Courseiva

VMware Certified Professional Data Center Virtualization VCP-DCV (VCP-DCV) — Questions 376–450

511 questions total · 7pages · All types, answers revealed

Take a mock examExam hub
Page 5

Page 6 of 7

Page 7
376
Multi-Selectmedium

Which TWO of the following are characteristics of vSphere High Availability (HA) heartbeat networks? (Choose two.)

Select 2 answers
A.Datastore heartbeats can be used as a secondary heartbeat mechanism.
B.A separate physical network is required for HA heartbeats.
C.The management network is the primary heartbeat network.
D.The default isolation address is the vCenter Server IP address.
E.Heartbeats are sent over the VM network to avoid interference with management traffic.
AnswersA, C

Datastore heartbeats provide an additional layer to detect host failures.

Why this answer

Datastore heartbeats serve as a secondary heartbeat mechanism in vSphere HA. When the primary management network heartbeat fails, the host checks datastore heartbeats to determine whether it is isolated or has suffered a network partition. This prevents unnecessary VM restarts when the management network is temporarily unavailable but the host is still connected to shared storage.

Exam trap

The trap here is that candidates often assume a separate physical network is mandatory for HA heartbeats (Option B) or that the default isolation address is the vCenter Server IP (Option D), when in fact the management network is primary and the default isolation address is the default gateway.

Full explanation →
377
MCQeasy

A virtual machine is configured with two vNICs connected to different standard port groups (VLAN 10 and VLAN 20). The administrator wants to use both vNICs for load balancing and failover within the VM OS. Which condition must be met on the vSwitch side?

A.Enable MAC address changes on both port groups.
B.Configure teaming on the standard switch by bridging the two port groups.
C.Configure NIC teaming within the guest operating system.
D.Set load balancing to 'Route based on IP hash' on both port groups.
AnswerC

Since the vNICs are on separate port groups, the VM OS must handle load balancing and failover via software teaming (e.g., bond).

Why this answer

Option C is correct because the VM OS must have NIC teaming configured to use both interfaces. The vSwitch port groups are separate, so they don't team at the virtual switch level. Option A is incorrect because teaming at vSwitch is per port group, not across port groups.

Option B is incorrect because MAC address changes are not needed. Option D is incorrect because route based on IP hash is for a single port group.

Full explanation →
378
Multi-Selectmedium

Which three actions can reduce CPU ready time for a virtual machine in a vSphere cluster? (Choose three.)

Select 3 answers
A.Enable CPU hot-add on the VM
B.Set the VM's CPU affinity manually
C.Place the VM on a host with lower CPU utilization
D.Reduce the number of vCPUs allocated to the VM
E.Increase the host's physical CPU count by adding a new host to the cluster
AnswersC, D, E

Lower host utilization means more CPU resources available for the VM, reducing ready time.

Why this answer

The correct options are B, D, and E. Reducing vCPUs reduces contention, adding hosts increases resources, and placing on less loaded host reduces ready time. Hot-add does not reduce ready time; manual CPU affinity can worsen.

Full explanation →
379
Multi-Selecthard

Which THREE of the following are prerequisites for configuring vSAN encryption? (Choose three.)

Select 3 answers
A.vSphere Enterprise Plus license.
B.Intel Software Guard Extensions (SGX) on ESXi hosts.
C.All-flash disk group configuration.
D.A Key Management Server (KMS) supporting KMIP protocol.
E.TPM 2.0 chip on each ESXi host.
AnswersA, D, E

vSAN encryption is available with Enterprise Plus and above.

Why this answer

Options A, C, and D are correct. Option A: vSAN encryption requires a KMS (KMIP) to manage keys. Option C: The ESXi hosts must have TPM 2.0 for hardware root of trust.

Option D: vSAN encryption requires Enterprise Plus license (or equivalent such as VCF). Option B is incorrect because vSAN encryption does not require Intel SGX. Option E is incorrect because vSAN encryption is supported with all-flash or hybrid configurations; it does not require all-flash.

Full explanation →
380
Matchingmedium

Match each vSphere command-line tool to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Command-line interface for ESXi management

Command for vCenter and host operations

Tool for managing VMFS and virtual disks

vSphere Sysinfo Shell for debugging

Performance monitoring tool for ESXi resources

Why these pairings

Common CLI tools used in vSphere administration.

Full explanation →
381
MCQeasy

A small business runs a small vSphere environment with a single ESXi host (Host-A) and a VCSA on a separate host. The company is concerned about single points of failure for the ESXi host. They have a budget to purchase a second identical ESXi host (Host-B) and want to ensure that VMs can be restarted automatically if Host-A fails. They also want to be able to perform maintenance on Host-A without VM downtime. They have a shared storage array (iSCSI) that both hosts can access. The administrator decides to create a vSphere cluster with HA and DRS. However, after adding both hosts to the cluster and enabling HA, the administrator notices that the cluster does not have a shared datastore accessible by both hosts that serves as the HA heartbeat. Which action should the administrator take to enable HA?

A.Install a second vCenter Server to provide redundancy
B.Create a VMFS datastore on each host's local storage and enable HA
C.Deploy a vSAN cluster using local disks on both hosts
D.Configure the existing iSCSI datastore as a heartbeat datastore for HA
AnswerD

The iSCSI datastore is shared; HA can use it for heartbeat signaling.

Why this answer

Option A is correct because HA requires a datastore for heartbeat if the management network is isolated. The shared storage already exists (iSCSI), so simply configuring the datastore heartbeat on the existing storage will enable HA. Option B is incorrect because vSAN would require additional licensing and configuration.

Option C is incorrect because VMFS on local storage is not shared. Option D is incorrect because HA can use datastore heartbeats without vCenter.

Full explanation →
382
MCQhard

A database VM with 32 vCPUs and 256 GB memory is deployed on a host with two NUMA nodes, each with 8 cores (16 threads with HT). The application performs badly. Analysis shows high remote memory access. What is the MOST LIKELY reason?

A.Hyperthreading is enabled causing CPU contention.
B.The vNUMA nodes are not aligned with the physical NUMA nodes.
C.The host's NUMA nodes are not balanced in memory capacity.
D.The VM has too much memory allocated.
AnswerB

Misalignment causes the guest to access memory from remote NUMA nodes, increasing latency.

