511 questions total · 7pages · All types, answers revealed
A vSAN cluster has two fault domains. What is the maximum number of host failures that can be tolerated if the cluster is configured with a storage policy that sets 'Number of failures to tolerate' to 2?
FTT=2 allows tolerance of 2 host failures.
Why this answer
With FTT=2, the VM can survive up to 2 host failures regardless of fault domains. Fault domains ensure that failures are isolated, but the FTT value directly sets the tolerance.
A vSphere administrator is planning to upgrade ESXi hosts in a cluster from version 7.0 to 8.0 using vSphere Lifecycle Manager. The cluster currently uses a baseline-based upgrade. The administrator wants to leverage a desired state image for better consistency. What is the first step to transition from baseline-based to image-based management?
This is the required step to transition to image-based management.
Why this answer
Option C is correct because before attaching an image, you must detach all existing baselines from the cluster. Option A is wrong because deleting baselines is not necessary; detaching is sufficient. Option B is wrong because you cannot create an image while baselines are attached.
Option D is wrong because exporting a compliance report is not a required first step.
A vSphere administrator notices that VMs on a specific ESXi host lose connectivity intermittently. The VMs are on a distributed switch port group. The administrator finds that the Uplink 1 on that host is down. What should the administrator do first?
The physical switch port might be misconfigured, disabled, or have a faulty cable; this is the most direct troubleshooting step.
Why this answer
Option C is correct because the first step is to verify the physical switch port configuration for the failed uplink, as it may be misconfigured, disabled, or have a faulty cable. Option A would be premature without knowing the root cause. Option B might help if failover is needed but does not address the root cause.
Option D adjusts load balancing but does not fix the down uplink.
Based on the exhibit, what is the most likely cause of the remediation failure?
Connection timeout typically indicates a network block.
Why this answer
Option A is correct because the error indicates a connection timeout to the depot, suggesting a firewall or network issue blocking outbound HTTPS. Option B is wrong because a DNS failure would show a different error. Option C is wrong because credentials are not used for public depot access.
Option D is wrong because the error is about the depot, not local files.
An administrator notices that a critical virtual machine is running slowly. The VM has 8 vCPUs and 32GB memory. The host is an ESXi 7.0 server with two Intel Xeon Gold 6248 sockets (20 cores each, hyperthreading enabled). The VM's CPU ready time is consistently above 10%. What is the most likely cause?
High CPU ready time is commonly caused by excessive CPU oversubscription.
Why this answer
High CPU ready time indicates the VM is ready to run but the hypervisor cannot schedule it. This is typically due to excessive CPU oversubscription. Option A is incorrect because 8 vCPUs is not over-provisioned relative to 80 logical CPUs.
Option B is incorrect as NUMA pinning generally affects memory locality, not ready time. Option D is incorrect because disk I/O does not cause CPU ready time.
A company runs a vSphere 7 cluster with 4 ESXi hosts, each connected to a single vSphere Distributed Switch (VDS) with two 10GbE uplinks. The environment hosts 100 production VMs and uses vSphere Replication for disaster recovery to a remote site. Network I/O Control (NIOC) is enabled on the VDS with the following shares: vSphere Replication (System Traffic) = 100, Virtual Machine Traffic = 50. During the scheduled replication window (every 2 hours), users report significant VM performance degradation. The administrator observes that during replication, the VMkernel interfaces handling replication consume 95% of the available uplink bandwidth. The goal is to guarantee at least 6 Gbps of bandwidth for VM traffic on each host while still allowing replication to occur. Which action should the administrator take?
Reservations guarantee bandwidth for VM traffic, ensuring performance during replication.
Why this answer
Creating a network resource pool for VM traffic and assigning a reservation of 6 Gbps guarantees that VM traffic gets at least that amount of bandwidth, regardless of replication demands. This is the proper use of NIOC resource pools. Option B (increasing shares) only affects priority, not guarantees.
Option C (limiting replication) could help but does not guarantee VM bandwidth and may still allow replication to burst if the limit is not set appropriately. Option D (adding uplinks) is expensive and may not directly address the guarantee requirement.
A company has a cluster of 4 ESXi hosts. They want to ensure that virtual machines are automatically distributed evenly across hosts based on CPU and memory load. Which feature should be enabled on the cluster?
DRS provides automatic load balancing across hosts.
Why this answer
DRS (Distributed Resource Scheduler) automatically balances VM loads based on resource usage. HA provides high availability, FT provides fault tolerance, and DPM manages host power.
A financial services company has a vSphere cluster with four hosts, each equipped with 2 CPU sockets (10 cores each, hyperthreading enabled) and 512 GB RAM. The cluster runs a mix of production and test VMs. Recently, a critical trading application VM (8 vCPUs, 64 GB RAM) was moved by DRS to a host that also runs an analytics workload (4 vCPUs, 32 GB RAM). After the move, the trading application's performance degraded significantly. The administrator checks vCenter performance charts and sees that the trading VM's CPU ready time has increased from 2% to 20% since the migration, while the host's overall CPU utilization is only 50%. The analytics VM shows normal performance. What is the most likely cause of the performance degradation?
Spanning NUMA nodes can cause remote memory access, increasing memory latency and CPU ready time.
Why this answer
The trading VM is likely spanning multiple NUMA nodes on the destination host. The host has two NUMA nodes (one per socket). With 8 vCPUs, the VM may span both nodes, causing remote memory access latency, which increases CPU ready time indirectly due to memory stalls.
Option C directly addresses this. Option A describes a BIOS setting that may be incorrect but is less likely to change after a DRS move. Option B addresses a different issue (memory overcommit).
Option D would help but is not the best immediate action; the root cause is NUMA configuration.
A vSphere administrator notices that after adding a new ESXi host to a vSphere Distributed Switch (vDS), some VMs on existing hosts lose network connectivity intermittently. What is the most likely cause?
If the vDS uses jumbo frames (MTU 9000) but the physical switch or new host has MTU 1500, large packets may be fragmented or dropped, causing intermittent connectivity.
Why this answer
Option D is correct because if the Maximum Transmission Unit (MTU) is inconsistent across the vDS and physical network, it can cause packet drops and intermittent connectivity. Option A is incorrect because a physical uplink failure affecting all VMs is unlikely to occur only after adding a new host. Option B is incorrect because LACP issues would cause complete failure or reduced throughput, not intermittent connectivity on existing hosts.
Option C is incorrect because Network I/O Control is about bandwidth allocation, not connectivity loss.
Refer to the exhibit. A VM is deployed with this storage policy. What is the minimum number of hosts required for the VM's objects to be provisioned successfully?
With FTT=1, 2 data replicas and 1 witness require 3 hosts.
Why this answer
With FTT=1 and default RAID-1 mirroring, vSAN needs 2 data replicas plus 1 witness, requiring at least 3 hosts. A single host cannot tolerate failure; two hosts would work for FTT=0.
