Knowledge + Practice

VMware Certified Professional Data Center Virtualization VCP-DCV (VCP-DCV) — Questions 301–375

498 questions total · 7pages · All types, answers revealed

Take a mock exam Exam hub

Page 5 of 7

301

MCQeasy

A company has a cluster of 4 ESXi hosts. They want to ensure that virtual machines are automatically distributed evenly across hosts based on CPU and memory load. Which feature should be enabled on the cluster?

A.vSphere HA

B.Fault Tolerance

C.vSphere DRS

D.Distributed Power Management

AnswerC

DRS provides automatic load balancing across hosts.

Why this answer

DRS (Distributed Resource Scheduler) automatically balances VM loads based on resource usage. HA provides high availability, FT provides fault tolerance, and DPM manages host power.

Full explanation →

302

MCQeasy

A financial services company has a vSphere cluster with four hosts, each equipped with 2 CPU sockets (10 cores each, hyperthreading enabled) and 512 GB RAM. The cluster runs a mix of production and test VMs. Recently, a critical trading application VM (8 vCPUs, 64 GB RAM) was moved by DRS to a host that also runs an analytics workload (4 vCPUs, 32 GB RAM). After the move, the trading application's performance degraded significantly. The administrator checks vCenter performance charts and sees that the trading VM's CPU ready time has increased from 2% to 20% since the migration, while the host's overall CPU utilization is only 50%. The analytics VM shows normal performance. What is the most likely cause of the performance degradation?

A.The host has NUMA node interleaving enabled in BIOS.

B.The trading VM is spanning multiple NUMA nodes on the destination host.

C.The trading VM's CPU affinity is incorrectly set after migration.

D.The host has insufficient memory to run both VMs, causing memory overcommitment.

AnswerB

Spanning NUMA nodes can cause remote memory access, increasing memory latency and CPU ready time.

Why this answer

The trading VM has 8 vCPUs, and the destination host has two NUMA nodes (one per socket). With hyperthreading, each node has 10 cores × 2 threads = 20 logical CPUs. An 8-vCPU VM may be scheduled across both NUMA nodes, causing remote memory access latency when a vCPU accesses memory that is local to the other node.

This latency can manifest as increased CPU ready time (stalls) and degraded performance. The analytics VM with 4 vCPUs likely fits within one node, so its performance remains normal. Option B correctly identifies NUMA spanning.

Option A is less plausible because NUMA interleaving is a BIOS setting that would affect all VMs, not just after migration. Option C is unlikely because CPU affinity is not automatically changed by DRS. Option D is incorrect because memory overcommitment is not present (host has 512GB, VMs use only 96GB).

Full explanation →

303

MCQmedium

A vSphere administrator notices that after adding a new ESXi host to a vSphere Distributed Switch (vDS), some VMs on existing hosts lose network connectivity intermittently. What is the most likely cause?

A.The vDS MTU setting does not match the physical network MTU.

B.The new host's physical uplink is faulty, causing broadcast storms.

C.The vDS is configured with LACP, and the new host's links are not properly bundled.

D.The vDS Network I/O Control settings are not evenly distributed.

AnswerA

If the vDS uses jumbo frames (MTU 9000) but the physical switch or new host has MTU 1500, large packets may be fragmented or dropped, causing intermittent connectivity.

Why this answer

When a new ESXi host is added to a vDS with a different MTU setting than the physical network, packets may be silently dropped or fragmented, causing intermittent connectivity loss for VMs on existing hosts. This is because the vDS MTU must match the physical network MTU to avoid issues. Option B is incorrect because a faulty physical uplink would affect only VMs on that specific host, not VMs on other existing hosts.

Option C is incorrect because LACP misconfiguration would typically cause issues with the new host's connectivity, not intermittent connectivity for VMs on hosts already in the vDS. Option D is incorrect because Network I/O Control regulates bandwidth allocation and does not cause connectivity loss; such issues would manifest as performance degradation rather than intermittent loss.

Full explanation →

304

MCQmedium

Refer to the exhibit. A VM is deployed with this storage policy. What is the minimum number of hosts required for the VM's objects to be provisioned successfully?

A.4

B.2

C.1

D.3

AnswerD

With FTT=1, 2 data replicas and 1 witness require 3 hosts.

Why this answer

With FTT=1 and default RAID-1 mirroring, vSAN needs 2 data replicas plus 1 witness, requiring at least 3 hosts. A single host cannot tolerate failure; two hosts would work for FTT=0.

Full explanation →

305

MCQmedium

Refer to the exhibit. A virtual machine on the VM Network is experiencing intermittent connectivity. The administrator notices that vmnic0 is saturated. Which action would improve performance without causing a single point of failure?

A.Change the active uplinks for VM Network to vmnic1 only.

B.Increase the MTU on vSwitch0 to 9000.

C.Configure load-based teaming on vSwitch0 for the VM Network portgroup.

D.Move the VM Network to vSwitch1.

AnswerC

Load-based teaming would distribute traffic across both uplinks, reducing saturation.

Full explanation →

306

MCQmedium

Refer to the exhibit. A distributed virtual switch port shows dropped Rx packets and CRC errors. What is the most likely cause?

A.Faulty physical network cable or NIC.

B.Outdated NIC driver on the ESXi host.

C.MTU mismatch between the switch and the VM.

D.Incorrect VLAN configuration on the port group.

AnswerA

CRC errors are often due to bad cabling.

Why this answer

CRC errors and dropped Rx packets on a distributed virtual switch port indicate physical-layer corruption of frames, typically caused by a faulty cable, damaged NIC, or bad transceiver. These errors occur when the cyclic redundancy check (CRC) computed by the receiver does not match the frame's CRC field, which is a direct symptom of signal integrity issues at Layer 1.

Exam trap

The trap here is that candidates confuse CRC errors (Layer 1 physical corruption) with MTU mismatch or VLAN misconfiguration (Layer 2/3 issues), leading them to select options that address logical configuration rather than physical cabling faults.

How to eliminate wrong answers

Option B is wrong because an outdated NIC driver would more likely cause driver-level errors, timeouts, or device disconnections, not CRC errors which are physical-layer corruption. Option C is wrong because an MTU mismatch causes fragmentation or packet drops at Layer 3, not CRC errors; CRC errors are Layer 1 issues. Option D is wrong because an incorrect VLAN configuration would result in connectivity failures or traffic being dropped at Layer 2, but it would not cause CRC errors, which are purely physical-layer corruption.

Full explanation →

307

MCQmedium

An administrator is troubleshooting a failed VM encryption operation. The key provider status shows as 'Not Responding' in the vSphere Web Client. The administrator has verified network connectivity between the ESXi hosts and the key provider. What is the most likely cause of the failure?

A.The vCenter Server certificate has expired

B.The firewall on the key provider is blocking port 443

C.The ESXi hosts cannot reach the internet

D.The key provider certificate is expired or invalid

AnswerD

Expired or invalid KMS certificate causes hosts to reject connections.

Why this answer

When the key provider's certificate is expired or invalid, the ESXi hosts may be able to reach the key provider over the network, but the SSL/TLS handshake fails, resulting in a 'Not Responding' status. Option A is wrong because an expired vCenter certificate would affect vCenter operations but not the ESXi hosts' direct communication with the key provider. Option B is wrong: Port 443 is commonly used for HTTPS, but if firewall blocked port 443, the status would typically show as 'Unreachable' or 'Connection Refused', not 'Not Responding'.

Option C is wrong: ESXi hosts do not need internet access for an on-premises key provider; they only need local network connectivity.

Full explanation →

308

Multi-Selecthard

Which THREE factors should be considered when sizing a host cluster for a VDI environment with 1000 desktops? (Choose three.)

Select 3 answers

A.vMotion compatibility between hosts.

B.NUMA alignment of virtual desktops.

C.Storage IOPS capacity for boot storms.

D.vCPU-to-core ratio to prevent CPU contention.

E.Memory overcommitment ratio and available memory per host.

AnswersC, D, E

Correct: Boot storms can saturate storage; IOPS must be sufficient.

Why this answer

Storage IOPS capacity for boot storms is critical because when 1000 desktops boot simultaneously (e.g., at start of shift), they generate a massive burst of read I/O. If the storage array cannot handle the peak IOPS, desktops will experience slow boot times or timeouts. Proper sizing must account for both steady-state IOPS and the boot storm peak, often using flash storage or caching to absorb the load.

Exam trap

The trap here is that candidates often confuse operational features (like vMotion compatibility) with true capacity-sizing factors, or they mistakenly think NUMA alignment is a sizing input rather than a post-deployment optimization.

Full explanation →

309

Multi-Selectmedium

A vSphere administrator is moving from baseline-based to image-based management for a cluster. The administrator has detached all baselines and is now ready to attach an image. Which TWO conditions must be met before attaching an image to the cluster? (Choose two.)

Select 2 answers

A.The vCenter Server must be running the latest version of vSphere Lifecycle Manager.

B.The cluster must be empty of any virtual machines.

C.The cluster must have at least one host that is compatible with the selected image.

D.All hosts in the cluster must be in a connected state.

E.The cluster must not have any pending remediation tasks.

AnswersC, D

vLCM requires at least one compatible host to attach an image.

Why this answer

Options C and D are correct. For attaching an image to a cluster, the cluster must have at least one host that is compatible with the selected image (C) to ensure the image can be applied. Additionally, all hosts in the cluster must be in a connected state (D) so that vSphere Lifecycle Manager can manage them.

Option A is incorrect because the vCenter Server does not need to be running the latest version of vLCM; image-based management is supported in vSphere 7.0 and later, but not specifically 'the latest'. Option B is incorrect because the cluster can contain virtual machines; image-based management does not require an empty cluster. Option E is incorrect because pending remediation tasks do not block attaching an image; they may be addressed later.

Full explanation →

310

Multi-Selecteasy

Which two factors most directly influence vSphere NUMA scheduling decisions for a VM? (Choose two.)

Select 2 answers

A.Host NUMA node topology

B.VM memory reservation

C.Number of vCPUs

D.VM storage policy

E.Virtual machine version

AnswersA, C

The host's NUMA topology (number of nodes, cores per node) is used to place VMs.

Why this answer

The correct options are A and C. vSphere NUMA scheduling uses the number of vCPUs and the host NUMA node topology to place the VM on a single node. Memory reservation and VM version are secondary. Storage policy is not relevant.

Full explanation →

311

MCQmedium

A company's vSphere environment has multiple clusters with varying workloads. The operations team notices that one cluster consistently shows high CPU ready times on several hosts. Which action should be taken to address this performance issue?

A.Increase the memory allocation of VMs with high CPU ready times.

B.Increase the CPU reservation for VMs with high ready times.