Why this answer

With 32 vCPUs, the VM exceeds the default vNUMA node size of 8 cores, so vSphere will expose multiple vNUMA nodes. However, if vNUMA is not correctly configured or if the VM's memory size forces it to span physical NUMA nodes, the guest OS may not optimize memory locality. The most common cause is that the VM's vCPUs and memory are not aligned with the physical NUMA topology, leading to remote memory access.

Disabling hyperthreading would not help alignment, nor would adding more memory.

Full explanation →
383
Matchingmedium

Match each vSphere edition/license tier to its key feature.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Basic virtualization with vMotion and HA

Full features including DRS, DPM, and Host Profiles

Includes performance monitoring and capacity management

Adds AppDefense for security

Licensing for small ROBO deployments

Why these pairings

vSphere licensing tiers and capabilities.

Full explanation →
384
MCQeasy

An administrator is creating a new vSphere Standard Switch on an ESXi host. The host has two physical NICs: vmnic0 and vmnic1. The administrator wants to use vmnic0 for VM traffic and vmnic1 for management traffic. How should the administrator configure the switch?

A.Create one standard switch with vmnic0 only and use VLANs for separation.
B.Create one standard switch with both vmnics and separate port groups for VM and VMkernel.
C.Create two standard switches: one with vmnic0 and a VM port group, and another with vmnic1 and a VMkernel port group.
D.Create a vSphere Distributed Switch with both vmnics.
AnswerC

Separation of traffic types.

Why this answer

Option C is correct because the requirement is to use separate physical NICs for different traffic types (VM traffic on vmnic0 and management traffic on vmnic1). In vSphere, a standard switch is a per-host virtual switch that connects virtual machines and VMkernel interfaces to physical NICs. To isolate traffic at the physical NIC level, you must create two distinct standard switches: one with vmnic0 and a VM port group for VM traffic, and another with vmnic1 and a VMkernel port group for management traffic.

This ensures that management traffic never traverses vmnic0 and VM traffic never traverses vmnic1, providing physical separation and avoiding contention.

Exam trap

The trap here is that candidates often assume a single standard switch with multiple uplinks and separate port groups is sufficient for traffic separation, but they overlook that physical NIC assignment is per-switch, not per-port-group, so both traffic types could still share the same NICs via teaming or failover unless explicit NIC binding is configured.

How to eliminate wrong answers

Option A is wrong because creating a single standard switch with only vmnic0 and using VLANs for separation does not physically separate management traffic onto vmnic1; management traffic would still be forced through vmnic0, violating the requirement. Option B is wrong because creating one standard switch with both vmnics and separate port groups for VM and VMkernel traffic would allow both traffic types to use either NIC (via teaming or failover), failing to enforce the dedicated NIC assignment. Option D is wrong because a vSphere Distributed Switch (VDS) requires vCenter Server and is not created directly on an ESXi host; it also does not inherently force specific traffic types to dedicated physical NICs without explicit configuration, and the question specifies a standard switch.

Full explanation →
385
MCQmedium

An administrator configures a distributed switch with a single uplink on each host and a port group with VLAN 10. After connecting a VM to the port group, the VM cannot communicate with other VMs on the same VLAN but on different hosts. What is a likely cause?

A.The physical switch port is set to access mode with VLAN 10.
B.The distributed switch has no teaming configured.
C.The physical switch port connected to the uplink is set to trunk mode and is tagging the VLAN.
D.The VLAN ID is not set correctly on the VM's virtual network adapter.
AnswerA

Access mode expects untagged traffic, but vSphere tags frames, causing communication failure.

Why this answer

Option C is correct because if the physical switch port is access mode with VLAN 10, it expects untagged traffic, but vSphere will tag frames with VLAN 10, causing a mismatch. Option A is wrong because VLAN tagging is on the port group, not the VM adapter. Option B would work if trunking.

Option D is irrelevant.

Full explanation →
386
Multi-Selecthard

Which THREE components are part of a vSAN cluster?

Select 3 answers
A.vSAN datastore
B.vSAN network
C.vSAN witness host
D.ESXi hosts
E.vCenter Server
AnswersA, B, D

Correct: The datastore is the aggregated storage.

Why this answer

A vSAN cluster consists of ESXi hosts, a vSAN datastore, and a vSAN network for communication.

Full explanation →
387
Multi-Selecteasy

Which TWO statements are true about datastore heartbeating in vSphere HA? (Choose two.)

Select 2 answers
A.At least two datastores should be selected for heartbeating to provide redundancy.
B.Datastore heartbeating is enabled by default when vSphere HA is configured.
C.Datastore heartbeating is used to detect host isolation.
D.Datastore heartbeating is only supported on VMFS datastores.
E.vSphere HA uses datastore heartbeating as the primary method for failure detection.
AnswersA, D

Correct: Two datastores are recommended to avoid a single point of failure.

Full explanation →
388
MCQhard

A vSphere administrator is trying to create a custom ESXi image for a cluster using vSphere Lifecycle Manager. The cluster contains hosts with a specific hardware that requires a third-party component (e.g., a NIC driver). The administrator adds the component to the image definition in vLCM. However, when applying the image, the component does not get installed on the hosts. What is the likely cause?

A.The component version is not compatible with the ESXi version in the image.
B.The administrator did not mount the component ISO during remediation.
C.The component is not signed by a trusted certificate authority.
D.The component must be installed manually on each host first.
AnswerA

vLCM will skip incompatible components during remediation.

Why this answer

Option A is correct because the component version may not be compatible with the ESXi version in the image, and vLCM validates compatibility. Option B is wrong while unsigned components are rejected, but the scenario implies it was added successfully. Option C is wrong because vLCM uses a depot, not ISO mounts.

Option D is wrong because manual installation is not required.

Full explanation →
389
MCQmedium

A company's vSphere environment consists of four ESXi hosts, each with two 10 GbE physical NICs. The administrator configures a VDS with two dvUplinks and uses load-balancing policy 'Route based on IP hash'. To use IP hash, what additional configuration is required on the physical switches?

A.Enable VLAN trunking on the switch ports
B.Configure LACP on the VDS uplink port groups
C.Configure link aggregation (LACP or static EtherChannel) on the switch ports
D.Enable IGMP snooping on the switch
AnswerC

IP hash load balancing requires an aggregated link on the physical switch side.

