load balancing to 'Route based on originating virtual port' and make one uplink active and one standby.
AnswerD

This provides clear active/standby failover; if the active uplink fails, standby takes over.

Why this answer

Option D is correct because setting load balancing to 'Route based on originating virtual port' with one active and one standby adapter explicitly configures a failover pair: if the active uplink fails, the standby automatically takes over, ensuring redundancy. Option A is incorrect because while an active/active configuration with 'Route based on IP hash' can provide failover, it is designed primarily for load balancing and requires proper EtherChannel setup on the physical switch; for simple redundancy, the active/standby configuration is the direct and recommended approach. Option B is incorrect because enabling 'Use explicit failover order' does not by itself designate a standby adapter; you must also configure the active/standby assignments.

Option C is incorrect because having only one active uplink with no standby leaves no failover target if that uplink fails. Therefore, D is the correct answer.

Full explanation →
128
MCQhard

Refer to the exhibit. An administrator attempts to reclaim unused space on a VMFS datastore using esxcli storage vmfs unmap, but the command fails. Based on the logs and documentation, what is the most likely cause?

A.The reclaim-unit parameter is set too low, causing the array to reject the command.
B.The ESXi host does not have sufficient permissions to issue UNMAP commands.
C.The storage LUN is thick-provisioned and does not support UNMAP.
D.The VMFS datastore is not formatted with a supported block size.
AnswerC

The array documentation confirms UNMAP is only supported on thin-provisioned LUNs.

Why this answer

The vmkernel log shows the UNMAP command failed with ILLEGAL REQUEST, sense 0x5 0x20 0x0, which indicates an invalid command. The vendor documentation states that UNMAP is only supported when thin provisioning is enabled on the LUN. The LUN is likely thick-provisioned, so the array rejects the UNMAP command.

Full explanation →
129
MCQhard

Refer to the exhibit. What is the most likely cause of the failure?

A.The component is already downloaded.
B.The vLCM service is not running.
C.The component is corrupted.
D.The vCenter cannot reach the VMware depot.
AnswerD

A timeout indicates network connectivity issue.

Why this answer

The error indicates a connection timeout to the VMware depot. Option A is wrong because the error is about download failure, not already downloaded. Option B is wrong because the vLCM service is logging, indicating it is running.

Option C is wrong because the error is about download failure, not corruption.

Full explanation →
130
MCQeasy

A company plans to upgrade the ESXi hosts in their vSphere cluster from version 7.0 Update 3 to 8.0 Update 1 using vSphere Lifecycle Manager (vLCM). The cluster currently uses baseline-based management. What is the recommended approach to prepare for this upgrade?

A.Migrate the cluster to image-based management.
B.Manually upgrade each host using an ISO file.
C.Create a new baseline group and attach it to the cluster.
D.Use vMotion to migrate all VMs to another cluster before upgrading.
AnswerA

Image-based management provides consistency and is the modern approach for vLCM.

Why this answer

The recommended approach is to migrate the cluster from baseline-based management to image-based management (Option A). VMware recommends this transition because vLCM uses images to ensure consistency across hosts and simplify upgrades. Once the cluster uses an image, you can specify the desired ESXi version (8.0 Update 1) and remediate.

Baseline-based management is deprecated for vLCM. Options B, C, and D are not the recommended approach: manual ISO upgrades (B) are not automated, creating a new baseline group (C) still uses baselines which are not compatible with vLCM for this upgrade, and using vMotion to migrate VMs (D) is not a lifecycle management method but a migration tool.

Full explanation →
131
Multi-Selectmedium

A storage administrator is planning a vSAN stretched cluster for a remote office. The cluster must support stretching across two sites for disaster avoidance. Which two prerequisites must be met? (Choose two.)

Select 2 answers
A.The network latency between sites must be less than 5 ms round-trip.
B.The witness host must be placed at the primary site.
C.Each site must have a minimum of two hosts.
D.All hosts must be configured with a single network adapter for vSAN traffic.
E.A vSAN stretched cluster requires a minimum of four fault domains.
AnswersA, C

Latency must be under 5 ms round-trip to ensure acceptable performance for vSAN synchronization traffic.

Why this answer

Correct options A and C: Each site must have a minimum of two hosts (C) and network latency between sites must be less than 5 ms round-trip (A). Option B is incorrect because the witness host must be placed at a third site, not the primary. Option D is incorrect because hosts can use multiple network adapters for vSAN traffic; a single adapter is not required.

Option E is incorrect because a vSAN stretched cluster typically uses two fault domains (one per site) plus a witness, not four.