C.Reduce the number of virtual CPUs assigned to VMs and consider adding more hosts.

D.Enable Storage DRS to balance storage I/O load.

AnswerC

Reducing vCPUs and adding hosts reduces CPU contention.

Why this answer

High CPU ready times indicate that VMs are contending for physical CPU resources because the host is over-provisioned with vCPUs relative to available pCPUs. Reducing the number of vCPUs per VM decreases scheduling overhead and contention, while adding more hosts increases the total pCPU count, directly alleviating the bottleneck. Option C correctly addresses both the demand-side (vCPU reduction) and supply-side (host addition) of the CPU scheduling issue.

Exam trap

The trap here is that candidates confuse CPU ready time with memory pressure or storage latency, leading them to choose memory or storage-related solutions instead of addressing the core CPU over-provisioning issue.

How to eliminate wrong answers

Option A is wrong because increasing memory allocation does not reduce CPU contention; it may even increase memory overhead without affecting CPU scheduling. Option B is wrong because increasing CPU reservation guarantees CPU time for specific VMs but does not reduce overall contention; it can actually worsen ready times for other VMs by reserving resources that could otherwise be shared. Option D is wrong because Storage DRS balances storage I/O load, not CPU scheduling; high CPU ready times are a compute issue, not a storage issue.

Full explanation →

312

MCQmedium

The administrator configured this LAG on a distributed switch and corresponding LACP settings on the physical switch. But the LAG is not coming up. What is a likely issue?

A.The load balancing policy should be IP hash.

B.The LAG name is not used by the physical switch.

C.The LAG mode is passive, but the physical switch is also configured as passive.

D.The uplinks should be in active/active mode.

AnswerC

LACP requires one side to be active for negotiation.

Why this answer

When both the vSphere distributed switch LAG and the physical switch are configured in passive mode, LACP negotiation fails because neither side initiates the negotiation. One side must be set to active for LACP to establish. Option A is incorrect because the load balancing policy (e.g., IP hash) is separate from LACP mode; it controls traffic distribution, not LACP negotiation.

Option B is incorrect because the LAG name is not used by LACP; LACP uses system identifiers and port keys, so a name mismatch does not prevent the LAG from coming up. Option D is incorrect because active/active mode refers to the uplink teaming policy, not the LACP mode setting.

Full explanation →

313

Multi-Selectmedium

Which TWO vSAN components are always created for every virtual disk object in a vSAN datastore? (Choose two.)

Select 2 answers

A.RAID-5 parity component

B.Checksum component

C.Metadata component

D.Witness

E.Data component (replica)

AnswersC, E

Correct: Metadata (including namespace) is always created for each object.

Full explanation →

314

MCQeasy

An administrator has created a standard vSwitch port group with VLAN ID 100. Virtual machines in this port group can communicate with each other but not with devices on the physical network. What is a possible cause?

A.The vSwitch has only one uplink.

B.The virtual machines have duplicate MAC addresses.

C.The physical switch port is not configured to pass VLAN 100.

D.The virtual machines are using different subnets.

AnswerC

The physical switch must allow VLAN 100 on the port.

Why this answer

The issue is that VMs on VLAN 100 can communicate among themselves but not with the physical network. This indicates that VLAN tagging is working within the vSwitch (inter-VM communication works), but the physical switch port is not configured to pass VLAN 100 traffic. The uplink from the ESXi host to the physical switch must be set as a trunk port allowing VLAN 100, or if using an access port, it must be set to VLAN 100.

Option A (only one uplink) is sufficient for connectivity. Option B (duplicate MAC addresses) would cause issues even locally. Option D (different subnets) would also affect local communication, but local communication works, so these are not the cause.

Full explanation →

315

MCQeasy

A company has a single ESXi host with a standard switch. The administrator creates a new port group for a DMZ network and assigns a VM to it. The VM cannot ping the default gateway. The physical switch port is configured as a trunk with VLAN 100 allowed. The port group VLAN ID is set to 100. The physical NIC is connected to the switch port and shows link up. What should the administrator do to resolve the issue?

A.Enable VLAN tagging on the physical switch port

B.Change the VLAN ID to 0

C.Verify the VM's IP configuration

D.Add a second physical NIC to the standard switch

AnswerC

If the gateway IP, subnet mask, or default gateway is misconfigured, the VM cannot ping the gateway despite correct VLAN settings.

Why this answer

The physical and virtual networking configurations appear correct (VLAN 100 on both sides, link up), so the issue is likely an IP misconfiguration on the VM itself. Option A (enable VLAN tagging on the physical switch port) is unnecessary as the port group already tags VLAN 100. Option B (change VLAN ID to 0) would break connectivity.

Option D (add a second physical NIC to the standard switch) does not address the connectivity problem.

Full explanation →

316

MCQhard

An administrator is troubleshooting a VM that is experiencing high latency on its virtual disks. The VM is connected to a vSphere datastore backed by an NFS share. The ESXi host has multiple VMkernel ports configured for NFS traffic. Which configuration change is most likely to improve storage performance?

A.Configure multiple VMkernel ports for NFS and enable port binding with a route based on originating port ID policy.

B.Use a single VMkernel port for NFS and configure it with the highest priority.

C.Enable jumbo frames on the NFS VMkernel port and the physical switches.

D.Increase the disk queue depth on the VM's virtual SCSI controller.

AnswerA

This leverages multiple network paths to improve performance and redundancy.

Why this answer

NFS port binding (also known as NFS multipathing) allows multiple VMkernel ports to be used for NFS traffic, and when combined with a 'route based on originating port ID' load-balancing policy, it enables the ESXi host to distribute NFS I/O across multiple physical NICs and paths. This increases aggregate throughput and reduces latency by avoiding congestion on a single VMkernel port or physical link, which is the most effective change for improving storage performance in this scenario.

Exam trap

The trap here is that candidates often assume jumbo frames (Option C) are the universal fix for storage latency, but they overlook that NFS port binding directly addresses the root cause of network congestion by enabling multipathing, which is the specific technology tested in this VCP-DCV domain.

How to eliminate wrong answers

Option B is wrong because using a single VMkernel port for NFS, even with the highest priority, does not increase bandwidth or reduce latency; it still creates a single point of contention and cannot leverage multiple network paths. Option C is wrong because while jumbo frames can reduce CPU overhead and improve throughput for large transfers, they do not directly address high latency caused by insufficient network parallelism; they also require end-to-end support and may not help if the bottleneck is I/O distribution. Option D is wrong because increasing the disk queue depth on the VM's virtual SCSI controller can increase throughput in some cases, but it does not resolve network-level congestion or path limitations on the NFS datastore; it may even exacerbate latency by queuing more I/O behind a slow network path.

Full explanation →

317

MCQhard

An administrator is planning a vCenter Server deployment for a large environment with 15 ESXi hosts and 300 VMs. The environment requires high availability for vCenter Server. Which deployment topology should the administrator choose?

A.A Windows vCenter Server with a mirrored SQL database.

B.A VCSA configured with vCenter HA (active-passive).

C.A single VCSA with an embedded database.

D.A VCSA deployed with an external Platform Services Controller.

AnswerB

Correct: vCenter HA provides automatic failover.

Why this answer

vCenter HA (active-passive) provides automatic failover for the vCenter Server Appliance.

Full explanation →

318

Multi-Selectmedium

Which TWO actions can be taken to reduce CPU ready time for a virtual machine? (Select TWO.)

Select 2 answers

A.Enable CPU hot-add and hot-plug for the VM

B.Decrease the number of vCPUs to match the workload

C.Migrate the VM to a host with more physical CPU cores

D.Increase the CPU shares for the VM

E.Add more vCPUs to the VM

AnswersB, D

Fewer vCPUs reduce co-scheduling demands and lower ready time.

Why this answer

Reducing the number of vCPUs to match the actual workload demand directly decreases the co-scheduling overhead and contention for physical CPU cores. When a VM has more vCPUs than its workload requires, the ESXi scheduler must wait for all assigned vCPUs to become available simultaneously, which inflates CPU ready time. Right-sizing vCPUs to the workload is a best practice to minimize ready time and improve performance.

Exam trap

The trap here is that candidates often think adding vCPUs always improves performance, but in reality, over-provisioning vCPUs increases CPU ready time and degrades performance, especially on oversubscribed hosts.

Full explanation →

319

MCQeasy

Refer to the exhibit. What is the most likely cause of the vSAN cluster health degradation?

A.vSAN performance service is not running

B.Network misconfiguration

C.Object health is failing

D.Disk capacity on a host is nearly full

AnswerD

Capacity health warning indicates disk utilization threshold exceeded.

Why this answer

The exhibit shows a vSAN cluster health degradation due to a capacity warning on a host, specifically that disk utilization has exceeded 80% threshold. This indicates that the disk capacity on a host is nearly full, which is option D. Option B (network misconfiguration) is not indicated as other health checks are healthy.

Options A (vSAN performance service not running) and C (object health failing) are also not supported by the output, which shows only a capacity issue.

Full explanation →

320

MCQmedium

An administrator notices that HTTP connections to the ESXi host are timing out frequently. Based on the exhibit, which configuration change would most likely resolve the issue?

A.Increase maxKeepAliveTimeout to a higher value, such as 180

B.Restart the rhttpproxy service

C.Set useProxy to true and specify a proxy server

D.Set maxKeepAliveTimeout to 0 to disable keepalive

AnswerA

A longer timeout prevents premature disconnection.

Why this answer

The maxKeepAliveTimeout default of 100 seconds may be too low for long-lived HTTP connections, causing timeouts. Increasing it to 180 seconds allows the server to keep idle connections open longer, reducing the likelihood of timeouts. Option B is incorrect because restarting the rhttpproxy service does not change the timeout value; it only temporarily resets the service, which would not address the underlying timeout issue.

Option C is incorrect because enabling a proxy server is unrelated to HTTP connection timeouts; it would add an intermediary but not resolve the keepalive timeout. Option D is incorrect because setting maxKeepAliveTimeout to 0 disables HTTP keepalive entirely, which would force new connections for every request, likely increasing latency and timeouts rather than resolving them.

Full explanation →

321

MCQmedium

A large VM with 24 vCPUs is deployed on a dual-socket host with two NUMA nodes each having 12 cores. Which step is a BEST PRACTICE to ensure optimal performance for this VM?

A.Disable hyperthreading on the host to reduce contention.

B.Assign all vCPUs to a single NUMA node using CPU affinity.

C.Leave vNUMA enabled and ensure the VM has enough memory to span two nodes.

D.Set the VM memory reservation to zero to allow transparent page sharing.

AnswerC

vNUMA ensures the guest OS can optimize memory access across NUMA nodes, improving performance.