Refer to the exhibit. A virtual machine on the VM Network is experiencing intermittent connectivity. The administrator notices that vmnic0 is saturated. Which action would improve performance without causing a single point of failure?
Load-based teaming would distribute traffic across both uplinks, reducing saturation.
An administrator monitors network performance using esxtop. Which field in the network section indicates the total number of packets dropped per second due to the virtual switch being overrun?
%DRPTX shows the percentage of transmit packet drops due to overrun.
Why this answer
The %DRPTX field shows the percentage of transmit packets dropped because the vSwitch or physical NIC was overrun. Rx dropped is shown by %DRPRX. PKTTX is transmit packets, MPS is million packets per second.
Refer to the exhibit. A distributed virtual switch port shows dropped Rx packets and CRC errors. What is the most likely cause?
CRC errors are often due to bad cabling.
Why this answer
CRC errors and dropped Rx packets on a distributed virtual switch port indicate physical-layer corruption of frames, typically caused by a faulty cable, damaged NIC, or bad transceiver. These errors occur when the cyclic redundancy check (CRC) computed by the receiver does not match the frame's CRC field, which is a direct symptom of signal integrity issues at Layer 1.
How to eliminate wrong answers
Option B is wrong because an outdated NIC driver would more likely cause driver-level errors, timeouts, or device disconnections, not CRC errors which are physical-layer corruption. Option C is wrong because an MTU mismatch causes fragmentation or packet drops at Layer 3, not CRC errors; CRC errors are Layer 1 issues. Option D is wrong because an incorrect VLAN configuration would result in connectivity failures or traffic being dropped at Layer 2, but it would not cause CRC errors, which are purely physical-layer corruption.
An administrator is troubleshooting a failed VM encryption operation. The key provider status shows as 'Not Responding' in the vSphere Web Client. The administrator has verified network connectivity between the ESXi hosts and the key provider. What is the most likely cause of the failure?
Expired or invalid KMS certificate causes hosts to reject connections.
Why this answer
Option C is correct because the key provider certificate may be expired or invalid, causing the hosts to reject the connection even if network is reachable. Option A is wrong because ESXi hosts do not need an internet connection for on-premises KMS. Option B is wrong because vCenter Server does not manage key provider certificates directly.
Option D is wrong because a firewall rule blocking the correct port would typically show as 'Unreachable' rather than 'Not Responding'.
Which THREE factors should be considered when sizing a host cluster for a VDI environment with 1000 desktops? (Choose three.)
Correct: Boot storms can saturate storage; IOPS must be sufficient.
Why this answer
Storage IOPS capacity for boot storms is critical because when 1000 desktops boot simultaneously (e.g., at start of shift), they generate a massive burst of read I/O. If the storage array cannot handle the peak IOPS, desktops will experience slow boot times or timeouts. Proper sizing must account for both steady-state IOPS and the boot storm peak, often using flash storage or caching to absorb the load.
Exam trap
The trap here is that candidates often confuse operational features (like vMotion compatibility) with true capacity-sizing factors, or they mistakenly think NUMA alignment is a sizing input rather than a post-deployment optimization.
A vSphere administrator is moving from baseline-based to image-based management for a cluster. The administrator has detached all baselines and is now ready to attach an image. Which TWO conditions must be met before attaching an image to the cluster? (Choose two.)
vLCM requires at least one compatible host to attach an image.
Why this answer
Options A and C are correct. A: The cluster must have at least one host compatible with the image to allow attachment. C: All hosts must be connected.
B is wrong because the vLCM version does not need to be the latest. D is wrong because the cluster can contain VMs. E is wrong because pending tasks are not blocking attachment.
Which two factors most directly influence vSphere NUMA scheduling decisions for a VM? (Choose two.)
The host's NUMA topology (number of nodes, cores per node) is used to place VMs.
Why this answer
The correct options are A and C. vSphere NUMA scheduling uses the number of vCPUs and the host NUMA node topology to place the VM on a single node. Memory reservation and VM version are secondary. Storage policy is not relevant.
A company's vSphere environment has multiple clusters with varying workloads. The operations team notices that one cluster consistently shows high CPU ready times on several hosts. Which action should be taken to address this performance issue?
Reducing vCPUs and adding hosts reduces CPU contention.
Why this answer
High CPU ready times indicate that VMs are contending for physical CPU resources because the host is over-provisioned with vCPUs relative to available pCPUs. Reducing the number of vCPUs per VM decreases scheduling overhead and contention, while adding more hosts increases the total pCPU count, directly alleviating the bottleneck. Option C correctly addresses both the demand-side (vCPU reduction) and supply-side (host addition) of the CPU scheduling issue.
Exam trap
The trap here is that candidates confuse CPU ready time with memory pressure or storage latency, leading them to choose memory or storage-related solutions instead of addressing the core CPU over-provisioning issue.
How to eliminate wrong answers
Option A is wrong because increasing memory allocation does not reduce CPU contention; it may even increase memory overhead without affecting CPU scheduling. Option B is wrong because increasing CPU reservation guarantees CPU time for specific VMs but does not reduce overall contention; it can actually worsen ready times for other VMs by reserving resources that could otherwise be shared. Option D is wrong because Storage DRS balances storage I/O load, not CPU scheduling; high CPU ready times are a compute issue, not a storage issue.
LACP requires one side to be active for negotiation.
Why this answer
Option A is correct because if the LAG mode is passive and the physical switch is also configured as passive, LACP negotiation fails. Option B is not the issue as the load balancing policy is valid. Option C is irrelevant.
Option D is not required.
Which TWO vSAN components are always created for every virtual disk object in a vSAN datastore? (Choose two.)
Correct: Metadata (including namespace) is always created for each object.
An administrator has created a standard vSwitch port group with VLAN ID 100. Virtual machines in this port group can communicate with each other but not with devices on the physical network. What is a possible cause?
The physical switch must allow VLAN 100 on the port.
Why this answer
Option B is correct because the physical switch port must be configured to pass VLAN 100, either as a trunk or access port. Option A is incorrect because duplicate MAC addresses would affect local communication too. Option C is incorrect because subnet mismatch would also affect local communication.
Option D is incorrect because one uplink is sufficient.
A company has a single ESXi host with a standard switch. The administrator creates a new port group for a DMZ network and assigns a VM to it. The VM cannot ping the default gateway. The physical switch port is configured as a trunk with VLAN 100 allowed. The port group VLAN ID is set to 100. The physical NIC is connected to the switch port and shows link up. What should the administrator do to resolve the issue?
If the gateway IP, subnet mask, or default gateway is misconfigured, the VM cannot ping the gateway despite correct VLAN settings.
Why this answer
Option C is correct because the physical and virtual networking configurations appear correct (VLAN 100 on both sides, link up), so the issue is likely an IP misconfiguration on the VM itself. Option A (change VLAN to 0) would break connectivity. Option B (enable VLAN tagging) is unnecessary as the port group already tags VLAN 100.
