Courseiva

VMware Certified Professional Data Center Virtualization VCP-DCV (VCP-DCV) — Questions 226–300

498 questions total · 7pages · All types, answers revealed

Take a mock examExam hub
Page 3

Page 4 of 7

Page 5
226
MCQhard

An organization wants to upgrade ESXi hosts from 7.0 to 8.0 using vLCM. They have a cluster with mixed hardware (different NICs and HBAs). What is the best practice?

A.Create a custom image that includes all necessary drivers and add-ons for the mixed hardware.
B.Use vSphere Update Manager baselines instead of vLCM.
C.Use a single image with the latest ESXi version and no add-ons.
D.Upgrade hosts manually by booting from installation media.
AnswerA

A comprehensive image ensures all hosts can comply.

Why this answer

The best practice for upgrading ESXi hosts from 7.0 to 8.0 using vLCM in a cluster with mixed hardware is to create a custom image that includes all necessary drivers and add-ons (Option A). vLCM requires a single image per cluster that supports all hardware. A custom image ensures that all NICs and HBAs have the required drivers, avoiding compatibility issues. Option B is incorrect because vSphere Update Manager baselines are deprecated in favor of vLCM images.

Option C is wrong because a single image without add-ons would not include drivers for diverse hardware. Option D is not viable as manual upgrades are not a best practice for large-scale or mixed environments.

Full explanation →
227
MCQeasy

A vSphere cluster with DRS enabled is experiencing an imbalance in resource utilization across hosts. DRS is set to 'Manual' mode. What action should the administrator take to resolve the imbalance?

A.Change DRS to 'Fully Automated' mode.
B.Manually migrate VMs using vMotion.
C.Enable HA admission control.
D.Increase the DRS migration threshold.
AnswerB

Manual vMotion moves VMs to balance resources now.

Why this answer

In Manual mode, DRS only provides recommendations; the administrator must manually migrate VMs using vMotion. Option B is correct. Option A would automate future migrations but does not resolve current imbalance.

Option C changes threshold but won't act immediately. Option D is unrelated.

Full explanation →
228
MCQmedium

Refer to the exhibit. An administrator attempts to add a host to a vSAN cluster and receives this error. Which step should the administrator take to resolve the issue?

A.Reconfigure the vMotion interface (vmk1) to also carry vSAN traffic.
B.Add the host to the cluster without vSAN and enable vSAN later.
C.Create a new VMkernel adapter (vmk3) on the host's network and enable vSAN traffic.
D.Enable vSAN traffic on the existing vmk0 interface.
AnswerC

vSAN requires its own VMkernel interface with vSAN enabled.

Why this answer

vSAN requires a dedicated VMkernel interface with the vSAN service enabled. The host has management, vMotion, and provisioning interfaces but none with vSAN enabled. The administrator must create a new VMkernel adapter (e.g., vmk3) on a host network and enable the vSAN service on it.

Full explanation →
229
MCQhard

A company is upgrading vCenter Server from 7.0 U3 to 8.0 U2. The environment includes a distributed switch with multiple port groups, a vSAN cluster, and VUM (now vLCM). During the pre-upgrade checks, vCenter reports that the upgrade cannot proceed because the 'vSphere Authentication Proxy' service is not compatible. The administrator verifies that the service is running and set to automatic. What is the most likely cause?

A.The ESXi hosts are running an unsupported version of ESXi 7.0.
B.The upgrade installer did not have network access to the ESXi hosts.
C.The vSphere Authentication Proxy service is disabled on the source vCenter Server.
D.The vSphere Authentication Proxy service version is not compatible with vCenter 8.0; it must be upgraded separately.
AnswerD

vSphere Authentication Proxy requires its own upgrade path when moving to 8.0.

Why this answer

The pre-upgrade check fails because the vSphere Authentication Proxy service installed on the source vCenter Server 7.0 U3 is not compatible with vCenter 8.0. In vCenter 8.0, this service is not included and must be deployed as a separate appliance if needed. Therefore, the upgrade cannot proceed until the service is removed or upgraded separately.

Option A is incorrect because the ESXi host version is not the direct cause of this specific check. Option B is incorrect because network access is not the issue; the check specifically targets the Authentication Proxy service. Option C is incorrect because the administrator verified the service is running and set to automatic, so it is not disabled.

Option D is correct because the service version is incompatible with vCenter 8.0.

Full explanation →
230
Drag & Dropmedium

Sequence the steps to configure a DRS rule that keeps two VMs on different hosts.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct sequence to configure a DRS rule that keeps two VMs on different hosts is: first access the cluster configuration, then add a new DRS rule, then name the rule, then choose the 'Separate VMs' type to enforce host separation, and finally assign the two VMs. This order ensures that each step logically follows the previous one, adhering to the typical workflow in vSphere where the rule is created before its properties are defined and applied.

Full explanation →
231
MCQmedium

An administrator is planning to scale a vSphere cluster from 8 to 16 hosts. Which consideration is most important for maintaining vSphere HA effectiveness?

A.Assign multiple master hosts to the cluster
B.Increase the number of heartbeat datastores per host
C.Disable admission control to reduce complexity
D.Adjust the slot size for admission control
AnswerB

With more hosts, ensuring hosts have enough heartbeat datastores prevents false isolation detection.

Why this answer

As cluster size increases, the number of heartbeat datastores must be sufficient to ensure isolation detection. Admission control policy and slot size also matter but heartbeat datastores are critical for scaling.

Full explanation →
232
MCQeasy

Which setting must be consistent across all hosts in a vMotion migration to ensure that virtual machines maintain optimal performance after migration?

A.Enhanced vMotion Compatibility (EVC) mode.
B.Resource pool shares configuration.
C.Distributed Power Management (DPM) threshold.
D.NUMA node alignment for each VM.
AnswerA

EVC ensures that all hosts present the same CPU feature set to VMs, preventing performance drops after migration.

Why this answer

Enhanced vMotion Compatibility (EVC) ensures that the CPU features presented to virtual machines are consistent across all hosts in a cluster, preventing performance degradation due to CPU feature masking during vMotion. Option B is incorrect because resource pool shares control resource allocation but do not affect vMotion compatibility or post-migration performance. Option C is incorrect because Distributed Power Management (DPM) manages host power states and does not directly impact vMotion performance.

Option D is incorrect because NUMA node alignment is important for memory locality performance but is not a prerequisite for vMotion; it can be configured after migration.

Full explanation →
233
MCQeasy

An administrator needs to apply a security patch to a vLCM-managed cluster. The patch is available as an ESXi image in the vSphere Lifecycle Manager depot. What is the correct procedure?

A.Create a new desired state image with the patch, validate, and remediate the cluster.
B.Attach a patch baseline to the cluster and remediate.
C.Export the current image, add the patch, and import it to the cluster.
D.Use Quick Boot to apply the patch to each host individually.
AnswerA

vLCM requires updating the desired image and then remediating.

Why this answer

In a vLCM-managed cluster, the correct procedure to apply a security patch is to create a new desired state image that includes the patch from the vSphere Lifecycle Manager depot, validate the image against the cluster's hardware and software compatibility, and then remediate the cluster. This ensures all hosts are updated to the exact same image specification, maintaining consistency and compliance with the desired state.

Exam trap

The trap here is confusing vLCM's image-based management with the legacy baseline-based patching method, leading candidates to incorrectly select attaching a patch baseline (Option B) instead of creating a new desired state image.

How to eliminate wrong answers

Option B is wrong because attaching a patch baseline is a legacy approach used with baseline-based updates, not supported in vLCM-managed clusters which use image-based management. Option C is wrong because exporting the current image, adding the patch, and importing it is not a supported workflow; vLCM requires creating a new desired state image from the depot, not manual image manipulation. Option D is wrong because Quick Boot is a feature to reduce reboot time during remediation, not a method to apply patches individually; vLCM applies updates to all hosts in the cluster via a single remediation operation.

Full explanation →
234
MCQhard

A financial institution operates a vSphere 7 environment with 1,000 VMs, many of which process sensitive data. The security team mandates VM encryption at rest using a Key Management Server (KMS) cluster. The administrator has configured the KMS cluster as a key provider in vCenter and enabled encryption on a test VM, which works correctly. However, after adding a new ESXi host to the cluster and attempting to power on a previously encrypted VM, the VM fails to start with the error: 'Key provider unavailable for host <hostname>.' The new host is correctly licensed for encryption and has network connectivity to the KMS. The administrator verifies that the KMS cluster is operational and that other hosts can power on encrypted VMs. What is the most likely cause of this issue?

A.The ESXi host has not been added to the Key Provider's trust list or KMS configuration.
B.The ESXi host's firewall is blocking outbound connections to the KMS cluster.
C.The ESXi host does not have the required encryption feature license.
D.The VM's encryption policy is set to 'vSphere Native Key Provider' instead of 'KMS'.
AnswerA

Hosts must be trusted by the KMS to retrieve keys; a newly added host is not automatically trusted.

Why this answer

When a new ESXi host is added to the cluster, it must be added to the Key Provider's trust list or the KMS must be configured to trust the host's certificate. Without this, the host cannot retrieve keys from the KMS, even though it has network connectivity and is properly licensed. Option B is incorrect: a firewall issue would typically cause a connection timeout or refusal error, not a 'key provider unavailable' error.

Option C is incorrect because the host is verified to have the correct encryption license. Option D is incorrect because the error indicates the KMS is not available to that host, not a policy mismatch.

Full explanation →
235
MCQmedium

Refer to the exhibit. Based on the esxtop output, what is the likely cause of performance degradation for VM 'AppSrv'?

A.CPU contention
B.Network congestion
C.Memory contention
D.Storage I/O latency
AnswerC

%MLMTD of 8.5 indicates memory resource contention.

Why this answer

High %MLMTD (memory load management) in esxtop indicates that the VM is experiencing memory contention, causing it to wait for memory resources to be reclaimed. This degrades performance. CPU metrics are low, so CPU contention is not the issue.

No storage or network latency metrics are shown, so storage I/O latency and network congestion are not indicated. Therefore, memory contention is the correct answer.

Full explanation →
236
Multi-Selecteasy

Which TWO actions are recommended to secure the vCenter Server Appliance (VCSA)?

Select 2 answers
A.Enable the auto-lock feature for the admin account
B.Change the default 'root' password
C.Disable SSH access
D.Configure the password policy for local accounts
E.Enable FIPS 140-2 compliance mode
AnswersB, C

Default passwords should be changed.

Why this answer

Changing the default 'root' password is a fundamental security best practice for the VCSA. The default password is well-known and documented, leaving the appliance vulnerable to unauthorized access if not changed immediately after deployment. This action directly mitigates the risk of brute-force or credential-based attacks against the root account.