Why this answer

Setting vNUMA controls exposes the NUMA topology to the guest OS, allowing it to optimize memory locality. By default, vNUMA is enabled for VMs with more than 8 vCPUs. Placing the VM on a single NUMA node would limit resources.

Disabling hyperthreading is unnecessary. Setting CPU affinity reduces flexibility.

Full explanation →

322

MCQhard

A company uses an external Platform Services Controller (PSC) in a vSphere 6.7 environment. They plan to upgrade to vSphere 7.0. Which security-related consideration is most important?

A.The external PSC will automatically convert to an embedded PSC during upgrade.

B.The external PSC is deprecated; it must be converged into the vCenter Server.

C.The SSL certificates for the PSC must be reissued from a new CA.

D.The STS certificates need to be replaced with custom ones immediately after upgrade.

AnswerB

vSphere 7.0 does not support external PSCs.

Why this answer

VSphere 7.0 removes the external PSC model; all services are embedded. Option A is incorrect because there is no migration wizard for external PSC to embedded, but does not default to AD. Option C is incorrect because vSphere 7.0 still uses VECS.

Option D is incorrect because STS certificates can be managed within the embedded PSC.

Full explanation →

323

MCQhard

Refer to the exhibit. An administrator configured beacon probing for network failure detection on the Production port group. However, virtual machines are experiencing intermittent connectivity. What is the most likely reason?

A.There are only two uplinks, and beacon probing requires at least three uplinks.

B.The VLAN ID 200 is not allowed on the physical switch trunks.

C.The DVS version 7.0.0 does not support beacon probing.

D.The load balancing policy is set to Route based on IP hash, which is incompatible with beacon probing.

AnswerA

Beacon probing needs three or more uplinks to properly detect failures. With two uplinks, it can cause flapping.

Why this answer

Beacon probing requires at least three uplinks to function correctly. The exhibit shows only two uplinks (vmnic1 and vmnic2) are active. With two uplinks, beacon probing cannot reliably detect failures because there are not enough beacons to determine which link is down.

This can cause false positives and connectivity issues.

Full explanation →

324

MCQeasy

An organization wants to migrate a VM from one vCenter Server to another without shutting down the VM. Both vCenter Servers are in Enhanced Linked Mode. Which migration method should the administrator use?

A.Cold migration

B.Cross-vCenter vMotion

C.Storage vMotion

D.Export the VM as OVF and import it to the other vCenter

AnswerB

This enables live migration across vCenter Servers when they are in Enhanced Linked Mode.

Why this answer

Cross-vCenter vMotion (option B) is the correct method because it allows a live, zero-downtime migration of a running VM between vCenter Server instances, even when both are in Enhanced Linked Mode. This feature uses the vMotion protocol to transfer memory and execution state across vCenter boundaries without requiring shared storage, as long as the source and destination hosts are in the same vCenter Single Sign-On domain and meet compatibility requirements.

Exam trap

The trap here is that candidates may confuse Enhanced Linked Mode with the ability to perform any migration between vCenters, but only Cross-vCenter vMotion supports live migration; Storage vMotion and OVF export/import are often incorrectly chosen because they are associated with moving VMs without understanding the vCenter boundary limitation.

How to eliminate wrong answers

Option A is wrong because cold migration requires the VM to be powered off, which contradicts the requirement of not shutting down the VM. Option C is wrong because Storage vMotion only moves the VM's virtual disks between datastores within the same vCenter Server, not between different vCenter Server instances. Option D is wrong because exporting a VM as OVF and importing it to another vCenter Server requires the VM to be powered off (or at least quiesced) and involves significant downtime, not a live migration.

Full explanation →

325

MCQeasy

A vSphere administrator needs to monitor the performance of a cluster of 10 ESXi hosts. The cluster is running 200 VMs. Which tool provides real-time performance metrics and historical data with the least overhead?

A.vCenter Performance Charts

B.resxtop

C.esxtop with output logged to a file

D.vRealize Operations Manager

AnswerA

Correct: Integrated, low-overhead, provides real-time and historical metrics.

Why this answer

vCenter Performance Charts provide real-time and historical performance metrics for clusters, hosts, and VMs with minimal overhead because they query the vCenter Server database, which aggregates data from ESXi hosts at configurable intervals (default 20 seconds for real-time, 5 minutes for historical). This avoids the need for direct host connections or additional logging, making it the most efficient choice for monitoring a cluster of 10 hosts and 200 VMs.

Exam trap

The trap here is that candidates often confuse esxtop or resxtop as the only tools for real-time metrics, overlooking that vCenter Performance Charts provide both real-time and historical data with far less overhead for cluster-level monitoring.

How to eliminate wrong answers

Option B (resxtop) is wrong because it is a command-line tool for Linux-based vSphere CLI that provides real-time performance data for a single ESXi host, but it cannot aggregate data across a cluster or provide historical data without manual logging. Option C (esxtop with output logged to a file) is wrong because while it can capture real-time metrics and log them for historical analysis, it introduces significant overhead on the ESXi host due to continuous data collection and file I/O, and it requires manual setup and parsing for a cluster of 10 hosts. Option D (vRealize Operations Manager) is wrong because it is a comprehensive performance management tool that provides advanced analytics and historical data, but it introduces substantial overhead from agent deployment and data collection, making it less suitable for a simple monitoring task where vCenter Performance Charts suffice with lower resource consumption.

Full explanation →

326

MCQeasy

Which vSphere component is responsible for managing the lifecycle of ESXi hosts, including patching and upgrading?

A.vSphere Lifecycle Manager

B.Host Profiles

C.Auto Deploy

D.vSphere Distributed Resource Scheduler

AnswerA

It manages patching and upgrades for ESXi hosts.

Why this answer

vSphere Lifecycle Manager (vLCM) is the correct component because it is specifically designed to manage the lifecycle of ESXi hosts, including patching, upgrading, and firmware/driver updates. It uses desired-state management to ensure hosts conform to a specified image or baseline, automating the entire update process across clusters.

Exam trap

The trap here is that candidates often confuse Host Profiles (which manage configuration) with lifecycle management, or they think Auto Deploy handles patching because it deploys images, but Auto Deploy is for initial provisioning, not ongoing patching of existing hosts.

How to eliminate wrong answers

Option B (Host Profiles) is wrong because Host Profiles capture and apply host-level configuration settings (e.g., networking, storage) but do not manage patching or upgrading of ESXi software. Option C (Auto Deploy) is wrong because Auto Deploy provisions ESXi hosts from a central image repository using PXE boot, but it does not handle patching or upgrading of already-deployed hosts; it is primarily for stateless or stateful deployment. Option D (vSphere Distributed Resource Scheduler) is wrong because DRS manages workload placement and resource balancing across hosts in a cluster, not host software lifecycle tasks like patching or upgrading.

Full explanation →

327

MCQhard

An administrator is using vLCM to manage a cluster with 4 ESXi hosts. After a remediation, two hosts show a compliance status of 'Non-Compliant' with the message 'Firmware is not compatible with the selected image'. What is the most likely cause?

A.The selected image includes a firmware component that is not compatible with the hosts.

B.The firmware update requires a different ESXi version and was skipped.

C.The hosts were put into maintenance mode during remediation and autopassivation failed.

D.The cluster does not have a Hardware Support Manager configured.

AnswerD

HSM is required for firmware compliance checks.

Why this answer

VLCM relies on a Hardware Support Manager (HSM) to validate firmware compatibility against the selected ESXi image. Without an HSM configured, vLCM cannot check firmware versions, so it flags hosts as 'Non-Compliant' with the message 'Firmware is not compatible with the selected image' even if the firmware is actually compatible. This is a common misconfiguration when using vLCM with vSAN or other hardware-dependent clusters.

Exam trap

The trap here is that candidates assume the error message 'Firmware is not compatible' always means an actual firmware mismatch, rather than recognizing it as a symptom of a missing Hardware Support Manager configuration.

How to eliminate wrong answers

Option A is wrong because if the image included an incompatible firmware component, vLCM would typically fail during remediation or show a different error, not a post-remediation compliance status of 'Non-Compliant' with that specific message. Option B is wrong because vLCM does not skip firmware updates based on ESXi version; it either applies the firmware or fails the remediation, and the message indicates a compatibility check failure, not a skip. Option C is wrong because autopassivation is related to vSphere HA and host isolation, not firmware compliance; maintenance mode during remediation is normal and does not cause this compliance message.

Full explanation →

328

MCQeasy

A network administrator needs to isolate traffic between VMs in the same VLAN on a distributed switch. Which feature should be used?

A.Network I/O Control

B.Private VLAN

C.VLAN trunking

D.Traffic shaping

E.Port binding

AnswerB

Private VLANs allow isolation within a VLAN by defining primary, community, and isolated VLANs, restricting traffic as needed.

Why this answer

Private VLANs enable isolation between VMs within the same VLAN by dividing the VLAN into primary, isolated, and community sub-VLANs. Option A (Network I/O Control) is used for bandwidth allocation and does not provide traffic isolation. Option C (VLAN trunking) allows multiple VLANs over a single link, not isolation within a VLAN.

Option D (Traffic shaping) controls rate limiting, not isolation. Option E (Port binding) determines port membership on a distributed switch, but does not isolate traffic within a VLAN.

Full explanation →

329

MCQhard

A company uses vSphere 7 with vLCM. They want to update hosts in a cluster with a new ESXi version. The cluster has mixed hardware. What is the recommended method?

A.Use vSphere Update Manager baseline

B.Manually upload ISO to each host

C.Use cluster image management

D.Use Auto Deploy

AnswerC

vLCM cluster image management is the recommended method for ESXi updates in vSphere 7+ environments.

Why this answer

VLCM uses cluster image management to apply a single image specification across all hosts, which can include generic ESXi base image and optional add-ons for different hardware vendors. Options A, B, and D are not the recommended modern approach.

Full explanation →

330

MCQeasy

What is the purpose of the 'Export System Logs' option in vSphere Lifecycle Manager?

A.Collect logs for troubleshooting

B.Create a recovery image

C.Back up configuration

D.Transfer logs to vCenter

AnswerA

This option gathers relevant log files to help diagnose issues with vLCM operations.

Why this answer

The 'Export System Logs' option in vSphere Lifecycle Manager is designed to collect and export log files from vLCM components, which can then be used for troubleshooting issues related to lifecycle management operations.

Full explanation →

331

MCQmedium

During a vLCM remediation of a cluster, one host fails with the error: 'Host does not meet the minimum required version of the cluster image.' The cluster image is ESXi 8.0 Update 1. The host is currently running ESXi 7.0 Update 3. What is the most likely reason for this failure?

