Courseiva

VMware Certified Professional Data Center Virtualization VCP-DCV (VCP-DCV) — Questions 151–225

498 questions total · 7pages · All types, answers revealed

Take a mock examExam hub
Page 2

Page 3 of 7

Page 4
151
MCQmedium

An administrator notices that a VM with a critical application is experiencing intermittent network connectivity. The VM is configured with an E1000 vNIC. The ESXi host has been upgraded from 6.5 to 7.0. What is the most likely cause?

A.The VM hardware version needs to be upgraded to version 15.
B.The VM needs to be powered off and back on to reset the vNIC.
C.The E1000 vNIC is not supported in ESXi 7.0; VMXNET3 must be used.
D.The E1000 driver is incompatible with ESXi 7.0.
AnswerA

Correct: Upgrading virtual hardware resolves compatibility issues.

Why this answer

The E1000 vNIC is a legacy emulated device that relies on the VM's hardware version for proper compatibility with newer ESXi releases. Upgrading the VM hardware version to version 15 (or later) ensures that the virtual hardware is aligned with ESXi 7.0's supported features and drivers, resolving intermittent network connectivity caused by outdated emulation.

Exam trap

The trap here is that candidates assume the E1000 vNIC is completely unsupported in ESXi 7.0, when in fact it is deprecated but still functional, and the real issue is the VM hardware version not being updated to match the host's capabilities.

How to eliminate wrong answers

Option B is wrong because power cycling the VM resets the vNIC state but does not address the underlying hardware version mismatch; the issue will recur after reboot. Option C is wrong because the E1000 vNIC is still supported in ESXi 7.0, though it is deprecated; VMXNET3 is recommended for performance but not mandatory. Option D is wrong because the E1000 driver is not the root cause—the problem stems from the VM hardware version, not the driver compatibility with ESXi 7.0.

Full explanation →
152
Multi-Selectmedium

An administrator is troubleshooting network connectivity for a virtual machine connected to a vSphere Distributed Switch. Which three components must be properly configured for the VM to communicate with the external network?

Select 3 answers
A.VM's IP address
B.Physical NIC uplink
C.Distributed switch uplink port group
D.VM's network adapter driver
E.Physical switch port configuration
AnswersB, C, E

The physical NIC must be connected and functional.

Why this answer

Options B, C, and E are correct. The physical NIC uplink provides connectivity from the host, the distributed switch uplink port group connects the DVS to the physical NIC, and the physical switch port must be configured to allow traffic. Option A is incorrect because the VM's IP address is an OS setting, not a vSphere networking component.

Option D is incorrect because the VM's network adapter driver is a software component, not a configuration element.

Full explanation →
153
MCQhard

Based on the exhibit, which statement about vNUMA exposure to virtual machines is correct?

A.The settings are invalid because minPerMachine must be greater than maxPerMachine.
B.VMs with 6 vCPUs will not have vNUMA exposed.
C.Only VMs with exactly 4 or 8 vCPUs will have vNUMA exposed.
D.VMs with 6 vCPUs will have vNUMA exposed.
AnswerD

6 vCPUs falls within the configured range, so vNUMA is exposed.

Why this answer

The settings define that vNUMA is exposed to VMs with vCPUs between minPerMachine (4) and maxPerMachine (8) inclusive. Therefore, a VM with 6 vCPUs will have vNUMA topology exposed. VMs with fewer than 4 vCPUs will not have vNUMA, and VMs with more than 8 vCPUs will also not have vNUMA exposed because maxPerMachine is 8.

Full explanation →
154
MCQmedium

A vSphere cluster has multiple storage arrays with different capabilities. The administrator wants to automatically place VMs on datastores that match their storage policy. What is required?

A.VASA provider
B.Storage DRS only
C.Storage I/O Control
D.VM storage policy and Storage DRS
AnswerD

Storage DRS uses VM storage policies for automated placement based on capabilities.

Why this answer

Storage DRS uses VM storage policies to automatically place VMs on datastores that satisfy the policy requirements. SIOC is for I/O control; VASA provides capabilities but does not automate placement without Storage DRS.

Full explanation →
155
MCQmedium

Refer to the exhibit. What does this error indicate?

A.The path is misconfigured.
B.The storage device is not connected.
C.The target LUN is not available.
D.The host's HBA is faulty.
AnswerC

SCSI sense D:0x2 (Not Ready) indicates LUN not accessible.

Why this answer

SCSI sense key D:0x2 indicates 'Not Ready', meaning the LUN is not available. Host bus adapter failure or path misconfiguration would produce different sense codes; no path would show a different state.

Full explanation →
156
Multi-Selecthard

Which TWO troubleshooting steps should an administrator take when a host fails to remediate and shows 'compliance error: host firmware mismatch' in a vLCM cluster? (Choose two.)

Select 2 answers
A.Remove the host from the cluster and re-add it.
B.Manually upgrade all hosts to the latest ESXi version.
C.Check the compliance status in the vSphere Client cluster monitor.
D.Review the software FCoE/VLAN/driver versions in the cluster image.
E.Disable the cluster image and use a baseline group instead.
AnswersC, D

This shows which components are non-compliant.

Why this answer

Correct options are C and D. Checking the compliance status in the vSphere Client cluster monitor allows the administrator to see detailed compliance information for the host, including specific mismatches. Reviewing the software FCoE, VLAN, and driver versions in the cluster image is a troubleshooting step to identify component mismatches that could cause firmware errors.

Option A is incorrect because removing and re-adding a host does not address the underlying firmware mismatch. Option B is incorrect because manually upgrading all hosts is unnecessary and not a targeted troubleshooting step. Option E is incorrect because disabling the cluster image and using a baseline group would change the management approach but does not resolve the compliance error related to firmware mismatch in a vLCM cluster.

Full explanation →
157
Drag & Dropmedium

Sequence the steps to configure a VM to use a static IP address via vSphere's customization specification.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct sequence ensures that the VM receives the static IP configuration during the first boot after customization. Initiating the customization opens the wizard, selecting or creating a spec defines the settings, configuring IP within the spec sets the static address, applying saves the configuration, and powering on triggers the OS customization process.

Full explanation →
158
MCQeasy

A company has a vSphere cluster of eight ESXi hosts managed by a single vCenter Server. They need to apply a critical security patch to the ESXi hosts with minimal downtime. Which method should the administrator use?

A.Use vMotion to migrate all VMs to one host, apply patch, then move back.
B.Use vSphere vMotion to migrate VMs, then apply patch using CLI on each host.
C.Put each host in maintenance mode and apply the patch via Update Manager.
D.Schedule a host reboot during maintenance window and apply patch via ISO boot.
AnswerC

Correct: Update Manager automates patching with minimal downtime.

Why this answer

VSphere Update Manager (VUM) automates the patching process by placing each host into maintenance mode, migrating VMs via vMotion to other hosts, applying the patch, and then bringing the host back online—all with minimal downtime. This is the recommended method for applying critical security patches to multiple ESXi hosts in a cluster managed by a single vCenter Server.

Exam trap

The trap here is that candidates may think manual vMotion and CLI patching (Option B) is acceptable, but they overlook that Update Manager provides automated, cluster-aware patching with minimal downtime, which is the standard best practice in vSphere environments.

How to eliminate wrong answers

Option A is wrong because manually migrating all VMs to a single host creates a single point of failure and does not leverage the cluster's distributed resources; it also requires manual intervention for each host, which is inefficient and error-prone. Option B is wrong because using vSphere vMotion to migrate VMs and then applying the patch via CLI on each host is not automated and requires the administrator to manually handle maintenance mode and patching, increasing the risk of downtime and misconfiguration. Option D is wrong because scheduling a host reboot during a maintenance window and applying the patch via ISO boot is a disruptive, offline method that causes significant downtime for each host, and it does not use vMotion to migrate VMs, defeating the purpose of minimal downtime.

Full explanation →
159
MCQeasy

Refer to the exhibit. What does this output indicate?

A.The host has been upgraded to ESXi 8.0.0, but the previous profile remains
B.The host has two ESXi installations and can boot into either
C.The host's profile is corrupted
D.The host is running both versions simultaneously
AnswerA

This is standard behavior: the old profile is retained for recovery purposes.

Why this answer

The `esxcli software profile list` output shows multiple software profiles on the host. After upgrading from ESXi 7.0U3 to 8.0.0, the old profile remains stored in the bootbank but is not active. The active profile is the one most recently installed (ESXi-8.0.0-789012).

This is normal behavior and indicates that the host has been upgraded to ESXi 8.0.0, but the previous profile is still present. Therefore, option A correctly describes this situation.

Full explanation →
160
Multi-Selectmedium

Which TWO of the following are valid methods to restrict access to the ESXi host's Direct Console User Interface (DCUI) to authorized administrators only?

Select 2 answers
A.Disable SSH access on the host to prevent remote DCUI access.
B.Enable lockdown mode and add only authorized administrators to the Exception Users list.
C.Remove the root user from the DCUI local users list.
D.Set the advanced option 'DCUI.Access' to a list of authorized users.
E.Configure Active Directory integration and use group policy to disable DCUI.
AnswersB, D

Lockdown mode restricts DCUI access to users in the Exception Users list.

Why this answer

Options B and D are correct. Enabling lockdown mode and adding only authorized administrators to the Exception Users list restricts DCUI access to those users. Setting the advanced option 'DCUI.Access' to a list of authorized users also restricts DCUI access.

Option A is incorrect because disabling SSH does not affect DCUI access; DCUI is accessed directly from the console, not via SSH. Option C is incorrect because the root user cannot be removed from the DCUI local users list. Option E is incorrect because Active Directory integration does not restrict DCUI access.

Full explanation →
161
Multi-Selectmedium

Which TWO statements are true regarding vSAN deduplication and compression?

Select 2 answers
A.They are enabled at the vSAN cluster level
B.They are disabled by default on new vSAN clusters
C.They can only be used with RAID-1 mirroring policies
D.They require an all-flash vSAN configuration
E.Compression can be enabled independently of deduplication
AnswersB, D

They must be explicitly enabled.

Why this answer

vSAN deduplication and compression are disabled by default on new vSAN clusters (option B is correct). They require an all-flash vSAN configuration, meaning all capacity devices must be SSDs (option D is correct). Option A is incorrect because deduplication and compression are enabled at the disk group level, not cluster level.

Option C is incorrect because they can also be used with RAID-5/6 erasure coding policies, not just RAID-1 mirroring. Option E is incorrect because compression cannot be enabled independently; if compression is enabled, deduplication is also enabled.