Full explanation →
132
MCQmedium

A company has a vLCM-managed cluster with a desired image that includes ESXi 8.0 U1 and multiple VIBs. After remediating, one host fails with an error: 'Failed to retrieve VIBs from depot'. What is the most likely cause?

A.The cluster has a baseline attached that conflicts with the desired image.
B.The image validation failed due to incompatible VIBs.
C.The host firmware is not compatible with the selected VIBs.
D.The vCenter Server does not have internet access to the VMware depot.
AnswerD

vLCM downloads VIBs from the depot; if unreachable, the remediation fails.

Why this answer

The error 'Failed to retrieve VIBs from depot' indicates that vCenter Server cannot reach the depot from which the VIBs are sourced. In a vLCM-managed cluster using a desired image, the image specification includes VIBs that may be hosted on the VMware online depot or a local depot. If vCenter Server lacks internet access to the VMware depot, it cannot download the required VIBs, causing the remediation to fail.

This is the most likely cause because the error is specifically about retrieval, not validation or compatibility.

Exam trap

The trap here is that candidates often confuse a depot retrieval failure with image validation or compatibility issues, but the error message explicitly points to a network or depot accessibility problem, not a VIB-level conflict.

How to eliminate wrong answers

Option A is wrong because vLCM-managed clusters use desired images, not baselines; if a baseline were attached, it would conflict at the cluster level, but the error message points to depot retrieval, not a baseline conflict. Option B is wrong because image validation errors (e.g., incompatible VIBs) would produce a different error, such as 'Image compliance check failed' or 'VIB dependency error', not a depot retrieval failure. Option C is wrong because host firmware incompatibility would manifest as a hardware compatibility error during remediation, not a failure to retrieve VIBs from a depot.

Full explanation →
133
Multi-Selectmedium

Which four types of traffic can be assigned to a separate VMkernel adapter on an ESXi host?

Select 4 answers
A.Management traffic
B.vMotion
C.vSAN
D.Virtual machine network traffic
E.Fault Tolerance logging
AnswersA, B, C, E

Management (host) traffic uses a VMkernel adapter and can be isolated.

Why this answer

The correct answers are A, B, C, and E. VMkernel adapters are used for system traffic such as management, vMotion, vSAN, and Fault Tolerance logging. Management traffic (A) handles host communication, vMotion (B) supports live migration, vSAN (C) provides storage traffic, and Fault Tolerance logging (E) is used for FT logging and can be assigned to a separate VMkernel adapter for performance and isolation.

Virtual machine network traffic (D) uses standard or distributed port groups, not VMkernel adapters.

Full explanation →
134
MCQeasy

Which storage feature in vSphere allows a VM to be migrated from one datastore to another without any downtime?

A.vMotion
B.Distributed Resource Scheduler (DRS)
C.Storage DRS
D.Storage vMotion
AnswerD

Storage vMotion migrates virtual disks with zero downtime.

Why this answer

Storage vMotion is the correct answer because it enables live migration of a virtual machine's virtual disk files from one datastore to another with zero downtime. It uses a mirrored copy mechanism where the source and destination datastores are synchronized before the VM is switched to the destination, ensuring continuous VM availability.

Exam trap

The trap here is confusing vMotion (host migration) with Storage vMotion (datastore migration), as both are live migration technologies but operate on entirely different resources.

How to eliminate wrong answers

Option A is wrong because vMotion migrates a running VM between ESXi hosts, not between datastores; it moves the VM's memory and CPU state, not its storage. Option B is wrong because Distributed Resource Scheduler (DRS) balances compute resources across hosts by recommending or initiating vMotion migrations, but it does not handle storage migrations. Option C is wrong because Storage DRS provides initial placement and ongoing load balancing of VMs across datastores, but it relies on Storage vMotion to perform the actual migration; Storage DRS itself does not execute the migration.

Full explanation →
135
MCQhard

A vSphere environment uses vLCM with a desired state model. A host is non-compliant because it has a different firmware version. What is the correct way to remediate?

A.Manually update firmware from vendor
B.Use a baseline to enforce firmware
C.Import a new image with correct firmware
D.Disable vLCM and use Update Manager
AnswerC

vLCM cluster images can include firmware add-ons; importing a new image with the correct firmware and remediating will fix compliance.

Why this answer

VLCM uses images that include firmware components; importing a new image with the correct firmware will enforce compliance. Other options are either manual or revert to older methods.

Full explanation →
136
MCQeasy

An administrator wants to use Storage DRS to balance space usage across datastores. What must be configured?