A.The cluster's DRS settings are preventing the upgrade.

B.The host lost network connectivity to vCenter.

C.The host's hardware is not compatible with ESXi 8.0.

D.The upgrade path from 7.0 U3 to 8.0 U1 requires an intermediate version.

AnswerC

Correct. The error is triggered when the host's hardware is not validated for the target ESXi image, indicating hardware incompatibility.

Why this answer

The error 'Host does not meet the minimum required version of the cluster image' in vLCM is commonly caused by hardware incompatibility. When a cluster image includes hardware compatibility requirements (via HSM), vLCM checks if the host's hardware is listed in the vSphere Hardware Compatibility List (HCL) for ESXi 8.0. If the host's hardware is not supported, vLCM blocks the remediation and displays this error.

Option C correctly identifies this. Options A, B, and D are incorrect: DRS settings (A) do not affect vLCM, network connectivity (B) would produce a different error, and the upgrade path from 7.0 U3 to 8.0 U1 is directly supported by vLCM, so an intermediate version is not required (D).

Exam trap

Candidates often assume version mismatch errors are purely about upgrade paths, but vLCM can perform direct upgrades. Instead, such errors often indicate hardware compatibility issues.

Full explanation →

332

MCQmedium

Refer to the exhibit. An administrator cannot resolve the hostname of a DNS server using the ESXi host. What is the most likely cause?

A.The search domain is incorrectly set to localdomain.

B.The DNS servers are unreachable.

C.The DNS servers are not configured correctly for the domain.

D.The ESXi host is not configured to use DNS.

AnswerC

The hostname resolution failed, indicating the DNS server cannot resolve the name.

Full explanation →

333

MCQmedium

An administrator is configuring a vSAN cluster with all-flash capacity. The cluster uses RAID-5 erasure coding with a policy of 'Number of failures to tolerate = 1' (PFTT=1). The administrator wants to minimize storage overhead while ensuring availability. Which vSAN storage policy setting should be used?

A.Set 'Primary level of failures to tolerate' to 1 and 'Primary level of failures to tolerate method' to 'RAID-1 (Mirroring)'

B.Set 'Primary level of failures to tolerate' to 2 and 'Primary level of failures to tolerate method' to 'RAID-6 (Erasure Coding)'

C.Set 'Primary level of failures to tolerate' to 1 and 'Primary level of failures to tolerate method' to 'RAID-5 (Erasure Coding)'

D.Set 'Primary level of failures to tolerate' to 0

AnswerC

RAID-5 with PFTT=1 provides efficient capacity usage and fault tolerance.

Why this answer

For all-flash vSAN, RAID-5/6 erasure coding is recommended. With PFTT=1, RAID-5 requires only 1 parity component, minimizing overhead. Option C is correct.

Option A (RAID-1 mirroring) would use more capacity. Option B (RAID-6) is for PFTT=2 and adds more overhead. Option D (no redundancy) is not fault tolerant.

Full explanation →

334

MCQhard

A company has a vSphere 7.0 cluster with 6 ESXi hosts connected to a Dell EMC PowerStore array using iSCSI. They are using VMFS6 datastores. After a recent firmware upgrade on the array, they notice that performance on one datastore has degraded significantly. The datastore is used by several high-I/O VMs. The administrator runs 'esxcli storage core path list' and sees that all paths to that datastore are active but with varying latency. The PSP is set to Round Robin with IOPS limit of 1000. The SATP is VMW_SATP_ALUA. The storage administrator confirms that the array is in active-active mode. What should the administrator do to improve performance?

A.Enable the array's QoS policy and configure the datastore for VAAI.

B.Change the PSP to Most Recently Used (MRU) to reduce path thrashing.

C.Increase the Round Robin IOPS limit to 10000.

D.Change the SATP to VMW_SATP_DEFAULT_AA and reconfigure the iSCSI initiator.

AnswerC

Increasing the IOPS limit reduces path switching frequency, optimizing throughput for high-I/O VMs.

Why this answer

The Round Robin PSP with an IOPS limit of 1000 is causing the ESXi host to switch paths too frequently, which can lead to higher latency due to path thrashing and suboptimal use of the array's active-active ALUA mode. Increasing the Round Robin IOPS limit to 10000 reduces the frequency of path switches, allowing each path to handle more I/Os before switching, which improves performance for high-I/O workloads on VMFS6 datastores.

Exam trap

The trap here is that candidates often assume a higher IOPS limit will cause more path switching and latency, when in fact the opposite is true—a low IOPS limit causes thrashing, and increasing it stabilizes performance on active-active arrays.

How to eliminate wrong answers

Option A is wrong because enabling QoS on the array does not directly address path switching behavior, and VAAI is a storage offload feature that does not resolve high latency from path thrashing. Option B is wrong because changing the PSP to MRU would use only one active path, negating the benefits of the active-active array and likely worsening performance for high-I/O VMs. Option D is wrong because VMW_SATP_DEFAULT_AA is a legacy SATP for active-active arrays without ALUA, and changing to it would break the ALUA path selection logic, potentially causing incorrect path states or failover issues.

Full explanation →

335

MCQeasy

A network administrator notices that all traffic from two VMs connected to the same standard switch port group is going through the same physical uplink, causing congestion. The teaming policy is set to Route based on originating virtual port. What change should the administrator make to distribute traffic more evenly?

A.Change teaming policy to Route based on IP hash.

B.Increase the number of uplinks to 4.

C.Enable LACP on the standard switch.

D.Change the load balancing policy to Explicit failover order.

AnswerA

Correctly distributes traffic based on IP pairs.

Why this answer

IP hash uses source and destination IP addresses to distribute traffic across uplinks, providing better load distribution. Option B is incorrect because simply adding more uplinks without changing the teaming policy does not redistribute traffic; the originating virtual port still ties the VM to a single uplink. Option C is incorrect because LACP is not supported on standard vSwitches; it requires a distributed switch.

Option D is incorrect because explicit failover order does not distribute traffic; it only defines active/standby uplinks.

Full explanation →

336

Multi-Selectmedium

Which TWO actions can help reduce network latency for a latency-sensitive VM in a vSphere environment? (Choose two.)

Select 2 answers

A.Use a standard virtual switch instead of a distributed switch.

B.Configure NetQueue on the physical NIC.

C.Enable SR-IOV on the physical NIC and assign the virtual function to the VM.

D.Enable jumbo frames on the virtual switch.

E.Disable TCP segmentation offload on the VM.

AnswersB, C

Correct: NetQueue distributes interrupts to multiple CPUs, reducing latency.

Why this answer

NetQueue improves network performance by distributing packet processing across multiple CPUs, reducing the overhead on a single core and lowering latency for latency-sensitive VMs. This is achieved by using multiple receive queues on the physical NIC, which allows parallel packet handling and minimizes interrupt coalescing delays.

Exam trap

The trap here is that candidates often confuse throughput-enhancing features (like jumbo frames or TSO) with latency-reducing features, failing to recognize that SR-IOV and NetQueue directly address packet processing overhead and interrupt handling.

Full explanation →

337

MCQhard

An administrator has enabled jumbo frames (MTU 9000) on a vSphere Distributed Switch. Virtual machines on different hosts cannot communicate, but VMs on the same host can. The physical switches support jumbo frames. What is the most likely cause?

A.The physical switch QoS is misconfigured.

B.The VMkernel adapters are still using default MTU.

C.The distributed switch port group MTU is set to 1500.

D.The physical NICs are not configured with MTU 9000.

AnswerD

Correct. The physical NICs (vmnic) must also be set to MTU 9000 for jumbo frames to work across hosts.

Why this answer

Jumbo frames must be enabled on the physical NICs (vmnic) as well as the virtual switch. If the physical NICs are still set to MTU 1500, frames larger than 1500 bytes will be dropped when they reach the physical switch port, preventing inter-host communication while intra-host communication remains unaffected. Option A is incorrect because QoS configuration does not relate to MTU issues.

Option B is incorrect because VMkernel adapters are used for management and vMotion traffic, not VM data traffic. Option C is incorrect because the distributed switch port group MTU is inherited from the DVS, which already has MTU 9000.

Full explanation →

338

Drag & Dropmedium

Order the steps to perform a vMotion migration of a powered-on virtual machine.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

Prerequisites check, initiate migration, select type, choose destination, and confirm.

Full explanation →

339

MCQhard

A vSphere administrator is planning a Storage DRS implementation for a datastore cluster containing multiple VMFS datastores. The VMs have various I/O patterns. Some VMs should always remain together on the same datastore. Which configuration should be used?

A.Create a VM-to-VM affinity rule in the datastore cluster.

B.Set individual datastore affinity rules on each host.

C.Apply Storage I/O Control with high shares to the VMs.

D.Create a VM-to-VM anti-affinity rule in the datastore cluster.

AnswerA

Correct: Affinity rule ensures VMs are placed on the same datastore.

Why this answer

Storage DRS affinity rules allow you to keep VMs together (VM-to-VM affinity) or separate (anti-affinity). To ensure VMs remain together, a VM-to-VM affinity rule is required. Option B is incorrect because Storage DRS does not support per-host datastore affinity rules; rules are at the datastore cluster level.

Option C is incorrect because Storage I/O Control manages I/O prioritization, not VM placement. Option D is incorrect because a VM-to-VM anti-affinity rule would separate the VMs, not keep them together.

Full explanation →

340

MCQmedium

An administrator has configured Storage DRS on a cluster of datastores. The cluster includes both NFS and VMFS datastores. The administrator notices that Storage DRS recommendations are not being generated for some datastores. What is the most likely cause?

A.NFS datastores are not supported by Storage DRS

B.The datastore space utilization is below the threshold

C.The datastores are part of a vSAN cluster

D.I/O metrics are not enabled for the Storage DRS cluster

AnswerA

Storage DRS only supports VMFS datastores and certain NFS arrays with VAAI.

Why this answer

Storage DRS does not support NFS datastores unless they are on a NAS array that supports VAAI for storage offload operations. In this scenario, the cluster includes both NFS and VMFS datastores, but Storage DRS recommendations are not generated for some datastores. The most likely cause is that those datastores are NFS and do not meet the requirements for Storage DRS.

Option B (space utilization below threshold) is incorrect because Storage DRS would still generate recommendations when space utilization is below the threshold, just perhaps less frequently. Option C (datastores part of a vSAN cluster) is incorrect because vSAN uses its own distributed resource scheduler, not Storage DRS, and would not be included in the cluster. Option D (I/O metrics not enabled) is incorrect because if I/O metrics were not enabled, recommendations based on I/O latency would not be generated, but recommendations based on space utilization would still be generated; however, the question states recommendations are not being generated for some datastores, which points to the NFS incompatibility.