Option D (add second NIC) does not address the connectivity problem.
An administrator is troubleshooting a VM that is experiencing high latency on its virtual disks. The VM is connected to a vSphere datastore backed by an NFS share. The ESXi host has multiple VMkernel ports configured for NFS traffic. Which configuration change is most likely to improve storage performance?
This leverages multiple network paths to improve performance and redundancy.
Why this answer
Option A is correct because NFS port binding (also known as NFS multipathing) allows multiple VMkernel ports to be used for NFS traffic, and when combined with a 'route based on originating port ID' load-balancing policy, it enables the ESXi host to distribute NFS I/O across multiple physical NICs and paths. This increases aggregate throughput and reduces latency by avoiding congestion on a single VMkernel port or physical link, which is the most effective change for improving storage performance in this scenario.
Exam trap
The trap here is that candidates often assume jumbo frames (Option C) are the universal fix for storage latency, but they overlook that NFS port binding directly addresses the root cause of network congestion by enabling multipathing, which is the specific technology tested in this VCP-DCV domain.
How to eliminate wrong answers
Option B is wrong because using a single VMkernel port for NFS, even with the highest priority, does not increase bandwidth or reduce latency; it still creates a single point of contention and cannot leverage multiple network paths. Option C is wrong because while jumbo frames can reduce CPU overhead and improve throughput for large transfers, they do not directly address high latency caused by insufficient network parallelism; they also require end-to-end support and may not help if the bottleneck is I/O distribution. Option D is wrong because increasing the disk queue depth on the VM's virtual SCSI controller can increase throughput in some cases, but it does not resolve network-level congestion or path limitations on the NFS datastore; it may even exacerbate latency by queuing more I/O behind a slow network path.
An administrator is planning a vCenter Server deployment for a large environment with 15 ESXi hosts and 300 VMs. The environment requires high availability for vCenter Server. Which deployment topology should the administrator choose?
Correct: vCenter HA provides automatic failover.
Why this answer
vCenter HA (active-passive) provides automatic failover for the vCenter Server Appliance.
Which TWO actions can be taken to reduce CPU ready time for a virtual machine? (Select TWO.)
Fewer vCPUs reduce co-scheduling demands and lower ready time.
Why this answer
Option B is correct because reducing the number of vCPUs to match the actual workload demand directly decreases the co-scheduling overhead and contention for physical CPU cores. When a VM has more vCPUs than its workload requires, the ESXi scheduler must wait for all assigned vCPUs to become available simultaneously, which inflates CPU ready time. Right-sizing vCPUs to the workload is a best practice to minimize ready time and improve performance.
Exam trap
The trap here is that candidates often think adding vCPUs always improves performance, but in reality, over-provisioning vCPUs increases CPU ready time and degrades performance, especially on oversubscribed hosts.
Refer to the exhibit. What is the most likely cause of the vSAN cluster health degradation?
Capacity health warning indicates disk utilization threshold exceeded.
Why this answer
The output shows a capacity health warning because a host crossed the disk utilization threshold (80%). Option B is correct. Other health checks are healthy, so A, C, and D are incorrect.
An administrator notices that HTTP connections to the ESXi host are timing out frequently. Based on the exhibit, which configuration change would most likely resolve the issue?
A longer timeout prevents premature disconnection.
Why this answer
Option B is correct because the maxKeepAliveTimeout is set to 100 seconds, which is the default but may be too low for environments with long-running connections; increasing it can reduce timeouts. Option A is wrong because enabling a proxy is not needed. Option C is wrong because the keepalive is already enabled by default and disabling it would worsen the issue.
Option D is wrong because restarting rhttpproxy without changing the timeout would not help.
A large VM with 24 vCPUs is deployed on a dual-socket host with two NUMA nodes each having 12 cores. Which step is a BEST PRACTICE to ensure optimal performance for this VM?
vNUMA ensures the guest OS can optimize memory access across NUMA nodes, improving performance.
Why this answer
Setting vNUMA controls exposes the NUMA topology to the guest OS, allowing it to optimize memory locality. By default, vNUMA is enabled for VMs with more than 8 vCPUs. Placing the VM on a single NUMA node would limit resources.
Disabling hyperthreading is unnecessary. Setting CPU affinity reduces flexibility.
A company uses an external Platform Services Controller (PSC) in a vSphere 6.7 environment. They plan to upgrade to vSphere 7.0. Which security-related consideration is most important?
vSphere 7.0 does not support external PSCs.
Why this answer
Option B is correct because vSphere 7.0 removes the external PSC model; all services are embedded. Option A is incorrect because there is no migration wizard for external PSC to embedded, but does not default to AD. Option C is incorrect because vSphere 7.0 still uses VECS.
Option D is incorrect because STS certificates can be managed within the embedded PSC.
An organization wants to migrate a VM from one vCenter Server to another without shutting down the VM. Both vCenter Servers are in Enhanced Linked Mode. Which migration method should the administrator use?
This enables live migration across vCenter Servers when they are in Enhanced Linked Mode.
Why this answer
Cross-vCenter vMotion (option B) is the correct method because it allows a live, zero-downtime migration of a running VM between vCenter Server instances, even when both are in Enhanced Linked Mode. This feature uses the vMotion protocol to transfer memory and execution state across vCenter boundaries without requiring shared storage, as long as the source and destination hosts are in the same vCenter Single Sign-On domain and meet compatibility requirements.
Exam trap
The trap here is that candidates may confuse Enhanced Linked Mode with the ability to perform any migration between vCenters, but only Cross-vCenter vMotion supports live migration; Storage vMotion and OVF export/import are often incorrectly chosen because they are associated with moving VMs without understanding the vCenter boundary limitation.
How to eliminate wrong answers
Option A is wrong because cold migration requires the VM to be powered off, which contradicts the requirement of not shutting down the VM. Option C is wrong because Storage vMotion only moves the VM's virtual disks between datastores within the same vCenter Server, not between different vCenter Server instances. Option D is wrong because exporting a VM as OVF and importing it to another vCenter Server requires the VM to be powered off (or at least quiesced) and involves significant downtime, not a live migration.
A vSphere administrator needs to monitor the performance of a cluster of 10 ESXi hosts. The cluster is running 200 VMs. Which tool provides real-time performance metrics and historical data with the least overhead?
Correct: Integrated, low-overhead, provides real-time and historical metrics.
Why this answer
vCenter Performance Charts provide real-time and historical performance metrics for clusters, hosts, and VMs with minimal overhead because they query the vCenter Server database, which aggregates data from ESXi hosts at configurable intervals (default 20 seconds for real-time, 5 minutes for historical). This avoids the need for direct host connections or additional logging, making it the most efficient choice for monitoring a cluster of 10 hosts and 200 VMs.