Full explanation →
162
MCQhard

An administrator sees the above JSON output from a vLCM compliance report. What should the administrator do to resolve the compliance issue?

A.Add the custom-vib to the desired image.
B.Verify that the custom-vib is available in the depot and that esxi-02 can install it.
C.Update the firmware version for esxi-02.
D.Re-define the desired image for the cluster.
AnswerB

The host is missing the VIB; check depot and acceptance level.

Why this answer

The JSON output indicates that a custom VIB is present on esxi-01 but missing from esxi-02, causing a compliance mismatch. Option B is correct because the administrator must first verify that the custom VIB is available in the configured depot and that esxi-02 can install it, as vLCM uses depot-based image specifications and any missing VIB must be reachable and installable from the depot to achieve compliance.

Exam trap

The trap here is that candidates assume the VIB must be added to the desired image (Option A) when the JSON already shows it is present in the image definition, but the real issue is depot availability or host connectivity to install the VIB.

How to eliminate wrong answers

Option A is wrong because adding the custom-vib to the desired image would not resolve the issue if the VIB is not actually available in the depot or cannot be installed on esxi-02; the desired image already includes the VIB (as shown by esxi-01 being compliant), so the problem lies in the host's ability to retrieve and install it. Option C is wrong because the compliance issue is specifically about a missing VIB, not firmware; firmware updates are managed separately via hardware compatibility checks and are not indicated by a VIB mismatch in the JSON output. Option D is wrong because re-defining the desired image for the cluster would not fix the underlying issue of the VIB being unavailable or uninstallable on esxi-02; the desired image is already defined correctly (esxi-01 is compliant), so the focus should be on depot access and host connectivity.

Full explanation →
163
MCQhard

Refer to the exhibit. Why did the remediation fail?

A.The host was in maintenance mode
B.The host failed to connect to vCenter
C.The host was not in maintenance mode
D.The host had VMs running
AnswerC

The log explicitly indicates the host is not in maintenance mode, which is a prerequisite for remediation.

Why this answer

The log clearly states that the pre-check failed because the host is not in maintenance mode. vLCM requires hosts to be in maintenance mode for remediation.

Full explanation →
164
MCQmedium

A company requires all vMotion traffic to be encrypted. The vSphere administrator enables vMotion encryption at the cluster level. What else must be configured to ensure vMotion operations are encrypted?

A.Allocate at least 4 GB of additional memory for cryptographic operations.
B.Upgrade all ESXi hosts to version 7.0 or later.
C.Enable VM Encryption also.
D.Ensure all VMs have virtual hardware version 11 or later.
AnswerD

Virtual hardware version 11 or later is required to support encrypted vMotion.

Why this answer

For vMotion encryption to work, the virtual machine must have hardware version 11 or later. This requirement is documented for vSphere 6.5 and later, which support vMotion encryption. Option A is incorrect because there is no requirement to allocate additional memory for vMotion encryption; cryptographic operations for vMotion are handled by the host's CPU.

Option B is incorrect because vMotion encryption is supported on ESXi 6.5 and later, not specifically version 7.0 or later. Option C is incorrect because VM Encryption is a separate feature that encrypts the VM's files at rest, not vMotion traffic. Therefore, ensuring VMs have virtual hardware version 11 or later is necessary for encrypted vMotion.

Full explanation →
165
Multi-Selectmedium

Which TWO of the following are best practices for securing a vSphere environment against ransomware attacks?

Select 2 answers
A.Implement a backup solution with immutable snapshots and offsite storage.
B.Enable vMotion encryption for all migrations.
C.Use VM snapshots as primary backup method.
D.Enable vSAN encryption to protect data at rest.
E.Configure the distributed firewall to allow all outbound traffic by default.
AnswersA, D

Immutable backups protect against ransomware altering or deleting backups.

Why this answer

The correct answers are A and D. Implement a backup solution with immutable snapshots and offsite storage (A) ensures backups cannot be deleted or encrypted by ransomware, enabling recovery. Enabling vSAN encryption (D) protects data at rest, preventing unauthorized access if storage is compromised.

Option B is wrong because vMotion encryption protects data in transit during migration, not against ransomware. Option C is wrong because VM snapshots are not backups; they can be deleted by ransomware and do not provide long-term recovery. Option E is wrong because allowing all outbound traffic by default violates the principle of least privilege and increases attack surface.

Full explanation →
166
Multi-Selecthard

A security audit reveals that a vCenter Server has weak TLS configuration. The administrator needs to enforce strong ciphers and disable SSLv3. Which two steps should the administrator take? (Choose two.)

Select 2 answers
A.Use the vSphere Certificate Manager utility to replace the machine SSL certificate with a new one that uses strong ciphers.
B.Edit the registry on the vCenter Server to disable SSLv3.
C.Disable TLS 1.2 and enable only TLS 1.3 on all ESXi hosts.
D.Configure the TLS settings in the vSphere Web Client under Administration > Security.
E.Modify the Tomcat server.xml file on the vCenter Server to restrict ciphers and protocols.
AnswersB, E

This is correct for a Windows-based vCenter Server. By editing the registry under SCHANNEL protocols, you can disable SSLv3 and enforce stronger protocols.

Why this answer

To enforce strong ciphers and disable SSLv3 on a vCenter Server, the administrator should modify the Tomcat server.xml file to restrict allowed protocols and ciphers (Option E). Additionally, if the vCenter Server is running on Windows, editing the registry to disable SSLv3 is also required (Option B). Option A is incorrect because the Certificate Manager replaces certificates but does not configure cipher suites.

Option C is wrong because disabling TLS 1.2 and enabling only TLS 1.3 may break compatibility and is not the standard method. Option D is incorrect as there is no such setting in the vSphere Web Client under Administration > Security.

Exam trap

The trap here is that candidates may confuse vCenter Server's Windows-based legacy behavior with its current Linux-based architecture, leading them to incorrectly select registry editing (Option B) instead of recognizing that Tomcat configuration files are the correct method.

Full explanation →
167
MCQmedium

An administrator is monitoring a vSphere cluster with 10 hosts. They notice that vCenter Server is responding slowly when performing operations such as creating VMs or applying host profiles. CPU and memory on the vCenter Server are within normal limits. What is the most likely cause?

A.The vCenter Server is experiencing time synchronization issues.
B.The vCenter Server database is too large and needs to be trimmed.
C.The vCenter Server is running on a VM with insufficient network bandwidth.
D.The ESXi hosts are all in maintenance mode.
AnswerB

A large database can slow down vCenter operations.

Why this answer

A large vCenter Server database can cause slow response times for management operations, as the database stores all historical data and performance metrics. Option B is correct. Option A is unlikely because time sync issues typically cause certificate or authentication problems, not slow operations.

Option C is not indicated as network bandwidth is not mentioned as a bottleneck. Option D would render hosts unavailable, not just slow operations.

Full explanation →
168
Multi-Selectmedium

Which THREE are valid methods to remediate ESXi hosts using vSphere Lifecycle Manager? (Select THREE.)

Select 3 answers
A.Auto update
B.Push from vCenter
C.Stage and remediate
D.Remediate immediately
E.Schedule remediation
AnswersC, D, E

Staging downloads the image first, then remediation applies it.

Why this answer

The correct answers are C, D, and E. vSphere Lifecycle Manager (vLCM) supports three standard remediation methods: staging updates and then remediating (Stage and remediate), remediating immediately without staging (Remediate immediately), and scheduling remediation for a later time (Schedule remediation). 'Auto update' and 'Push from vCenter' are not valid vLCM remediation methods. Auto update is not a feature of vLCM, and push-based remediation is not how vLCM operates; vLCM uses a desired-state model.

Full explanation →
169
MCQeasy

An administrator wants to prevent direct root access to an ESXi host via SSH and the DCUI. Which two configurations are necessary?

A.Set the host to lockdown mode with root exception.
B.Disable DCUI and SSH services.
C.Configure SSO to require Smart Card authentication.
D.Enable lockdown mode and remove root from permissions.
AnswerD

Lockdown mode disables SSH/DCUI and removing root from permissions prevents any root login.

Why this answer

Enabling lockdown mode on an ESXi host disables direct root access via SSH and DCUI. Additionally, removing the root user from the permissions list ensures that root cannot be granted access through exception lists. Option A is wrong because setting lockdown mode with root exception would still allow root access under specific circumstances.

Option B is wrong because disabling DCUI and SSH services does not prevent root access via other means (e.g., vCenter) and does not enforce persistent restriction. Option C is wrong because configuring SSO with Smart Card authentication does not affect local root access at the ESXi host level.

Full explanation →
170
MCQhard

An organization has multiple vSphere clusters with different hardware models. They want a single lifecycle management strategy that minimizes administrative overhead while ensuring all hosts are up-to-date with ESXi and firmware. Which approach should they take?

A.Create one baseline group per cluster and attach it.
B.Use host profiles to enforce firmware settings.
C.Use a single cluster image for all clusters.
D.Create separate cluster images per hardware model and apply to respective clusters.
AnswerD

This allows tailored firmware and drivers for each hardware type while minimizing overhead.

Why this answer

Creating separate cluster images per hardware model allows Lifecycle Manager to manage ESXi and firmware updates tailored to each hardware model, minimizing administrative overhead while ensuring compatibility. Option A is incorrect because baseline groups are deprecated. Option B is incorrect because host profiles enforce configuration settings, not firmware.

Option C is incorrect because a single cluster image cannot accommodate different hardware models; firmware differences require separate images.

Full explanation →
171
Multi-Selectmedium

Which THREE are valid components of a vLCM single image? (Choose three.)

Select 3 answers
A.Virtual machine hardware versions
B.Additional VIBs and components
C.ESXi version and build number
D.vCenter Server version
E.Firmware and driver versions
AnswersB, C, E

Custom VIBs can be added to the image.

Why this answer

A vLCM single image includes additional VIBs and components as part of the image specification. These are third-party or custom VIBs (e.g., drivers for specific hardware) that are bundled with the base ESXi image to ensure all required software components are present for host provisioning.

Exam trap

The trap here is that candidates often confuse the components of a vLCM single image with other vSphere lifecycle management concepts, such as VM hardware versions or vCenter Server version, which are not part of the ESXi host image specification.

Full explanation →
172
Multi-Selectmedium

Which three factors influence the behavior of Network I/O Control (NIOC) when allocating bandwidth to different traffic types? (Choose three.)