Full explanation →

341

MCQeasy

A company plans to deploy a new homogeneous cluster with vSphere 8. They want to use vLCM to simplify lifecycle management. What is the recommended approach for maintaining the ESXi hosts?

A.Define a single cluster image and apply it to all hosts.

B.Manually upgrade each host via ISO and then import into vLCM.

C.Use vSphere baselines to manage patches.

D.Create separate images for each host based on its hardware.

AnswerA

A single cluster image ensures all hosts are identical, simplifying management and compliance.

Why this answer

VLCM uses a single cluster image for homogeneous clusters to ensure consistency. Option B is wrong because manual upgrades via ISO are not recommended when using vLCM; vLCM automates the process with cluster images. Option C is wrong because vSphere baselines are legacy and vLCM is the newer approach for lifecycle management.

Option D is wrong because separate images per host are for heterogeneous clusters, not homogeneous.

Full explanation →

342

MCQeasy

An administrator wants to configure the ESXi host firewall to allow connections only from a specific management subnet. How can this be achieved?

A.Enable vSphere HA and set it to control management traffic.

B.Use the ESXi firewall settings to define allowed IP addresses for the required services.

C.Configure the DCUI to restrict management access.

D.Set the firewall to enabled and allow all incoming connections.

AnswerB

The ESXi firewall allows per-rule IP-based restrictions.

Why this answer

The ESXi host firewall can be configured with rule sets that allow traffic only from specific IP addresses or subnets. This is done by editing the firewall rules for the required services and specifying the allowed IP addresses. Option A is incorrect because vSphere HA is a high availability feature that does not manage firewall settings or control management traffic.

Option C is incorrect because the DCUI (Direct Console User Interface) is used for local console configuration, not for setting firewall rules. Option D is incorrect because allowing all incoming connections would be insecure and not restrict access to a specific management subnet.

Full explanation →

343

MCQeasy

What is the purpose of the vLCM hardware compatibility check?

A.Verify ESXi build

B.Check storage performance

C.Check if hardware is on HCL

D.Validate network drivers

AnswerC

The hardware compatibility check ensures that the hardware components are certified for the selected ESXi version.

Why this answer

VLCM's hardware compatibility check validates that the desired image (ESXi and add-ons) is compatible with the physical hardware, using the Hardware Compatibility List (HCL).

Full explanation →

344

MCQeasy

An ESXi host has an NFS datastore mounted from a NAS array. The administrator wants to enable hardware acceleration (VAAI) for the datastore. Which requirement must be met?

A.The NAS array must present the LUN as an iSCSI target

B.The datastore must be formatted as VMFS6

C.The ESXi host must have a software FCoE adapter configured

D.The NAS array must support NFSv3 and VAAI primitives

AnswerD

VAAI for NFS requires NAS support for NFSv3/v4.1 and the relevant primitives.

Why this answer

VAAI for NFS requires the NAS array to support NFSv3 (or v4.1) and implement the VAAI primitives. Option D is correct. Option A (iSCSI) is block storage, not NFS.

Option B (VMFS6) is a local filesystem and not required for NFS VAAI. Option C (software FCoE) is unrelated to NFS.

Full explanation →

345

MCQmedium

A company is planning to upgrade vCenter Server from 7.0 to 8.0 and then upgrade ESXi hosts from 7.0 Update 2 to 8.0. They have a vSAN cluster and use vSphere Lifecycle Manager (vLCM) with a single image. What is a critical prerequisite that must be verified before starting the vCenter Server upgrade?

A.The vSAN cluster must be turned off to avoid data loss.

B.All ESXi hosts must be updated to the latest ESXi 7.0 patch before upgrading vCenter.

C.vSphere Update Manager (VUM) must be installed and configured.

D.The vCenter Server version must be equal to or higher than the ESXi version being managed.

AnswerD

vCenter must be at a higher or equal version to manage and upgrade ESXi hosts.

Why this answer

VCenter Server must be at a version equal to or higher than the ESXi hosts it manages. When upgrading from vCenter 7.0 to 8.0, the vCenter upgrade must complete first, as it will then be able to manage the ESXi 7.0 hosts during their subsequent upgrade to 8.0. Attempting to upgrade ESXi hosts before vCenter would violate this compatibility requirement and could cause management communication failures.

Exam trap

The trap here is that candidates often assume ESXi hosts must be fully patched or that vSAN requires downtime, when in reality the critical prerequisite is the version compatibility between vCenter and ESXi, not the patch level or cluster state.

How to eliminate wrong answers

Option A is wrong because vSAN clusters do not need to be turned off during a vCenter upgrade; vCenter is a management plane component and the vSAN data plane continues to operate. Option B is wrong because there is no requirement to apply the latest ESXi 7.0 patch before upgrading vCenter; the vCenter upgrade can proceed as long as the ESXi hosts are at a supported version (7.0 Update 2 is supported for upgrade to vCenter 8.0). Option C is wrong because vSphere Lifecycle Manager (vLCM) is used with a single image in this scenario, and vSphere Update Manager (VUM) is a separate, legacy tool that is not required for vLCM-based environments.

Full explanation →

346

MCQmedium

Refer to the exhibit. An administrator checks the vSAN cluster health and sees the above output. The cluster has been running for months. What is the most likely cause of the degraded objects?

A.A disk failure occurred and components are being rebuilt

B.A storage policy was changed to increase redundancy

C.A disk group is full and needs capacity expansion

D.A network partition between hosts

AnswerA

Degraded objects with resync indicate repair after failure.

Why this answer

Degraded objects in vSAN indicate that some components are unavailable and the system is rebuilding from redundant copies. This is typical after a disk failure, where the cluster automatically initiates resynchronization to restore fault tolerance. The cluster has been running for months, so a recent disk failure is the most likely cause.

Option A correctly identifies this scenario. Option B (network partition) would typically show connectivity issues or 'Unreachable' objects, not degraded. Option C (disk group full) would show 'Absent' or 'No disk space' errors, not degraded.

Option D (policy change) would cause reconfiguration but not necessarily degrade objects; objects would be marked as 'Compliant' after reconfiguration.

Full explanation →

347

Multi-Selecteasy

Which two conditions must be met for a VMkernel adapter to be used for vMotion on a distributed switch? (Choose two.)

Select 2 answers

A.The VMkernel adapter must be in the same subnet as the destination host.

B.The VMkernel adapter must be enabled for vMotion.

C.The physical uplinks must be in active/standby mode.

D.The port group must have VLAN ID 0.

E.The port group must be configured with a static IP address.

AnswersA, B

vMotion requires IP connectivity between hosts on the same subnet.

Why this answer

Options A and B are correct. The VMkernel adapter must be in the same subnet as the destination host (A) to allow vMotion traffic to route properly, and it must be enabled for vMotion (B) in the adapter properties. Other options are not required: active/standby mode (C) is not a requirement; VLAN ID can be any valid VLAN (D); and static IP is not necessary (E) as DHCP can be used.

Full explanation →

348

MCQmedium

A virtual machine connected to the 'VM Network' port group is unable to obtain an IP address from the DHCP server located on the same subnet (192.168.1.0/24). The DHCP server is connected to the physical switch which is configured as an access port for VLAN 100. What is the most likely cause of the issue?

A.The physical uplink vmnic0 is not configured as a trunk on the physical switch.

B.The port group should use a different VLAN ID.

C.The standard switch has MTU of 1500 but DHCP uses 1500.

D.The DHCP server is on a different VLAN.

E.The VMkernel port vmk0 has an IP address in the same subnet but is not required for DHCP.

AnswerB

Correct. The VM Network port group defaults to VLAN 0, placing the VM in a different VLAN from the DHCP server (VLAN 100). Configuring the port group with VLAN 100 aligns the broadcast domains and resolves the issue.

Why this answer

The virtual machine is connected to the default 'VM Network' port group, which has VLAN ID 0 (no VLAN tagging), sending untagged traffic. The DHCP server is connected to a physical switch port configured as an access port for VLAN 100, placing it in VLAN 100. Because the VM and the DHCP server are on different VLANs, they cannot communicate at Layer 2, preventing DHCP discovery broadcasts from reaching the server.

The most likely cause is that the port group should use a different VLAN ID (VLAN 100) to match the DHCP server's VLAN. Changing the port group to VLAN 100 will tag the traffic, requiring a trunk on the physical uplink, but the root cause is the VLAN mismatch, not solely the uplink configuration.

Exam trap

Candidates may assume the physical switch uplink configuration is the only factor, overlooking that the default VM Network port group (VLAN 0) places the VM in a different VLAN than the DHCP server. The primary misconfiguration is the port group VLAN setting, not the trunk mode of the physical switch.

How to eliminate wrong answers

Option B is wrong because the port group should use VLAN ID 100 to match the access port's VLAN, not a different ID. Option C is wrong because MTU 1500 is standard for Ethernet and DHCP; mismatched MTU would cause fragmentation issues, not DHCP failure. Option D is wrong because the DHCP server is on the same subnet (192.168.1.0/24) and connected to an access port for VLAN 100, so it is on the same VLAN as the VM's intended network.

Option E is wrong because the VMkernel port vmk0 is used for vSphere management traffic, not for VM DHCP; its IP address is irrelevant to VM network connectivity.

Full explanation →

349

MCQeasy

A vSphere administrator is designing a new cluster for a mission-critical application that requires maximum availability. The cluster will consist of four ESXi hosts. Which vSphere feature should be enabled to protect against host failures while minimizing resource waste?

A.Enable vSphere DRS and set the migration threshold to the most aggressive setting.

B.Enable vSphere HA and configure admission control to reserve resources for one host failure.

C.Enable vSphere Fault Tolerance on all VMs in the cluster.

D.Configure vSphere Replication for all VMs to replicate to a secondary site.

AnswerB

This provides the required availability while optimizing resource usage.

Why this answer

VSphere HA with admission control configured to reserve resources for one host failure ensures that if a host fails, the VMs can be restarted on the remaining hosts without overcommitting resources. This provides maximum availability for mission-critical applications while minimizing resource waste by only reserving enough capacity for a single host failure, not for multiple or all hosts.

Exam trap

The trap here is that candidates often confuse vSphere HA (which provides host-level failover) with vSphere DRS (which only optimizes resource usage) or assume that Fault Tolerance is the only way to achieve maximum availability, ignoring its massive resource overhead and practical limitations.

How to eliminate wrong answers

Option A is wrong because vSphere DRS is a load-balancing and placement tool, not a high-availability feature; it does not protect against host failures or provide any failover capability. Option C is wrong because vSphere Fault Tolerance provides continuous availability by creating a secondary VM that mirrors the primary, but it requires significant CPU and memory overhead (often 100%+ resource duplication) and is not practical for all VMs in a cluster due to resource waste and compatibility limitations. Option D is wrong because vSphere Replication is a disaster recovery feature that replicates VMs to a secondary site, which protects against site-level failures but does not provide immediate host-level failover within the same cluster and introduces latency and storage overhead.