Exam trap

The trap here is that candidates often confuse 'recommended security actions' with 'all possible security configurations,' leading them to select options like enabling FIPS or configuring password policies, which are not the two primary actions emphasized in VMware's official security hardening guidance for the VCSA.

Full explanation →
237
MCQhard

A vSphere administrator is troubleshooting a failed remediation attempt on an ESXi host in a cluster managed by vLCM. The image compliance status shows 'Non-Compliant'. The host is in maintenance mode. The administrator sees the following error: 'Failed to apply the software specification. Reason: The host's firmware version is incompatible with the selected ESXi image.' What is the most likely cause?

A.The hardware support manager (HSM) is not configured or the firmware baseline is outdated.
B.The host must be taken out of maintenance mode for the remediation to proceed.
C.The ESXi 8.0 image has deprecated certain drivers that are still in use.
D.The vLCM image is corrupted and needs to be re-imported.
AnswerA

vLCM uses HSM to validate firmware compatibility; mismatch causes failure.

Why this answer

The error indicates that the host's firmware version is incompatible with the selected ESXi image. In vLCM, hardware compatibility is managed by the Hardware Support Manager (HSM), which provides firmware baselines. If the HSM is not configured or the firmware baseline is outdated, vLCM cannot validate or update the firmware to match the ESXi image requirements, leading to a 'Non-Compliant' status and remediation failure.

This is the most likely cause because the error directly points to firmware incompatibility, not driver issues or image corruption.

Exam trap

The trap here is that candidates may confuse firmware incompatibility with driver deprecation (Option C) or assume the host must be in maintenance mode (Option B), but the error message explicitly points to firmware version mismatch, which is managed by the HSM.

How to eliminate wrong answers

Option B is wrong because the host is already in maintenance mode, which is a prerequisite for remediation; taking it out of maintenance mode would not resolve the firmware incompatibility error. Option C is wrong because the error specifically mentions firmware version incompatibility, not deprecated drivers; while driver deprecation could cause issues, it would typically result in a different error message about missing or unsupported drivers. Option D is wrong because a corrupted vLCM image would likely produce a different error, such as 'Image import failed' or 'Invalid image', not a firmware version incompatibility error.

Full explanation →
238
Matchingmedium

Match each vSphere error/message to its meaning.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

VM is ready to run but waiting for CPU scheduling

VM waiting for memory pages to be swapped in

VM memory reclaimed by vmmemctl driver

Balances storage I/O and space across datastores

All Paths Down - no storage connectivity

Why these pairings

Correct matches: All Paths Down refers to storage path failure; Device or Resource Busy indicates resource contention; Not Enough Resources means insufficient CPU/memory; Permission Denied relates to authorization. Common confusions involve swapping definitions between All Paths Down and Device or Resource Busy, or between All Paths Down and Permission Denied.

Full explanation →
239
MCQeasy

A vSphere administrator is planning the storage configuration for a new cluster of 10 hosts running VDI workloads. Each VM requires approximately 100 IOPS for typical operation. Which storage design best balances performance and scalability?

A.Implement vSAN using HDDs with a flash cache tier.
B.Deploy a centralized all-flash FC SAN with multiple paths.
C.Configure each host with local NVMe or SSD drives and use vSphere Local Storage.
D.Use a single NFS datastore on a large spinning-disk array.
AnswerC

Local flash storage provides high IOPS per host and scales with hosts.

Why this answer

VDI workloads are highly I/O-intensive and latency-sensitive, and local NVMe or SSD drives provide the lowest possible latency by eliminating network and SAN controller overhead. vSphere Local Storage allows each host to independently serve its VMs, which scales linearly with the number of hosts and avoids the contention and cost of a shared storage fabric. This design balances performance and scalability for a 10-host cluster where each VM requires only 100 IOPS, as local flash easily meets that demand without the complexity of a SAN or vSAN.

Exam trap

The trap here is that candidates often assume VDI requires shared storage for features like vMotion or HA, but vSphere Local Storage with host-based replication or vSAN can provide those capabilities, and for pure performance/scalability, local flash is superior to any shared HDD or SAN design.

How to eliminate wrong answers

Option A is wrong because vSAN with HDDs and a flash cache tier introduces write latency and cache-miss penalties that degrade VDI performance, and the flash cache is often insufficient for bursty VDI workloads, leading to unpredictable IOPS. Option B is wrong because a centralized all-flash FC SAN, while fast, creates a single point of contention and a costly, complex fabric that does not scale linearly with host count; for only 100 IOPS per VM, the overhead of FC zoning and multipathing is unnecessary. Option D is wrong because a single NFS datastore on a large spinning-disk array creates a severe I/O bottleneck, as HDDs cannot sustain the random I/O patterns of VDI, and the single datastore becomes a failure domain and performance chokepoint.

Full explanation →
240
Multi-Selectmedium

Which THREE prerequisites are required to implement vLCM image-based management? (Choose three.)

Select 3 answers
A.vSAN enabled
B.ESXi hosts version 7.0 or later
C.vCenter Server version 7.0 or later
D.vSphere DRS enabled
E.vSphere Lifecycle Manager enabled
AnswersB, C, E

Image-based management requires ESXi 7.0 or later.

Why this answer

The three prerequisites for implementing vLCM image-based management are: ESXi hosts version 7.0 or later, vCenter Server version 7.0 or later, and vSphere Lifecycle Manager enabled. Option A (vSAN enabled) is not a prerequisite; vSAN is a separate feature that may be used with vLCM but is not required. Option D (vSphere DRS enabled) is also not a prerequisite.

Therefore, the correct choices are B, C, and E.

Full explanation →
241
Multi-Selecteasy

Which TWO statements are true regarding vMotion requirements?

Select 2 answers
A.Both source and destination ESXi hosts must be licensed for vMotion.
B.The VM's virtual disks must be stored on shared storage.
C.Both hosts must be in the same cluster.
D.The VM must be powered on.
E.Both hosts must be in the same vCenter Server instance.
AnswersA, D

Correct: vMotion is a licensed feature.

Why this answer

VMotion requires both the source and destination ESXi hosts to have a vMotion license. Without this license, the vMotion feature is not enabled on a host, and the migration cannot be initiated. This is a fundamental licensing requirement enforced by vSphere.

Exam trap

The trap here is that candidates often assume shared storage is mandatory for all vMotion operations, but vSphere supports vMotion with local storage by transferring disk data over the network, making option B a common distractor.

Full explanation →
242
MCQmedium

A company experiences high latency on a VM running a critical database. The storage is a VMFS datastore on a SAN. The administrator notices that other VMs on the same datastore are idle. What should the administrator configure to ensure the database VM gets sufficient storage I/O resources?

A.Configure Storage I/O Control and set the database VM's shares to High.
B.Set storage I/O limits on all other VMs to 100 IOPS.
C.Configure Storage I/O Control and set a latency threshold of 5 ms.
D.Use Storage DRS to migrate idle VMs to another datastore.
AnswerA

Correct: SIOC with high shares gives the database VM priority during congestion.

Why this answer

Storage I/O Control (SIOC) dynamically shares storage I/O resources among VMs on a datastore. By setting a higher share value for the database VM, it gets priority during congestion. Option B is incorrect because manually setting low I/O limits on all other VMs is inefficient and may lead to underutilization; SIOC with shares is adaptive.

Option C is incorrect because setting a latency threshold (e.g., 5 ms) is a configuration for SIOC to start congestion control, but it does not by itself ensure the database VM gets sufficient I/O; the key is adjusting shares. Option D is incorrect because Storage DRS (not compute DRS) migrates VMs for space and I/O load balancing, but it does not prioritize I/O for a specific VM; it balances across datastores over time.

Full explanation →
243
Multi-Selecteasy

Which TWO actions are required to enable vSphere VM encryption? (Choose two.)

Select 2 answers
A.Configure a Key Management Server (KMS) or native key provider
B.Enable SSH on each ESXi host to manage encryption keys
C.Disable vMotion on the cluster
D.Assign an encryption storage policy to the virtual machine or enable encryption on the VM
E.Place the ESXi hosts in lockdown mode
AnswersA, D

A key provider is necessary to store and manage encryption keys.

Why this answer

Options A and D are correct. A key provider (KMS or native key provider) must be configured and associated with the vCenter Server, and then encryption must be enabled on the VM (via storage policy or directly). Option B is wrong because SSH access is not required for encryption.

Option C is wrong because encryption does not require disabling vMotion. Option E is wrong because host lockdown mode is unrelated.

Full explanation →
244
Multi-Selecteasy

Which two are benefits of using vLCM over legacy baseline-based patching? (Choose two.)

Select 2 answers
A.Support for heterogeneous cluster configurations.
B.No requirement to put hosts in maintenance mode.
C.Real-time compliance monitoring of all hosts.
D.Built-in integration with vRealize Automation.
E.Single image management for cluster consistency.
AnswersC, E

vLCM continuously checks compliance against the cluster image.

Why this answer

Options C and E are correct because vLCM uses a single cluster image to ensure consistency (E) and provides real-time compliance monitoring (C). Option A is incorrect because vLCM is designed for homogeneous clusters, not heterogeneous. Option B is incorrect because vLCM still requires hosts to enter maintenance mode during remediation.

Option D is incorrect because integration with vRealize Automation is not a unique benefit of vLCM; it is available with other methods as well.

Full explanation →
245
Multi-Selecteasy

Which TWO of the following are required for vSphere Storage DRS to function?

Select 2 answers
A.VM storage policies defined
B.VASA provider registered
C.vMotion enabled on the hosts
D.Multiple datastores in a datastore cluster
E.SIOC enabled on each datastore
AnswersC, D

vMotion is used to move VMs between datastores.

Why this answer

Storage DRS requires multiple datastores in a datastore cluster and vMotion to migrate VMs between them. SIOC, VASA, and storage policies are optional.

Full explanation →
246
MCQmedium

A vSphere administrator is observing that a VM with a 2 TB thin-provisioned virtual disk on a VMFS6 datastore is reporting 1.5 TB of used space inside the guest OS, but the datastore shows only 800 GB consumed by the VM. What is the most likely cause of this discrepancy?

A.The virtual disk needs to be defragmented to reclaim space.
B.The VM has a snapshot that is consolidating, reducing storage usage.
C.The virtual disk is thick-provisioned lazy zeroed, which delays allocation.
D.The virtual disk is thin-provisioned, so only the actual written blocks consume space on the datastore.
AnswerD

Thin provisioning allocates space as data is written.