Select 3 answers
A.The total physical bandwidth
B.Reservation per traffic type
C.Shares per traffic type
D.Limit per traffic type
E.The number of physical uplinks
AnswersB, C, D

Reservation guarantees a minimum bandwidth.

Why this answer

Options B, C, and D are correct. Network I/O Control (NIOC) uses three configurable parameters to allocate bandwidth per traffic type: reservation (guaranteed bandwidth), shares (relative priority), and limit (maximum bandwidth). Total physical bandwidth (A) and the number of physical uplinks (E) affect overall capacity but are not configurable per traffic type, and do not directly influence NIOC's bandwidth allocation behavior.

Full explanation →
173
MCQmedium

A vSphere administrator is planning to upgrade a vSphere 7.0 U2 cluster to vSphere 8.0 U1. The cluster is managed by a vCenter Server 7.0 U2. The administrator wants to use vSphere Lifecycle Manager (vLCM) to manage the upgrade. What must the administrator do first?

A.Enable vLCM on the cluster and set the desired image to ESXi 8.0 U1.
B.Upgrade vCenter Server to version 8.0 U1.
C.Upgrade one ESXi host to 8.0 U1 manually to test compatibility.
D.Create a baseline for ESXi 8.0 U1 in vLCM.
AnswerB

vCenter must be upgraded before managing ESXi 8.0 hosts with vLCM.

Why this answer

vLCM relies on the vCenter Server to orchestrate and push images to ESXi hosts. Since the vCenter Server version must be equal to or higher than the target ESXi version, upgrading vCenter Server to 8.0 U1 first is a prerequisite. Without this, vLCM cannot manage the ESXi 8.0 U1 image because the older vCenter lacks the necessary APIs and compatibility.

Exam trap

The trap here is that candidates often assume vLCM can be configured independently of vCenter version, or they confuse vLCM's image-based approach with the older baseline-based method, leading them to select options that involve baselines or direct host upgrades.

How to eliminate wrong answers

Option A is wrong because enabling vLCM and setting the desired image to ESXi 8.0 U1 is not possible until vCenter Server is upgraded; vLCM cannot manage an ESXi version newer than the vCenter version. Option C is wrong because manually upgrading a host to 8.0 U1 before upgrading vCenter would break management connectivity, as vCenter 7.0 U2 cannot manage ESXi 8.0 U1 hosts. Option D is wrong because vLCM uses images, not baselines; baselines are a feature of the older Update Manager (UM) workflow, not vLCM.

Full explanation →
174
MCQhard

An administrator notices that a critical VM running a database has a high CPU ready time average (over 20%) on a host with 2 physical CPUs (16 cores each). The host is running 6 VMs, each with 8 vCPUs. What is the most likely cause of the high ready time?

A.Hyper-Threading should be disabled to reduce scheduling overhead.
B.The host has too many vCPUs relative to physical cores; reduce vCPU count on some VMs.
C.The VMs are not configured with NUMA awareness.
D.Memory overcommitment is causing excessive swapping.
AnswerB

Correct: vCPU overcommitment leads to high ready time.

Why this answer

The host has 32 physical cores (2 CPUs × 16 cores) but the 6 VMs each with 8 vCPUs total 48 vCPUs, resulting in a vCPU-to-core ratio of 1.5:1. A CPU ready time average over 20% indicates severe contention for physical cores, as the hypervisor cannot schedule all vCPUs simultaneously. Reducing the vCPU count on some VMs would lower the ratio and alleviate the scheduling bottleneck.

Exam trap

The trap here is that candidates may confuse CPU ready time with memory pressure (Option D) or assume Hyper-Threading is the culprit (Option A), when the core issue is simply an over-provisioned vCPU-to-core ratio.

How to eliminate wrong answers

Option A is wrong because disabling Hyper-Threading would reduce the number of logical processors from 32 to 16 (assuming HT is enabled), worsening the vCPU-to-core ratio and increasing ready time, not reducing it. Option C is wrong because NUMA awareness affects memory locality and latency, not CPU scheduling contention; high ready time is a CPU scheduler issue, not a memory topology issue. Option D is wrong because memory overcommitment causes swapping or ballooning, which manifests as high memory latency or guest OS swapping, not as high CPU ready time; ready time is a measure of vCPU waiting for physical CPU cycles.

Full explanation →
175
MCQmedium

An administrator needs to grant a group of vSphere administrators the ability to create and delete snapshots, and also to power on and off VMs, but not to delete VMs. The administrators should also be able to view the virtual machine console. Which custom role should be created?

A.Snapshot creation/removal, Power operations, Delete VM, ConsoleInteraction
B.Snapshot creation/removal, Power operations, VirtualMachine.Interact.ConsoleInteraction
C.Power operations, ConsoleInteraction only
D.Snapshot creation/removal, Power operations, Remove Disk, ConsoleInteraction
AnswerB

This set provides snapshot management, power actions, and console access without delete VM.

Why this answer

It includes the necessary snapshot creation/removal and power operations, as well as VirtualMachine.Interact.ConsoleInteraction for console access, without including Delete VM or Remove Disk privileges. Option A includes Delete VM, which is not desired. Option C lacks snapshot management.

Option D includes Remove Disk, which is not required.

Full explanation →
176
MCQhard

An administrator configures a VM with 4 vCPUs and 32 GB memory on a host with 128 GB RAM and 8 cores (HT enabled). The VM runs a database that requires high memory bandwidth. Performance monitoring shows low CPU usage but high memory latency. Which configuration change is most likely to improve memory performance?

A.Enable the 'Preferred NUMA Node' VM option
B.Increase the memory reservation to 64 GB
C.Disable Hyper-Threading on the host
D.Increase the number of vCPUs to 8
AnswerA

Preferred NUMA Node forces the VM to run on a single NUMA node, ensuring local memory access and reducing latency.

Why this answer

Preferred NUMA Node allows the VM to be pinned to a specific NUMA node, reducing cross-node memory access. Option B is wrong; increasing reservation does not improve latency. Option C is wrong; disabling HT reduces overall throughput.

Option D is wrong; more vCPUs may increase contention.

Full explanation →
177
Multi-Selectmedium

A vSphere administrator is planning to configure VMware vSAN. Which TWO requirements must be met for a vSAN cluster?

Select 2 answers
A.A dedicated 10 GbE network for vSAN traffic.
B.All hosts must have identical CPU models.
C.Each host must have at least one SSD and one HDD for capacity.
D.A minimum of 3 ESXi hosts in the cluster.
E.A shared storage array accessible by all hosts.
AnswersC, D

vSAN uses SSD for caching and HDD for capacity.

Why this answer

VSAN requires at least one SSD (or NVMe) for the cache tier and one HDD (or SSD) for the capacity tier on each host to form a disk group. This hybrid or all-flash configuration is fundamental to vSAN's storage architecture, where the cache tier accelerates writes and reads, while the capacity tier provides persistent storage.

Exam trap

The trap here is that candidates often confuse vSAN's minimum requirement of 3 hosts with the common misconception that vSAN can run with 2 hosts (which requires a witness host for quorum), or they mistakenly think a dedicated 10 GbE network is mandatory, when vSAN can function on 1 GbE with proper configuration.

Full explanation →
178
Multi-Selecteasy

Which TWO prerequisites must be met before enabling vLCM image-based management on a vSAN cluster?

Select 2 answers
A.All ESXi hosts must be reachable and managed by the same vCenter Server.
B.The cluster must not be using vSAN.
C.vCenter Server version must be 7.0 or later.
D.All hosts in the cluster must be vSAN ready and part of a vSAN cluster.
E.A separate vCenter Server must be dedicated to lifecycle management.
AnswersA, C

vLCM requires hosts to be connected to vCenter for remediation.

Why this answer

Options A and C are correct prerequisites for enabling vLCM image-based management on a vSAN cluster. All ESXi hosts in the cluster must be managed by the same vCenter Server because vLCM operates at the cluster level and requires a single vCenter to coordinate updates. Additionally, vCenter Server version must be 7.0 or later, as vLCM was introduced in vSphere 7.0.

Option B is incorrect because vLCM supports vSAN clusters; the cluster does not need to avoid vSAN. Option D is incorrect; while vSAN readiness is required for vSAN itself, it is not a specific prerequisite for enabling vLCM image-based management. Option E is incorrect because vLCM does not require a dedicated vCenter Server; it uses the existing vCenter managing the cluster.

Full explanation →
179
MCQhard

Refer to the exhibit. Based on the performance chart, which component is likely causing the VM to experience a bottleneck?

A.CPU
B.Memory
C.Network
D.Disk
AnswerD

High disk read latency (60ms avg) indicates a storage performance issue.

Why this answer

Disk read latency is very high (average 60ms, max 120ms), indicating a storage bottleneck. CPU and memory usage are moderate, and network throughput is average. Option D is correct.

Full explanation →
180
MCQeasy

An administrator is planning a vMotion migration and wants to minimize the performance impact on the virtual machines during the migration. Which network configuration is recommended?

A.Create a dedicated VMkernel interface with at least 10 GbE throughput for vMotion.
B.Use the default management VMkernel interface for vMotion traffic.
C.Configure a single 1 GbE interface for both vMotion and management traffic.
D.Enable jumbo frames on all interfaces, but keep vMotion on the management network.
AnswerA

Dedicated high-speed interface minimizes performance impact.

Why this answer

A dedicated VMkernel interface for vMotion isolates migration traffic from other network traffic, reducing contention and ensuring consistent performance. A minimum of 10 GbE is recommended to handle the high throughput demands of vMotion, especially for large VMs. Option B is incorrect because using the default management interface can lead to resource contention and performance degradation.

Option C is incorrect because a single 1 GbE interface for both vMotion and management is likely insufficient and causes competition. Option D is incorrect because jumbo frames alone do not address the contention issue; keeping vMotion on the management network still causes competition.

Full explanation →
181
MCQeasy

A company wants to integrate vCenter Server with an external identity source to allow users to authenticate using their corporate credentials. The administrator must ensure that authentication traffic is encrypted. Which solution should the administrator implement?

A.Local OS authentication on vCenter Server
B.Active Directory over NTLM
C.Active Directory over LDAPS
D.Active Directory over LDAP
AnswerC

LDAPS uses SSL/TLS to encrypt authentication traffic.

Why this answer

Active Directory over LDAPS (Option C) is the correct solution because it encrypts authentication traffic using SSL/TLS, ensuring confidentiality. Option A is incorrect because local OS authentication does not use corporate credentials. Option B is incorrect because NTLM authentication is not supported as a direct identity source for vCenter Single Sign-On.