A.Host affinity rules
B.SIOC
C.Storage DRS automation level
D.Storage policy
AnswerC

The automation level determines how Storage DRS handles load balancing.

Why this answer

The storage DRS automation level (manual, partially automated, fully automated) controls whether migration recommendations are generated or applied automatically. SIOC, policies, and host affinity are not required for space balancing.

Full explanation →
137
MCQhard

A vSphere 8 environment uses vLCM. An administrator wants to enable Quick Boot during remediation. What is the prerequisite?

A.ESXi hosts must be version 7.0 or later
B.BIOS must support UEFI
C.Hosts must be in a cluster with DRS enabled
D.vCenter Server must be updated
AnswerA

Quick Boot is available from ESXi 7.0 onwards.

Why this answer

Quick Boot requires ESXi 7.0 or later. vCenter version is not a prerequisite as long as it supports vLCM. DRS and BIOS settings are not directly related to Quick Boot support.

Full explanation →
138
Multi-Selecteasy

An administrator is configuring a vSphere distributed switch. Which TWO are valid uplink teaming policies? (Choose two.)

Select 2 answers
A.Explicit failover order
B.Route based on MAC hash
C.Route based on round robin
D.Route based on physical NIC load
E.Route based on IP hash
AnswersD, E

Valid load balancing policy.

Why this answer

Route based on physical NIC load (option D) is a valid uplink teaming policy in vSphere distributed switches. This policy uses the load metric from the physical NICs to distribute traffic, where the switch selects the uplink with the least current load for outbound traffic, as determined by the vSphere Distributed Switch's load balancing algorithm.

Exam trap

The trap here is that candidates often confuse the valid teaming policies on distributed switches (which include 'Route based on physical NIC load' and 'Route based on IP hash') with those on standard switches (which include 'Route based on MAC hash' and 'Route based on round robin'), leading them to select the wrong options.

Full explanation →
139
MCQeasy

A VM configured with 4 vCPUs shows high co-stop time in performance metrics. What does co-stop time indicate and which action should be taken to improve performance?

A.Reduce the number of vCPUs to match workload requirements
B.Add more vCPUs to the VM
C.Enable hyperthreading on the host
D.Increase the VM's memory reservation
AnswerA

Fewer vCPUs reduce co-scheduling demands and can lower co-stop time.

Why this answer

Co-stop time is time when the VM is ready to run but waiting for all vCPUs to be scheduled simultaneously. Reducing the number of vCPUs can alleviate this.

Full explanation →
140
MCQeasy

A vSphere administrator wants to restrict direct console access to an ESXi host to authorized administrators only, without interrupting running virtual machines. Which feature should the administrator enable?

A.Lockdown mode
B.Enable DRS
C.Configure a host profile
D.Disable SSH service
AnswerA

Lockdown mode restricts direct access to the ESXi host via DCUI and SSH, but allows access through vCenter Server while VMs continue to run. This meets the requirement.

Why this answer

Lockdown mode restricts direct access to the ESXi host via DCUI and SSH, but allows access through vCenter Server while VMs continue to run. Option B (Enable DRS) is wrong because DRS is for load balancing, not security. Option C (Configure a host profile) is wrong because host profiles configure settings but do not enforce access restriction.

Option D (Disable SSH service) is wrong because disabling SSH alone does not restrict DCUI.

Full explanation →
141
MCQhard

An administrator is configuring LACP on a VDS with two uplinks. Which configuration must match between the VDS and the physical switch?

A.LACP mode (active/passive).
B.LACP rate (slow/fast).
C.LACP port key.
D.All of the above.
AnswerD

Port key, mode, and rate must all match.

Why this answer

For a successful LACP negotiation, the port key, mode (active/passive), and rate (slow/fast) must be consistent on both ends. Option A alone is insufficient. Option B alone is insufficient.

Option C alone is insufficient.

Full explanation →
142
MCQhard

Refer to the exhibit. What is the most likely reason the second path is in standby state?

A.The host has not successfully authenticated to the storage on that path.
B.The path is not properly zoned to the storage.
C.The storage array reports that path as non-optimized.
D.The multipathing policy is set to Fixed (VMW_PSP_FIXED).
AnswerC

ALUA arrays report non-optimized paths as standby.

Why this answer

The SATP is ALUA, which uses asymmetric states. 'Standby' indicates a non-optimized path. Zoning issues or authentication errors would result in a dead path, not standby. The PSP is round-robin, so it is not Fixed.

Full explanation →
143
MCQhard

Refer to the exhibit. An administrator configures Storage DRS for a datastore cluster. The cluster has datastores with varying performance. Which statement about Storage DRS behavior is correct?