Exam trap
The trap here is that candidates often confuse esxtop or resxtop as the only tools for real-time metrics, overlooking that vCenter Performance Charts provide both real-time and historical data with far less overhead for cluster-level monitoring.
How to eliminate wrong answers
Option B (resxtop) is wrong because it is a command-line tool for Linux-based vSphere CLI that provides real-time performance data for a single ESXi host, but it cannot aggregate data across a cluster or provide historical data without manual logging. Option C (esxtop with output logged to a file) is wrong because while it can capture real-time metrics and log them for historical analysis, it introduces significant overhead on the ESXi host due to continuous data collection and file I/O, and it requires manual setup and parsing for a cluster of 10 hosts. Option D (vRealize Operations Manager) is wrong because it is a comprehensive performance management tool that provides advanced analytics and historical data, but it introduces substantial overhead from agent deployment and data collection, making it less suitable for a simple monitoring task where vCenter Performance Charts suffice with lower resource consumption.
Which vSphere component is responsible for managing the lifecycle of ESXi hosts, including patching and upgrading?
It manages patching and upgrades for ESXi hosts.
Why this answer
vSphere Lifecycle Manager (vLCM) is the correct component because it is specifically designed to manage the lifecycle of ESXi hosts, including patching, upgrading, and firmware/driver updates. It uses desired-state management to ensure hosts conform to a specified image or baseline, automating the entire update process across clusters.
Exam trap
The trap here is that candidates often confuse Host Profiles (which manage configuration) with lifecycle management, or they think Auto Deploy handles patching because it deploys images, but Auto Deploy is for initial provisioning, not ongoing patching of existing hosts.
How to eliminate wrong answers
Option B (Host Profiles) is wrong because Host Profiles capture and apply host-level configuration settings (e.g., networking, storage) but do not manage patching or upgrading of ESXi software. Option C (Auto Deploy) is wrong because Auto Deploy provisions ESXi hosts from a central image repository using PXE boot, but it does not handle patching or upgrading of already-deployed hosts; it is primarily for stateless or stateful deployment. Option D (vSphere Distributed Resource Scheduler) is wrong because DRS manages workload placement and resource balancing across hosts in a cluster, not host software lifecycle tasks like patching or upgrading.
An administrator is using vLCM to manage a cluster with 4 ESXi hosts. After a remediation, two hosts show a compliance status of 'Non-Compliant' with the message 'Firmware is not compatible with the selected image'. What is the most likely cause?
HSM is required for firmware compliance checks.
Why this answer
The correct answer is D because vLCM relies on a Hardware Support Manager (HSM) to validate firmware compatibility against the selected ESXi image. Without an HSM configured, vLCM cannot check firmware versions, so it flags hosts as 'Non-Compliant' with the message 'Firmware is not compatible with the selected image' even if the firmware is actually compatible. This is a common misconfiguration when using vLCM with vSAN or other hardware-dependent clusters.
Exam trap
The trap here is that candidates assume the error message 'Firmware is not compatible' always means an actual firmware mismatch, rather than recognizing it as a symptom of a missing Hardware Support Manager configuration.
How to eliminate wrong answers
Option A is wrong because if the image included an incompatible firmware component, vLCM would typically fail during remediation or show a different error, not a post-remediation compliance status of 'Non-Compliant' with that specific message. Option B is wrong because vLCM does not skip firmware updates based on ESXi version; it either applies the firmware or fails the remediation, and the message indicates a compatibility check failure, not a skip. Option C is wrong because autopassivation is related to vSphere HA and host isolation, not firmware compliance; maintenance mode during remediation is normal and does not cause this compliance message.
A network administrator needs to isolate traffic between VMs in the same VLAN on a distributed switch. Which feature should be used?
PVLANs isolate ports within the same primary VLAN.
Why this answer
Option B is correct because Private VLANs allow isolation within a VLAN. Option A is for trunking. Option C is for bandwidth allocation.
Option D is for rate limiting. Option E is for port binding.
A company uses vSphere 7 with vLCM. They want to update hosts in a cluster with a new ESXi version. The cluster has mixed hardware. What is the recommended method?
vLCM cluster image management is the recommended method for ESXi updates in vSphere 7+ environments.
Why this answer
Option C is correct because vLCM uses cluster image management to apply a single image specification across all hosts, which can include generic ESXi base image and optional add-ons for different hardware vendors. Options A, B, and D are not the recommended modern approach.
What is the purpose of the 'Export System Logs' option in vSphere Lifecycle Manager?
This option gathers relevant log files to help diagnose issues with vLCM operations.
Why this answer
Option D is correct because the 'Export System Logs' option is used to collect logs from vLCM components for troubleshooting purposes.
During a vLCM remediation of a cluster, one host fails with the error: 'Host does not meet the minimum required version of the cluster image.' The cluster image is ESXi 8.0 Update 1. The host is currently running ESXi 7.0 Update 3. What is the most likely reason for this failure?
Major version upgrades may need a staged approach or use of an ISO image.
Why this answer
Option C is correct because a major version upgrade (7.x to 8.x) often requires a full install or specific upgrade path; vLCM may require a bootable media or additional steps. Option A is wrong because the version difference is the issue, not hardware compatibility. Option B is wrong because network issues would not produce that specific error.
Option D is wrong because DRS settings do not affect upgrade prerequisites.
Refer to the exhibit. An administrator cannot resolve the hostname of a DNS server using the ESXi host. What is the most likely cause?
The hostname resolution failed, indicating the DNS server cannot resolve the name.
An administrator is configuring a vSAN cluster with all-flash capacity. The cluster uses RAID-5 erasure coding with a policy of 'Number of failures to tolerate = 1' (PFTT=1). The administrator wants to minimize storage overhead while ensuring availability. Which vSAN storage policy setting should be used?
RAID-5 with PFTT=1 provides efficient capacity usage and fault tolerance.
Why this answer
For all-flash vSAN, RAID-5/6 erasure coding is recommended. With PFTT=1, RAID-5 requires only 1 parity component, minimizing overhead. Option C is correct.
Option A (RAID-1 mirroring) would use more capacity. Option B (RAID-6) is for PFTT=2 and adds more overhead. Option D (no redundancy) is not fault tolerant.
A company has a vSphere 7.0 cluster with 6 ESXi hosts connected to a Dell EMC PowerStore array using iSCSI. They are using VMFS6 datastores. After a recent firmware upgrade on the array, they notice that performance on one datastore has degraded significantly. The datastore is used by several high-I/O VMs. The administrator runs 'esxcli storage core path list' and sees that all paths to that datastore are active but with varying latency. The PSP is set to Round Robin with IOPS limit of 1000. The SATP is VMW_SATP_ALUA. The storage administrator confirms that the array is in active-active mode. What should the administrator do to improve performance?
Increasing the IOPS limit reduces path switching frequency, optimizing throughput for high-I/O VMs.