Option D is incorrect because standard LDAP transmits credentials in plaintext, without encryption.

Full explanation →
182
MCQmedium

A global company manages multiple vSphere clusters across different data centers. They have a standard operating procedure to upgrade ESXi hosts every two years. The vSphere administrator is planning the upgrade of a critical production cluster that runs a mix of VMs, including some latency-sensitive applications. The cluster consists of 20 ESXi 7.0 Update 3 hosts managed by vLCM with a single image. The target is ESXi 8.0 Update 1. The administrator wants to minimize downtime and ensure rollback capability. The company has a hardware support manager (HSM) integrated with vLCM. After staging the new image, the administrator remediates the cluster. During the remediation of the first host, the host fails to reboot after applying the image and becomes unresponsive. What is the most likely cause of this failure?

A.The vCenter Server version is not compatible with ESXi 8.0 Update 1.
B.The host was not placed in maintenance mode before remediation.
C.The hardware support manager (HSM) did not deploy the correct firmware version for the host.
D.The vLCM single image is corrupted and was applied incorrectly.
AnswerC

If HSM is misconfigured, firmware may not match ESXi, causing boot failure.

Why this answer

The most likely cause is that the hardware support manager (HSM) deployed an incorrect firmware version for the host during the vLCM remediation. vLCM integrates with HSM to automatically update firmware as part of the image-based lifecycle, and if the firmware is incompatible with ESXi 8.0 Update 1, the host can fail to reboot and become unresponsive. This is a known risk when upgrading across major ESXi versions, as hardware firmware requirements often change.

Exam trap

The trap here is that candidates may assume a failed reboot is always due to a corrupted image or vCenter incompatibility, but vLCM's integration with HSM introduces a firmware dependency that is a common point of failure during major version upgrades.

How to eliminate wrong answers

Option A is wrong because vCenter Server compatibility with ESXi 8.0 Update 1 is a prerequisite for the upgrade; if it were incompatible, the remediation would likely fail before staging or applying the image, not after a reboot. Option B is wrong because vLCM automatically places hosts into maintenance mode during remediation when using a single image, and the question states the host failed after applying the image and rebooting, not due to a maintenance mode issue. Option D is wrong because a corrupted vLCM image would typically cause a failure during the staging or application phase, not after a successful reboot attempt; the image was staged successfully, and the failure occurred post-reboot, pointing to a hardware compatibility issue.

Full explanation →
183
MCQmedium

An administrator sees that a vLCM remediation task for a host has failed with the error: 'The VIB is incompatible with the host's base image.' The host is using a custom image that includes a third-party driver. What is the most likely cause?

A.The third-party driver should be removed from the image.
B.The VIB version is not compatible with the ESXi version in the image.
C.The VIB is missing from the cluster image.
D.The administrator should ignore the error and proceed.
AnswerB

This is a version mismatch; update the VIB to a supported version.

Why this answer

A VIB incompatible with the base image typically indicates a version mismatch or dependency issue; updating the VIB to a compatible version resolves this. Option A is wrong because the VIB is present but incompatible. Option C is wrong because you cannot simply skip incompatible VIBs.

Option D is wrong because removing the VIB may break hardware functionality.

Full explanation →
184
MCQmedium

A VM on a vSphere Distributed Switch is experiencing intermittent connectivity drops. The administrator checks the vDS health check and sees no errors. The physical switch logs show no issues. The VM is on a port group with VLAN 200. The administrator runs a ping from the VM to the gateway and notices packet loss. What should the administrator investigate next?

A.Verify the VMkernel port configuration
B.Check the VM's firewall settings
C.Check DNS resolution for the gateway
D.Review the NIC teaming failover order and ensure active uplinks are up.
AnswerD

Intermittent drops can be caused by failover events.

Why this answer

Intermittent connectivity drops on a VM connected to a vDS, despite no errors on the vDS health check or physical switch logs, often point to a NIC teaming misconfiguration. If the active uplinks are not properly set or one uplink is down, the VM traffic may fail over to a standby or unused uplink, causing packet loss. Verifying the teaming failover order and ensuring all active uplinks are operational directly addresses this common cause of intermittent drops.

Exam trap

The trap here is that candidates often assume intermittent connectivity must be a VM firewall or DNS issue, overlooking the NIC teaming failover order as a primary cause of packet loss on a vDS when physical and vDS health checks show no errors.

How to eliminate wrong answers

Option A is wrong because VMkernel port configuration is used for management traffic, vMotion, or storage, not for VM data traffic on a port group; investigating it would not resolve VM connectivity drops. Option B is wrong because the VM's firewall settings (e.g., Windows Firewall) would typically block all traffic or allow it consistently, not cause intermittent packet loss to a gateway; the issue is at the network layer, not the host firewall. Option C is wrong because DNS resolution is used for name-to-IP mapping, not for direct IP connectivity; the administrator is pinging the gateway IP, so DNS is irrelevant to packet loss.

Full explanation →
185
Multi-Selecteasy

Which two actions must the administrator take to ensure network connectivity for VMs on a new distributed switch?

Select 2 answers
A.Configure a VMkernel interface on the distributed switch
B.Add the ESXi hosts to the distributed switch
C.Set the MTU to 9000
D.Create a port group and assign a VLAN
E.Enable Network I/O Control
AnswersB, D

Without adding the hosts, the distributed switch cannot be used by VMs on those hosts.

Why this answer

The correct answers are B and D. Adding ESXi hosts to the distributed switch (B) is required for them to use the switch and manage VMs. Creating a port group with a VLAN assignment (D) provides the necessary network connectivity for VMs.

Option A (configuring a VMkernel interface) is for host management traffic, not VM connectivity. Option C (setting MTU to 9000) is optional for jumbo frames and not required. Option E (enabling Network I/O Control) is for QoS and not needed for basic connectivity.

Full explanation →
186
Multi-Selectmedium

Which TWO capabilities are exclusive to vSphere with Tanzu compared to standard vSphere clusters?

Select 2 answers
A.DRS and HA
B.Tanzu Kubernetes Grid Service
C.Native Kubernetes control plane
D.vMotion
E.vSAN storage policies
AnswersB, C

Creates and manages TKG clusters.

Why this answer

Options B and C are correct. vSphere with Tanzu provides a native Kubernetes control plane and the Tanzu Kubernetes Grid Service for managing Kubernetes workloads, which are not available in standard vSphere clusters. A (DRS and HA) and D (vMotion) are general vSphere features, not exclusive to vSphere with Tanzu. E (vSAN storage policies) is a vSAN capability, not exclusive to vSphere with Tanzu.

Full explanation →
187
MCQmedium

A large e-commerce company has a vSphere cluster with 16 hosts, each with 2 sockets of 10 cores (HT enabled) and 512 GB RAM. They run a mix of web and database VMs. During the holiday season, some VMs experience high CPU ready time, especially the database VMs. DRS is set to Fully Automated and migration thresholds are at default. The administrator notices that the cluster's CPU utilization averages at 60%, but some hosts are at 90% while others are at 30%. The VMs with high ready time are all on the highly utilized hosts. To resolve this, the administrator considers several options. Which action will most effectively balance CPU load and reduce ready time for the database VMs?

A.Create a resource pool for database VMs and set a higher CPU share value.
B.Increase the DRS migration threshold from 3 to 5 to reduce unnecessary migrations.
C.Enable 'VM Monitoring' in the HA cluster settings.
D.Decrease the DRS migration threshold from 3 to 1 to make it more aggressive.
AnswerD

A lower threshold triggers migrations even for minor load imbalances, helping to spread VMs and reduce ready time on hot hosts.

Why this answer

Decreasing the DRS migration threshold from 3 to 1 makes DRS more aggressive, triggering migrations even for small imbalances. This will redistribute VMs from highly utilized hosts to underutilized hosts, reducing CPU ready time for database VMs. Option A (resource pool with higher shares) does not cause migrations; it only prioritizes CPU allocation during contention on the same host.

Option B (increasing threshold to 5) makes DRS less aggressive, worsening the imbalance. Option C (VM Monitoring) is an HA feature for fault detection, not load balancing.

Full explanation →
188
MCQmedium

A vSphere administrator needs to ensure that all virtual machine disks are encrypted at rest. The environment uses a KMS cluster with multiple KMIP-compliant servers. The administrator has already configured a storage policy with encryption enabled. However, newly created VMs on a particular datastore still show unencrypted disks. What is the most likely cause?

A.The datastore is a vSAN datastore, which does not support VM-level encryption.
B.The KMS cluster must have at least two KMS servers to function correctly.
C.The datastore is formatted with VMFS6, which does not support encryption.
D.The storage policy with encryption is not assigned to the VMs or their home namespace.
AnswerD

The encryption-enabled storage policy must be explicitly assigned; otherwise, the default storage policy is used.

Why this answer

Even when a storage policy with encryption is configured, it must be explicitly assigned to the VMs or their home namespace (the VM's configuration and swap files). If the policy is not assigned, the VM will be created using the default datastore policy, which typically does not include encryption, resulting in unencrypted disks. The administrator must ensure the encryption-enabled policy is applied to the VM during creation or via a storage policy-based management (SPBM) assignment.

Exam trap

The trap here is that candidates assume configuring a storage policy with encryption is sufficient, but they forget that the policy must be explicitly assigned to the VM or its home namespace for encryption to take effect.

How to eliminate wrong answers

Option A is wrong because vSAN datastores fully support VM-level encryption (encryption at rest) when a KMS is configured and the appropriate storage policy is applied; vSAN does not preclude encryption. Option B is wrong because a KMS cluster can function with a single KMS server, though multiple servers are recommended for high availability; the question states a KMS cluster is already configured, so this is not the cause of unencrypted disks. Option C is wrong because VMFS6 fully supports VM-level encryption; encryption is a feature of the vSphere platform and the storage policy, not the VMFS version.

Full explanation →
189
MCQhard

Refer to the exhibit. An administrator increased the MaxQueueDepth parameter for an NFS 4.1 datastore. Which effect does this change have on performance?

A.It reduces latency by limiting the number of queued I/Os.
B.It limits the maximum size of read and write operations.
C.It increases throughput by allowing more concurrent I/O operations.
D.It has no effect because NFS 4.1 does not support queue depth adjustments.
AnswerC

A higher queue depth allows more I/Os to be processed in parallel, improving throughput.

Why this answer

Increasing MaxQueueDepth allows more concurrent I/Os to be queued to the NFS server, which can improve throughput for workloads with high I/O concurrency but may increase latency if the NFS server is not capable of handling the increased queue depth.