Why this answer

The discrepancy is because the virtual disk is thin-provisioned. Thin provisioning means the virtual disk file (VMDK) on the datastore only occupies space for blocks that have been written to by the guest OS, not the full allocated size. The guest OS reports 1.5 TB of used space because it sees the logical file system usage, but the datastore only shows 800 GB consumed because that is the actual physical storage used by the written blocks.

Exam trap

The trap here is that candidates may confuse guest OS reported usage with datastore consumption, not realizing that thin provisioning only allocates storage for blocks actually written, leading them to incorrectly suspect snapshots or defragmentation issues.

How to eliminate wrong answers

Option A is wrong because defragmentation reorganizes data within the guest OS but does not reclaim space on the datastore for thin-provisioned disks; it may even increase fragmentation of the underlying VMDK. Option B is wrong because a consolidating snapshot would temporarily increase storage usage, not decrease it, and the scenario describes a lower datastore consumption, not higher. Option C is wrong because a thick-provisioned lazy zeroed disk allocates all space at creation (2 TB) and does not show only 800 GB consumed; it would show the full 2 TB allocated on the datastore regardless of guest usage.

Full explanation →
247
MCQeasy

A vSphere administrator notices that a cluster managed by vSphere Lifecycle Manager image has drifted from the desired state. The administrator wants to correct the drift. What is the recommended action?

A.Run a compliance check and remediate any non-compliant hosts.
B.Remove the cluster image and reattach baselines.
C.Rebuild the image from scratch and reapply.
D.Use vSphere Lifecycle Manager to remediate the cluster.
AnswerD

Remediation applies the desired state image to correct drift.

Why this answer

The recommended action to correct drift in a vSphere Lifecycle Manager image-managed cluster is to use vLCM to remediate the cluster (Option D). The remediate function automatically runs a compliance check and applies any needed updates to restore the desired state. While Option A also includes remediation after a compliance check, the most direct and recommended approach is the single-step remediation.

Option B is incorrect because removing the cluster image would abandon image-based management, requiring a migration to baselines. Option C is incorrect because rebuilding the image is unnecessary; remediation can correct drift without rebuilding.

Full explanation →
248
MCQmedium

A company has a vSphere 7 cluster with 6 hosts, each with 2 sockets (16 cores per socket, hyperthreading enabled) and 1 TB RAM. The cluster uses DRS with a migration threshold of 4 (moderate). A single VM runs a latency-sensitive trading platform with 12 vCPUs and 256 GB RAM. During market hours, the administrator notices that the VM's CPU ready time spikes to 15%, and the application reports high response times. The administrator runs esxtop on the host and sees the following: %RDY for the VM is 15%, %CSTP is low, and the host's overall CPU utilization is 60%. The VM is on a host that also has 5 other VMs with smaller resource footprints. The administrator wants to minimize disruption while improving performance. Which action should the administrator take first?

A.Manually migrate the VM to a host with fewer running VMs.
B.Increase the VM's CPU reservations to guarantee CPU cycles.
C.Reduce the VM's vCPU count from 12 to 8.
D.Configure the VM's NUMA node preference to use a single NUMA node.
AnswerD

This reduces remote memory access, which is a common cause of high ready time in large VMs.

Why this answer

Trading VMs with high vCPU counts often benefit from NUMA-awareness. The host has 2 NUMA nodes (one per socket). With 12 vCPUs, the VM likely spans both nodes, causing remote memory access.

By setting the VM to prefer one NUMA node (or limiting vCPUs to 8), performance improves. Option D is the most effective immediate step. Option A may cause excessive vMotion.

Option B might not address the root cause. Option C would reduce parallelism and might not help if the application is multithreaded.

Full explanation →
249
MCQeasy

A company with a small vSphere environment has a single vCenter Server managing three ESXi hosts. The hosts are running ESXi 6.7 and the company wants to upgrade to ESXi 7.0. The vCenter Server is version 6.7 and runs on Windows. The administrator plans to use vSphere Update Manager (VUM) for the upgrade. The administrator attaches a baseline of ESXi 7.0 to the cluster and starts remediation. The remediation fails on all hosts with an error stating that the upgrade cannot be performed from a host that is part of a cluster. What is the likely issue?

A.The ESXi hosts are part of a cluster; VUM cannot remediate clustered hosts.
B.vSphere DRS is not enabled on the cluster.
C.The vCenter Server must be upgraded to version 7.0 before upgrading the ESXi hosts.
D.The hosts are not in maintenance mode; put them in maintenance mode and retry.
AnswerC

vCenter must be at or above the target ESXi version to manage upgrades.

Why this answer

VSphere Update Manager (VUM) requires the vCenter Server version to be equal to or higher than the ESXi version being applied. Since the vCenter Server is still running version 6.7, it cannot orchestrate an upgrade to ESXi 7.0. The vCenter Server must first be upgraded to version 7.0 before any ESXi 7.0 baseline can be attached and remediated against the hosts.

Exam trap

The trap here is that candidates assume VUM can upgrade ESXi hosts independently of the vCenter Server version, but VMware enforces a strict version dependency where the vCenter Server must be at the same or higher version than the ESXi hosts being upgraded.

How to eliminate wrong answers

Option A is wrong because VUM can remediate clustered hosts; in fact, it is designed to handle clusters by leveraging DRS and HA settings to orchestrate rolling upgrades. Option B is wrong because DRS is not a prerequisite for VUM remediation; while DRS helps automate host evacuation, VUM can still remediate hosts in a cluster without DRS by manually placing hosts into maintenance mode. Option D is wrong because VUM automatically places hosts into maintenance mode during remediation; the error message specifically states the upgrade cannot be performed from a host that is part of a cluster, not that maintenance mode is missing.

Full explanation →
250
MCQhard

A company has a vSphere cluster with 8 ESXi 7.0 U3 hosts managed by vCenter Server 7.0 U3. The administrator wants to upgrade the cluster to ESXi 8.0 U1 using vLCM. The administrator has already upgraded the vCenter Server to 8.0 U1 and enabled vLCM on the cluster. The desired image is set to ESXi 8.0 U1 with no additional VIBs. However, when attempting to remediate, the first host fails with error: 'Failed to remediate host: The host does not support the selected image'. The other hosts are still pending. The administrator checks the host hardware and confirms it is on the HCL for ESXi 8.0. What is the most likely cause?

A.The host firmware is not compatible with the desired image and HSM is not configured.
B.The host was not put into maintenance mode before remediation.
C.The host was already upgraded to ESXi 8.0 U1, causing a conflict.
D.The vCenter Server version is not compatible with the host.
AnswerA

If firmware is not compatible and no HSM is configured, vLCM may prevent remediation.

Why this answer

The error 'The host does not support the selected image' typically indicates a hardware compatibility issue that vLCM cannot resolve without Hardware Support Manager (HSM) configured. Even if the host is on the HCL, the firmware version may not meet the requirements for ESXi 8.0 U1, and vLCM uses HSM to validate and remediate firmware as part of the image compliance process. Without HSM, vLCM cannot ensure the firmware is compatible, leading to the remediation failure.

Exam trap

The trap here is that candidates assume HCL compliance alone guarantees compatibility, but vLCM requires HSM to enforce firmware-level compliance, and the error message is often misinterpreted as a general hardware or version mismatch.

How to eliminate wrong answers

Option B is wrong because vLCM automatically places hosts into maintenance mode during remediation if not already in that state, so this would not cause the specific error. Option C is wrong because if the host were already upgraded to ESXi 8.0 U1, vLCM would detect compliance and not attempt remediation, or would show a different error; the error message explicitly states the host does not support the image, not a version conflict. Option D is wrong because the vCenter Server was already upgraded to 8.0 U1, which is compatible with ESXi 8.0 U1 hosts; the error is host-specific, not vCenter-related.

Full explanation →
251
MCQmedium

An organization is deploying vCenter Server in a DMZ. Which security best practice should the administrator implement to protect the vCenter Server appliance?

A.Join the vCenter Server to the corporate Active Directory domain
B.Enable SSH for remote administration
C.Enable FIPS 140-2 mode on the vCenter Server appliance
D.Delete the root user account
AnswerC

FIPS mode enforces strong cryptography.

Why this answer

Enable FIPS 140-2 mode on the vCenter Server appliance. When deploying vCenter Server in a DMZ, enabling FIPS 140-2 mode ensures that the appliance uses only FIPS-approved cryptographic algorithms, enhancing security and compliance. Option A is incorrect because joining the vCenter Server to the corporate Active Directory domain exposes it to domain-related attacks and increases the attack surface in the DMZ.

Option B is incorrect because enabling SSH for remote administration is a security risk; SSH should be disabled unless absolutely necessary, and even then, it should be tightly controlled. Option D is incorrect because deleting the root user account is not a best practice; the root account is essential for system recovery and maintenance, and the recommended approach is to limit its use and enforce strong passwords.

Full explanation →
252
MCQmedium

An administrator is troubleshooting a VM that is running slowly. The VM has 4 vCPUs and 16 GB of memory. The host has 2 physical CPUs with 10 cores each, hyper-threading enabled. The administrator runs esxtop and sees that %RDY for the VM is consistently above 15%. Which action would most likely reduce the ready time?

A.Increase the CPU shares for the VM.
B.Increase the number of vCPUs to 8 to improve parallelism.
C.Increase the memory allocation to 32 GB.
D.Reduce the number of vCPUs to 2 if the workload does not require 4.
AnswerD

Reducing the number of vCPUs to match the workload's parallelism reduces co-scheduling overhead and thus lowers ready time, making this the correct action.

Why this answer

A %RDY value consistently above 15% indicates the VM is ready to run but is waiting for CPU scheduling time on the host. With 4 vCPUs on a host that has 20 logical CPUs (2 sockets × 10 cores × 2 threads), the VM is likely over-provisioned relative to its workload needs, causing co-scheduling contention. Reducing the number of vCPUs to 2 decreases the co-scheduling demands and reduces ready time, as the VM will require fewer physical CPUs to be available simultaneously.

Therefore, option D is correct. Increasing CPU shares (option A) would not help if the host is saturated, adding more vCPUs (option B) would worsen contention, and increasing memory (option C) does not address CPU ready time.

Exam trap

The trap here is that candidates often assume adding more vCPUs will improve performance, but in reality, over-provisioning vCPUs increases co-scheduling overhead and ready time, making reduction the correct fix.

How to eliminate wrong answers

Option A is wrong because increasing CPU shares only affects relative priority during contention, not the underlying scheduling contention caused by too many vCPUs; it does not reduce %RDY. Option B is wrong because increasing vCPUs to 8 would worsen co-scheduling overhead and likely increase %RDY, not reduce it. Option C is wrong because memory allocation does not directly affect CPU ready time; %RDY is a CPU scheduling metric, not a memory metric.