A.Storage DRS will automatically migrate VMs when utilization exceeds 80%.
B.Storage DRS will only balance based on space, ignoring I/O metrics.
C.Storage DRS will balance datastores every 8 hours regardless of thresholds.
D.Storage DRS will generate recommendations but will not perform migrations automatically.
AnswerD

Manual automation means recommendations only.

Why this answer

With manual automation, Storage DRS only generates recommendations and does not automatically migrate VMs. The administrator must review and apply recommendations manually.

Full explanation →
144
MCQeasy

Based on the exhibit, if a host in the cluster has a network card that is not on the vSphere Compatibility Guide, what will happen during remediation?

A.The host will automatically update its drivers to become compatible.
B.A warning will be generated but remediation proceeds.
C.The remediation will fail for that host.
D.The host will be skipped with a warning.
AnswerC

Strict enforcement means any hardware not in VCG will cause failure.

Why this answer

VSphere Lifecycle Manager (vLCM) enforces strict hardware compatibility during remediation. If a host's network card is not listed in the vSphere Compatibility Guide, vLCM cannot verify its compatibility and will fail the remediation for that host to ensure cluster consistency and avoid potential issues. Option A is incorrect because vLCM does not automatically update drivers to make incompatible hardware compatible; it only remediates with approved configurations.

Option B is incorrect because vLCM does not generate a warning and continue; it fails the remediation. Option D is incorrect because the host is not simply skipped; remediation fails entirely for that host.

Full explanation →
145
MCQmedium

An administrator needs to allow HTTP traffic from a specific management workstation to an ESXi host while blocking all other inbound traffic. The ESXi firewall uses the default ruleset. What should the administrator do?

A.Open all firewall ports for the management subnet
B.Disable the ESXi firewall and use a network firewall
C.Modify the service console firewall rules
D.Use esxcli network firewall ruleset set to create an allowed IP list for the HTTP ruleset
AnswerD

Using esxcli network firewall ruleset set with an allowed IP list for the HTTP ruleset is correct because it restricts the HTTP ruleset to only the specified management workstation IP, blocking all other inbound traffic by default.

Why this answer

The ESXi firewall allows restricting a specific ruleset (such as HTTP) to a list of allowed IP addresses using the esxcli network firewall ruleset set command. Option A is wrong because opening all firewall ports for the management subnet is overly permissive and allows more than just HTTP traffic. Option B is wrong because disabling the ESXi firewall removes all host-level protection and is not recommended.

Option C is wrong because the service console firewall is deprecated in modern ESXi; the correct method is to use the ESXi firewall with esxcli.

Full explanation →
146
MCQhard

A vSphere administrator is designing a network for a cluster of ESXi hosts. Each host has four 10GbE uplinks. The cluster will host mission-critical VMs that require maximum throughput and redundancy. The administrator plans to use Network I/O Control (NIOC) and a vSphere Distributed Switch (vDS). Which configuration best ensures consistent network performance for all VMs?

A.Configure a single vDS with all four uplinks, enable NIOC, and set shares and reservations for each traffic type.
B.Configure a single vDS with all four uplinks and enable NetFlow for monitoring.
C.Create two separate vDS, each with two uplinks, and separate VM traffic from VMkernel traffic.
D.Configure a single vDS with all four uplinks and use Route based on IP hash teaming.
AnswerA

NIOC provides minimum bandwidth guarantees and fair sharing.

Why this answer

NIOC enables per-traffic-type resource management using shares, reservations, and limits, ensuring that mission-critical VMs receive consistent network throughput even under contention. Combining all four uplinks into a single vDS maximizes aggregate bandwidth and provides redundancy through teaming policies, while NIOC prioritizes traffic flows to prevent VMkernel or management traffic from starving VM traffic.

Exam trap

The trap here is that candidates often confuse load-balancing algorithms (like IP hash) with QoS mechanisms, assuming that distributing traffic across uplinks alone guarantees performance, when in fact NIOC's per-traffic-type resource controls are required to enforce consistent throughput for all VMs.

How to eliminate wrong answers

Option B is wrong because NetFlow is a monitoring and traffic analysis tool, not a QoS or performance guarantee mechanism; it does not allocate bandwidth or enforce fairness among traffic types. Option C is wrong because splitting uplinks across two separate vDS reduces the total available bandwidth per vDS and prevents NIOC from managing all traffic centrally, leading to potential underutilization and inconsistent performance. Option D is wrong because Route based on IP hash provides load balancing but does not offer per-traffic-type resource controls like shares and reservations, so it cannot guarantee consistent performance for all VMs under contention.