Why this answer
The low Round Robin IOPS limit (1000) can cause frequent path switching, leading to inefficiency and high latency. Increasing the IOPS limit allows more I/O per path before switching, improving performance on high-I/O workloads. Option A (MRU) would reduce parallelism, Option C is incorrect because ALUA is appropriate for the array, and Option D (QoS/VAAI) is not the root cause.
A network administrator notices that all traffic from two VMs connected to the same standard switch port group is going through the same physical uplink, causing congestion. The teaming policy is set to Route based on originating virtual port. What change should the administrator make to distribute traffic more evenly?
Correctly distributes traffic based on IP pairs.
Why this answer
Option A is correct because IP hash uses source and destination IP to distribute traffic, providing better load distribution. Option B is wrong because LACP is not supported on standard vSwitches. Option C is wrong because adding uplinks without changing policy still ties port to same uplink.
Option D does not distribute traffic.
Which TWO actions can help reduce network latency for a latency-sensitive VM in a vSphere environment? (Choose two.)
Correct: NetQueue distributes interrupts to multiple CPUs, reducing latency.
Why this answer
NetQueue improves network performance by distributing packet processing across multiple CPUs, reducing the overhead on a single core and lowering latency for latency-sensitive VMs. This is achieved by using multiple receive queues on the physical NIC, which allows parallel packet handling and minimizes interrupt coalescing delays.
Exam trap
The trap here is that candidates often confuse throughput-enhancing features (like jumbo frames or TSO) with latency-reducing features, failing to recognize that SR-IOV and NetQueue directly address packet processing overhead and interrupt handling.
An administrator has enabled jumbo frames (MTU 9000) on a vSphere Distributed Switch. Virtual machines on different hosts cannot communicate, but VMs on the same host can. The physical switches support jumbo frames. What is the most likely cause?
Physical NICs must have MTU 9000 to pass jumbo frames between hosts.
Why this answer
Option B is correct because the physical NICs must also be configured with MTU 9000 to pass jumbo frames between hosts. Option A is incorrect because VMkernel adapters are used for management traffic, not VM data. Option C is incorrect because the port group MTU is already set on the DVS.
Option D is incorrect because QoS is unrelated.
Order the steps to perform a vMotion migration of a powered-on virtual machine.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Why this order
Prerequisites check, initiate migration, select type, choose destination, and confirm.
A vSphere administrator is planning a Storage DRS implementation for a datastore cluster containing multiple VMFS datastores. The VMs have various I/O patterns. Some VMs should always remain together on the same datastore. Which configuration should be used?
Correct: Affinity rule ensures VMs are placed on the same datastore.
Why this answer
Storage DRS affinity rules allow you to keep VMs together (VM-to-VM affinity) or separate. Option B is incorrect because anti-affinity would separate them. Option C is incorrect because SIOC is for I/O control, not placement.
Option D is incorrect because per-datastore rules don't exist; Storage DRS rules are at the datastore cluster level.
An administrator has configured Storage DRS on a cluster of datastores. The cluster includes both NFS and VMFS datastores. The administrator notices that Storage DRS recommendations are not being generated for some datastores. What is the most likely cause?
Storage DRS only supports VMFS datastores and certain NFS arrays with VAAI.
Why this answer
Storage DRS does not support NFS datastores unless they are on a NAS array with VAAI. Option D is correct. Option A (vSAN) is incorrect as vSAN has its own DRS.
Option B (space utilization) would still generate recommendations. Option C (I/O metrics) would work if supported.
A company plans to deploy a new homogeneous cluster with vSphere 8. They want to use vLCM to simplify lifecycle management. What is the recommended approach for maintaining the ESXi hosts?
A single cluster image ensures all hosts are identical, simplifying management and compliance.
Why this answer
Option B is correct because vLCM uses a single cluster image for homogeneous clusters to ensure consistency. Option A is wrong because individual host images are for heterogeneous clusters. Option C is wrong because baselines are legacy.
Option D is wrong because manual updates are not recommended.
An administrator wants to configure the ESXi host firewall to allow connections only from a specific management subnet. How can this be achieved?
The ESXi firewall allows per-rule IP-based restrictions.
Why this answer
Option B is correct because the ESXi firewall can be configured with rule sets that allow traffic only from specific IP addresses or subnets. Option A is incorrect because disabling all firewall rules would be too permissive. Option C is incorrect because the DCUI is for direct console access, not firewall rules.
Option D is incorrect because vSphere HA is not related to firewall configuration.
What is the purpose of the vLCM hardware compatibility check?
The hardware compatibility check ensures that the hardware components are certified for the selected ESXi version.
Why this answer
Option C is correct because vLCM's hardware compatibility check validates that the desired image (ESXi and add-ons) is compatible with the physical hardware, using the Hardware Compatibility List (HCL).
An ESXi host has an NFS datastore mounted from a NAS array. The administrator wants to enable hardware acceleration (VAAI) for the datastore. Which requirement must be met?
VAAI for NFS requires NAS support for NFSv3/v4.1 and the relevant primitives.
Why this answer
VAAI for NFS requires the NAS array to support NFSv3 (or v4.1) and implement the VAAI primitives. Option C is correct. Option A (iSCSI) is block, not NFS.
Option B (software FCoE) is unrelated. Option D (VMFS6) is a local filesystem.
A company is planning to upgrade vCenter Server from 7.0 to 8.0 and then upgrade ESXi hosts from 7.0 Update 2 to 8.0. They have a vSAN cluster and use vSphere Lifecycle Manager (vLCM) with a single image. What is a critical prerequisite that must be verified before starting the vCenter Server upgrade?
vCenter must be at a higher or equal version to manage and upgrade ESXi hosts.
Why this answer
Option D is correct because vCenter Server must be at a version equal to or higher than the ESXi hosts it manages. When upgrading from vCenter 7.0 to 8.0, the vCenter upgrade must complete first, as it will then be able to manage the ESXi 7.0 hosts during their subsequent upgrade to 8.0. Attempting to upgrade ESXi hosts before vCenter would violate this compatibility requirement and could cause management communication failures.
Exam trap
The trap here is that candidates often assume ESXi hosts must be fully patched or that vSAN requires downtime, when in reality the critical prerequisite is the version compatibility between vCenter and ESXi, not the patch level or cluster state.
How to eliminate wrong answers
Option A is wrong because vSAN clusters do not need to be turned off during a vCenter upgrade; vCenter is a management plane component and the vSAN data plane continues to operate. Option B is wrong because there is no requirement to apply the latest ESXi 7.0 patch before upgrading vCenter; the vCenter upgrade can proceed as long as the ESXi hosts are at a supported version (7.0 Update 2 is supported for upgrade to vCenter 8.0). Option C is wrong because vSphere Lifecycle Manager (vLCM) is used with a single image in this scenario, and vSphere Update Manager (VUM) is a separate, legacy tool that is not required for vLCM-based environments.