Full explanation →
253
MCQmedium

A vSphere administrator is troubleshooting connectivity issues for a virtual machine on a standard switch. The VM is configured with VLAN 100, but cannot ping the default gateway. The VMkernel port on the host is on VLAN 200. The physical switch port connected to the host is configured as a trunk port allowing VLANs 100 and 200. Which action should the administrator take to resolve the issue?

A.Enable promiscuous mode on the VM port group.
B.Change the physical switch port to access mode on VLAN 100.
C.Ensure the VM port group is set to VLAN 100.
D.Set the VM port group VLAN to 4095.
AnswerC

The VM port group must match the VM's VLAN.

Why this answer

The VM is configured with VLAN 100, and the physical switch trunk port already allows VLAN 100 and 200. The VMkernel port on VLAN 200 is working, so the issue is that the VM port group must be explicitly set to VLAN 100 to tag egress frames with VLAN 100 and to accept only VLAN 100-tagged frames on ingress. Option C ensures the standard switch port group applies the correct VLAN ID, matching the physical switch trunk configuration.

Exam trap

The trap here is that candidates often confuse the VM port group VLAN setting with the VMkernel port VLAN, or think that a trunk port on the physical switch automatically passes all VLANs to the VM without requiring the port group to be set to a specific VLAN ID.

How to eliminate wrong answers

Option A is wrong because enabling promiscuous mode on the VM port group allows the VM to see all traffic on the switch, but it does not affect VLAN tagging or connectivity to the default gateway; it is a security setting unrelated to VLAN mismatch. Option B is wrong because changing the physical switch port to access mode on VLAN 100 would strip VLAN tags and break the VMkernel port's connectivity on VLAN 200, which is required for management and other functions; the trunk port is correctly configured. Option D is wrong because setting the VM port group VLAN to 4095 enables VLAN trunking to the VM (allowing the VM to handle its own VLAN tags), but the VM is not configured to tag frames internally; this would cause the VM to send untagged frames that the physical switch would drop or misclassify.

Full explanation →
254
Multi-Selecthard

A company is implementing vSphere with Tanzu for containerized workloads. To secure the workload management plane, which THREE security features should be configured? (Choose three.)

Select 3 answers
A.Pod Security Policies
B.vCenter Single Sign-On
C.Content Library
D.vSphere Native Key Provider
E.Network Policies
AnswersA, D, E

Enforces security standards for pods.

Why this answer

The correct answers are A, D, and E. Pod Security Policies (A) enforce security standards for pods in Kubernetes clusters. vSphere Native Key Provider (D) enables encryption for Kubernetes objects, securing data at rest. Network Policies (E) control traffic between pods, providing network segmentation.

Option B (vCenter Single Sign-On) is not a new security feature specific to vSphere with Tanzu; it is already part of vCenter authentication. Option C (Content Library) is used for content management, not security.

Full explanation →
255
Multi-Selectmedium

Which two prerequisites must be met before enabling vLCM on a vSphere cluster? (Choose two.)

Select 2 answers
A.VMware Tools must be installed on all VMs.
B.vSAN must be enabled on the cluster.
C.vCenter Server must be version 7.0 or later.
D.NSX must be installed and configured.
E.ESXi hosts must be version 7.0 or later.
AnswersC, E

vLCM was introduced in vSphere 7.0.

Why this answer

Options C and E are correct prerequisites for enabling vLCM (vSphere Lifecycle Manager) on a cluster. vLCM requires vCenter Server version 7.0 or later (option C) to manage the lifecycle, and ESXi hosts must also be version 7.0 or later (option E) to be compatible. The other options are not prerequisites: VMware Tools (A) is for guest OS, vSAN (B) is a storage option, and NSX (D) is for networking.

Full explanation →
256
MCQhard

A vSphere environment uses Active Directory for authentication. The administrator notices that users from a specific AD group cannot log in to the vCenter Server, although other AD users can. The group is added to vCenter Server with the correct permissions. What is the most likely cause?

A.The users are not members of the vCenter Single Sign-On domain
B.The user accounts have expired passwords
C.The group is nested within another group
D.The domain of the group is not configured as an identity source in vCenter Single Sign-On
AnswerD

Without the identity source, authentication fails.

Why this answer

The most likely cause is that the domain of the group is not configured as an identity source in vCenter Single Sign-On. Even if the group is added with correct permissions in vCenter Server, vCenter SSO must be able to authenticate users against the domain. Without the domain listed as an identity source, vCenter cannot validate the credentials of users from that group, causing authentication failures for all users in that domain.

Exam trap

The trap here is that candidates often assume that adding a group to vCenter permissions is sufficient for authentication, overlooking the prerequisite that the group's domain must first be registered as an identity source in vCenter Single Sign-On.

How to eliminate wrong answers

Option A is wrong because vCenter Single Sign-On domains are not the same as Active Directory domains; users are not members of the SSO domain unless they are explicitly created there, and the question states the users are from an AD group, meaning they are AD users, not SSO domain users. Option B is wrong because expired passwords would affect individual users, not an entire group, and the symptom is that all users from the specific group cannot log in, which points to a domain-level issue rather than individual password expiration. Option C is wrong because nested groups are fully supported in Active Directory and vCenter Server; if the group is nested within another group, the permissions would still apply as long as the parent group has the correct permissions, and this would not cause a complete authentication failure for all users in the group.

Full explanation →
257
MCQeasy

An ESXi host is connected to an iSCSI storage array using software iSCSI initiator. The administrator has configured two NICs for iSCSI traffic. During setup, the administrator selects 'Round Robin' as the path policy for the storage device. What is the benefit of this path policy?

A.It uses a single path until failure, then switches to another
B.It minimizes latency by always using the path with lowest latency
C.It load balances I/O across all active paths
D.It provides the highest performance for all workloads
AnswerC

Round Robin alternates I/O requests among paths.

Why this answer

The Round Robin path policy distributes I/O requests evenly across all active paths to the storage device. This improves load balancing by preventing any single path from becoming a bottleneck, which is especially beneficial in environments with multiple NICs configured for iSCSI traffic.

Full explanation →
258
MCQmedium

An administrator sees the above output from a vLCM pre-check prior to remediation. The administrator wants to remediate all hosts in the cluster with the image. What should the administrator do first?

A.Remove the incompatible host from the cluster.
B.Change the image firmware requirement to false.
C.Add the required network card driver component to the image.
D.Reboot the host esx-02 to apply a firmware update.
AnswerC

Adding the driver to the image will make the host compatible.

Why this answer

The vLCM pre-check output indicates that the host esx-02 is incompatible due to a missing network card driver. To remediate all hosts with the image, the administrator must add the required driver component to the image. Option A is incorrect because removing the host does not address the missing driver; it only avoids the issue.

Option B is incorrect because the firmware requirement is not the problem. Option D is incorrect because the host does not need a firmware update, and rebooting will not add the missing driver.

Full explanation →
259
Multi-Selecthard

Which THREE actions can be performed on a VMFS datastore without unmounting it or putting the ESXi host into maintenance mode?

Select 3 answers
A.Remove the datastore from the host's inventory.
B.Upgrade the datastore from VMFS5 to VMFS6.
C.Add a new extent to the datastore from a different LUN.
D.Increase the size of the datastore by expanding an existing extent.
E.Rename the datastore.
AnswersA, D, E

Removing from inventory is possible if no VMs are registered on it.

Why this answer

Removing a datastore from the host's inventory simply detaches the datastore object from the ESXi host's configuration without affecting the underlying LUN or requiring the host to enter maintenance mode. This operation only modifies the host's metadata, not the storage device itself, so it can be performed while VMs are running on other datastores.

Exam trap

The trap here is that candidates often assume any storage-level operation requires maintenance mode or unmounting, but VMware specifically allows certain non-disruptive metadata changes like removal from inventory and renaming while the datastore remains fully accessible to running VMs.

Full explanation →
260
MCQeasy

An administrator needs to create a datastore cluster for a set of VMs that require high availability. The VMs should be automatically balanced across datastores based on I/O latency. Which feature must be enabled on the datastore cluster?

A.Storage I/O Control (SIOC) on each datastore.
B.vSphere HA for the datastore cluster.
C.Storage DRS without I/O metric, using space only.
D.Storage DRS with I/O metric enabled.
AnswerD

Correct: Storage DRS with I/O metric can balance VMs based on storage I/O latency.

Why this answer

Storage DRS with I/O metric enabled allows automatic balancing based on I/O latency. Option A is incorrect because SIOC is a per-datastore feature for controlling I/O shares and limits, not for balancing across datastores in a cluster. Option B is incorrect because vSphere HA provides high availability for VMs in case of host failure, not storage balancing.

Option C is incorrect because Storage DRS without the I/O metric uses only space capacity to balance VMs, not I/O latency. Option D is correct because Storage DRS with the I/O metric enables I/O latency-based balancing across datastores in the cluster.

Full explanation →
261
MCQhard

A vSphere administrator manages a cluster of 50 ESXi hosts using vLCM with image-based management. The cluster includes hosts from two different hardware vendors. The administrator needs to ensure firmware updates are consistently applied across all hosts. What is the best practice for this scenario?

A.Use baseline groups to manage firmware separately.
B.Create a single cluster image that includes firmware for both vendors.
C.Create separate cluster images for each hardware vendor and apply to respective hosts.
D.Manually update firmware using vendor tools, then use vLCM for ESXi updates.
AnswerC

vLCM supports multiple images; each hardware vendor needs its own image with correct firmware.

Why this answer

Different hardware vendors require different firmware, and vLCM image-based management supports creating separate cluster images per hardware type to ensure the correct firmware is applied to each host. Option A is wrong because baseline groups are deprecated and not the best practice for firmware updates. Option B is wrong because a single cluster image cannot contain multiple firmware sets for different vendors.

Option D is wrong because manually updating firmware with vendor tools is not standardized and defeats the purpose of centralized lifecycle management via vLCM.

Full explanation →
262
MCQhard

A vSphere administrator is preparing for a PCI DSS audit. The auditor requires that all virtual machine disks be encrypted at rest. The environment uses vSAN with storage policies. Which storage policy-based management (SPBM) rule should be applied to ensure encryption?

A.Set the rule 'EncryptionEnabled' to 'True'.
B.Set the rule 'SPBM.Encryption' to 'Enabled'.
C.Set the rule 'VSAN.encryption' to 'Required'.
D.Set the rule 'VSAN.encryption' to 'Yes'.
AnswerD

This is the correct SPBM rule to enable vSAN encryption for a VM storage policy.