Full explanation →
190
MCQmedium

During a performance review, an administrator notices that a VM with 4 vCPUs and 16 GB memory is experiencing over 10% CPU ready time. The host has two 8-core sockets (hyper-threading enabled) and 256 GB memory. The host runs 15 other VMs with varying CPU loads. What is the most likely cause?

A.NUMA node mismatch causing cross-node memory access.
B.CPU hot-add is enabled on the VM.
C.Memory over-provisioning causing ballooning.
D.Over-provisioning of vCPUs on the host leading to contention.
AnswerD

Too many vCPUs relative to cores causes CPU ready time.

Why this answer

The host has 16 physical cores (with hyper-threading, 32 logical processors), but running 16 VMs with a total of 4 vCPUs each would require 64 vCPUs. This 2:1 over-provisioning ratio, combined with varying CPU loads, leads to contention for physical CPU resources, manifesting as CPU ready time exceeding 10%. CPU ready time measures the percentage of time a VM is ready to run but waiting for a physical CPU to become available.

Exam trap

The trap here is that candidates often confuse CPU ready time with memory-related issues like ballooning or NUMA effects, failing to recognize that CPU ready time is purely a CPU scheduling metric tied to vCPU over-provisioning and physical core availability.

How to eliminate wrong answers

Option A is wrong because NUMA node mismatch causes cross-node memory access, which increases memory latency, not CPU ready time. The symptom of NUMA mismatch is higher memory access latency, not CPU scheduling contention. Option B is wrong because CPU hot-add is a feature that allows adding vCPUs to a running VM, but it does not cause CPU ready time; in fact, it could increase contention if more vCPUs are added without sufficient physical cores.

Option C is wrong because memory over-provisioning causing ballooning is a memory pressure issue, not a CPU scheduling issue. Ballooning reclaims memory from VMs, leading to guest OS swapping, not CPU ready time.

Full explanation →
191
Drag & Dropmedium

Arrange the steps to convert a virtual machine to a template.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

To convert a VM to a template in vSphere, you must first power off the VM, then right-click it and select Convert to Template, confirm the operation, wait for the task to finish, and finally verify the template in the inventory. This ensures the VM is not in use and the conversion process is properly executed.

Full explanation →
192
MCQeasy

Refer to the exhibit. Which hosts are affected by the remediation failure?

A.Host1 and Host2
B.None
C.Only Host3
D.All three hosts
AnswerC

The Gen9 hardware is older and may not meet HCL requirements for ESXi 8.0.

Why this answer

Only Host3 is affected because it is a Gen9 host that is not compatible with ESXi 8.0 or the custom add-on, while Host1 and Host2 are Gen10 hosts that are compatible.

Full explanation →
193
MCQhard

After upgrading the physical switches, the LAG (Link Aggregation Group) on a VDS does not come up. The VDS LAG configuration shows LACP active mode. The physical switch ports are configured with LACP active mode as well. What is the most likely cause?

A.The physical switch uses a different LACP system priority
B.The physical switch ports are not in a port-channel
C.The ESXi hosts have different LAG IDs
D.The VDS LAG hashing algorithm is set to IP hash
AnswerB

LACP requires the physical switch ports to be configured as part of a port-channel group; otherwise, they are treated as individual links and LACP will not form.

Why this answer

For a LAG to form, the physical switch ports must be configured as a port-channel or etherchannel. Even if both sides are set to LACP active, the switch ports must first be grouped into a port-channel interface; otherwise, LACP negotiations will not complete. Option A is incorrect because the system priority affects LACP role but does not prevent LAG formation if both sides are active.

Option C is incorrect because LAG IDs are not relevant across hosts; each host's LAG is independent. Option D is incorrect because the hashing algorithm does not affect LACP negotiation; it only affects load distribution.

Full explanation →
194
MCQeasy

A VM cannot connect to the network after being migrated to a different host in the cluster. The VM's network adapter is connected to a standard switch port group that exists on the source host but not on the destination host. What is the most likely cause?

A.The standard switch is not configured on the destination host.
B.The VM's MAC address is not allowed on the destination port group.
C.The VLAN ID on the port group does not match.
D.The ESXi host's firewall is blocking the VM's traffic.
AnswerA

Standard switches are local to each host; the port group must be created on the destination host.

Why this answer

Standard switches are host-specific, so the port group must exist on each host where VMs using it are placed. If the destination host does not have the same standard switch and port group configured, the VM loses connectivity. Option B is incorrect because MAC address restrictions are not a typical cause.

Option C is irrelevant because the VLAN ID is part of the port group definition, but the issue here is the port group's absence. Option D is unrelated to standard switch configuration.

Full explanation →
195
MCQmedium

A medium-sized business manages a vSphere cluster of 8 hosts using vLCM image-based management. The cluster image is based on ESXi 8.0 U2. Two of the hosts have been flagged as non-compliant because they are running an older version of a third-party storage driver than what is included in the cluster image. The administrator wants to update these two hosts to the correct driver without impacting the other hosts. The administrator creates a new image that includes the updated driver, but then realizes that applying the image to the entire cluster would also cause a reboot of all hosts for driver updates, which is not desired. The administrator wants to perform a targeted remediation for only the two affected hosts. What is the most efficient way to accomplish this?

A.Use vLCM's 'Apply To' feature to select only the non-compliant hosts for remediation.
B.Update the driver manually on the two hosts using ESXCLI commands.
C.Remove the two hosts from the cluster, apply the image to them individually, then re-add them.
D.Create a separate cluster for the two hosts and manage them with a different image.
AnswerA

vLCM allows selecting specific hosts to remediate, applying the image only to them.

Why this answer

VLCM's 'Apply To' feature allows the administrator to select specific hosts within a cluster for remediation, applying the desired image only to those hosts without affecting others. This avoids reboot of all hosts and maintains compliance. Option B is incorrect because manually updating drivers via ESXCLI would cause drift from the cluster image, defeating the purpose of image-based management.

Option C is incorrect because removing and re-adding hosts is disruptive and unnecessary when vLCM provides targeted remediation. Option D is incorrect because creating a separate cluster is overkill and adds administrative overhead.

Full explanation →
196
MCQeasy

A vSphere administrator wants to prevent users in a custom role from powering off virtual machines that have Fault Tolerance enabled. Which privilege must be removed from the custom role?

A.VirtualMachine.State.Suspend
B.VirtualMachine.Interrupt.PowerOff
C.VirtualMachine.Interrupt.Reset
D.VirtualMachine.Interrupt.PowerOn
AnswerB

VirtualMachine.Interrupt.PowerOff directly controls power-off; removing it prevents users from powering off VMs, including those with Fault Tolerance.

Why this answer

VirtualMachine.Interrupt.PowerOff. This privilege directly controls the ability to power off a virtual machine. To prevent users from powering off VMs with Fault Tolerance enabled, you must remove this privilege.

Option A (Suspend) pauses the VM, option C (Reset) reboots it, and option D (PowerOn) starts it; none of these directly prevent power-off.

Full explanation →
197
MCQhard

An administrator configures a Private VLAN on a distributed switch with primary VLAN 100 and secondary VLANs 101 (isolated) and 102 (community). A VM on isolated secondary VLAN 101 needs to communicate with a VM on community secondary VLAN 102. What additional configuration is required?

A.Enable promiscuous mode on the port group for VLAN 101.
B.Configure a proxy router on the physical network.
C.They cannot communicate because isolated PVLANs prohibit any communication to other secondary VLANs.
D.Deploy a VM on the primary VLAN 100 with routing capabilities to forward traffic between the secondary VLANs.
AnswerD

A promiscuous port (primary VLAN) can communicate with both isolated and community, enabling routing.

Why this answer

In a Private VLAN configuration, isolated secondary VLANs can only communicate with promiscuous ports on the primary VLAN. A VM deployed on the primary VLAN with routing capabilities acts as a promiscuous port and can forward traffic between the isolated (101) and community (102) secondary VLANs. Option A is incorrect because enabling promiscuous mode on the isolated port group does not allow communication to community VLANs and breaks isolation.

Option B is not the standard VMware recommended approach; the typical method is to use a VM on the primary VLAN. Option C is incorrect because communication is possible through a promiscuous port on the primary VLAN.

Full explanation →
198
MCQmedium

A virtualized SQL server is experiencing high latency on its virtual disks. The datastore is an NFS mount on a shared NAS. Which action would most likely reduce disk latency without reducing capacity?

A.Increase the number of outstanding I/O requests per virtual disk in the VM settings.
B.Disable SIOC on the datastore to avoid overhead.
C.Enable SIOC on the datastore and set the latency threshold to a higher value.
D.Enable Storage I/O Control (SIOC) on the datastore and set the latency threshold to a lower value.
AnswerD

Correct: SIOC actively manages I/O to reduce latency.

Why this answer

D is correct because enabling Storage I/O Control (SIOC) on the NFS datastore and lowering the latency threshold allows the hypervisor to proactively throttle I/O-intensive VMs before the storage array becomes congested, reducing overall disk latency. SIOC uses a latency-based algorithm to enforce fairness and prevent a single VM from monopolizing I/O resources, which directly addresses the high-latency issue without altering the datastore capacity.

Exam trap

The trap here is that candidates often assume increasing the latency threshold (Option C) will reduce latency by giving the storage more time, when in fact lowering the threshold forces earlier I/O throttling to prevent congestion.

How to eliminate wrong answers

Option A is wrong because increasing the number of outstanding I/O requests per virtual disk can actually increase latency by allowing more concurrent I/Os to queue up, overwhelming the NFS mount and NAS. Option B is wrong because disabling SIOC removes the only mechanism that can intelligently manage I/O contention on the datastore, likely worsening latency under load. Option C is wrong because setting the latency threshold to a higher value makes SIOC less sensitive to congestion, allowing high latency to persist before corrective action is taken, which does not reduce latency.

Full explanation →
199
Multi-Selecteasy

Which TWO conditions require increasing the VMFS heap size on an ESXi host?

Select 2 answers
A.The host is connected to many VMFS datastores (e.g., 64)
B.A virtual machine has a VMDK larger than 2 TB
C.The host is part of a vSAN cluster
D.The host has more than 500 virtual machines
E.The host has many snapshots per virtual machine
AnswersA, D

Each datastore consumes heap resources.

Why this answer

VMFS heap is used to track open file descriptors. Increasing the number of VMFS datastores (option A) increases the number of file descriptors needed, as does a large number of virtual machines (option D). Option B (large VMDK) does not directly increase the file descriptor count; it may require large file support but not heap.