Why this answer

Option C is correct because IP hash requires Link Aggregation Control Protocol (LACP) or static EtherChannel to be configured on the physical switch ports. Option A is not required because VLAN trunking is already configured. Option B is incorrect because IGMP snooping is for multicast, not required.

Option D is incorrect because ESXi itself does not need LACP configuration on the VDS (though it can use LACP), but the physical switch must have EtherChannel.

Full explanation →
390
MCQmedium

An administrator is creating a vLCM image for a cluster of Dell PowerEdge R740 servers. The exhibit shows the current image JSON. When attempting to apply the image, compliance errors are reported regarding firmware. What is the most likely missing component?

A.A vendor add-on for Dell is missing.
B.Only Dell models are listed, not all hardware models.
C.The firmware version in hardware_support is wrong.
D.The ESXi version is incorrect.
AnswerA

The vendor add-on provides necessary firmware and drivers for the hardware.

Why this answer

Option B is correct because the 'vendor_addon' field is null, meaning no Dell-specific add-on is included; this add-on contains required drivers and firmware for Dell hardware. Option A is wrong because the ESXi version is specified. Option C is wrong because hardware support is listed but without the vendor addon, firmware cannot be properly managed.

Option D is wrong because the hardware list only models are listed.

Full explanation →
391
MCQmedium

An administrator needs to migrate a VM from a VMFS5 datastore to a vSAN datastore while preserving the storage policy. Which migration method should be used?

A.Cold migration
B.Clone
C.Storage vMotion
D.vMotion
AnswerC

Storage vMotion migrates disks between datastores with no downtime.

Why this answer

Storage vMotion moves VM disks between datastores while preserving the storage policy association. vMotion moves compute only; cold migration requires downtime; clone creates a copy.

Full explanation →
392
Multi-Selecthard

Which THREE parameters are considered by vSphere DRS when generating initial placement recommendations for a new VM?

Select 3 answers
A.Storage I/O latency
B.Host network utilization
C.Host memory load
D.Host CPU load
E.VM power state
AnswersB, C, D

DRS can consider network metrics.

Why this answer

Options A, C, and E are correct. DRS considers host CPU load, memory load, and network utilization. B is not a direct input; DRS does not consider storage latency at placement time for new VMs (though Storage DRS does).

D is not a DRS input.

Full explanation →
393
Multi-Selecthard

Which THREE techniques are recommended to improve virtual machine network performance in a vSphere environment? (Select three.)

Select 3 answers
A.Enable Jumbo Frames on the virtual switch.
B.Use the VMXNET3 virtual network adapter.
C.Use a dedicated virtual switch for each VM.
D.Use the e1000e network adapter type.
E.Enable SR-IOV on supported NICs.
AnswersA, B, E

Jumbo Frames reduce per-packet CPU overhead, improving throughput.

Why this answer

Correct: B (SR-IOV), D (Jumbo Frames), E (VMXNET3). SR-IOV reduces virtualization overhead. Jumbo Frames reduce CPU overhead for large packets.

VMXNET3 is a paravirtualized adapter with excellent performance. Option A (e1000e) is emulated and slower. Option C (dedicated vSwitch per VM) adds complexity without benefit.

Full explanation →
394
MCQmedium

A vSphere administrator needs to apply a critical security patch to all ESXi hosts in a cluster that is managed by a baseline. The patch is not yet available as an update in the baseline group. What is the best approach to apply this patch quickly?

A.Remediate each host individually using CLI commands.
B.Create a new baseline group that includes the patch and attach it to the cluster.
C.Download the patch as an offline bundle and use vLCM to apply it directly.
D.Attach the patch as a new baseline to the cluster alongside existing baselines.
AnswerD

Attaching a patch baseline allows remediation of the cluster.

Why this answer

Option B is correct because you can attach the patch as a single baseline to the cluster and remediate. Option A is wrong because creating a new baseline group is unnecessary. Option C is wrong because vLCM image-based management is not used here.

Option D is wrong because individual CLI remediation is inefficient.

Full explanation →
395
MCQmedium

A vSphere administrator is planning to deploy a vCenter Server Appliance (VCSA) with an embedded Platform Services Controller (PSC). The company policy requires that all vCenter services be highly available. Which deployment topology should the administrator choose?

A.Deploy a single VCSA with embedded PSC on a standalone host.
B.Deploy a VCSA with an external PSC, and install the PSC on a separate VM.
C.Deploy a VCSA with embedded PSC on a cluster with vSphere HA enabled.
D.Deploy two VCSAs in separate vCenter Single Sign-On domains and configure multi-site.
AnswerC

vSphere HA restarts the VCSA if the host fails, providing high availability.

Why this answer

Option C is correct because deploying a VCSA with an embedded PSC on a cluster with vSphere HA enabled ensures that if the ESXi host running the VCSA fails, the VCSA is automatically restarted on another host in the cluster, providing high availability for all vCenter services. The embedded PSC topology is fully supported with vSphere HA, and this approach meets the policy requirement without the complexity of external PSCs or multi-site configurations.

Exam trap

The trap here is that candidates often confuse high availability (HA) with fault tolerance or disaster recovery, leading them to choose multi-site or external PSC options, but vSphere HA on a cluster is the simplest and correct method to achieve high availability for a single VCSA with embedded PSC.

How to eliminate wrong answers

Option A is wrong because a single VCSA on a standalone host provides no redundancy; if the host fails, the VCSA and all vCenter services become unavailable, violating the high availability requirement. Option B is wrong because deploying a VCSA with an external PSC does not inherently provide high availability for the vCenter services; it only separates authentication services, and the VCSA itself remains a single point of failure unless additional clustering (e.g., vSphere HA) is applied. Option D is wrong because deploying two VCSAs in separate vCenter Single Sign-On domains with multi-site is designed for disaster recovery across sites, not for high availability within a single site, and it introduces domain isolation that prevents unified management.

Full explanation →
396
Drag & Dropmedium

Order the steps to enable vSphere HA on a cluster.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order

Why this order

Select cluster, access HA settings, enable, configure options, confirm.

Full explanation →
397
MCQeasy

An administrator needs to migrate a running VM from one datastore to another without any downtime. Which vSphere feature allows this?