Why this answer

For vSAN encryption at rest, the storage policy rule is 'VSAN.encryption' and must be set to 'Yes' to enable encryption. Option A is incorrect because 'EncryptionEnabled' is not a valid vSAN SPBM rule. Option B is incorrect because 'SPBM.Encryption' is not a recognized rule name.

Option C is incorrect because while the rule name 'VSAN.encryption' is correct, the value should be 'Yes' rather than 'Required' to enable encryption.

Full explanation →
263
MCQmedium

A vSphere administrator is troubleshooting a VM that shows high 'CPU ready' time in vCenter performance charts. The host has 32 logical CPUs (16 cores with HT). Which tool should be used to identify which other VMs are contending for CPU resources?

A.vRealize Operations Manager
B.Resxtop with CPU view
C.Esxtop with CPU world view
D.vCenter Resource Allocation chart
AnswerC

Esxtop CPU world view lists all worlds (VMs, processes) with their ready time, allowing identification of CPU contention sources.

Why this answer

Esxtop with the CPU world view provides per-vCPU ready time and shows which worlds (VMs) are contending for CPU resources. Option A is incorrect: vRealize Operations Manager can show trends but not real-time per-world details. Option B is incorrect: resxtop is the remote version of esxtop, but the CPU view (summary) does not show per-world details; the CPU world view is needed.

Option D is incorrect: vCenter Resource Allocation chart shows aggregate VM ready time but not per-world contention.

Full explanation →
264
MCQhard

During a period of high network contention, management traffic is starved while NFS traffic gets the most bandwidth. Which configuration change would best address the issue?

A.Increase management shares to 100.
B.Increase the NFS limit to 1000 Mbps.
C.Set a reservation for management traffic.
D.Enable traffic shaping on the management port group.
E.Remove the reservation from vMotion.
AnswerC

Reservation guarantees minimum bandwidth for management.

Why this answer

Setting a reservation for management traffic guarantees a minimum amount of bandwidth, ensuring that management traffic does not get starved even under high network contention. Option A (increasing management shares) improves relative priority but does not guarantee bandwidth. Option B (increasing the NFS limit) would allocate more bandwidth to NFS, worsening the problem.

Option D (enabling traffic shaping on the management port group) affects only outbound traffic on a standard switch and does not use NIOC (Network I/O Control), which is needed for reservation-based guarantees. Option E (removing the vMotion reservation) may free up bandwidth but does not guarantee management traffic receives a minimum.

Full explanation →
265
MCQeasy

An administrator needs to upgrade the ESXi hosts in a cluster to version 7.0 U3. The administrator uses vSphere Lifecycle Manager (vLCM) with a cluster image. After staging the image on one host, the administrator attempts to remediate that host but gets an error that the host is not compliant. Which is the most likely reason?

A.The host is not in maintenance mode
B.The ESXi version difference between the image and the host is too large
C.The host does not have the required firmware version
D.The vCenter Server service needs to be restarted
AnswerA

Hosts must be in maintenance mode for remediation using cluster images.

Why this answer

When using vLCM with a cluster image, the host must be in maintenance mode before remediation can proceed. vLCM orchestrates the full software stack update, which requires the host to be evacuated of all running VMs to avoid disruption. The error 'host is not compliant' in this context indicates that the host is not in the required state to begin the remediation process, not that the image itself is invalid.

Exam trap

The trap here is that candidates often assume 'not compliant' refers to a mismatch between the image and the host's current software or firmware, when in fact it is a state-based compliance check requiring maintenance mode before any remediation can begin.

How to eliminate wrong answers

Option B is wrong because vLCM supports upgrading across multiple ESXi versions, including from 6.x to 7.0 U3, as long as the image is valid and the host meets the baseline requirements; the error message specifically states 'not compliant' rather than 'incompatible version'. Option C is wrong because firmware version requirements are validated during the compliance check, but a missing firmware version would produce a different error related to hardware compatibility, not a generic 'not compliant' status. Option D is wrong because restarting the vCenter Server service would not resolve a host compliance state issue; vLCM operations are independent of the vCenter service runtime and such a restart would not change the host's maintenance mode status.

Full explanation →
266
Multi-Selecthard

Which three are common causes for hosts in a vLCM-managed cluster to show non-compliant status? (Choose three.)

Select 3 answers
A.The cluster image has been updated but hosts have not been remediated.
B.A legacy baseline is attached to the host.
C.The host is not in maintenance mode.
D.The host's software image has drifted from the cluster image.
E.Network connectivity to the depot is intermittent, causing partial downloads.
AnswersA, D, E

If the image changes, hosts become non-compliant until remediated.

Why this answer

Options A, D, and E are correct because vLCM checks compliance against the cluster image; differences in image, network issues, or drift can cause non-compliance. Options B and C are not common causes; baselines are not used, and maintenance mode is not a compliance factor.

Full explanation →
267
MCQmedium

A VM with a large memory footprint is experiencing high swap rates. The host has free memory but the swap rate is still high. What is the most likely cause?

A.The VM's virtual machine swap file is on a slow datastore.
B.The VM's memory limit is set too low.
C.The host is using software iSCSI causing high latency.
D.The VM's memory reservation is set too high.
AnswerB

A low memory limit restricts the VM's memory usage, causing the guest OS to swap.

Why this answer

High swap rates despite available host memory indicate the VM is hitting a configured limit, not physical memory shortage. The memory limit caps the amount of host physical memory the VM can consume; if the guest requires more, it must swap. Option B is correct.

Option A (slow datastore for swap file) could worsen swap performance but does not cause swapping if host memory is free. Option C (software iSCSI latency) is unrelated to memory swapping. Option D (memory reservation set too high) would guarantee memory, not cause swapping; in fact, high reservation reduces swapping likelihood.

Full explanation →
268
Multi-Selecteasy

An administrator is troubleshooting performance issues on a vSphere cluster. Which TWO metrics should be monitored to identify CPU ready time contention?

Select 2 answers
A.Disk Kernel Latency
B.Memory Swap In Rate
C.Co-Stop
D.Network Packet Drop Rate
E.%RDY (CPU Ready)
AnswersC, E

Measures time vCPUs are co-scheduled but waiting due to HT.

Why this answer

CPU ready time contention occurs when a virtual machine is ready to execute instructions but the ESXi host's CPU scheduler cannot immediately allocate physical CPU cycles. The %RDY metric directly measures the percentage of time a VM is waiting to be scheduled on a physical CPU, while Co-Stop specifically tracks time lost when vCPUs in a single VM are forcibly co-scheduled and then descheduled due to contention on the same physical core. Both metrics are primary indicators of CPU scheduling pressure.

Exam trap

The trap here is that candidates confuse CPU ready time with memory or storage metrics, especially since high CPU ready time can manifest as general VM slowness, leading them to incorrectly select Disk Kernel Latency or Memory Swap In Rate instead of the correct CPU-specific counters.

Full explanation →
269
MCQmedium

An organization is upgrading from vSphere 7.0 Update 3 to vSphere 8.0. The current environment uses legacy baselines for patching. They want to move to vLCM. What must the administrator do to enable vLCM for the existing clusters?

A.Upgrade all ESXi hosts to vSphere 8 before enabling vLCM.
B.Create a new cluster and migrate hosts to it.
C.Remove all legacy baseline attachments from the cluster before enabling vLCM.
D.Enable vLCM on the cluster directly; it is backward compatible.
AnswerC

vLCM requires that no legacy baselines are attached to the cluster.

Why this answer

VLCM cannot be enabled on a cluster that has legacy baseline attachments; all baseline attachments must be removed first. Option A is incorrect because while vCenter must be upgraded to vSphere 8, ESXi hosts can be upgraded after enabling vLCM. Option B is unnecessary; existing clusters can be used once baselines are removed.

Option D is incorrect because vLCM is not backward compatible with legacy baselines.

Full explanation →
270
MCQeasy

What is the default block size of a VMFS5 datastore?

A.1 MB
B.8 MB
C.2 MB
D.4 MB
AnswerA

The default block size for VMFS5 is 1 MB.

Why this answer

VMFS5 uses a default block size of 1 MB. Larger block sizes are available but not default.

Full explanation →
271
MCQhard

An administrator is designing a new vSphere cluster for a mission-critical application that requires extremely low network latency between VMs within the same cluster. The cluster will use vSphere vMotion for maintenance. Which network configuration best meets these requirements?

A.Create separate standard switches for VM traffic and management.
B.Enable SR-IOV on the physical NICs and assign virtual functions to VMs.
C.Configure a distributed switch with jumbo frames and a dedicated VLAN for VM traffic.
D.Use a single vSphere Standard Switch for all traffic.
AnswerC

Distributed switch provides QoS, jumbo frames, and performance isolation.

Why this answer

A distributed switch with jumbo frames (MTU 9000) reduces CPU overhead and improves throughput for latency-sensitive VM traffic, while a dedicated VLAN isolates VM traffic from management and vMotion, minimizing contention. Jumbo frames allow larger payloads per packet, reducing the number of packets and interrupt processing, which is critical for low-latency applications. The distributed switch also provides consistent network policy across hosts, essential for vMotion compatibility.

Exam trap

The trap here is that candidates often choose SR-IOV (Option B) because it offers the lowest raw latency, but they overlook that SR-IOV disables vMotion, which is explicitly required in the question for maintenance, making the distributed switch with jumbo frames the correct balance of performance and operational flexibility.

How to eliminate wrong answers

Option A is wrong because separate standard switches for VM and management traffic do not inherently reduce latency; they only provide isolation, and standard switches lack advanced features like jumbo frames and load balancing that are needed for low-latency workloads. Option B is wrong because SR-IOV bypasses the hypervisor’s virtual switch, which can reduce latency but breaks vMotion compatibility (VM migration requires the virtual switch to remap network state), making it unsuitable for a cluster that uses vMotion for maintenance. Option D is wrong because a single standard switch for all traffic (VM, management, vMotion) causes contention and lacks jumbo frame support, leading to higher latency and packet drops under load.

Full explanation →
272
Multi-Selecthard

Which THREE are valid methods to isolate and secure management traffic on a vSphere Distributed Switch? (Choose three.)

Select 3 answers
A.Enable Route based on IP hash on the management port group.
B.Assign a specific VLAN ID to the management port group.
C.Use Private VLANs on the management port group.
D.Configure the ESXi firewall to restrict management access.
E.Create a dedicated VMkernel port group for management.
AnswersB, D, E

VLANs provide isolation.