Refer to the exhibit. An administrator checks the vSAN cluster health and sees the above output. The cluster has been running for months. What is the most likely cause of the degraded objects?
Degraded objects with resync indicate repair after failure.
Why this answer
Degraded objects in vSAN indicate that component failures have occurred and repair is ongoing (resyncing). Option C is correct. Option A (network) would show connectivity issues.
Option B (capacity) would show rebalance. Option D (policy change) would cause reconfiguration but not typically degrade.
Which two conditions must be met for a VMkernel adapter to be used for vMotion on a distributed switch? (Choose two.)
vMotion requires IP connectivity between hosts on the same subnet.
Why this answer
Options B and D are correct. The VMkernel adapter must be in the same subnet as the destination host (B) and must be enabled for vMotion (D). VLAN ID can be any, static IP is not required, and uplink teaming mode is irrelevant.
A virtual machine connected to the 'VM Network' port group is unable to obtain an IP address from the DHCP server located on the same subnet (192.168.1.0/24). The DHCP server is connected to the physical switch which is configured as an access port for VLAN 100. What is the most likely cause of the issue?
The port group tags frames with VLAN 100, so the physical switch port must be a trunk to accept tagged frames.
Why this answer
The DHCP server is connected to a physical switch port configured as an access port for VLAN 100, meaning it expects untagged traffic on VLAN 100. However, the virtual machine is connected to the 'VM Network' port group, which by default is untagged (VLAN ID 0). For the VM's DHCP request to reach the server, the physical uplink (vmnic0) must be configured as a trunk port on the physical switch to carry the VLAN 100 traffic; otherwise, the switch will drop or misdirect the frames, preventing DHCP from working.
Exam trap
The trap here is that candidates assume the DHCP server's access port configuration automatically matches the VM's network, overlooking the requirement for the physical uplink to be a trunk to carry the VLAN-tagged or untagged traffic correctly.
How to eliminate wrong answers
Option B is wrong because the port group should use VLAN ID 100 to match the access port's VLAN, not a different ID. Option C is wrong because MTU 1500 is standard for Ethernet and DHCP; mismatched MTU would cause fragmentation issues, not DHCP failure. Option D is wrong because the DHCP server is on the same subnet (192.168.1.0/24) and connected to an access port for VLAN 100, so it is on the same VLAN as the VM's intended network.
Option E is wrong because the VMkernel port vmk0 is used for vSphere management traffic, not for VM DHCP; its IP address is irrelevant to VM network connectivity.
A vSphere administrator is designing a new cluster for a mission-critical application that requires maximum availability. The cluster will consist of four ESXi hosts. Which vSphere feature should be enabled to protect against host failures while minimizing resource waste?
This provides the required availability while optimizing resource usage.
Why this answer
Option B is correct because vSphere HA with admission control configured to reserve resources for one host failure ensures that if a host fails, the VMs can be restarted on the remaining hosts without overcommitting resources. This provides maximum availability for mission-critical applications while minimizing resource waste by only reserving enough capacity for a single host failure, not for multiple or all hosts.
Exam trap
The trap here is that candidates often confuse vSphere HA (which provides host-level failover) with vSphere DRS (which only optimizes resource usage) or assume that Fault Tolerance is the only way to achieve maximum availability, ignoring its massive resource overhead and practical limitations.
How to eliminate wrong answers
Option A is wrong because vSphere DRS is a load-balancing and placement tool, not a high-availability feature; it does not protect against host failures or provide any failover capability. Option C is wrong because vSphere Fault Tolerance provides continuous availability by creating a secondary VM that mirrors the primary, but it requires significant CPU and memory overhead (often 100%+ resource duplication) and is not practical for all VMs in a cluster due to resource waste and compatibility limitations. Option D is wrong because vSphere Replication is a disaster recovery feature that replicates VMs to a secondary site, which protects against site-level failures but does not provide immediate host-level failover within the same cluster and introduces latency and storage overhead.
An administrator needs to migrate a powered-on VM from one datastore to another without any downtime. Which vSphere feature should be used?
Migrates VM files with zero downtime.
Why this answer
Option B is correct. Storage vMotion allows live migration of VM files while the VM remains powered on. vMotion migrates compute. vSphere Replication is for DR. Storage DRS balances storage but does not directly migrate without downtime.
An ESXi host has two physical uplinks (vmnic0, vmnic1) connected to a distributed switch. The administrator wants to use LACP to aggregate these uplinks to a physical switch stack. Which prerequisite must be met for LACP to work with a distributed switch?
A LAG must be created on the DVS, and the physical switch must be configured with compatible LACP parameters.
Why this answer
Option E is correct because DVS requires a LAG to be configured on the switch and matching settings on the physical switch. Option A is not strictly true (LACP supported from vSphere 5.1). Option B is wrong because LACP requires active/active.
Option C is possible but not a prerequisite. Option D is not a requirement.
A financial services company runs a critical trading application on a vSphere 7 cluster with four ESXi hosts. Each host has 512 GB RAM and dual 16-core CPUs. The application is extremely latency-sensitive and runs in a single VM named TRADER-01. The VM currently has 16 vCPUs and 128 GB RAM assigned. The cluster uses vSphere HA and DRS in fully automated mode with aggressive migration threshold. Recently, the application experienced occasional latency spikes. Monitoring shows that these spikes correlate with DRS migrations of other VMs on the same host as TRADER-01. The administrator needs to eliminate these latency spikes without sacrificing application performance. The company has budget constraints and cannot add new hardware. Which action should the administrator take?
Reducing migration threshold decreases the number of DRS recommendations and actions, reducing latency spikes.
Why this answer
Option B is correct because setting DRS migration threshold to conservative reduces frequency of vmotions, thus reducing latency spikes from migrations. Option A would limit TRADER-01 to only one host, but if that host fails, the VM will be down; also DRS will not be able to balance. Option C would disable DRS entirely, losing benefits.
Option D would increase latency due to vCPU scheduling overhead.
A vSphere administrator notices high memory ballooning on a host running multiple VMs with large memory allocations. The host has sufficient physical memory, but ballooning occurs sporadically. What is the most likely cause?
A memory limit below the VM's active memory forces the balloon driver to reclaim memory from the guest, even if host has free memory.
Why this answer
Option D is correct because a low memory limit forces the VM to balloon even if the host has free memory. Option A is wrong as CPU overcommitment does not cause memory ballooning. Option B is wrong because reservation higher than physical would prevent VM power-on.
Option C is wrong as insufficient swap space would not cause ballooning; ballooning is a driver-based memory reclamation.
A vSphere administrator needs to apply a critical ESXi security patch to a cluster of 10 hosts. The cluster is managed by vLCM using image-based management. What is the correct procedure to apply the patch?
Editing the image and remediating applies the patch to all hosts.