A.Cross vCenter vMotion
B.Storage vMotion
C.Storage DRS
D.vMotion
AnswerB

Correct: Storage vMotion moves virtual disks live.

Why this answer

Storage vMotion migrates VM storage while the VM is running, with no downtime.

Full explanation →
398
Drag & Dropmedium

Place the steps to create a new standard virtual switch in vSphere in order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order

Why this order

Select host, access networking, add networking, choose type, configure switch.

Full explanation →
399
Multi-Selecthard

Which THREE components are required to configure Storage DRS affinity and anti-affinity rules?

Select 3 answers
A.A resource pool
B.Datastores
C.An ESXi host
D.Virtual machines
E.A datastore cluster
AnswersB, D, E

Datastores are used as partners in affinity rules.

Why this answer

Storage DRS affinity rules require datastore clusters, individual datastores, and virtual machines. Option A (datastore cluster) is where rules are defined. Option D (virtual machines) are the targets.

Option E (datastores) are used as partners. Option B (resource pools) are not used. Option C (hosts) are not part of storage DRS rules.

Full explanation →
400
Multi-Selecthard

Which THREE factors should be considered when designing a vSphere environment to minimize vCPU overcommitment and improve performance for CPU-intensive workloads?

Select 3 answers
A.Align VM memory with NUMA nodes to reduce remote memory access.
B.Select hosts with a high physical core count per socket.
C.Use VMs with a high number of vCPUs (e.g., 2:1 ratio to pCPUs).
D.Enable Hyper-Threading on all hosts.
E.Use CPU scheduling modes like 'Core Level' to increase performance.
AnswersA, B, E

NUMA-aware placement improves memory access performance.

Why this answer

Option B is correct because more physical cores reduce contention. Option C is correct because vSphere can use core-level scheduling to improve performance. Option D is correct because NUMA awareness ensures VMs are scheduled on local memory.

Option A is incorrect because large vCPUs can increase overhead. Option E is incorrect because simultaneous multithreading (hyperthreading) increases logical CPUs but may not reduce overcommitment for heavily CPU-bound workloads.

Full explanation →
401
MCQhard

A company has a cluster with DRS set to Fully Automated. A VM named VM1 has a reservation of 4 GHz and a limit of 8 GHz on a host with 10 GHz available. The VM is running a batch job that requires as much CPU as possible. The administrator notices that the VM's CPU usage never exceeds 4 GHz. What is the most likely reason?

A.The CPU reservation is preventing the VM from using more than the reserved amount.
B.The CPU shares are too low, causing the VM to be starved.
C.The VM has a CPU limit set to 4 GHz via a resource pool or VM override.
D.DRS is not migrating the VM to a host with more resources.
AnswerC

Correct: A limit caps the maximum CPU usage; the specified limit of 8 GHz may be overridden by a lower limit.

Why this answer

Option C is correct because a CPU limit explicitly caps the maximum CPU usage a VM can consume, regardless of available resources. In this scenario, the VM has a reservation of 4 GHz and a limit of 8 GHz on the host, but the administrator observes usage never exceeding 4 GHz, indicating a more restrictive limit is applied via a resource pool or VM override. This overrides the host-level limit, effectively capping the VM at 4 GHz, which matches the observed behavior.

Exam trap

The trap here is that candidates often confuse CPU reservation with CPU limit, assuming a reservation restricts maximum usage, when in fact a reservation only guarantees a minimum and a separate limit must be explicitly set to cap usage.

How to eliminate wrong answers

Option A is wrong because a CPU reservation guarantees a minimum amount of CPU resources to the VM, not a maximum; the VM can burst above the reservation if resources are available, so a reservation of 4 GHz does not prevent usage beyond 4 GHz. Option B is wrong because CPU shares determine relative priority during contention, but since the host has 10 GHz available and the VM is not contending for resources, low shares would not starve the VM; the VM would still be able to use more than 4 GHz if no limit were in place. Option D is wrong because DRS migration is irrelevant when the VM is already on a host with sufficient resources (10 GHz) and the issue is a hard cap on CPU usage, not a lack of available resources on the current host.

Full explanation →
402
MCQeasy

An administrator is troubleshooting a failed attempt to add an ESXi host to a vCenter Server domain. The error message states: 'The host's certificate has been tampered with or is invalid.' What is the most likely cause?

A.The vCenter Server's account lockout policy has been triggered.
B.The ESXi host's SSH keys have been rotated.
C.The ESXi host's certificate has expired.
D.The ESXi host's certificate thumbprint does not match the thumbprint stored in vCenter Server.
AnswerD

This mismatch causes the 'tampered' error.

Why this answer

The error 'The host's certificate has been tampered with or is invalid' occurs when the ESXi host presents a certificate whose thumbprint does not match the thumbprint that vCenter Server has stored for that host. This mismatch can happen if the host's certificate was replaced (e.g., due to a reinstall or manual rotation) without updating the vCenter Server's trusted store. vCenter Server verifies the host's identity by comparing the SHA-1 or SHA-256 thumbprint of the presented certificate against its stored record; a mismatch triggers this specific error.

Exam trap

The trap here is that candidates often confuse certificate expiration with thumbprint mismatch, but the error message 'tampered with or invalid' specifically points to a thumbprint mismatch rather than a date-based validity issue.

How to eliminate wrong answers

Option A is wrong because an account lockout policy would produce a different error, such as 'Login failed' or 'Access denied', not a certificate tampering message. Option B is wrong because SSH keys are used for SSH authentication, not for the SSL/TLS certificate validation that occurs during host addition to vCenter Server; rotating SSH keys does not affect certificate thumbprint matching. Option C is wrong because an expired certificate would generate an error like 'Certificate has expired' or 'Certificate is not yet valid', not a 'tampered with or invalid' message, which specifically indicates a thumbprint mismatch rather than a validity period issue.

Full explanation →
403
MCQhard

Refer to the exhibit. An administrator runs the 'esxcli storage core device list' command and sees the output. The storage array is an active-passive array with ALUA. The current path selection policy is set to Fixed with no preferred path. What is the consequence of this configuration?