Full explanation →

350

MCQmedium

An administrator needs to migrate a powered-on VM from one datastore to another without any downtime. Which vSphere feature should be used?

A.Storage DRS

B.Storage vMotion

C.vSphere Replication

D.vSphere vMotion

AnswerB

Migrates VM files with zero downtime.

Why this answer

Storage vMotion allows live migration of VM files while the VM remains powered on. vMotion migrates compute. vSphere Replication is for DR. Storage DRS balances storage but does not directly migrate without downtime.

Full explanation →

351

MCQhard

An ESXi host has two physical uplinks (vmnic0, vmnic1) connected to a distributed switch. The administrator wants to use LACP to aggregate these uplinks to a physical switch stack. Which prerequisite must be met for LACP to work with a distributed switch?

A.The physical switch must be configured with a static LAG.

B.The distributed switch version must be 5.5 or later.

C.The uplinks must be in an active/standby configuration.

D.The distributed switch must be configured with a LAG and the physical switch with matching LACP settings.

E.The LACP group must have a unique MAC address.

AnswerD

A LAG must be created on the DVS, and the physical switch must be configured with compatible LACP parameters.

Why this answer

For LACP to work with a distributed switch, the distributed switch must be configured with a Link Aggregation Group (LAG) and the physical switch must be configured with matching LACP settings. Option A is incorrect because LACP requires a dynamic LAG on the physical switch, not static. Option B is incorrect because LACP support for distributed switches was introduced in vSphere 5.1, not 5.5.

Option C is incorrect because LACP requires active/active configuration, not active/standby. Option E is not a prerequisite; LACP uses the physical MAC addresses of the uplinks.

Full explanation →

352

MCQhard

A financial services company runs a critical trading application on a vSphere 7 cluster with four ESXi hosts. Each host has 512 GB RAM and dual 16-core CPUs. The application is extremely latency-sensitive and runs in a single VM named TRADER-01. The VM currently has 16 vCPUs and 128 GB RAM assigned. The cluster uses vSphere HA and DRS in fully automated mode with aggressive migration threshold. Recently, the application experienced occasional latency spikes. Monitoring shows that these spikes correlate with DRS migrations of other VMs on the same host as TRADER-01. The administrator needs to eliminate these latency spikes without sacrificing application performance. The company has budget constraints and cannot add new hardware. Which action should the administrator take?

A.Disable DRS on the cluster and rely solely on vSphere HA

B.Create a DRS rule to keep TRADER-01 on a single host and set the host as a preferred host for the VM

C.Set the DRS migration threshold to conservative (level 1) to minimize vmotion events

D.Reduce the vCPU count of TRADER-01 to 8 to reduce CPU schedul time

AnswerC

Reducing migration threshold decreases the number of DRS recommendations and actions, reducing latency spikes.

Why this answer

Setting the DRS migration threshold to conservative (level 1) reduces the frequency of vMotion migrations by requiring a higher imbalance score before DRS recommends or executes a migration. This directly addresses the latency spikes caused by DRS migrations of other VMs on the same host as TRADER-01, as fewer vMotion events will occur, while still allowing DRS to balance the cluster when necessary. The aggressive threshold was triggering migrations too readily, causing resource contention and latency for the latency-sensitive VM.

Exam trap

The trap here is that candidates often assume disabling DRS or using a host affinity rule is the best way to isolate a critical VM, but they overlook that DRS migrations of other VMs onto the same host can still cause latency spikes, and the conservative threshold directly reduces the frequency of those migrations without sacrificing overall cluster balance.

How to eliminate wrong answers

Option A is wrong because disabling DRS entirely would eliminate all automated load balancing, potentially leading to uneven resource utilization and performance degradation across the cluster, and it would not prevent latency spikes from other causes like resource contention. Option B is wrong because creating a DRS rule to keep TRADER-01 on a single host and setting that host as preferred does not prevent DRS from migrating other VMs onto that host, which can still cause latency spikes due to resource contention during vMotion or CPU scheduling. Option D is wrong because reducing the vCPU count of TRADER-01 to 8 would likely degrade application performance by limiting its parallel processing capacity, and the latency spikes are caused by DRS migrations of other VMs, not by CPU overcommitment of TRADER-01 itself.

Full explanation →

353

MCQeasy

A vSphere administrator notices high memory ballooning on a host running multiple VMs with large memory allocations. The host has sufficient physical memory, but ballooning occurs sporadically. What is the most likely cause?

A.The host is overcommitted on CPU

B.The VM's memory limit is set too low

C.The VM's memory is set to a reservation higher than the physical memory

D.The host has insufficient swap space

AnswerB

A memory limit below the VM's active memory forces the balloon driver to reclaim memory from the guest, even if host has free memory.

Why this answer

The VM's memory limit is set too low. Memory ballooning occurs when the ESXi host reclaims memory from a VM by instructing the guest OS to release memory via the balloon driver. If a VM's memory limit is set lower than its allocated memory, the hypervisor will enforce that limit even if the host has free physical memory.

This can cause sporadic ballooning as the VM's memory usage approaches the limit. Option A is incorrect because CPU overcommitment does not directly cause memory ballooning; ballooning is a memory reclamation technique. Option C is incorrect because if memory reservation exceeds physical memory, the VM cannot power on at all; it does not cause ballooning.

Option D is incorrect because insufficient swap space would lead to swapping or memory allocation failures, not ballooning; ballooning is a proactive driver-based mechanism.

Full explanation →

354

MCQeasy

A vSphere administrator needs to apply a critical ESXi security patch to a cluster of 10 hosts. The cluster is managed by vLCM using image-based management. What is the correct procedure to apply the patch?

A.Create a new baseline group with the patch and attach it to the cluster.

B.Update the cluster image to include the patched version and remediate the cluster.

C.Manually update each host using the patch's ISO.

D.Use vCenter Update Manager to push the patch as a baseline.

AnswerB

Editing the image and remediating applies the patch to all hosts.

Why this answer

With vLCM image-based management, you update the cluster image to include the desired ESXi version (which includes the patch), then remediate the cluster to apply the image to all hosts. Option A is incorrect because baselines are not used with image-based management. Option C is incorrect because manual ISO updates are not required; vLCM automates the process.

Option D is incorrect because vCenter Update Manager (VUM) is legacy; vLCM uses images.

Full explanation →

355

MCQhard

Refer to the exhibit. The vSphere administrator observes that vm1 has a %RDY value of 20.5. What is the most likely cause of this high ready time?

A.The VM is experiencing network packet loss

B.The VM's virtual disk is causing I/O latency

C.The host's physical CPUs are overcommitted

D.Insufficient memory is allocated to vm1

AnswerC

High %RDY is a clear indicator of CPU contention, often due to overcommitment.

Why this answer

High %RDY indicates the VM is ready to run but is being queued due to CPU contention. This is typically caused by overcommitment of pCPUs. Memory or storage latency would show in other counters.

Full explanation →

356

MCQhard

A vSphere environment uses an iSCSI storage array with multiple targets. The administrator configures CHAP authentication but some hosts fail to connect. The working hosts are configured with mutual CHAP, while the failing hosts use only one-way CHAP. What is the most likely reason for the failures?

A.The CHAP secret is not set on the failing hosts.

B.The storage array requires mutual CHAP, but the failing hosts are configured for one-way CHAP.

C.The iSCSI target name is incorrect on the failing hosts.

D.The storage array is configured to use only one-way CHAP.

AnswerB

Mutual CHAP requires both sides to authenticate.

Why this answer

Mutual CHAP requires the target to authenticate the initiator and the initiator to authenticate the target. If the storage array is configured to require mutual CHAP, hosts using only one-way CHAP will fail to complete the authentication handshake. The working hosts are configured with mutual CHAP, confirming the array enforces mutual authentication.

Exam trap

The trap here is that candidates assume CHAP configuration is binary (enabled or disabled) and overlook the distinction between one-way and mutual CHAP, leading them to incorrectly select a missing secret or target name issue.

How to eliminate wrong answers

Option A is wrong because the failing hosts are configured with one-way CHAP, which still requires a CHAP secret; the issue is not the absence of a secret but the authentication direction. Option C is wrong because an incorrect iSCSI target name would cause all hosts to fail, not just those using one-way CHAP, and the working hosts connect successfully. Option D is wrong because if the array used only one-way CHAP, the hosts configured with mutual CHAP would fail, but they are working, so the array must require mutual CHAP.

Full explanation →

357

MCQhard

An ESXi host experiences high memory ballooning in virtual machines. The administrator checks the host's memory metrics and sees a high swap rate. The host has 512 GB of memory, and the VMs are configured with memory reservations. Which configuration is most likely contributing to the excessive swapping?

A.Memory shares are set too low for the VMs experiencing ballooning.

B.Memory overcommitment is high, and some VMs have large memory reservations.

C.The host is configured for NUMA interleaving, causing memory access delays.

D.Transparent Page Sharing (TPS) is enabled and is aggressively sharing memory pages.

AnswerB

Reservations guarantee memory, but when overcommitted, the host may swap out other VMs to satisfy reservations.

Why this answer

High memory overcommitment combined with large memory reservations can force the hypervisor to swap memory from VMs that have not reserved enough, even if those VMs are ballooning. When VMs have large reservations, the host must guarantee that memory, which can exacerbate swap activity when total demand exceeds physical memory. Option A is incorrect because memory shares affect proportional distribution during contention, not ballooning or swapping directly.

Option C is incorrect because NUMA interleaving affects memory locality and performance, not memory pressure or swapping. Option D is incorrect because Transparent Page Sharing reduces memory usage and can actually lower swap activity, not cause it.

Full explanation →

358

MCQhard

An administrator is troubleshooting a vLCM cluster where a host fails to remediate with the error: 'Host does not meet the requirements of the selected image'. The host is running ESXi 7.0 U3 and the desired image is ESXi 8.0 U1. What should the administrator check first?

A.Verify that all VIBs in the image are compatible with ESXi 7.0 U3.

B.Ensure that the host has internet access to download the image.

C.Check that the vCenter Server version is at least 8.0.

D.Verify that the host is in maintenance mode before remediation.

AnswerD

vLCM requires hosts to be in maintenance mode for upgrades that require reboot.