Why this answer

Assigning a specific VLAN ID to the management port group isolates management traffic at Layer 2 by tagging frames with a unique VLAN identifier. This prevents unauthorized access from other VLANs and ensures that management traffic is logically separated from other network traffic on the same vSphere Distributed Switch.

Exam trap

The trap here is that candidates often confuse load-balancing policies (like Route based on IP hash) with security features, or they overcomplicate isolation by choosing Private VLANs instead of the simpler and more reliable VLAN assignment.

Full explanation →
273
MCQhard

A vSphere administrator manages a cluster for a VDI workload using VMware Horizon. Each virtual desktop runs a GPU-intensive application and is assigned a vGPU profile (profile: grid_m60-1q) with 4 vCPUs and 8 GB RAM. The ESXi hosts are equipped with NVIDIA M60 GPUs (each host has 2 GPUs, each with 2 physical GPUs? Actually M60 has 2 GPUs on one card, but let's keep generic). The administrator receives complaints of poor graphics performance and high latency. The administrator runs esxtop and observes that the total CPU utilization for the hosts is low (average 30%), but the GPU memory utilization is consistently above 95%, and the vGPU scheduler reports high 'GPU mem' wait times. The number of VMs per host is within the GPU profile limits. What is the most effective way to improve performance?

A.Change the vGPU profile to a larger profile (e.g., grid_m60-2q) for all VMs.
B.Increase the CPU reservation for each VDI VM.
C.Reduce the number of vCPUs per VM from 4 to 2.
D.Upgrade the hosts to support GPUs with larger memory capacity or add additional GPUs to each host.
AnswerD

Increasing GPU memory capacity directly resolves the memory contention bottleneck.

Why this answer

The bottleneck is GPU memory, not CPU. The most effective solution is to upgrade to GPUs with higher memory capacity or add more GPUs. Option D directly addresses this.

Option A would increase GPU memory per VM but reduce the total number of VMs, possibly not needed. Option B might not help. Option C could reduce GPU load but at the cost of user experience.

Full explanation →
274
MCQmedium

Refer to the exhibit. What is the cause of the compliance failure?

A.The vLCM service is down.
B.The host is missing a required driver.
C.The vLCM depot does not contain the required component.
D.The host has an incompatible component.
AnswerC

The error states the component is not available from any depot.

Why this answer

The compliance failure is due to the vLCM depot not containing the required component for the host. This is indicated by the error message that the component is not available from any configured depot. Option A is incorrect because the vLCM service being down would typically show a different error.

Option B is incorrect because a missing driver would be a specific component mismatch, but the error here is about depot availability. Option D is incorrect because an incompatible component would show a different status, while here the issue is that the component is not found in the depot.

Full explanation →
275
MCQmedium

A company has multiple clusters with different hardware. They want to create separate vLCM images for each cluster. What is the best practice?

A.Create a single image that includes all possible components.
B.Use baseline groups instead of images.
C.Create separate images for each cluster tailored to their hardware.
D.Use Auto Deploy with a single image.
AnswerC

Each cluster's specific add-ons and firmware can be included per image.

Why this answer

Each cluster may have unique hardware requirements, and vLCM allows creating separate images per cluster to ensure compatibility. Option A would include unnecessary components and may cause compliance issues; Option B uses deprecated baseline groups; Option D is not the best practice for hardware-specific clusters.

Full explanation →
276
MCQeasy

A vSphere cluster has DRS enabled and hosts with unbalanced resource usage. Which DRS feature automatically migrates VMs to balance CPU and memory loads across hosts?

A.High Availability (HA)
B.Distributed Resource Scheduler (DRS)
C.Enhanced vMotion Compatibility (EVC)
D.Storage I/O Control (SIOC)
AnswerB

DRS continuously monitors and balances resource usage by migrating VMs.

Why this answer

DRS (Distributed Resource Scheduler) uses vMotion to migrate VMs based on resource utilization thresholds, balancing workloads across hosts. HA provides failover, EVC ensures compatibility, and SIOC manages storage I/O.

Full explanation →
277
Multi-Selectmedium

Which TWO conditions are required to use vLCM for firmware management? (Select TWO.)

Select 2 answers
A.Hardware support manager (HSM) installed for each vendor
B.vCenter Server 7.0 or later
C.All hosts in the cluster must be identical hardware
D.Hosts must be in a fully automated DRS cluster
E.vLCM must be enabled for the cluster
AnswersA, E

An HSM is required to provide firmware catalogs and apply updates via vLCM.

Why this answer

To manage firmware via vLCM, two conditions are required: a Hardware Support Manager (HSM) must be installed for each vendor (option A), and vLCM must be enabled for the cluster (option E). While vCenter Server 7.0 or later is a general prerequisite for vLCM, it is not a condition specific to firmware management. Options B and D are incorrect because identical hardware or a fully automated DRS cluster are not requirements for firmware management with vLCM.

Full explanation →
278
MCQhard

An administrator has a vSphere 7 cluster with vMotion enabled. They need to perform a vMotion of a VM from host1 to host2 while preserving the VM's memory state. The VM has a PCIe passthrough device assigned (NVMe controller). What should the administrator do before initiating the vMotion?

A.Use shared storage for the VM
B.Remove the PCIe passthrough device from the VM
C.Enable Enhanced vMotion Compatibility (EVC) on the cluster
D.Upgrade to vSphere 8
AnswerB

VMs with passthrough devices cannot be vMotioned; the device must be removed first.

Why this answer

vMotion does not support VMs with PCIe passthrough devices because the device is tied to the physical host. The device must be removed or the VM must be powered off.

Full explanation →
279
MCQmedium

A vSphere administrator is troubleshooting a permissions issue. A user named 'backup_admin' is a member of the AD group 'Backup Operators'. The group has been assigned a custom role at the datacenter level with the following privileges: Virtual machine > Provisioning > Create snapshot, Virtual machine > State > Create, Revert, Remove snapshot. The user can see all VMs in the 'Production' folder but cannot see VMs in the 'Development' folder, even though both folders are under the same datacenter. The administrator confirms that no other permissions exist for this user or group, and propagation is enabled. What is the most likely reason the user cannot see the Development VMs?

A.The user's permissions are inherited from a different group that denies access.
B.The user's group lacks the 'System > View' privilege on the Development folder.
C.The user's role does not include the 'Folder > Create' privilege.
D.The user's group has been assigned 'No Access' on the Development folder.
AnswerB

The user cannot see objects if they don't have the View privilege on the parent folder.

Why this answer

To see objects in vCenter, a user must have the 'System > View' privilege on the parent folder. The user can see VMs in the Production folder because that folder likely inherits the 'System > View' privilege or has it explicitly. However, the Development folder does not have the 'System > View' privilege assigned to the user or group, so the VMs inside are invisible.

Option A is incorrect because there is no evidence of another group denying access, and propagation is enabled. Option C is incorrect because 'Folder > Create' is not required to view existing folders or VMs. Option D is incorrect because if 'No Access' were assigned, the user would not see any objects at all; the issue is specifically the lack of 'View' on the Development folder.

Full explanation →
280
MCQhard

An administrator is troubleshooting a performance issue where a VM is not receiving the expected CPU resources. The VM is a member of a resource pool with a CPU Shares value of 2000. The host has two other resource pools: one with 1000 shares and another with 500 shares. All resource pools are competing for CPU. The VM's reservation is set to 2 GHz, and the host has 8 GHz available. What is the minimum CPU allocation the VM is guaranteed?

A.4 GHz (based on share ratio)
B.2 GHz
C.8 GHz (all host CPU)
D.0 GHz (no guarantee without reservation)
AnswerB

The reservation guarantees 2 GHz regardless of other resource pool shares.

Why this answer

The VM's reservation of 2 GHz guarantees that the host will reserve at least that amount of CPU capacity for the VM, regardless of contention or share values. Shares only affect the distribution of excess resources beyond reservations, not the guaranteed minimum. Since the host has 8 GHz available, the reservation is fully satisfiable, so the VM is guaranteed 2 GHz.

Exam trap

The trap here is that candidates often confuse shares with reservations, assuming that a higher share value guarantees more CPU, when in fact only a reservation provides a hard guarantee, and shares only affect the distribution of unused capacity.

How to eliminate wrong answers

Option A is wrong because it incorrectly applies the share ratio (2000:1000:500 = 4:2:1) to the total host CPU, but shares only determine proportional allocation of unreserved resources, not guaranteed minimums. Option C is wrong because a reservation of 2 GHz does not guarantee all 8 GHz of host CPU; the VM is limited to its reservation unless additional resources are available and shares allow it. Option D is wrong because a reservation explicitly provides a guaranteed minimum allocation; without a reservation, the VM would have no guarantee, but here a reservation is set.

Full explanation →
281
MCQmedium

An administrator is adding an ESXi host to vCenter Server and is prompted to verify the host's certificate thumbprint. The administrator compares it to the output above and it matches. However, the add operation fails with a certificate verification error. What else could be the issue?

A.The vCenter Server's certificate is invalid
B.The certificate has expired
C.The certificate is not signed by a trusted Certificate Authority
D.The certificate common name does not match the hostname
AnswerD

If the certificate's CN does not match the host's FQDN, vCenter will reject the certificate during verification.

Why this answer

When adding an ESXi host to vCenter Server, the thumbprint verification ensures the host's certificate fingerprint matches what is expected, but it does not validate the certificate's subject attributes. If the certificate's Common Name (CN) does not match the ESXi host's FQDN or IP address used during the add operation, vCenter Server will reject the connection with a certificate verification error, even if the thumbprint is correct. This is because vCenter Server performs hostname verification as part of TLS/SSL certificate validation to prevent man-in-the-middle attacks.

Exam trap

The trap here is that candidates assume thumbprint verification alone guarantees certificate validity, overlooking that vCenter Server also performs hostname matching as part of TLS certificate validation.

How to eliminate wrong answers

Option A is wrong because the vCenter Server's certificate is not directly involved in the host certificate verification during the add operation; the error is about the ESXi host's certificate. Option B is wrong because an expired certificate would typically cause a different error (e.g., 'certificate has expired') and would not pass thumbprint verification if the thumbprint was generated from the current certificate. Option C is wrong because vCenter Server does not require the ESXi host's certificate to be signed by a trusted CA for thumbprint verification; it only checks the thumbprint match, and the error here is specifically about hostname mismatch, not trust chain issues.

Full explanation →
282
MCQhard

A vSAN cluster uses a storage policy with Primary Failures to Tolerate (PFTT) = 1 and Failure Tolerance Method = RAID-1 (Mirroring). What is the minimum number of hosts required to support this policy if each host contributes one disk group?