Option C (vSAN) does not use VMFS. Option E (many snapshots) increases file count, but the heap size is primarily adjusted for many datastores and many VMs, not snapshots per VM.

Full explanation →
200
MCQeasy

An administrator is reviewing the network configuration of a standard switch. The exhibit shows the current settings for a port group. Which change would improve load distribution for VM traffic?

A.Change the VLAN ID to 100.
B.Enable failover on the port group.
C.Change the load balancing policy to Route based on IP hash.
D.Set one NIC as active and the other as standby.
AnswerC

IP hash provides better distribution.

Why this answer

Route based on IP hash uses a hash of source and destination IP addresses to determine which uplink to use for each traffic flow, ensuring that all packets in a given flow use the same uplink while distributing different flows across multiple uplinks. This improves load distribution for VM traffic compared to the default Route based on the originating virtual port, which only considers the vNIC port ID and can lead to uneven distribution when multiple VMs share the same port group.

Exam trap

The trap here is that candidates often confuse 'failover' with 'load balancing' and assume enabling failover (Option B) will distribute traffic, but failover only provides redundancy, not active load sharing, while Route based on IP hash (Option C) is the correct method for distributing VM traffic across multiple uplinks.

How to eliminate wrong answers

Option A is wrong because changing the VLAN ID to 100 would alter the VLAN tagging for the port group, which does not affect load balancing or distribution of VM traffic across uplinks. Option B is wrong because failover is already implicitly enabled on a standard switch with multiple uplinks; enabling failover is not a configurable toggle and does not improve load distribution—it only ensures redundancy. Option D is wrong because setting one NIC as active and the other as standby would disable load balancing entirely, forcing all traffic through the active NIC and leaving the standby NIC unused until a failure occurs, which reduces rather than improves load distribution.

Full explanation →
201
MCQhard

An organization is using Network I/O Control (NIOC) on a distributed switch to manage bandwidth for different traffic types. The current configuration assigns 50 shares to management traffic, 50 shares to vMotion traffic, and 100 shares to NFS storage traffic. During peak hours, management traffic is suffering from high latency. The administrator must prioritize management traffic over all others while still ensuring minimum bandwidth for storage. Which action would best address the issue?

A.Increase the shares for management traffic to 200 and reduce vMotion to 25.
B.Set a reservation of 1 Gbps for management traffic and keep shares as they are.
C.Reduce NFS shares to 50 and increase management shares to 100.
D.Enable the 'Limit' setting on management traffic to cap it.
E.Create a network resource pool for management traffic with a guaranteed share value.
AnswerB

Reservation provides a guaranteed minimum bandwidth for management traffic.

Why this answer

Setting a reservation for management traffic guarantees a minimum bandwidth, ensuring it is not starved. Option A increases shares but does not guarantee minimum bandwidth. Option C is wrong because limit would cap traffic, making it worse.

Option D still lacks guarantee. Option E is not a feature of NIOC.

Full explanation →
202
MCQmedium

An administrator configures a VDS with two uplinks and sets the load balancing policy to 'Route based on IP hash'. What additional configuration is required on the physical switches to ensure proper traffic distribution?

A.Use individual ports with no aggregation.
B.Set port security to allow multiple MAC addresses.
C.Enable Link Aggregation Control Protocol (LACP).
D.Configure a static EtherChannel.
AnswerD

Static EtherChannel is required for IP hash load balancing.

Why this answer

IP hash load balancing requires a static EtherChannel on the physical switches to aggregate the two links. Option A is incorrect because using individual ports without aggregation would not properly distribute traffic based on IP hash. Option B is incorrect because port security settings are not related to load balancing.

Option C is incorrect because LACP is not required; IP hash works with a static EtherChannel.

Full explanation →
203
MCQhard

An administrator configures permissions as shown in the exhibit. Users 'user1' and 'user2' are in the 'Limited' role which only allows 'Read' and 'Console interaction' privileges. User1 reports being unable to open a console to a VM running on host2.domain.com. What is the most likely cause?

A.The 'Limited' role does not include 'Console interaction' privilege
B.User1 does not have permissions on host2.domain.com
C.The permissions are applied at the datacenter level, not the host level
D.User1 should be added to the admin group
AnswerB

Permissions are host-specific; user1 is only assigned on host1.

Why this answer

User1 has permissions only on host1, not on host2.domain.com. The 'Limited' role, which includes 'Read' and 'Console interaction' privileges, is assigned at the host level for host1 only, so it does not apply to host2. Therefore, user1 lacks any permissions on host2, preventing console access to VMs running there.

Option A is incorrect because the 'Limited' role does include 'Console interaction' privilege as stated. Option C is incorrect because the permissions are applied at the host level (as shown in the exhibit), not at the datacenter level. Option D is incorrect because there is no requirement or indication that user1 needs to be added to the admin group; the issue is simply lack of permissions on the target host.

Full explanation →
204
Multi-Selecteasy

Which two of the following are valid vSphere licensing tiers for vSphere 7? (Choose two.)

Select 2 answers
A.vSphere Enterprise Plus
B.vSphere Essentials Kit
C.vSphere Platinum
D.vSphere Standard
E.vSphere with Operations Management (vSOM)
AnswersA, D

Correct: vSphere Enterprise Plus is a valid licensing tier for vSphere 7.

Why this answer

Options A and D are correct. The valid vSphere 7 licensing tiers are vSphere Standard and vSphere Enterprise Plus. vSphere with Operations Management (vSOM) is a bundled offering that includes vSphere plus other products, not a standalone vSphere licensing tier. vSphere Essentials Kit (B) is a separate entry-level package, not a standard licensing tier. vSphere Platinum (C) was a tier in earlier versions but is not a standalone tier in vSphere 7; NSX and AppDef are now licensed separately. The third tier in vSphere 7, vSphere with Tanzu, is not listed among the options.

Full explanation →
205
MCQeasy

Refer to the exhibit. An administrator runs the vmkfstools command on an ESXi host and views the output. Which conclusion can be drawn from the output?

A.The datastore has approximately 50% free space.
B.The VMDK file is thin provisioned.
C.The datastore has a block size of 1 MB, which is the maximum for VMFS-6.
D.The virtual machine's disk is encrypted.
AnswerA

Correct: Volume free is half of volume capacity.

Why this answer

The vmkfstools command output shows the capacity and free space values for the datastore. In this case, the free space is approximately half of the total capacity, indicating roughly 50% free space. This is a direct calculation from the displayed numbers, not an inference about provisioning or encryption.

Exam trap

The trap here is that candidates often confuse datastore-level free space with VMDK-level provisioning attributes, assuming that a high free space percentage implies thin provisioning, when in fact thin provisioning is a separate property of the virtual disk file.

How to eliminate wrong answers

Option B is wrong because thin provisioning is a property of the VMDK file itself, not directly shown in the basic vmkfstools capacity/free output; you would need to use 'vmkfstools -i' or check the disk descriptor for 'thinProvisioned' flag. Option C is wrong because VMFS-6 supports a maximum block size of 1 MB, but the output does not display block size; block size is shown with 'vmkfstools -P -v 10' or similar commands. Option D is wrong because encryption status is not indicated in this output; encryption would require checking the VM's configuration or using 'vmkfstools -c' or 'vsan' encryption-related commands.

Full explanation →
206
MCQhard

An administrator notices that a virtual machine on an NFS datastore is experiencing intermittent performance degradation. The ESXi hosts are connected to the NFS server via a 10 GbE network. The administrator uses esxtop and sees high average latency on the storage device, but the NFS server reports low latency. What is the most likely cause?

A.Jumbo frames are enabled on the ESXi hosts but not on the NFS server
B.Network congestion is causing TCP retransmissions
C.The NFS server is performing data deduplication on the datastore
D.The NFS datastore is mounted with read-only permissions
AnswerB

Network issues cause retransmissions increasing latency on the client side, while server reports low latency.

Why this answer

When ESXi reports high latency but the NFS server reports low latency, it suggests that the latency is occurring on the network between them. TCP retransmissions caused by network congestion or packet loss can increase latency as seen by ESXi, while the NFS server may complete requests quickly and not observe the delay. Option A is incorrect because jumbo frame misconfiguration would likely cause connectivity issues, not intermittent performance degradation with low server-side latency.

Option C is incorrect because deduplication on the server would affect server-side latency, not cause a discrepancy between ESXi and server latency. Option D is incorrect because read-only permissions would result in write failures, not high latency.

Full explanation →
207
MCQhard

Refer to the exhibit. An administrator notices that the ESXi host is listening on both IPv4 and IPv6 for HTTPS. However, IPv6 traffic is not being forwarded to the host. Which configuration change is most likely needed?

A.Configure a default gateway for the IPv6 stack on the host.
B.Disable IPv6 and use only IPv4.
C.Remove the IPv4 HTTPS listener to force IPv6.
D.Enable IPv6 on the vSphere Distributed Switch.
AnswerA

Without an IPv6 default gateway, traffic cannot be routed to the host.

Full explanation →
208
MCQhard

Your company has a vSphere 7 environment with four clusters: Cluster-A (production VMs), Cluster-B (development), Cluster-C (database), and Cluster-D (VDI). Each cluster has 8 hosts with 256 GB RAM and dual 12-core CPUs (hyper-threading enabled). The environment uses vSAN for storage, with all-flash disk groups (1 NVMe cache + 4 SATA SSD capacity per host). You are the lead administrator. Recently, users in the VDI cluster (Cluster-D) report slow logins and application responsiveness during peak hours (9-11 AM). You examine the vSAN performance metrics and see that the cache hit ratio during peak hours drops to 60%, and the average read latency is 15 ms. The VMs are thin provisioned and use a storage policy with RAID-1 mirroring (FTT=1). The cluster has DRS enabled with default migration threshold. What should you do to improve VDI performance without disruptive changes?

A.Disable DRS for the VDI cluster to prevent VMs from migrating during peak hours.
B.Change the VM storage policy to RAID-5 erasure coding to reduce capacity overhead, freeing cache for reads.
C.Add more SATA SSD capacity disks to each host to increase overall storage performance.
D.Add a second NVMe cache device or upgrade to higher-endurance NVMe drives in each host to increase cache size.
AnswerD

Larger cache improves hit ratio and reduces read latency.

Why this answer

The VDI cluster's poor performance is caused by a low cache hit ratio (60%) and high read latency (15 ms) during peak hours. Adding a second NVMe cache device or upgrading to higher-endurance NVMe drives increases the cache size, allowing more read data to be served from the fast cache layer rather than the slower SATA SSD capacity tier. This directly improves the cache hit ratio and reduces read latency without requiring disruptive changes to the cluster.