Why this answer
Option A is correct because with image-based management, you edit the cluster image to include the new patch version, then remediate the cluster. Option B is wrong because you cannot apply a patch directly; you must update the image. Option C is wrong because you do not use baselines.
Option D is wrong because each host will be updated automatically during remediation.
Refer to the exhibit. The vSphere administrator observes that vm1 has a %RDY value of 20.5. What is the most likely cause of this high ready time?
High %RDY is a clear indicator of CPU contention, often due to overcommitment.
Why this answer
High %RDY indicates the VM is ready to run but is being queued due to CPU contention. This is typically caused by overcommitment of pCPUs. Memory or storage latency would show in other counters.
A vSphere environment uses an iSCSI storage array with multiple targets. The administrator configures CHAP authentication but some hosts fail to connect. The working hosts are configured with mutual CHAP, while the failing hosts use only one-way CHAP. What is the most likely reason for the failures?
Mutual CHAP requires both sides to authenticate.
Why this answer
The correct answer is B because mutual CHAP requires the target to authenticate the initiator and the initiator to authenticate the target. If the storage array is configured to require mutual CHAP, hosts using only one-way CHAP will fail to complete the authentication handshake. The working hosts are configured with mutual CHAP, confirming the array enforces mutual authentication.
Exam trap
The trap here is that candidates assume CHAP configuration is binary (enabled or disabled) and overlook the distinction between one-way and mutual CHAP, leading them to incorrectly select a missing secret or target name issue.
How to eliminate wrong answers
Option A is wrong because the failing hosts are configured with one-way CHAP, which still requires a CHAP secret; the issue is not the absence of a secret but the authentication direction. Option C is wrong because an incorrect iSCSI target name would cause all hosts to fail, not just those using one-way CHAP, and the working hosts connect successfully. Option D is wrong because if the array used only one-way CHAP, the hosts configured with mutual CHAP would fail, but they are working, so the array must require mutual CHAP.
An ESXi host experiences high memory ballooning in virtual machines. The administrator checks the host's memory metrics and sees a high swap rate. The host has 512 GB of memory, and the VMs are configured with memory reservations. Which configuration is most likely contributing to the excessive swapping?
Reservations guarantee memory, but when overcommitted, the host may swap out other VMs to satisfy reservations.
Why this answer
Option C is correct because when memory is overcommitted and VMs have reservations but the host is under memory pressure, the hypervisor may still swap to free up memory for reservations. Option A is incorrect because TPS is typically beneficial and does not cause swapping. Option B is incorrect because NUMA interleaving does not cause memory pressure.
Option D is incorrect because memory shares do not affect ballooning; they affect proportional distribution.
An administrator is troubleshooting a vLCM cluster where a host fails to remediate with the error: 'Host does not meet the requirements of the selected image'. The host is running ESXi 7.0 U3 and the desired image is ESXi 8.0 U1. What should the administrator check first?
vLCM requires hosts to be in maintenance mode for upgrades that require reboot.
Why this answer
Option D is correct because vLCM requires the host to be in maintenance mode before applying a new image, especially when upgrading across major ESXi versions (e.g., 7.0 U3 to 8.0 U1). The error 'Host does not meet the requirements of the selected image' typically occurs when the host is not in maintenance mode, as vLCM cannot stage or reboot the host to apply the new image while VMs are running. Placing the host in maintenance mode ensures that all VMs are migrated or powered off, allowing the remediation process to proceed without disruption.
Exam trap
The trap here is that candidates assume the error is due to VIB incompatibility or version mismatch, but the actual cause is the host not being in maintenance mode, which is a prerequisite for any vLCM remediation that changes the boot image.
How to eliminate wrong answers
Option A is wrong because the image is for ESXi 8.0 U1, and checking VIB compatibility with ESXi 7.0 U3 is irrelevant; the host must meet the requirements of the target image, not the current version. Option B is wrong because vLCM does not require internet access to download images; images are stored in the vCenter Server repository or a local depot, and the host downloads them from vCenter over the management network. Option C is wrong because vCenter Server version does not need to be at least 8.0 to remediate a host to ESXi 8.0 U1; vLCM can manage images for hosts running different ESXi versions as long as vCenter is 7.0 or later, though vCenter 8.0 is recommended for full compatibility.
Which TWO conditions are required for a successful vMotion of a powered-on virtual machine? (Select TWO.)
Shared storage is required so that both hosts can access the disks during migration.
Why this answer
Shared storage for the VM's disks and compatible CPUs are required. Identical network is not necessary; the VM can be reconnected. Same vCenter is not required for cross vCenter vMotion.
Which THREE conditions must be met for Storage I/O Control (SIOC) to work effectively? (Choose three.)
Correct: SIOC is supported on VMFS5 and later versions.
A company wants to minimize downtime during an ESXi upgrade from 7.0 to 8.0 on a vSAN cluster. What is the best approach?
This ensures no data loss and minimal disruption by processing one host at a time.
Why this answer
Option B is correct because it ensures data availability by evacuating vSAN data before upgrading each host sequentially. Option A would cause downtime; Option C (Quick Boot) reduces reboot time but does not address vSAN evacuation; Option D is a prerequisite but not the full approach.
An administrator runs the command shown in the exhibit on a vCenter Server appliance. What is the primary purpose of the Machine ID?
Machine ID is used in SSO and certificate operations.
Why this answer
Option D is correct because the Machine ID is a unique identifier for the vCenter Server instance, used for SSO and certificate management. Option A is wrong because the Machine ID is not used for vMotion. Option B is wrong because it is not used for host identification.
Option C is wrong because it is not used for DRS.
An administrator wants to ensure that a critical database VM has consistent low-latency access to its virtual disks. The VM currently resides on a datastore backed by a hybrid array. Which configuration change best meets this requirement?
A storage policy with rule set for flash ensures placement on low-latency storage.
Why this answer
Option A is correct because creating a VM storage policy that requires flash-based storage and applying it to the VM ensures that the virtual disks are placed on an all-flash datastore, which provides consistent low-latency access. This leverages vSphere Storage Policy-Based Management (SPBM) to enforce placement on flash media, eliminating the variable latency introduced by the HDD tier in a hybrid array.
Exam trap
The trap here is that candidates often confuse I/O management features (SIOC, multipathing) with storage media performance, thinking they can compensate for the inherent latency of HDDs in a hybrid array, but only a flash-based storage policy directly addresses the requirement for consistent low-latency access.
How to eliminate wrong answers
Option B is wrong because configuring multiple paths with a Round Robin policy improves I/O load balancing across paths but does not guarantee low latency; it does not change the underlying storage media from hybrid to flash. Option C is wrong because assigning a separate VMDK on a dedicated datastore isolates the VM but does not address the latency issue if the datastore is still backed by a hybrid array. Option D is wrong because enabling Storage I/O Control (SIOC) manages congestion by throttling I/O during contention but does not reduce baseline latency; it cannot compensate for the inherent latency of HDDs in a hybrid array.