A.The I/O is load-balanced across all four paths
B.ALUA is not supported, so the host will use only one path
C.I/O may be sent to a non-optimized path, causing higher latency
D.The device cannot be used for VMDKs, only for RDM
AnswerC

Without preferred path, the host may use a path that is not in active state.

Why this answer

With an active-passive ALUA array, using Fixed policy with no preferred path means the host may not automatically switch to the active path, causing I/O to potentially go through the passive path (if it is accessible but not optimized). Option B is correct. Option A is wrong because only one path is active at a time.

Option C is wrong because ALUA is supported. Option D is wrong because RDM is irrelevant.

Full explanation →
404
MCQeasy

A small financial services company runs a critical trading application on a single vSphere host with two NUMA nodes (each with 8 cores). The VM is configured with 12 vCPUs and 64 GB memory. The application is not yet live, but load testing shows that CPU performance is satisfactory, but memory bandwidth is lower than expected. The application is known to benefit from fast memory access within a single NUMA domain. The administrator notices that the VM's memory is spread across both NUMA nodes. The administrator wants to force the VM to use only one NUMA node to maximize performance. However, the VM requires 12 vCPUs, which exceeds the 8 physical cores per node. What is the best course of action to improve memory bandwidth for this VM?

A.Enable Hyper-Threading and reassign vCPUs to 12, and the VM will automatically run within one NUMA node.
B.Keep the vCPU count at 12 but configure a NUMA Affinity to prefer the first NUMA node, and accept some cross-node memory access.
C.Keep the vCPU count at 12 but set CPU affinity to the first NUMA node only, leaving the second node unused.
D.Reduce the number of vCPUs to 8 to fit within one NUMA node, and keep the same memory size.
AnswerB

NUMA affinity prefers one node for memory allocation, keeping most memory local while allowing vCPUs to use both nodes as needed, balancing performance.

Why this answer

Option C is correct: Using NUMA affinity to prefer one node keeps most memory local, but vCPU count exceeds core count, so some vCPUs will still run on the second node. However, memory can be allocated from the preferred node as much as possible, reducing cross-node latency. Option A is wrong because reducing vCPUs may affect application performance.

Option B is wrong because CPU affinity to only one node would starve vCPUs as there are only 8 cores, causing high ready time. Option D is wrong; Hyper-Threading does not change physical core count; 12 vCPUs still exceed 8 cores per node, and HT does not enable single-node placement.

Full explanation →
405
Multi-Selecteasy

Which THREE of the following are true about vSphere Storage DRS?

Select 3 answers
A.Storage DRS always automatically migrates VMs.
B.Storage DRS works only with VMFS datastores.
C.Storage DRS can be configured with affinity rules.
D.Storage DRS can move virtual machine files between datastores.
E.Storage DRS requires vMotion.
AnswersC, D, E

Affinity rules allow keeping VMs on specific datastores.

Why this answer

Storage DRS can move virtual machine files between datastores (migration), supports affinity rules, and requires vMotion. It does not work only with VMFS (also NFS) and does not always automatically migrate VMs (depending on automation level).

Full explanation →
406
MCQmedium

Based on the exhibit, which statement about the virtual machine's memory state is TRUE?

A.The VM is using the memory balloon driver to reclaim memory.
B.The VM is using transparent page sharing to reduce memory usage.
C.The VM has no memory pressure and is performing optimally.
D.The VM is actively swapping memory because of memory pressure.
AnswerD

SWCUR and swap rates confirm swapping is occurring.

Why this answer

SWCUR (current swapped memory) is 512 MB, and SWR/s and SWW/s show non-zero swap rates, indicating that the VM is actively swapping memory to disk. MCTLSZ is 0, meaning no ballooning is occurring. The VM's memory size is 4096 MB.

Swapping is a sign of memory pressure.

Full explanation →
407
MCQmedium

A company uses Linked Mode vCenter Servers across two data centers. One of the links fails. What happens to the management capabilities?

A.Both vCenter Servers become unavailable.
B.Each vCenter Server can manage its own inventory, but cross-datacenter tasks fail.
C.One vCenter Server takes over management of both data centers.
D.vSphere HA on both clusters reactivates the link.
AnswerB

Linked Mode allows independence; only cross-datacenter features are impacted.

Why this answer

Option A is correct. Each vCenter Server in Linked Mode operates independently; the link failure only affects cross-datacenter operations. Option B is incorrect because both continue working.

Option C is incorrect because they are not in a failover cluster. Option D is incorrect.

Full explanation →
408
MCQmedium

An administrator manages a cluster of 10 identical ESXi hosts using vLCM with image-based management. After importing a new hardware support package (HSP) and applying a new image specification, 5 hosts report non-compliant with the error 'Firmware version not supported'. The compliant hosts and non-compliant hosts are from the same vendor model. What is the most likely cause?

A.The image specification was applied only to the compliant hosts.
B.The non-compliant hosts have a different manufacturer than the compliant ones.
C.The vLCM service failed to download the HSP to the non-compliant hosts.
D.The firmware version on the non-compliant hosts is newer than what the hardware support package supports.
AnswerD

vLCM checks firmware compatibility against the HSP; newer firmware causes non-compliance.

Why this answer

Option A is correct because if the firmware version on the non-compliant hosts is newer than what the HSP supports, vLCM will report non-compliant. Option B is incorrect as the image specification applies to all hosts in the cluster. Option C is incorrect because all hosts are identical hardware.

Option D is incorrect as the download would succeed if the HSP was imported.

Full explanation →
409
MCQhard

An administrator configures a resource pool with a reservation of 10 GHz and a limit of 20 GHz. The pool contains two VMs: VM1 has a reservation of 6 GHz and no limit, VM2 has no reservation and a limit of 8 GHz. The host has only 12 GHz available. During peak usage, both VMs demand more than their shares. Which statement is true?

A.VM1 gets at least 6 GHz, VM2 gets at most 8 GHz, but because the pool limit is 20 GHz and host only 12, VM2's limit is effectively 6 GHz after VM1's reservation
B.VM1 gets at least 6 GHz, VM2 gets at most 8 GHz, and the remaining 4 GHz is divided by share
C.VM1 gets exactly 6 GHz, VM2 gets exactly 8 GHz, and the pool's reservation is ignored
D.VM1 gets at least 6 GHz, VM2 gets at least 2 GHz due to pool reservation, and both use remaining as share
AnswerA

VM1's reservation takes 6 GHz, leaving 6 GHz for VM2, which is within VM2's limit of 8 GHz, so VM2 gets 6 GHz.