Exam trap

The trap here is that candidates often confuse capacity (adding more SATA SSDs) with cache performance, or mistakenly think changing the storage policy to RAID-5 will improve read latency, when the real fix is expanding the NVMe cache layer to handle the VDI working set.

How to eliminate wrong answers

Option A is wrong because disabling DRS would prevent load balancing and could actually worsen performance by leaving heavily loaded hosts unbalanced; DRS migration during peak hours is not the cause of low cache hit ratio. Option B is wrong because RAID-5 erasure coding reduces capacity overhead but does not increase cache size or improve cache hit ratio; it may even increase write overhead and latency, which is counterproductive for VDI workloads. Option C is wrong because adding more SATA SSD capacity disks increases storage capacity but does not expand the NVMe cache layer; the bottleneck is cache size, not capacity, so this would not improve cache hit ratio or reduce read latency.

Full explanation →
209
Multi-Selectmedium

Which TWO features are provided by vSphere vDS (Distributed Switch) but not by a standard switch?

Select 2 answers
A.MTU configuration
B.LACP support
C.VLAN support
D.Network I/O Control
E.Port mirroring (NetFlow)
AnswersB, D

LACP support is a feature exclusive to vSphere Distributed Switches, allowing for link aggregation. This is a correct answer.

Why this answer

The correct answers are B and D. LACP support (B) and Network I/O Control (D) are features exclusive to vSphere Distributed Switches. MTU configuration (A) and VLAN support (C) are available on both standard and distributed switches.

Port mirroring (NetFlow) (E) is also a vDS-only feature, but the question specifically asks for TWO features commonly cited in exam objectives; LACP and Network I/O Control are the primary ones.

Full explanation →
210
MCQhard

Refer to the exhibit. An administrator notices that virtual machines on the Production port group are unable to communicate with hosts on VLAN 200. The Management and Storage port groups work fine. What is the most likely cause?

A.The uplinks for DSwitch are not properly configured for VLAN 200.
B.The MTU setting on the DSwitch (9000) is incompatible with the physical network for VLAN 200.
C.The Production port group is not attached to any uplink.
D.There is a VLAN ID mismatch between the virtual switch and physical switch for VLAN 200.
AnswerB

Jumbo frames (MTU 9000) require end-to-end support. If the physical switches do not support jumbo frames on VLAN 200, packets larger than 1500 bytes are dropped.

Why this answer

The exhibit shows that the DVS has MTU 9000 configured, but the Production port group inherits this MTU. If the physical network infrastructure does not support jumbo frames (MTU >1500), traffic on VLAN 200 may be dropped due to fragmentation issues. The Management port group is on VLAN 100 and Storage on VLAN 300, which might be configured differently or not experiencing the issue yet.

The correct answer is that the MTU mismatch causes the Production traffic to fail.

Full explanation →
211
Multi-Selecteasy

Which TWO components are part of a vLCM cluster image? (Select TWO.)

Select 2 answers
A.Firmware and drivers add-on
B.ESXi version
C.Vendor add-on
D.vCenter Server version
E.Baseline group
AnswersB, C

The base ESXi version is a required component of the cluster image.

Why this answer

A vLCM cluster image consists of an ESXi base image (ESXi version) and an optional vendor add-on. Firmware and drivers are typically included in the vendor add-on, not as a separate component. vCenter Server version and baseline groups are not part of the cluster image. Therefore, the correct answers are B (ESXi version) and C (Vendor add-on).

Full explanation →
212
MCQhard

A company runs a critical e-commerce platform on a vSphere 7 cluster with ESXi hosts connected to a vSAN datastore. The environment uses vSphere Trust Authority (vTA) and VM encryption with an external KMS. Recently, after a successful vTA attestation, one of the VMs (WebServer-01) failed to power on with the error: 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable.' The administrator verifies that other encrypted VMs on the same host power on successfully. The KMS cluster consists of two servers: KMS-01 and KMS-02, both accessible from the management network. The administrator checks the VM's configuration and finds that it uses a custom storage policy with encryption. What is the most likely cause of this specific VM's failure?

A.The vCenter Server's KMS cluster configuration has been deleted, affecting all VMs but not this one.
B.The storage policy used by the VM has been modified and no longer includes encryption.
C.The vTA attestation process failed for the VM's host, but the error message is misleading.
D.The VM's encryption key was retrieved from a different KMS server that is now unavailable, and the key ID in the VM's metadata points to that KMS server.
AnswerD

Correct. The VM's encryption key may have been issued by a specific KMS server (e.g., KMS-01) that is now unreachable, while the KMS cluster overall is accessible. Other VMs may have keys from a different, reachable server (e.g., KMS-02), explaining why they power on successfully.

Why this answer

The error 'Unable to decrypt the encrypted virtual machine upon re-registration. Reason: The KMS server is unreachable' indicates that the ESXi host cannot contact the KMS server to retrieve the VM's encryption key. Since other encrypted VMs on the same host power on successfully, the host can reach the KMS cluster, but this specific VM's encryption key may have been issued by a different KMS server (e.g., an older or alternative KMS) that is now unavailable.

The key ID stored in the VM's metadata points to that unreachable server, causing the failure. Option A is incorrect because if the vCenter KMS cluster configuration were deleted, all VMs would be affected. Option B is incorrect because modifying the storage policy does not change the existing encryption key; the VM remains encrypted with its original key.

Option C is incorrect because vTA attestation is separate from KMS key retrieval; the error message is specific to KMS unavailability.

Full explanation →
213
MCQhard

A company is implementing VMware vVols with a VASA provider from a major storage vendor. The environment includes multiple ESXi hosts and a vCenter Server. After binding a virtual machine to a vVol, the administrator notices that the VM cannot power on. The storage status shows 'Not mounted'. What is the most likely cause?

A.The VASA provider is not registered on the ESXi host where the VM is being powered on
B.The vCenter Server is not connected to the VASA provider
C.The protocol endpoint is not reachable from the ESXi host
D.The storage policy does not include the correct capability
AnswerA

The VASA provider must be registered on the specific ESXi host to mount the vVol. Without registration, the storage system cannot present the vVol to that host.

Why this answer

vVols require storage container binding per host. If the VASA provider is not properly registered on that host, the vVol cannot be mounted. Option A is correct.

Option B (vCenter Server not connected) does not prevent direct mount if the host has the provider. Option C (protocol endpoint not reachable) would affect all VMs. Option D (storage policy) would affect placement, not power-on.

Full explanation →
214
MCQmedium

A vLCM image is configured, but remediation fails with error: 'Image compliance check failed. Host does not have required add-on.' What should the administrator check first?

A.That the vCenter Service is running.
B.That the add-on is downloaded in the vLCM depot.
C.That the host has sufficient memory for the add-on.
D.That the host has internet access to download the add-on.
AnswerB

If the add-on is not in the depot, hosts cannot install it.

Why this answer

The error indicates the host is missing a required add-on. The first thing to check is whether the add-on is downloaded and available in the vLCM depot (option B). The add-on must be present in the depot for the host to remediate.

Checking the vCenter Service (A) is not directly related to the add-on error. Internet access (D) is not required for add-ons already in the depot, and memory (C) is not the primary issue here.

Full explanation →
215
MCQeasy

An administrator needs to configure a vSphere Standard Switch (vSS) for a small environment. Which component must be created first before adding a virtual machine to the network?

A.Create a standard switch.
B.Configure a VMkernel interface.
C.Create a virtual machine port group.
D.Add a physical uplink to the host.
AnswerA

A standard switch is the foundational component; it must be created before any port groups can be added.

Why this answer

A standard switch must exist to create port groups. Without the switch, port groups cannot be created. Option B is incorrect because a VMkernel interface is used for management or storage traffic, not for regular VM connectivity, and it is created after the standard switch.

Option C is incorrect because a virtual machine port group is created on the standard switch after the switch exists. Option D is incorrect because adding a physical uplink to the host occurs during or after standard switch creation, but the switch itself must exist first.

Full explanation →
216
MCQhard

Refer to the exhibit. An administrator checks the status of a distributed switch port and sees no errors or drops. However, virtual machines on this port cannot communicate with the default gateway at 192.168.200.1. What is the most likely cause?

A.The port has no allowed MAC addresses, which may cause filtering.
B.The port is configured with Allowed VLANs 100, 200, 300, which is a trunk configuration, but the virtual machine expects an access port on VLAN 200.
C.The MTU is set to 1500, which is standard and should work fine.
D.The link speed is 10 Gbps, which is sufficient.
AnswerB

The port should be set to VLAN 200 only (access) instead of allowing multiple VLANs. This misconfiguration leads to connectivity issues.

Why this answer

The exhibit shows the port has Allowed VLANs: 100, 200, 300. This is unusual because a port should typically be assigned to a single VLAN (access port) or carry multiple VLANs (trunk port). If the port is set to allow multiple VLANs but the virtual machine expects a specific VLAN, packets may be misconfigured.

However, the most likely cause is that the port is configured as a trunk port (allows multiple VLANs) when it should be an access port for VLAN 200. This can cause the virtual machine to receive traffic from other VLANs or not tag its own traffic correctly.

Full explanation →
217
MCQeasy

An administrator wants to maximize performance for a latency-sensitive application running on a VM. The host has two NUMA nodes. Which vSphere feature should be configured to ensure the VM's memory is allocated from the same NUMA node as its vCPUs?

A.Memory reservation
B.NUMA affinity
C.CPU affinity
D.Memory latency sensitivity
AnswerB

NUMA affinity forces the VM's vCPUs and memory to be allocated from a single NUMA node, ensuring local memory access.

Why this answer

(NUMA affinity) is the correct choice. NUMA affinity allows an administrator to specify a preferred NUMA node for a VM's vCPUs and memory, ensuring that memory allocations are local to the node where the vCPUs are running. This reduces memory access latency, which is critical for latency-sensitive applications.

Option A (Memory reservation) only guarantees that the host will provide a minimum amount of memory; it does not affect memory locality. Option C (CPU affinity) pins vCPUs to specific physical cores but does not control memory placement. Option D (Memory latency sensitivity) is a vSphere 6.7+ feature that provides guidance to the CPU scheduler but does not enforce strict NUMA locality.