Why this answer

VLCM requires the host to be in maintenance mode before applying a new image, especially when upgrading across major ESXi versions (e.g., 7.0 U3 to 8.0 U1). The error 'Host does not meet the requirements of the selected image' typically occurs when the host is not in maintenance mode, as vLCM cannot stage or reboot the host to apply the new image while VMs are running. Placing the host in maintenance mode ensures that all VMs are migrated or powered off, allowing the remediation process to proceed without disruption.

Exam trap

The trap here is that candidates assume the error is due to VIB incompatibility or version mismatch, but the actual cause is the host not being in maintenance mode, which is a prerequisite for any vLCM remediation that changes the boot image.

How to eliminate wrong answers

Option A is wrong because the image is for ESXi 8.0 U1, and checking VIB compatibility with ESXi 7.0 U3 is irrelevant; the host must meet the requirements of the target image, not the current version. Option B is wrong because vLCM does not require internet access to download images; images are stored in the vCenter Server repository or a local depot, and the host downloads them from vCenter over the management network. Option C is wrong because vCenter Server version does not need to be at least 8.0 to remediate a host to ESXi 8.0 U1; vLCM can manage images for hosts running different ESXi versions as long as vCenter is 7.0 or later, though vCenter 8.0 is recommended for full compatibility.

Full explanation →

359

Multi-Selectmedium

Which TWO conditions are required for a successful vMotion of a powered-on virtual machine? (Select TWO.)

Select 2 answers

A.The VM must have its virtual disks on shared storage accessible to both hosts

B.The source and destination hosts must have identical physical network adapters

C.Both hosts must be managed by the same vCenter Server

D.The VM must be connected to the same VLAN on both hosts

E.The CPUs of the source and destination hosts must be compatible

AnswersA, E

Shared storage is required so that both hosts can access the disks during migration.

Why this answer

Shared storage for the VM's disks and compatible CPUs are required. Identical network is not necessary; the VM can be reconnected. Same vCenter is not required for cross vCenter vMotion.

Full explanation →

360

Multi-Selecthard

Which THREE conditions must be met for Storage I/O Control (SIOC) to work effectively? (Choose three.)

Select 3 answers

A.The datastore must be VMFS5 or later.

B.Jumbo frames must be enabled on the storage network.

C.vCenter Server must be available.

D.All hosts accessing the datastore must be in the same vSphere cluster.

E.The datastore must be connected via Fibre Channel only.

AnswersA, C, D

Correct: SIOC is supported on VMFS5 and later versions.

Full explanation →

361

MCQeasy

A company wants to minimize downtime during an ESXi upgrade from 7.0 to 8.0 on a vSAN cluster. What is the best approach?

A.Upgrade all hosts simultaneously to complete faster.

B.Upgrade vCenter Server first, then upgrade all hosts at once.

C.Place each host in maintenance mode, evacuate vSAN data, upgrade, and rejoin the cluster.

D.Use Quick Boot feature to speed up the upgrade process.

AnswerC

This ensures no data loss and minimal disruption by processing one host at a time.

Why this answer

It ensures data availability by evacuating vSAN data before upgrading each host sequentially. Option A would cause downtime; Option B is incorrect because upgrading all hosts at once after vCenter upgrade still causes downtime; Option D (Quick Boot) reduces reboot time but does not address vSAN evacuation.

Full explanation →

362

MCQeasy

An administrator runs the command shown in the exhibit on a vCenter Server appliance. What is the primary purpose of the Machine ID?

A.To calculate workload distribution in DRS

B.To identify an ESXi host to vCenter Server

C.To serve as a unique identifier for the vCenter Server instance in SSO

D.To uniquely identify a virtual machine for vMotion

AnswerC

The Machine ID uniquely identifies the vCenter Server instance within SSO for certificate management.

Why this answer

The Machine ID serves as a unique identifier for the vCenter Server instance within VMware SSO (Single Sign-On) and is used for certificate management. It is not related to workload distribution in DRS (option A), ESXi host identification (option B), or virtual machine identification for vMotion (option D). Therefore, option C is correct.

Full explanation →

363

MCQhard

An administrator wants to ensure that a critical database VM has consistent low-latency access to its virtual disks. The VM currently resides on a datastore backed by a hybrid array. Which configuration change best meets this requirement?

A.Create a VM storage policy that requires flash-based storage and apply it to the VM.

B.Configure the VM to use multiple paths with Round Robin policy.

C.Assign a separate VMDK for each critical VM on a dedicated datastore.

D.Enable Storage I/O Control (SIOC) on the datastore.

AnswerA

A storage policy with rule set for flash ensures placement on low-latency storage.

Why this answer

Creating a VM storage policy that requires flash-based storage and applying it to the VM ensures that the virtual disks are placed on an all-flash datastore, which provides consistent low-latency access. This leverages vSphere Storage Policy-Based Management (SPBM) to enforce placement on flash media, eliminating the variable latency introduced by the HDD tier in a hybrid array.

Exam trap

The trap here is that candidates often confuse I/O management features (SIOC, multipathing) with storage media performance, thinking they can compensate for the inherent latency of HDDs in a hybrid array, but only a flash-based storage policy directly addresses the requirement for consistent low-latency access.

How to eliminate wrong answers

Option B is wrong because configuring multiple paths with a Round Robin policy improves I/O load balancing across paths but does not guarantee low latency; it does not change the underlying storage media from hybrid to flash. Option C is wrong because assigning a separate VMDK on a dedicated datastore isolates the VM but does not address the latency issue if the datastore is still backed by a hybrid array. Option D is wrong because enabling Storage I/O Control (SIOC) manages congestion by throttling I/O during contention but does not reduce baseline latency; it cannot compensate for the inherent latency of HDDs in a hybrid array.

Full explanation →

364

MCQeasy

A vSphere administrator needs to restrict access to a specific cluster so that only the storage team can manage datastores. The storage team members are in a group called 'storage_team' in Active Directory. What is the best practice to achieve this?

A.Create a custom role with required Datastore privileges and assign it to the 'storage_team' group at the cluster level.

B.Create an SSO group for the storage team and assign the default 'ReadOnly' role at the cluster level.

C.Assign the 'storage_team' group a role with Datastore privileges at the vCenter level using global permissions.

D.Add each member of the storage team to the local Administrators group on the vCenter Server.

AnswerA

This is correct because creating a custom role with Datastore privileges and assigning it at the cluster level provides the most granular and least-privileged access, scoping permissions to only the specific cluster.

Why this answer

Creating a custom role with the required Datastore privileges and assigning it at the cluster level provides the most granular, least-privileged access to manage only that cluster. Option B is incorrect because the ReadOnly role does not include Datastore management privileges; it only allows viewing objects. Option C is incorrect because global permissions apply to all objects in vCenter, granting access to all clusters and datastores, which violates the principle of least privilege.

Option D is incorrect because adding users to the local Administrators group grants full administrative access to vCenter, far exceeding the needed permissions for datastore management.

Full explanation →

365

MCQhard

A company operates a three-node vSphere cluster for a critical application. Each ESXi host has two 10GbE physical NICs (vmnic0 and vmnic1) connected to two separate physical switches (Switch A and Switch B) for redundancy. The cluster uses a vSphere Distributed Switch (vDS) with two uplinks per host: uplink1 (vmnic0) connected to Switch A, and uplink2 (vmnic1) connected to Switch B. The teaming policy is set to 'Route based on originating virtual port' with both uplinks active. The physical switches are configured in a multi-chassis link aggregation group (MLAG) that bundles the ports from both switches into a single LAG interface. The LAG is configured with mode 'active' (802.3ad). Recently, the cluster experienced a network outage when one of the physical switch uplinks failed. The VMs on the affected host lost connectivity for several seconds before recovering. The administrator wants to prevent such outages in the future. Which action should the administrator take?

A.Disable LACP on the physical switches and configure the vDS with 'Route based on originating virtual port' only.

B.Add a third physical NIC to each host and configure it as a standby uplink.

C.Change the vDS teaming policy to 'Use explicit failover order' with vmnic0 active and vmnic1 standby.

D.Configure the vDS with LACP support and set the teaming policy to 'Route based on IP hash'.

AnswerD

This aligns the vDS with the physical LAG.

Why this answer

The current configuration uses a static LAG (MLAG) on the physical switches with 802.3ad active mode, but the vDS is not configured for LACP. This mismatch causes the vDS to send frames based on originating virtual port, which does not coordinate with the physical LAG's hashing algorithm. When a physical uplink fails, the MLAG may not properly redistribute traffic because the vDS is unaware of the LAG state, leading to connectivity loss.

Configuring the vDS with LACP support and setting the teaming policy to 'Route based on IP hash' aligns the virtual and physical LAG configurations, ensuring proper load balancing and failover behavior.

Exam trap

The trap here is that candidates assume 'Route based on originating virtual port' with two active uplinks provides adequate failover, but they overlook the critical requirement for LACP coordination when the physical switches are configured with an active-mode LAG (802.3ad), leading to a mismatch that causes delayed failover.

How to eliminate wrong answers

Option A is wrong because disabling LACP on the physical switches and keeping 'Route based on originating virtual port' would break the existing MLAG configuration, potentially causing loops or inconsistent forwarding, and does not address the root cause of the outage. Option B is wrong because adding a third NIC as a standby uplink does not resolve the mismatch between the vDS teaming policy and the physical LAG; the outage occurred due to improper failover coordination, not a lack of physical redundancy. Option C is wrong because changing to 'Use explicit failover order' with one active and one standby would eliminate the active-active load balancing and still not coordinate with the physical LAG's hashing, so a single uplink failure could still cause traffic disruption if the vDS does not properly detect the LAG state.

Full explanation →

366

MCQeasy

A vSphere administrator needs to ensure that all HTTPS traffic to ESXi hosts is encrypted using TLS 1.2. Where should the administrator configure the minimum TLS version?

A.Host Advanced Settings (Config.HostAgent.plugins.vimsvc.auth.minTLSVersion)

B.Security Profile in the vSphere Client

C.vCenter Server Appliance (VAMI) web interface

D.ESXi Firewall rules

AnswerA

This advanced setting controls the minimum TLS version.

Why this answer

The minimum TLS version for ESXi host HTTPS traffic is configured via the host advanced setting `Config.HostAgent.plugins.vimsvc.auth.minTLSVersion`. This setting directly controls the TLS protocol version used by the ESXi host's HTTP services, including the vSphere Client and API endpoints, ensuring only TLS 1.2 or higher is accepted.

Exam trap

The trap here is that candidates confuse the ESXi host's TLS configuration (set via advanced settings) with vCenter Server's TLS configuration (set via VAMI), leading them to incorrectly select Option C.