An administrator is troubleshooting a failed vSphere Lifecycle Manager remediation operation on a cluster. The error message in the vLCM UI states: 'Hardware Compliance Check failed: The ESXi host does not meet the hardware requirements for the selected image.' The administrator verifies that the host is in the vSphere Hardware Compatibility List (HCL) for the ESXi version. What additional step should the administrator take to resolve this issue?
Updating the plug-in ensures the latest HCL data is used.
Why this answer
Option C is correct because the vLCM hardware compatibility plug-in may be outdated and needs an update to recognize the host hardware correctly. Option A is wrong because you cannot manually add hardware to the HCL. Option B is wrong because removing and re-adding the host is too drastic.
Option D is wrong because exporting a report does not fix the issue.
A vSphere administrator needs to restrict access to a specific cluster so that only the storage team can manage datastores. The storage team members are in a group called 'storage_team' in Active Directory. What is the best practice to achieve this?
This is correct because it provides granular, least-privilege access at the appropriate scope.
Why this answer
Option A is correct because creating a custom role with Datastore privileges and assigning it at the cluster level provides the most granular and least-privileged access. Option B is wrong because global permissions apply to all objects, granting too broad access. Option C is wrong because the Administrator role grants full access, violating the principle of least privilege.
Option D is wrong because SSO groups do not define privileges; they must be linked to a role.
A company operates a three-node vSphere cluster for a critical application. Each ESXi host has two 10GbE physical NICs (vmnic0 and vmnic1) connected to two separate physical switches (Switch A and Switch B) for redundancy. The cluster uses a vSphere Distributed Switch (vDS) with two uplinks per host: uplink1 (vmnic0) connected to Switch A, and uplink2 (vmnic1) connected to Switch B. The teaming policy is set to 'Route based on originating virtual port' with both uplinks active. The physical switches are configured in a multi-chassis link aggregation group (MLAG) that bundles the ports from both switches into a single LAG interface. The LAG is configured with mode 'active' (802.3ad). Recently, the cluster experienced a network outage when one of the physical switch uplinks failed. The VMs on the affected host lost connectivity for several seconds before recovering. The administrator wants to prevent such outages in the future. Which action should the administrator take?
This aligns the vDS with the physical LAG.
Why this answer
Option D is correct because the current configuration uses a static LAG (MLAG) on the physical switches with 802.3ad active mode, but the vDS is not configured for LACP. This mismatch causes the vDS to send frames based on originating virtual port, which does not coordinate with the physical LAG's hashing algorithm. When a physical uplink fails, the MLAG may not properly redistribute traffic because the vDS is unaware of the LAG state, leading to connectivity loss.
Configuring the vDS with LACP support and setting the teaming policy to 'Route based on IP hash' aligns the virtual and physical LAG configurations, ensuring proper load balancing and failover behavior.
Exam trap
The trap here is that candidates assume 'Route based on originating virtual port' with two active uplinks provides adequate failover, but they overlook the critical requirement for LACP coordination when the physical switches are configured with an active-mode LAG (802.3ad), leading to a mismatch that causes delayed failover.
How to eliminate wrong answers
Option A is wrong because disabling LACP on the physical switches and keeping 'Route based on originating virtual port' would break the existing MLAG configuration, potentially causing loops or inconsistent forwarding, and does not address the root cause of the outage. Option B is wrong because adding a third NIC as a standby uplink does not resolve the mismatch between the vDS teaming policy and the physical LAG; the outage occurred due to improper failover coordination, not a lack of physical redundancy. Option C is wrong because changing to 'Use explicit failover order' with one active and one standby would eliminate the active-active load balancing and still not coordinate with the physical LAG's hashing, so a single uplink failure could still cause traffic disruption if the vDS does not properly detect the LAG state.
This advanced setting controls the minimum TLS version.
Why this answer
Option A is correct because the minimum TLS version for ESXi host HTTPS traffic is configured via the host advanced setting `Config.HostAgent.plugins.vimsvc.auth.minTLSVersion`. This setting directly controls the TLS protocol version used by the ESXi host's HTTP services, including the vSphere Client and API endpoints, ensuring only TLS 1.2 or higher is accepted.
Exam trap
The trap here is that candidates confuse the ESXi host's TLS configuration (set via advanced settings) with vCenter Server's TLS configuration (set via VAMI), leading them to incorrectly select Option C.
How to eliminate wrong answers
Option B is wrong because the Security Profile in the vSphere Client manages firewall rules and service startup policies, not TLS protocol version settings. Option C is wrong because the VAMI web interface configures vCenter Server Appliance services (e.g., vCenter Single Sign-On, licensing), not the TLS version of individual ESXi hosts. Option D is wrong because ESXi Firewall rules control network traffic filtering (allow/deny by port/protocol), not encryption parameters like TLS version.
An administrator is troubleshooting a situation where a virtual machine cannot be powered on. The error message indicates insufficient permissions. The VM is in a folder named 'Production' and the administrator has been assigned a custom role with 'Virtual machine > Power On' permission at the folder level. However, the VM is also in a resource pool. What additional permission is most likely missing?
This permission is necessary to assign the VM to the resource pool during power on.
Why this answer
To power on a virtual machine that resides in a resource pool, the user must have the 'Resource > Assign virtual machine to resource pool' permission on that resource pool. Even though the user has 'Virtual machine > Power On' at the folder level, the VM's association with the resource pool introduces an additional authorization check. Without this resource pool permission, the power-on operation fails with an insufficient permissions error.
Exam trap
The trap here is that candidates assume folder-level permissions cascade fully to all operations, but vSphere enforces a 'least privilege' model where resource pool membership requires explicit assignment rights, even if the VM already exists in the pool.
How to eliminate wrong answers
Option A is wrong because 'Network > Assign network' is required only when attaching a VM to a network, not for the power-on operation itself. Option C is wrong because 'Datastore > Allocate space' is needed for creating or registering a VM or for snapshot operations, not for powering on an existing VM. Option D is wrong because 'Virtual machine > Configuration' covers changes to VM settings (e.g., CPU, memory), but the specific missing permission here is the resource pool assignment right, not a general configuration right.
After adding a new ESXi host to a vLCM-managed cluster, the compliance status shows 'Non-Compliant'. All other hosts in the cluster are compliant. The cluster uses a custom image. Which is the most likely cause of the non-compliance?
The host likely has a different ESXi version or drivers not matching the image.
Why this answer
Option A is correct because a new host may have a different software version or firmware, causing it to deviate from the cluster image. Option B is wrong because the cluster image is applied to all hosts, not per host. Option C is wrong because the image itself is typically correct if other hosts are compliant.
Option D is wrong because host profiles are not used with vLCM image-based management.
Practice VCP-DCV by domain
Target a specific domain to shore up weak areas.