A.4
B.3
C.6
D.2
AnswerB

Correct: vSAN requires 3 hosts for RAID-1 with PFTT=1 (2 data copies + 1 witness).

Why this answer

For a vSAN cluster with PFTT=1 and RAID-1 mirroring, the minimum number of hosts required is 3. This ensures two copies of data (mirrors) and one witness component. A standard cluster with 2 hosts cannot support PFTT=1 because only two copies exist without a witness.

Options 4 and 6 exceed the minimum, so option B (3) is correct.

Full explanation →
283
MCQhard

An organization runs a multi-site vSphere environment with vCenter Server in linked mode across two data centers. The vCenter instances are version 7.0 U3. They plan to upgrade both vCenter Servers to 8.0 U2 and the ESXi hosts to 8.0. The administrator upgrades the first vCenter Server to 8.0 U2 successfully. Then, when attempting to upgrade the second vCenter Server, the upgrade wizard warns that the linked mode compatibility check has failed. The vCenter servers are in enhanced linked mode (ELM). What should the administrator do to resolve this issue?

A.Temporarily remove the second vCenter from the linked mode group and perform the upgrade, then reconnect.
B.Downgrade the first vCenter Server back to 7.0 U3 and then upgrade both together.
C.Use the vSphere Update Manager on the second vCenter to upgrade its own components.
D.Restart the vCenter Server services on both vCenter instances and retry the upgrade.
AnswerA

ELM requires same version; removing allows upgrade, then reconnecting after both are on same version.

Why this answer

In an Enhanced Linked Mode (ELM) group, all vCenter Server instances must run the same version. After upgrading the first vCenter to 8.0 U2, the second vCenter (still on 7.0 U3) cannot be upgraded because the compatibility check fails. The supported workaround is to temporarily remove the second vCenter from the ELM group, perform its upgrade, and then rejoin it to the group.

Option B is not recommended because downgrading the upgraded vCenter is unnecessary and disrupts the environment. Option C is incorrect because VMware Update Manager (VUM) is used for ESXi host upgrades, not for vCenter Server upgrades. Option D is incorrect because restarting services does not resolve version incompatibility in ELM.

Full explanation →
284
MCQeasy

An administrator needs to ensure that virtual machines can be migrated between ESXi hosts using vMotion. The virtual machines are connected to a standard vSwitch port group named 'Production'. What must be consistent across all hosts?

A.Port group name 'Production'
B.MTU size
C.Number of uplinks
D.Load balancing policy
AnswerA

Port group name must match for vMotion.

Why this answer

VMotion requires the same port group name on source and target host. Option B is incorrect because MTU may differ if not using jumbo frames. Option C is incorrect because number of uplinks can vary.

Option D is incorrect because load balancing policy does not affect vMotion compatibility.

Full explanation →
285
MCQmedium

An administrator is configuring a distributed switch and needs to ensure that all virtual machine traffic on a specific VLAN is isolated. The administrator creates a port group with VLAN ID 100. However, a security scanner reports that packets from this VLAN are appearing on other VLANs. Which security policy setting on the distributed switch should the administrator verify?

A.MAC address changes
B.Forged transmits
C.VLAN trunking
D.Promiscuous mode
AnswerC

VLAN trunking ensures proper tagging.

Why this answer

The VLAN trunking policy on a distributed switch controls whether a port group can pass multiple VLAN IDs (trunk mode) or is restricted to a single VLAN (access mode). When VLAN trunking is enabled, the port group may forward traffic from VLAN 100 onto other VLANs if the virtual switch is configured to allow it, breaking isolation. The administrator should verify that VLAN trunking is disabled (set to 'Reject') to ensure strict VLAN isolation.

Exam trap

The trap here is that candidates confuse VLAN trunking (which controls multi-VLAN forwarding) with promiscuous mode (which controls traffic visibility), leading them to incorrectly select promiscuous mode as the cause of VLAN leakage.

How to eliminate wrong answers

Option A is wrong because MAC address changes policy controls whether a virtual machine can change its MAC address, which is unrelated to VLAN traffic leaking between VLANs. Option B is wrong because forged transmits policy prevents a VM from sending frames with a source MAC address different from its own, which does not affect VLAN isolation. Option D is wrong because promiscuous mode allows a VM to see all traffic on the port group, but it does not cause traffic from one VLAN to appear on another VLAN.

Full explanation →
286
MCQmedium

An administrator manages a vSphere 7.0 U2 cluster with 20 hosts. The cluster uses vLCM image-based management and vSphere DRS. The administrator applies a new image with ESXi 7.0 U3 and additional driver VIBs. During remediation, one host fails to reboot after the upgrade. The host is now unresponsive via vCenter, but can be pinged. The administrator connects to the host's DCUI and sees a purple screen with a PSOD error referencing 'Unsupported VIB' and 'vmkcswap'. What is the most likely cause?

A.The vmkcswap VIB included in the image is not compatible with ESXi 7.0 U3.
B.The image did not include the necessary vmkcswap VIB.
C.The host has a hardware fault causing the PSOD.
D.The host's network configuration is incorrect for the new version.
AnswerA

VIBs must be validated for the target ESXi version; otherwise, they cause failures.

Why this answer

The PSOD error referencing 'Unsupported VIB' and 'vmkcswap' clearly indicates that the vmkcswap VIB included in the vLCM image is not compatible with ESXi 7.0 U3. vLCM applies images directly; if a VIB is unsupported, it can cause a failure during reboot. Option A is correct. Option B is incorrect because the image did include the vmkcswap VIB, but incompatibility caused the issue.

Option C is incorrect as no hardware fault is indicated. Option D is incorrect because network misconfiguration would not produce a PSOD referencing an unsupported VIB.

Full explanation →
287
Multi-Selecthard

Which TWO storage performance best practices should be followed when scaling a vSphere environment using shared storage? (Choose two.)

Select 2 answers
A.Use Raw Device Mapping in physical compatibility mode for virtual machines.
B.Enable Storage I/O Control (SIOC) on datastores to manage I/O latency.
C.Configure multiple storage paths with round-robin load balancing policy.
D.Deploy vSphere Flash Read Cache to reduce read latency.
E.Use VMFS-3 for large datastores to reduce seek time.
AnswersB, C

SIOC automatically manages storage queues to maintain latency thresholds.

Why this answer

Using multiple paths with round-robin load balancing improves throughput and redundancy. Storage I/O Control (SIOC) manages latency and prevents a single VM from monopolizing storage. VMFS-3 is outdated and should be avoided.

RDM in physical compatibility mode is rarely recommended. vSphere Flash Read Cache is deprecated.

Full explanation →
288
MCQeasy

An administrator is configuring multipathing for a Fibre Channel storage array. The administrator wants to maximize throughput by using all available paths. Which path selection policy should be chosen?

A.Fixed (VMW_PSP_FIXED)
B.Most Recently Used (VMW_PSP_MRU)
C.Vendor-specific (VMW_PSP_FIXED_AP)
D.Round Robin (VMW_PSP_RR)
AnswerD

Correct: Round Robin spreads I/O across all active paths, maximizing throughput.

Why this answer

Round Robin (VMW_PSP_RR) policy distributes I/O across all active paths, which maximizes throughput by utilizing all available paths. Option A (Fixed) uses a single preferred path and does not utilize all paths. Option B (MRU) uses one path until failure, then switches, so it does not use all paths simultaneously.

Option C (Vendor-specific) refers to a policy that may be provided by the storage vendor, but the given code VMW_PSP_FIXED_AP is actually a variant of the Fixed policy for Active/Passive arrays, so it also does not use all paths. Therefore, Round Robin is the correct choice.

Full explanation →
289
MCQeasy

A resource pool has the following configuration: CPU shares = 4000, reservation = 2 GHz, limit = 4 GHz. The parent cluster has 10 GHz total CPU capacity. Another resource pool contains VMs with higher shares. If both resource pools contend for CPU, which statement is TRUE?

A.The pool is guaranteed 4 GHz when contention occurs.
B.The reservation is ignored because a limit is set.
C.The pool will always receive exactly 4 GHz due to its shares.
D.The pool will receive at least 2 GHz and at most 4 GHz.
AnswerD

The reservation guarantees 2 GHz, and the limit caps at 4 GHz.

Why this answer

Shares determine relative priority when there is contention. With a limit of 4 GHz, the pool will not exceed that even if there are enough shares. The reservation ensures at least 2 GHz.

The pool with higher shares will get more than its proportion only if the pool with lower shares does not need its full entitlement.

Full explanation →
290
Multi-Selecteasy

An administrator is managing a vSphere cluster with vSphere Lifecycle Manager baselines. Which THREE are valid baseline types? (Choose three.)

Select 3 answers
A.Patch baseline
B.Firmware baseline
C.Upgrade baseline
D.Critical Hosts baseline
E.Extension baseline
AnswersA, C, E

Used for patches and updates.

Why this answer

The three valid baseline types in vSphere Lifecycle Manager are Patch, Upgrade, and Extension baselines. Patch baselines contain patches and bug fixes. Upgrade baselines handle version upgrades (e.g., ESXi host upgrade).

Extension baselines include VMware or third-party software extensions. Firmware baseline (B) is not a separate type; firmware updates are included as patches. Critical Hosts baseline (D) is not a standard baseline type in vSphere Lifecycle Manager.

Full explanation →
291
MCQmedium

A security administrator notices that a virtual machine (VM) running a legacy application is experiencing network connectivity issues after enabling Network I/O Control (NIOC) on the distributed switch. The VM is in a high-priority traffic class for management traffic. What is the most likely cause of the issue?

A.NIOC is blocking the VM's MAC address due to a security policy.
B.The VM is assigned to the management traffic class, but its traffic should be in a different class, causing bandwidth throttling.
C.The VM is using jumbo frames, which are not supported with NIOC.
D.The virtual switch has promiscuous mode enabled, which conflicts with NIOC.
AnswerB

NIOC classes limit bandwidth; wrong class assignment can restrict traffic.

Why this answer

NIOC traffic classes assign bandwidth shares and limits per class. If the VM's traffic (legacy application) is placed in the management traffic class, it will be subject to the bandwidth constraints of that class, which may cause connectivity issues if the application requires more bandwidth or different QoS. Option A is incorrect because NIOC does not block MAC addresses; MAC address blocking is a security policy on the distributed switch port group.

Option C is incorrect because NIOC supports jumbo frames; jumbo frames are configured at the VM or vSwitch level and do not conflict with NIOC. Option D is incorrect because promiscuous mode is a port group security setting unrelated to NIOC; NIOC manages bandwidth allocation and does not interfere with promiscuous mode.