Full explanation →
218
MCQmedium

A company runs a critical application on a VM with 16 vCPUs and 128 GB RAM on an ESXi host that has 2 sockets (12 cores per socket, hyperthreading enabled) and 512 GB RAM. The application is known to scale well with multiple threads and memory bandwidth. Recently, a DRS migration moved the VM to a different host with the same CPU and memory configuration. After the migration, the application's performance dropped by 30%. The administrator checks vCenter and finds no other VMs on the destination host. esxtop shows the VM's CPU ready time is less than 1%, but the 'CPU cost' metric is high, and the 'Memory' section shows high values for 'Remote' memory accesses. What is the most likely cause of the performance drop?

A.The VM's virtual hardware version is not compatible with NUMA.
B.The VM is spanning multiple NUMA nodes, causing remote memory access.
C.The VM's memory shares have been reduced after the migration.
D.Transparent Huge Pages are not enabled on the destination host.
AnswerB

Spanning NUMA nodes increases memory latency, reducing application performance.

Why this answer

The high 'Remote' memory access indicates that the VM's memory is being accessed from a NUMA node different from the one where the vCPUs are running. This occurs when a large VM spans multiple NUMA nodes. In this case, the VM has 16 vCPUs and the host has 2 NUMA nodes (each with 12 cores and hyperthreading).

After DRS migration, the VM may be placed across both NUMA nodes, causing remote memory accesses and increasing the 'CPU cost' metric. This explains the 30% performance drop. Option B correctly identifies this cause.

Option A (virtual hardware version) is not directly related. Option C (memory shares) affects prioritization, not remote access. Option D (Transparent Huge Pages) could affect performance but is not indicated by the metrics.

Full explanation →
219
MCQeasy

A company uses vSphere 8 with a vSAN cluster consisting of 4 ESXi hosts. Each host has a single disk group with one 400 GB NVMe cache SSD and two 2 TB capacity SSDs. The vSAN cluster is used to host a mix of production VMs and test VMs. During peak business hours, the vSAN performance service shows high write latency (over 30 ms) for several production VMs, while test VMs are not affected. The administrator examines the vSAN performance charts and notices that the disk groups are not balanced: one disk group shows over 80% used capacity and high congestion, while the others are below 40%. The administrator wants to improve performance without adding new hardware or changing the storage policy. The vSAN health service reports no errors. Which action should the administrator take first?

A.Manually evacuate data from the most utilized disk group.
B.Increase the number of disk groups on the busiest hosts.
C.Change the storage policy to use RAID-5 erasure coding to reduce capacity overhead.
D.Enable vSAN proactive rebalance.
AnswerD

Proactive rebalance automatically redistributes objects across disk groups to improve balance and performance.

Why this answer

Enabling vSAN proactive rebalance (Option D) automatically redistributes data across disk groups based on capacity and performance metrics, alleviating congestion on the overutilized disk group and reducing write latency. Option A (manual evacuation) is disruptive and not recommended as a first step. Option B (increasing disk groups) requires additional hardware.

Option C (changing to RAID-5) does not address disk group imbalance and may increase overhead.

Full explanation →
220
MCQhard

A company has a vSphere environment with 20 ESXi hosts and 500 VMs. The security team mandates that all administrative access to vCenter Server must be through a single, highly restricted account with multi-factor authentication (MFA). The account must be used for both the vSphere Client and API integrations. Which step should the administrator take?

A.Configure the built-in administrator account to require smart card authentication.
B.Integrate vCenter Server with an external identity provider (e.g., ADFS, Okta) that supports MFA, and use a service account with MFA for API access.
C.Create a new local account and configure it as a member of the Administrators group, then enforce MFA via a third-party tool on the vCenter Server OS.
D.Disable the built-in administrator account and create a new local account with the same privileges.
AnswerB

External identity providers can enforce MFA and work with both UI and API access.

Why this answer

Integrating vCenter Server with an external identity provider (IdP) such as ADFS or Okta allows the use of a single service account that supports multi-factor authentication (MFA) for both the vSphere Client and API integrations. This approach meets the security mandate by centralizing authentication through an IdP that enforces MFA, while also supporting OAuth 2.0 token-based API access, which is required for modern vSphere API integrations. The built-in administrator account cannot be directly configured with MFA in a way that satisfies both interactive and API access requirements without external integration.

Exam trap

The trap here is that candidates assume the built-in administrator account can be directly configured with MFA for all access types, but vCenter Server does not natively support MFA for local accounts or API integrations without an external identity provider.

How to eliminate wrong answers

Option A is wrong because configuring the built-in administrator account for smart card authentication only enforces certificate-based MFA for interactive logins, but it does not support MFA for API integrations, which typically require token-based or challenge-response mechanisms. Option C is wrong because creating a new local account and enforcing MFA via a third-party tool on the vCenter Server OS is not supported; vCenter Server runs on a hardened Photon OS or appliance, and local accounts cannot be integrated with external MFA solutions for API access. Option D is wrong because disabling the built-in administrator account and creating a new local account does not enable MFA; local accounts in vCenter Server do not support MFA natively, and this approach fails to address the requirement for MFA on API integrations.

Full explanation →
221
Multi-Selectmedium

Which THREE of the following are prerequisites for configuring LACP on a vSphere Distributed Switch? (Select exactly three.)

Select 3 answers
A.The vSphere Distributed Switch must be configured with enhanced LACP support.
B.Each uplink must be in a separate VLAN to avoid loops.
C.The physical switch ports must be configured as LACP active or passive.
D.The uplinks must be connected to different physical switches for redundancy.
E.The physical network switch must support LACP (IEEE 802.3ad).
AnswersA, C, E

The vDS version must support LACP; enhanced LACP is available in vSphere 6.0+.

Why this answer

Options A, C, and E are correct. For LACP on a vSphere Distributed Switch, the vDS must be configured with enhanced LACP support (option A). The physical switch ports must be configured for LACP, either in active or passive mode (option C).

Additionally, the physical network switch must support LACP (IEEE 802.3ad) (option E). Option B is incorrect because each uplink does not need to be in a separate VLAN; LACP works across VLANs and VLAN configuration is independent. Option D is incorrect because the uplinks must be connected to the same physical switch to form a LAG; using different switches requires Multi-chassis LACP (e.g., MLAG).

Full explanation →
222
MCQmedium

An administrator is managing a vSphere 7.0 cluster with 8 hosts using vLCM baseline-based management. The company wants to move to image-based management for better consistency. The administrator creates a new image in vLCM with the desired ESXi version 7.0 U3 and attempts to change the cluster's management type from baseline to image. The operation fails with an error: 'Some hosts are not compliant with the desired image.' The administrator has already staged the image on all hosts. What should the administrator do first to resolve this issue?

A.Detach all baseline groups attached to the cluster before switching to image-based management.
B.Validate the image against the host hardware using the HCL.
C.Recreate the image specification with the same components.
D.Reinstall ESXi on non-compliant hosts using the image ISO.
AnswerA

Baseline groups interfere with image-based management; they must be removed first.

Why this answer

Before switching from baseline-based to image-based management, all baseline groups must be detached to avoid conflicts. The error indicates that some hosts are not compliant, likely because baselines are still attached. Option B is incorrect because validating the image against the HCL is not the initial step to resolve this error; it would not fix the baseline conflict.

Option C is incorrect because recreating the image specification does not address the underlying issue of attached baselines. Option D is incorrect and too drastic; reinstalling ESXi is unnecessary and would not resolve the transition error.

Full explanation →
223
MCQmedium

Refer to the exhibit. What type of virtual disk is represented by this descriptor file?

A.Thin provisioned VMDK
B.Thick provisioned eager zeroed VMDK
C.Sparse disk with multiple extents
D.Physical mode RDM
AnswerB

Correct. The createType='vmfs' with a single flat.vmdk extent indicates a thick provisioned eager zeroed VMDK (the default thick type on VMFS).

Why this answer

The descriptor shows createType='vmfs' and a single extent with a 'flat.vmdk' file. This is characteristic of a thick provisioned virtual disk on VMFS. Specifically, thick provisioned eager zeroed VMDK files use the 'flat.vmdk' naming convention.

Option A is incorrect because a thin provisioned VMDK would have createType='vmfsThin'. Option C is incorrect because a sparse disk with multiple extents would list multiple extents in the descriptor. Option D is incorrect because a physical mode RDM would have createType='vmfsRaw' or 'vmfsRawDeviceMap' and reference a raw device mapping.

Full explanation →
224
MCQhard

An administrator has configured jumbo frames on a VDS and all physical switches. Virtual machines on different hosts can ping each other but cannot transfer files larger than 1500 bytes. What is the most likely cause?

A.The physical NICs are not configured for jumbo frames.
B.The TCP/IP offload engine is causing fragmentation.
C.The VMkernel adapters are not configured with MTU 9000.
D.The virtual machine's operating system MTU is set to 1500.
AnswerD

The OS MTU must be 9000 for jumbo frames to work.

Why this answer

Jumbo frames require the entire network path, including the virtual machine's operating system, to support the larger MTU. If the VM OS MTU is left at 1500, packets larger than 1500 bytes will be fragmented by the OS or dropped, preventing large file transfers. Option A is incorrect because the problem states physical switches and the VDS are configured for jumbo frames, but the physical NICs must also be configured; however, the question does not indicate they are misconfigured, and the issue is more likely the VM OS.

Option B is incorrect because TCP offload engines typically handle segmentation and checksum, not fragmentation due to MTU mismatch. Option C is incorrect because VMkernel adapters are for management and vMotion traffic, not VM data traffic; VM data uses the VM's own network stack.

Full explanation →
225
MCQeasy

A VM is experiencing high CPU ready time. The host has 16 physical cores and 20 vCPUs total across all VMs. Which action is MOST likely to reduce the CPU ready time on the VM?

A.Migrate the VM to another host with the same CPU load.
B.Decrease the number of vCPUs on the VM.
C.Increase the number of vCPUs on the VM.
D.Increase the memory reservation for the VM.
AnswerB

Reducing vCPUs decreases scheduling contention and lowers CPU ready time.

Why this answer

Reducing the number of vCPUs on an over-provisioned VM decreases scheduling contention, lowering CPU ready time. Increasing vCPUs would worsen the issue. Migrating to another host with similar load would not help long-term.

Increasing memory does not directly reduce CPU contention.

Full explanation →
Page 2

Page 3 of 7

Page 4

All pages

1234567

Practice VCP-DCV by domain

Target a specific domain to shore up weak areas.

vSphere Architecture, Products and SolutionsConfigure and Manage vSphere NetworkingConfigure and Manage vSphere StoragevSphere Lifecycle ManagementvSphere SecurityvSphere Performance and Scaling
See all domains with question counts →