Full explanation →
147
Multi-Selectmedium

Which TWO of the following are valid use cases for vSphere Fault Tolerance (FT)? (Choose two.)

Select 2 answers
A.A VM that has a snapshot for backup purposes.
B.A VM with 4 vCPUs that must be protected from host failure.
C.A VM running a critical application that requires zero downtime in case of host failure.
D.A VM with a physical RDM (Raw Device Mapping) attached.
E.A VM with 16 vCPUs that requires high availability.
AnswersB, C

FT supports up to 8 vCPUs in vSphere 7 and later.

Why this answer

B is correct because vSphere Fault Tolerance (FT) supports VMs with up to 8 vCPUs (vSphere 7.0+) and provides continuous availability by maintaining a secondary VM that mirrors the primary VM's state via vLockstep, ensuring zero downtime in case of host failure. This makes it suitable for protecting a 4-vCPU VM from host failure.

Exam trap

The trap here is that candidates often confuse vSphere FT with vSphere HA, assuming FT can protect any VM regardless of vCPU count or configuration, but FT has strict limits (max 8 vCPUs, no snapshots, no physical RDMs) that are frequently tested in the exam.

Full explanation →
148
MCQmedium

An administrator needs to attach a SAN LUN to a VM for a clustered application that requires SCSI-3 persistent reservations. The VM will run on two hosts in a cluster. Which storage option should be used?

A.Create a virtual mode RDM (Raw Device Mapping).
B.Create a physical mode RDM (Raw Device Mapping).
C.Create a thick-provisioned eager zeroed VMDK on VMFS.
D.Create a VVol representing the LUN.
AnswerB

Correct: Physical mode RDM supports SCSI-3 persistent reservations and cluster applications.

Why this answer

Physical mode RDM (Raw Device Mapping) supports SCSI-3 persistent reservations and allows sharing the LUN between VMs in a cluster. Virtual compatibility mode (virtual RDM) does not support persistent reservations, so option A is incorrect. Option C (thick-provisioned eager zeroed VMDK on VMFS) does not support persistent reservations because VMDKs are managed by VMFS and cannot pass through SCSI-3 commands.

Option D (VVol representing the LUN) may not support persistent reservations in the same direct manner as a physical RDM, and typically requires additional configuration. Therefore, physical mode RDM is the correct choice.

Full explanation →
149
MCQeasy

A company's vSphere environment experiences intermittent performance degradation on a critical virtual machine. The VM has 8 vCPUs allocated, and the host has 16 physical cores (2 sockets, 8 cores each). The VM is configured with Hyper-Threading enabled. Which action is most likely to improve performance without increasing resource allocation?

A.Change the VM's CPU affinity to pin it to one socket
B.Enable CPU hot-add for the VM
C.Increase the VM's memory reservation
D.Disable Hyper-Threading on the host
AnswerA

Pinning to one socket ensures all vCPUs run on cores within the same physical CPU package, reducing NUMA cross-socket latency.

Why this answer

Pinning the VM to one socket reduces NUMA cross-socket latency, improving performance for the 8-vCPU VM. Option B is wrong because CPU hot-add does not improve performance; it allows adding CPUs later. Option C is wrong as memory reservation does not directly affect CPU performance.

Option D is wrong because disabling Hyper-Threading generally reduces throughput.

Full explanation →
150
MCQhard

Refer to the exhibit. The administrator notices rx_dropped packets on vmnic0 but no errors. What is the most likely cause of the dropped packets?

A.There is a VLAN mismatch causing packets to be dropped.
B.The virtual switch port has insufficient buffer space.
C.The physical NIC's receive ring buffer is overflowing due to high traffic.
D.The physical switch is dropping packets due to congestion.
AnswerC

rx_dropped on a NIC without errors usually indicates the ring buffer is full and packets are dropped. Increasing ring buffer size or optimizing interrupt coalescing can help.

Why this answer

The exhibit shows rx_dropped: 120 on vmnic0, but no rx_errors. The vsish output shows no drops on the virtual switch port. The drops on the physical NIC are likely due to ring buffer overflow, which occurs when the host receives packets faster than it can process them.

This is common under high traffic load or insufficient interrupt handling.

Full explanation →
Page 1

Page 2 of 7

Page 3

All pages

1234567

Practice VCP-DCV by domain

Target a specific domain to shore up weak areas.

vSphere Architecture, Products and SolutionsConfigure and Manage vSphere NetworkingConfigure and Manage vSphere StoragevSphere Lifecycle ManagementvSphere SecurityvSphere Performance and Scaling
See all domains with question counts →