Why this answer

Option B is correct. The resource pool has a limit of 20 GHz, but host only has 12 GHz. VM1 has 6 GHz reservation, so it gets at least that.

VM2 has a limit of 8 GHz, but after VM1's reservation only 6 GHz remains on the host, which is within VM2's 8 GHz limit, so VM2 gets 6 GHz. The pool's reservation is satisfied (6+6=12 >=10). Option A is wrong because it ignores that host capacity is less than pool limit.

Option C is wrong because VM2 cannot get 8 GHz due to host limit. Option D is wrong because pool reservation does not allocate additional resources.

Full explanation →
410
MCQhard

A vSphere cluster uses vSAN with deduplication and compression enabled. An administrator notices that IOPS for a VM is lower than expected despite low CPU and memory utilization on hosts. Which of the following is most likely the cause?

A.The VM storage policy has no read cache reservation
B.vSAN object repair is consuming disk bandwidth
C.The VM is running on a host with a vSAN disk capacity tier that is 80% full
D.Deduplication and compression overhead is causing increased CPU usage on storage controller
AnswerD

Dedupe/compression consumes CPU, and if saturated, can throttle I/O operations.

Why this answer

Option C is correct because deduplication and compression use CPU on each host, which can become a bottleneck for IOPS. Option A is wrong; repair is done at off-peak. Option B is wrong; read cache reservation is not a primary cause.

Option D is wrong; capacity utilization itself does not directly reduce IOPS unless near full causing rebalance.

Full explanation →
411
Multi-Selecthard

An administrator is configuring Storage DRS on a datastore cluster. Which THREE conditions must be met for Storage DRS to migrate virtual disks?

Select 3 answers
A.The source and destination datastores must be part of the same datastore cluster.
B.The ESXi host must have a valid Storage vMotion license.
C.The virtual disk must not be attached to a snapshot.
D.The storage array must support VAAI.
E.The virtual machine must be powered on.
AnswersA, B, E

Storage DRS operates within a datastore cluster.

Why this answer

Option A is correct because Storage DRS operates within a single datastore cluster, which is a collection of datastores that share resources and are managed as a single entity. For Storage DRS to migrate virtual disks via Storage vMotion, both the source and destination datastores must be members of the same datastore cluster; cross-cluster migrations are not supported by Storage DRS.

Exam trap

The trap here is that candidates often assume Storage DRS requires VAAI for migrations, but VAAI is only an optimization for certain operations (like hardware-assisted locking or copy offload) and is not a prerequisite for Storage DRS to function.

Full explanation →
412
MCQeasy

An administrator needs to separate vMotion traffic from management traffic. Which should be created?

A.A new physical NIC.
B.A new VMkernel adapter on a different subnet.
C.A new VLAN on the existing port group.
D.A new standard switch port group.
AnswerB

A separate VMkernel adapter on a different network isolates vMotion traffic.

Why this answer

Option B is correct because creating a separate VMkernel adapter on a different subnet for vMotion is a best practice to isolate traffic. Option A is incorrect because a new standard switch port group alone does not separate traffic without a different IP network. Option C is incorrect because using the same VLAN but different IP subnet still shares the same broadcast domain.

Option D is incorrect because a new physical NIC is often not necessary; a VLAN can suffice.

Full explanation →
413
MCQeasy

What is the maximum number of virtual CPUs (vCPUs) that can be allocated to a virtual machine on vSphere 8 Enterprise Plus?

A.128
B.512
C.64
D.256
AnswerD

vSphere 8 supports up to 256 vCPUs per VM.

Why this answer

Option A is correct because vSphere 8 supports up to 256 vCPUs per VM (with appropriate licensing). Option B is incorrect because 128 was the limit in vSphere 6.5. Option C is incorrect because 512 is not supported.

Option D is incorrect because 64 is lower than current maximum.

Full explanation →
414
MCQmedium

An administrator observes that a VM with 4 vCPUs running on a host with hyperthreading enabled shows high %CSTP (co-stop) values in esxtop. What is a likely cause?

A.The VM has CPU affinity configured forcing vCPUs to specific pCPUs.
B.The VM's memory reservation is too high.
C.The host has deep C-states enabled causing CPU idle savings.
D.The host memory is overcommitted causing swapping.
AnswerA

CPU affinity can restrict scheduling and cause co-stop when pCPUs are not all available.

Why this answer

Co-stop occurs when the hypervisor is unable to schedule all vCPUs of a VM simultaneously because the pCPUs are not all available at the same time. This is often due to CPU affinity settings or physical CPU contention. C-state issues and memory pressure do not directly cause co-stop.

Full explanation →
415
MCQmedium

A company is implementing vSphere 7.0 and wants to encrypt all vMotion traffic between ESXi hosts in a cluster. The cluster is not using any other encryption features. What is the minimum requirement to enable vMotion encryption?

A.A VM Encryption Key Management Server must be configured.
B.The ESXi hosts must be joined to an Active Directory domain.
C.The ESXi hosts must have a host profile applied with encryption enabled.
D.The cluster must be configured with Enhanced vMotion Compatibility (EVC).
AnswerB

Correct: vMotion encryption uses certificates from the domain to establish encrypted tunnels.

Why this answer

In vSphere 7.0, vMotion encryption can be enabled without any additional infrastructure by setting the vMotion encryption policy to 'Required' or 'Opportunistic' on the ESXi host's advanced system settings. The minimum requirement is that the ESXi hosts must be joined to an Active Directory domain, because vMotion encryption relies on Kerberos authentication (RFC 4120) to establish a secure channel between hosts. This eliminates the need for a separate Key Management Server (KMS) for vMotion traffic alone, as the domain provides the necessary trust and key exchange mechanism.

Exam trap

The trap here is that candidates often assume vMotion encryption requires a Key Management Server (KMS) because they conflate it with VM-level encryption, but vMotion encryption is a separate feature that leverages Active Directory Kerberos instead.