Full explanation →
292
MCQmedium

A company runs a critical SQL Server VM on vSphere 7.0. The VM has a single 300 GB virtual disk on a VMFS6 datastore backed by a SAN with 8 Gbps Fibre Channel. The VM is configured with 16 vCPUs and 64 GB RAM. Recently, users have reported slow query performance. The administrator checks the datastore performance and sees average latency of 15 ms with peaks of 50 ms during business hours. The storage array has multiple paths to the ESXi host, and the current path policy is Fixed with a single active path. The administrator wants to improve storage performance with minimal cost. Which action should the administrator take first?

A.Change the path selection policy to Round Robin on the ESXi host.
B.Add a vSphere Flash Read Cache to the VM.
C.Upgrade the Fibre Channel infrastructure to 16 Gbps.
D.Convert the virtual disk to thin provisioning to reduce I/O.
AnswerA

Utilizes multiple paths, reducing latency.

Why this answer

The current Fixed path policy with a single active path underutilizes the available storage bandwidth, causing high latency during peak I/O. Changing to Round Robin (RR) distributes I/O across all available paths, reducing queue depth on any single path and lowering latency without any hardware cost. This is the most immediate and cost-effective fix for the observed performance issue.

Exam trap

The trap here is that candidates may assume hardware upgrades (like faster Fibre Channel) are the only solution to high latency, overlooking the fact that a misconfigured path policy can cause a single path to become a bottleneck even when multiple paths exist.

How to eliminate wrong answers

Option B is wrong because vSphere Flash Read Cache is deprecated in vSphere 7.0 and only accelerates read operations, not writes; the SQL Server workload likely involves significant write I/O, and adding it would not address the path-level bottleneck. Option C is wrong because upgrading the Fibre Channel infrastructure to 16 Gbps is a costly hardware change that does not fix the root cause—the single active path policy—and may not reduce latency if the bottleneck is path saturation rather than link speed. Option D is wrong because converting to thin provisioning does not improve I/O performance; it can actually increase latency due to on-demand allocation overhead and does not affect the path selection or queue depth issue.

Full explanation →
293
MCQmedium

An administrator needs to capture traffic from a specific virtual machine for troubleshooting. Which vSphere networking feature should be used?

A.Port mirroring on the VDS.
B.LLDP on the VDS.
C.NetFlow on the VDS.
D.Traffic shaping on the VDS.
AnswerA

Correct. Port mirroring copies traffic from a source to a destination port on a VDS for analysis.

Why this answer

Port mirroring on a VDS (option A) is the correct feature for capturing traffic from a specific virtual machine. It copies all packets from a source port (the VM's port) to a destination port for analysis. Option B (LLDP) is used for discovering network neighbors, not packet capture.

Option C (NetFlow) provides flow statistics and metadata but not full packet capture. Option D (traffic shaping) controls bandwidth, not capture.

Full explanation →
294
Matchingmedium

Match each vSphere security feature to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Virtual Trusted Platform Module for VM encryption

Restricts direct root access to ESXi

Single sign-on authentication for vSphere

Replaces default certificates with custom ones

Encrypts vMotion traffic between hosts

Why these pairings

The correct matches are: ESXi Firewall controls network traffic, VM Encryption encrypts VM files, and vTPM provides virtual TPM. Common confusions involve swapping these definitions.

Full explanation →
295
Multi-Selectmedium

You manage a vSphere 7 environment with 20 hosts, each with 2 x 10-core CPUs and 512 GB RAM. The environment runs 300 VMs, including a critical ERP application that uses 8 vCPUs and 64 GB RAM. Recently, the ERP VM has been experiencing periodic performance degradation, especially during month-end processing. The host running the ERP VM shows CPU ready time averaging 8%, with spikes to 20% during the processing. The host has 10 other VMs, each with 2-4 vCPUs. The cluster has DRS enabled with default settings. You suspect CPU contention. Which two actions should you take to mitigate the issue? (Choose two.)

Select 2 answers
A.Migrate the ERP VM to a host with fewer VMs to reduce CPU over-provisioning.
B.Enable DPM and set the cluster to aggressive power management.
C.Increase the CPU shares for the ERP VM to prioritize its scheduling.
D.Increase the number of vCPUs on the ERP VM to 12 to distribute load.
E.Increase the memory allocation of the ERP VM to reduce ballooning.
AnswersA, C

Less contention on the target host reduces ready time.

Why this answer

Migrating the ERP VM to a host with fewer VMs reduces the CPU over-provisioning ratio, directly lowering CPU ready time. With 8% average and 20% spikes, the host's physical CPU cores are oversubscribed; moving the VM to a less contended host alleviates the scheduling pressure without changing VM configuration.

Exam trap

The trap here is that candidates often confuse CPU ready time with memory pressure and choose to increase memory or vCPUs, but adding vCPUs actually increases co-scheduling overhead and worsens contention.

Full explanation →
296
Multi-Selecthard

An administrator is troubleshooting a failed vLCM remediation. Which two methods can be used to collect diagnostic information? (Choose TWO)

Select 2 answers
A.Review the vCenter Server alert logs.
B.Run vcli diagnostics on the vCenter Server.
C.Check the vLCM log file at /var/log/vmware/vlcm/vlcm.log on the vCenter Server.
D.Use the vLCM API to query task history.
E.Use esxcli system syslog config to check host logs.
AnswersC, D

vLCM logs contain detailed error information.

Why this answer

Options C and D are correct. C is correct because the vLCM log file is located at /var/log/vmware/vlcm/vlcm.log on the vCenter Server, which provides detailed diagnostic information for vLCM operations. D is correct because the vLCM API can be used to query task history, offering insights into past remediation actions.

A is incorrect because vCenter Server alert logs are not specific to vLCM diagnostics; they may contain general alerts but lack the detailed logs needed for troubleshooting. B is incorrect because 'vcli' is not a valid command for vCenter Server diagnostics; it does not exist. E is incorrect because esxcli system syslog config is used to configure syslog on ESXi hosts, not to collect vLCM diagnostic information.

Full explanation →
297
MCQeasy

A vSphere administrator is planning to upgrade ESXi hosts in a cluster from version 7.0 to 8.0 using vSphere Lifecycle Manager. The cluster currently uses a baseline-based upgrade. The administrator wants to leverage a desired state image for better consistency. What is the first step to transition from baseline-based to image-based management?

A.Export the cluster's baseline compliance report.
B.Create a new cluster image from the vSphere Lifecycle Manager image catalog.
C.Delete all existing baselines and baseline groups.
D.Detach all baselines from the cluster in turn.
AnswerD

This is the required step to transition to image-based management.

Why this answer

The first step to transition from baseline-based to image-based management is to detach all existing baselines from the cluster (Option D). This is a prerequisite because an image cannot be attached while baselines are still attached. Option A (export compliance report) is not required.

Option B (create new cluster image) is possible only after baselines are detached. Option C (delete baselines) is unnecessary and not recommended; detaching is sufficient.

Full explanation →
298
MCQhard

A vSphere administrator notices that VMs on a specific ESXi host lose connectivity intermittently. The VMs are on a distributed switch port group. The administrator finds that the Uplink 1 on that host is down. What should the administrator do first?

A.Increase the number of uplinks in the teaming policy
B.Check the physical switch port configuration for the failed uplink
C.Set the load balancing policy to Route based on source MAC
D.Configure a different failover order
AnswerB

The physical switch port might be misconfigured, disabled, or have a faulty cable; this is the most direct troubleshooting step.

Why this answer

The first step is to verify the physical switch port configuration for the failed uplink. The physical switch port may be misconfigured, disabled, or have a faulty cable. Checking this directly addresses the root cause of the down uplink.

Option A (increasing uplinks) would be premature without understanding why the uplink failed. Option C (changing load balancing) and Option D (changing failover order) are potential workarounds but do not fix the down uplink itself. Therefore, the administrator should first check the physical switch port configuration.

Full explanation →
299
MCQhard

Based on the exhibit, what is the most likely cause of the remediation failure?

A.The local depot is not configured.
B.The DNS server is unable to resolve depot.vmware.com.
C.The vLCM service is not running on vCenter.
D.A firewall is blocking outbound HTTPS traffic to the internet.
AnswerD

Connection timeout typically indicates a network block.

Why this answer

A firewall blocking outbound HTTPS traffic to the internet would cause a connection timeout when vSphere Lifecycle Manager (vLCM) tries to reach the public VMware depot. This matches the error shown in the exhibit. Option A is incorrect because the local depot is not the source of the timeout; the issue is with external connectivity.

Option B is incorrect because a DNS resolution failure would typically produce a 'Name or service not known' error, not a timeout. Option C is incorrect because if the vLCM service were not running, the error would likely indicate a service unavailability, not a network timeout.

Full explanation →
300
MCQmedium

An administrator notices that a critical virtual machine is running slowly. The VM has 8 vCPUs and 32GB memory. The host is an ESXi 7.0 server with two Intel Xeon Gold 6248 sockets (20 cores each, hyperthreading enabled). The VM's CPU ready time is consistently above 10%. What is the most likely cause?

A.The VM's vCPUs are pinned to a single NUMA node causing contention.
B.The host has too many VMs running and CPU oversubscription is too high.
C.The VM is over-provisioned on vCPUs relative to the host's physical cores.
D.The VM is using Eager Zero Thick disks causing high I/O latency.
AnswerB

High CPU ready time is commonly caused by excessive CPU oversubscription.

Why this answer

High CPU ready time indicates the VM is ready to run but the hypervisor cannot schedule it. This is typically due to excessive CPU oversubscription. Option B correctly identifies that having too many VMs on the host leads to high CPU contention, causing ready time.

Option A is incorrect because pinning vCPUs to a single NUMA node can increase ready time if other nodes are idle, but with only 8 vCPUs on a 40-logical-CPU node, contention is unlikely unless many other VMs are also pinned. Option C is incorrect because over-provisioning refers to total vCPUs exceeding physical CPUs, not individual VM vCPU count; the host has 80 logical CPUs, so 8 vCPUs is not over-provisioned. Option D is incorrect because disk I/O does not cause CPU ready time; it causes disk latency.

Full explanation →
Page 3

Page 4 of 7

Page 5

All pages

1234567

Practice VCP-DCV by domain

Target a specific domain to shore up weak areas.

vSphere Architecture, Products and SolutionsConfigure and Manage vSphere NetworkingConfigure and Manage vSphere StoragevSphere Lifecycle ManagementvSphere SecurityvSphere Performance and Scaling
See all domains with question counts →