How to eliminate wrong answers

Option B is wrong because the Security Profile in the vSphere Client manages firewall rules and service startup policies, not TLS protocol version settings. Option C is wrong because the VAMI web interface configures vCenter Server Appliance services (e.g., vCenter Single Sign-On, licensing), not the TLS version of individual ESXi hosts. Option D is wrong because ESXi Firewall rules control network traffic filtering (allow/deny by port/protocol), not encryption parameters like TLS version.

Full explanation →

367

MCQmedium

An administrator is troubleshooting a situation where a virtual machine cannot be powered on. The error message indicates insufficient permissions. The VM is in a folder named 'Production' and the administrator has been assigned a custom role with 'Virtual machine > Power On' permission at the folder level. However, the VM is also in a resource pool. What additional permission is most likely missing?

A.Network > Assign network permission on the network

B.Resource > Assign virtual machine to resource pool permission on the resource pool

C.Datastore > Allocate space permission on the datastore

D.Virtual machine > Configuration permission on the VM

AnswerB

This permission is necessary to assign the VM to the resource pool during power on.

Why this answer

To power on a virtual machine that resides in a resource pool, the user must have the 'Resource > Assign virtual machine to resource pool' permission on that resource pool. Even though the user has 'Virtual machine > Power On' at the folder level, the VM's association with the resource pool introduces an additional authorization check. Without this resource pool permission, the power-on operation fails with an insufficient permissions error.

Exam trap

The trap here is that candidates assume folder-level permissions cascade fully to all operations, but vSphere enforces a 'least privilege' model where resource pool membership requires explicit assignment rights, even if the VM already exists in the pool.

How to eliminate wrong answers

Option A is wrong because 'Network > Assign network' is required only when attaching a VM to a network, not for the power-on operation itself. Option C is wrong because 'Datastore > Allocate space' is needed for creating or registering a VM or for snapshot operations, not for powering on an existing VM. Option D is wrong because 'Virtual machine > Configuration' covers changes to VM settings (e.g., CPU, memory), but the specific missing permission here is the resource pool assignment right, not a general configuration right.

Full explanation →

368

MCQmedium

After adding a new ESXi host to a vLCM-managed cluster, the compliance status shows 'Non-Compliant'. All other hosts in the cluster are compliant. The cluster uses a custom image. Which is the most likely cause of the non-compliance?

A.The cluster image has not been exported to the host.

B.The host profile is not attached to the host.

C.The cluster image is corrupted.

D.The host's software inventory differs from the cluster image.

AnswerD

The host likely has a different ESXi version or drivers not matching the image.

Why this answer

The most likely cause is that the new host's software inventory differs from the cluster image. In a vLCM-managed cluster, all hosts must match the desired image state. When a new host is added, vLCM compares its software inventory to the cluster image.

If they differ (e.g., different ESXi build, firmware version, or driver versions), the host is marked as Non-Compliant. Option A is incorrect because cluster images are not exported; vLCM applies images directly during remediation. Option B is incorrect because host profiles are not used with vLCM image-based management; vLCM uses images exclusively.

Option C is incorrect because a corrupted image would affect all hosts, not just the new one.

Full explanation →

369

Multi-Selectmedium

Which TWO of the following are characteristics of vSphere High Availability (HA) heartbeat networks? (Choose two.)

Select 2 answers

A.Datastore heartbeats can be used as a secondary heartbeat mechanism.

B.A separate physical network is required for HA heartbeats.

C.The management network is the primary heartbeat network.

D.The default isolation address is the vCenter Server IP address.

E.Heartbeats are sent over the VM network to avoid interference with management traffic.

AnswersA, C

Datastore heartbeats provide an additional layer to detect host failures.

Why this answer

Datastore heartbeats serve as a secondary heartbeat mechanism in vSphere HA. When the primary management network heartbeat fails, the host checks datastore heartbeats to determine whether it is isolated or has suffered a network partition. This prevents unnecessary VM restarts when the management network is temporarily unavailable but the host is still connected to shared storage.

Exam trap

The trap here is that candidates often assume a separate physical network is mandatory for HA heartbeats (Option B) or that the default isolation address is the vCenter Server IP (Option D), when in fact the management network is primary and the default isolation address is the default gateway.

Full explanation →

370

MCQeasy

A virtual machine is configured with two vNICs connected to different standard port groups (VLAN 10 and VLAN 20). The administrator wants to use both vNICs for load balancing and failover within the VM OS. Which condition must be met on the vSwitch side?

A.Enable MAC address changes on both port groups.

B.Configure teaming on the standard switch by bridging the two port groups.

C.Configure NIC teaming within the guest operating system.

D.Set load balancing to 'Route based on IP hash' on both port groups.

AnswerC

Since the vNICs are on separate port groups, the VM OS must handle load balancing and failover via software teaming (e.g., bond).

Why this answer

The VM OS must have NIC teaming configured to use both interfaces. The vSwitch port groups are separate, so they don't team at the virtual switch level. Option A is incorrect because teaming at vSwitch is per port group, not across port groups.

Option B is incorrect because MAC address changes are not needed. Option D is incorrect because route based on IP hash is for a single port group.

Full explanation →

371

Multi-Selectmedium

Which three actions can reduce CPU ready time for a virtual machine in a vSphere cluster? (Choose three.)

Select 3 answers

A.Enable CPU hot-add on the VM

B.Set the VM's CPU affinity manually

C.Place the VM on a host with lower CPU utilization

D.Reduce the number of vCPUs allocated to the VM

E.Increase the host's physical CPU count by adding a new host to the cluster

AnswersC, D, E

Lower host utilization means more CPU resources available for the VM, reducing ready time.

Why this answer

The correct options are C, D, and E. Placing the VM on a host with lower CPU utilization (C) reduces contention for CPU resources, thereby lowering CPU ready time. Reducing the number of vCPUs allocated to the VM (D) decreases the CPU demand, reducing the time the VM spends waiting for physical CPU cycles.

Increasing the host's physical CPU count by adding a new host to the cluster (E) provides more CPU resources overall, which can reduce ready time. Option A, enabling CPU hot-add, does not reduce existing CPU ready time; it only allows adding vCPUs later without rebooting, which could increase contention. Option B, setting CPU affinity manually, often reduces the scheduler's flexibility and can increase ready time, not decrease it.

Full explanation →

372

Multi-Selecthard

Which THREE of the following are prerequisites for configuring vSAN encryption? (Choose three.)

Select 3 answers

A.vSphere Enterprise Plus license.

B.Intel Software Guard Extensions (SGX) on ESXi hosts.

C.All-flash disk group configuration.

D.A Key Management Server (KMS) supporting KMIP protocol.

E.TPM 2.0 chip on each ESXi host.

AnswersA, D, E

vSAN encryption is available with Enterprise Plus and above.

Why this answer

Options A, D, and E are correct prerequisites for vSAN encryption. Option A: vSAN encryption requires a vSphere Enterprise Plus license (or equivalent, such as VMware Cloud Foundation). Option D: A Key Management Server (KMS) supporting the KMIP protocol is necessary to manage encryption keys.

Option E: TPM 2.0 chip on each ESXi host provides a hardware root of trust for key storage. Option B (Intel SGX) is not required for vSAN encryption. Option C (all-flash disk group) is incorrect because vSAN encryption supports both all-flash and hybrid configurations.

Full explanation →

373

Matchingmedium

Match each vSphere command-line tool to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Command-line interface for ESXi management

Command for vCenter and host operations

Tool for managing VMFS and virtual disks

vSphere Sysinfo Shell for debugging

Performance monitoring tool for ESXi resources

Why these pairings

Common CLI tools in vSphere include esxcli for host configuration, vmkfstools for storage, vCLI for remote command execution, and PowerCLI for automation. Ensure you match each tool to its primary function.

Full explanation →

374

MCQeasy

A small business runs a small vSphere environment with a single ESXi host (Host-A) and a VCSA on a separate host. The company is concerned about single points of failure for the ESXi host. They have a budget to purchase a second identical ESXi host (Host-B) and want to ensure that VMs can be restarted automatically if Host-A fails. They also want to be able to perform maintenance on Host-A without VM downtime. They have a shared storage array (iSCSI) that both hosts can access. The administrator decides to create a vSphere cluster with HA and DRS. However, after adding both hosts to the cluster and enabling HA, the administrator notices that the cluster does not have a shared datastore accessible by both hosts that serves as the HA heartbeat. Which action should the administrator take to enable HA?

A.Install a second vCenter Server to provide redundancy

B.Create a VMFS datastore on each host's local storage and enable HA

C.Deploy a vSAN cluster using local disks on both hosts

D.Configure the existing iSCSI datastore as a heartbeat datastore for HA

AnswerD

The iSCSI datastore is shared; HA can use it for heartbeat signaling.

Why this answer

The administrator needs to enable HA in the cluster. The issue is that the cluster lacks a shared datastore that can serve as the HA heartbeat. The existing iSCSI storage is shared between both hosts.

In vSphere HA, datastore heartbeats are used in addition to network heartbeats to detect host failures. By configuring the existing iSCSI datastore as a heartbeat datastore, HA can function properly. Option A is incorrect because a second vCenter Server does not provide HA heartbeat functionality and is unnecessary for this issue.

Option B is incorrect because local VMFS datastores are not shared, so they cannot be used for HA heartbeats. Option C is incorrect because vSAN would require additional licensing and configuration, and the question already states there is shared iSCSI storage available. Therefore, the correct action is to configure the existing iSCSI datastore as a heartbeat datastore for HA.

Full explanation →

375

MCQhard

A database VM with 32 vCPUs and 256 GB memory is deployed on a host with two NUMA nodes, each with 8 cores (16 threads with HT). The application performs badly. Analysis shows high remote memory access. What is the MOST LIKELY reason?

A.Hyperthreading is enabled causing CPU contention.

B.The vNUMA nodes are not aligned with the physical NUMA nodes.

C.The host's NUMA nodes are not balanced in memory capacity.

D.The VM has too much memory allocated.

AnswerB

Misalignment causes the guest to access memory from remote NUMA nodes, increasing latency.

Why this answer

With 32 vCPUs, the VM exceeds the default vNUMA node size of 8 cores per NUMA node, so vSphere exposes multiple vNUMA nodes. However, if the vNUMA topology is not aligned with the physical NUMA nodes (e.g., the VM's vCPUs and memory span physical NUMA boundaries), the guest OS may not optimize memory locality, leading to high remote memory access. Option B correctly identifies this vNUMA misalignment as the most likely cause.

Full explanation →

Page 5 of 7

All pages

Practice VCP-DCV by domain

Target a specific domain to shore up weak areas.

vSphere Architecture, Products and Solutions Configure and Manage vSphere Networking Configure and Manage vSphere Storage vSphere Lifecycle Management vSphere Security vSphere Performance and Scaling

See all domains with question counts →