How to eliminate wrong answers

Option A is wrong because a VM Encryption Key Management Server is required for encrypting virtual machine disks (VM-level encryption), not for vMotion traffic; vMotion encryption uses Kerberos from Active Directory, not a KMS. Option C is wrong because a host profile is a management tool for applying consistent configurations across hosts, but it is not a prerequisite for enabling vMotion encryption; the encryption setting can be configured directly on each host via advanced system parameters (e.g., 'VMkernel.Boot.vmotionEncryption'). Option D is wrong because Enhanced vMotion Compatibility (EVC) ensures CPU compatibility for live migrations but has no role in encrypting vMotion traffic; EVC does not provide any encryption or authentication mechanism.

Full explanation →
416
MCQhard

After upgrading vCenter to 8.0, the administrator cannot see any vLCM images in the vSphere Client. What is the most likely cause?

A.The vSphere Auto Deploy service is disabled.
B.The vCenter Server is not registered with VMware.
C.The vLCM service is not started.
D.The vCenter license does not include vLCM.
AnswerC

The vLCM service must be running for images to be managed.

Why this answer

Option C is correct because vLCM has a dedicated service that must be running. Option A is wrong because vLCM is licensed as part of Enterprise Plus; Option B is wrong because registration is not a prerequisite; Option D is wrong because Auto Deploy is a separate feature.

Full explanation →
417
MCQeasy

A vSphere administrator is tasked with automating the lifecycle management of ESXi hosts in a cluster using vLCM. The cluster currently has 10 hosts with various ESXi versions (7.0, 7.0 U1, 7.0 U2). The administrator wants to bring all hosts to a consistent version 7.0 U3. The administrator creates a new image with ESXi 7.0 U3 and attempts to remediate the cluster. The remediation fails with the error 'Host does not have the required power state to perform remediation'. All hosts are powered on and connected. What is the most likely cause?

A.The administrator must manually put all hosts into maintenance mode before remediation.
B.Some hosts are in standby mode or powered off.
C.vSphere DRS is not enabled on the cluster.
D.There is a stale lock on the vLCM image specification.
AnswerC

vLCM requires DRS to be enabled for automated remediation to move VMs off hosts and put them in maintenance mode.

Why this answer

Option A is correct - DRS must be enabled to allow vLCM to automatically put hosts into maintenance mode. Option B is incorrect - hosts are powered on. Option C is incorrect - no stale locks.

Option D is incorrect - no manual staging needed.

Full explanation →
418
MCQeasy

Based on the exhibit, which VM (indicated by the row) is most likely experiencing severe CPU scheduling contention?

A.The VM with %RDY = 2.3
B.The VM with %RDY = 30.0
C.The VM with %RDY = 15.5
D.The VM with %RDY = 0.5
AnswerB

30% ready time indicates severe CPU scheduling contention.

Why this answer

The row with the highest %RDY (30.0) indicates the VM is spending a large percentage of time ready to run but not being scheduled, which is a sign of severe CPU contention. The other rows have lower %RDY values.

Full explanation →
419
Multi-Selecthard

An administrator is troubleshooting a vLCM cluster that has multiple ESXi hosts with non-compliant status. The cluster uses a single image with an HSM for firmware. Which TWO actions should the administrator take to identify the root cause of non-compliance? (Choose two.)

Select 2 answers
A.Validate the cluster image against the desired image specification.
B.Run the vSphere Update Manager baseline scan on each host.
C.Verify the HSM is properly connected and reporting firmware inventory.
D.Review the vLCM compliance status for each host in the cluster to see specific missing components.
E.Check the baseline compliance report for the cluster.
AnswersC, D

If HSM is offline or misconfigured, firmware component cannot be applied.

Why this answer

Option C is correct because the Hardware Support Manager (HSM) is responsible for reporting firmware inventory to vLCM. If the HSM is not properly connected or is failing to report, vLCM cannot determine the current firmware state of the hosts, leading to non-compliant status. Verifying the HSM connection and inventory reporting is a critical first step in isolating the root cause.

Exam trap

The trap here is that candidates may confuse vLCM image-based compliance with legacy VUM baseline scans, leading them to select options that reference baselines or baseline reports, which are not applicable in a vLCM context.

Full explanation →
420
MCQmedium

An administrator notices that a VMFS datastore has only one optimized path. The exhibit shows the output of esxcli storage nmp path list for that datastore. What should the administrator do to fully utilize both storage controllers?

A.Rescan the storage adapters.
B.Change the PSP to Round Robin.
C.Enable the path failover policy.
D.Change the SATP to VMW_SATP_ALUA.
AnswerD

VMW_SATP_ALUA correctly recognizes optimized and non-optimized paths, allowing the PSP to use both paths for I/O.

Why this answer

The SATP should be VMW_SATP_ALUA for arrays that support ALUA to properly handle optimized and non-optimized paths. The current SATP (DEFAULT_AA) treats all paths equally, leading to suboptimal path usage.

Full explanation →
421
MCQhard

A multinational corporation runs a vSphere environment with 100 ESXi hosts managed by a single vCenter Server. The security team mandates that all virtual machine disks (VMDKs) must be encrypted at rest. The administrator enables vSphere Virtual Machine Encryption and creates a Key Management Server (KMS) cluster. After encrypting a test VM, the VM powers on successfully, but the administrator notices that the VM's configuration files (VMX, NVRAM) are not encrypted. The security policy requires that all VM files, including configuration files, be encrypted. The administrator checks the VM storage policy and sees that the policy is set to 'VM Encryption Policy' with 'Disk Encryption' enabled. What should the administrator do to ensure the entire VM is encrypted?

A.Modify the VM storage policy to include encryption of VM home files
B.Enable encryption on the datastore where the VM resides
C.Add a second KMS cluster for redundancy
D.Enable vSphere Host Encryption on each ESXi host
AnswerA

The policy must include 'Virtual Machine Home' encryption.

Why this answer

The VM storage policy 'VM Encryption Policy' with only 'Disk Encryption' enabled encrypts VMDK files but not the VM configuration files (VMX, NVRAM, logs, etc.). To encrypt all VM files, the storage policy must include the 'Encrypt VM home files' option, which applies encryption to the entire VM home directory on the datastore. This ensures compliance with the security mandate for full VM encryption at rest.

Exam trap

The trap here is that candidates assume 'VM Encryption Policy' with 'Disk Encryption' covers all VM files, but VMware explicitly separates disk encryption from home file encryption in the storage policy settings.

How to eliminate wrong answers

Option B is wrong because datastore-level encryption (e.g., vSAN encryption or Storage DRS encryption) is a separate feature that encrypts the entire datastore, but it does not selectively encrypt VM home files when using VM Encryption Policy; the policy must explicitly include home file encryption. Option C is wrong because adding a second KMS cluster provides redundancy for key management but does not affect which VM files are encrypted; the encryption scope is defined by the storage policy, not the KMS topology. Option D is wrong because vSphere Host Encryption encrypts host memory and vMotion traffic, not VM files at rest on the datastore; it does not address VMDK or configuration file encryption.

Full explanation →
422
MCQhard

A vSphere administrator observes that a VM's memory usage is high, and the host memory is overcommitted. The VM has a memory balloon driver installed and running. Which metric in esxtop would the administrator check to confirm that ballooning is reclaiming memory?

A.SWCUR
B.MCTLSZ
C.ACTV
D.VMMEMCTL
AnswerB

MCTLSZ is the memory balloon size, showing how much memory the balloon driver has reclaimed.

Why this answer

The MCTLSZ field in esxtop's memory section shows the current amount of memory reclaimed by the balloon driver. ACTV shows active memory, SWCUR shows swapped memory, and VMMEMCTL shows memory control overhead. MCTLSZ directly indicates balloon activity.

Full explanation →
423
Matchingmedium

Match each vSphere storage concept to its definition.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Cluster file system for VM storage

Network file system protocol for VM storage

Block storage protocol over IP networks

Raw device mapping for direct LUN access

Hyper-converged storage from local disks

Why these pairings

Storage technologies used in vSphere environments.

Full explanation →
424
Multi-Selectmedium

Which two of the following are required to deploy a vSphere cluster with vSphere HA and DRS? (Choose two.)

Select 2 answers
A.Clock synchronization across all hosts (NTP)
B.A minimum of two vCenter Server instances
C.Network connectivity between hosts for management traffic
D.An active Directory service for authentication
E.Shared storage accessible by all hosts in the cluster
AnswersA, C

HA and DRS require synchronized time for proper operation.

Why this answer

Options B and E are correct. Multiple vCenter Servers are not required; one vCenter can manage HA/DRS. Options D is optional.

Clock synchronization is critical for HA master election and DRS recommendations.

Full explanation →
425
MCQhard

A vSphere administrator is troubleshooting a performance issue on a VM that has high average latency on its virtual disks. The VM is stored on a VMFS datastore backed by an all-flash array. The VM has 4 vCPUs and 16GB memory. The administrator runs esxtop and sees %USEDRDY: 0.5, %MLMTD: 10, %SWPWT: 0. What is the most likely cause of the high disk latency?

A.Memory ballooning is causing excessive swapping
B.CPU ready time is high
C.Storage controller queue depth is full
D.The VM is experiencing memory contention that is manifesting as disk latency
AnswerD

High %MLMTD (10%) indicates memory contention, which can degrade overall VM performance including disk I/O.

Why this answer

%MLMTD indicates memory contention. When memory resources are constrained, the hypervisor may throttle the VM, affecting all operations including disk I/O. Option D is correct.

Options A and C are not supported by the esxtop metrics. Option B is incorrect because %SWPWT is 0, indicating no swapping.

Full explanation →
426
MCQhard

An organization is implementing vSphere Trust Authority for sensitive workloads. The administrator must configure the trusted ESXi hosts to attest to vCenter Server. Which component is responsible for performing attestation?

A.The administrator's workstation
B.A separate vCenter Server instance acting as the Trust Authority
C.The Key Provider (KMS) server
D.The trusted ESXi hosts themselves
AnswerB

The Trust Authority vCenter performs host attestation.

Why this answer

Option B is correct because vSphere Trust Authority uses a dedicated vCenter Server (Trust Authority vCenter) to perform attestation of ESXi hosts. Option A is wrong because the workstation is not part of the trust chain. Option C is wrong because the trusted ESXi hosts themselves do not perform attestation; they are attested.

Option D is wrong because the Key Provider is used for encryption keys, not attestation.

Full explanation →
427
MCQmedium

A company runs a four-node vSphere 7 cluster with all-flash storage and 25GbE networking. The cluster hosts 50 VMs, including a critical database VM with 16 vCPUs and 64 GB memory. The database VM's performance has degraded over the past week. vCenter reports high CPU ready time (average 15%) for the database VM, while other VMs show less than 2%. CPU utilization on the host is 70%. The database VM is configured with CPU affinity pinned to cores 0-15 on a dual-socket host with 16 cores per socket (32 total). The administrator also notices that the database VM's CPU co-stop counter is high. What should the administrator do to improve performance?

A.Migrate the database VM to a host with fewer VMs.
B.Enable CPU hot-add for the database VM.
C.Remove the CPU affinity setting for the database VM.
D.Increase the number of vCPUs for the database VM to 32.
AnswerC

Allows the scheduler to balance across NUMA nodes, reducing ready time and co-stop.

Why this answer

The high CPU ready time (15%) and elevated co-stop counter indicate that the database VM is suffering from contention due to CPU affinity pinning to cores 0-15. On a dual-socket host with 16 cores per socket, pinning to cores 0-15 restricts the VM to a single NUMA node, preventing the scheduler from load-balancing across both sockets. Removing the affinity allows the ESXi scheduler to distribute vCPUs across all 32 cores, reducing co-scheduling overhead and ready time.

Exam trap

The trap here is that candidates often assume high ready time means the host is overloaded and choose to migrate or add vCPUs, overlooking that CPU affinity artificially constrains the scheduler and causes co-stop delays.

How to eliminate wrong answers

Option A is wrong because migrating to a host with fewer VMs does not address the root cause—the CPU affinity restriction causing NUMA imbalance and co-stop contention; the current host already has low overall CPU utilization (70%). Option B is wrong because enabling CPU hot-add does not reduce ready time or co-stop counter; it only allows adding vCPUs without reboot, which would likely worsen contention. Option D is wrong because increasing vCPUs to 32 would exacerbate co-scheduling overhead and co-stop delays, especially with affinity pinning to a single socket, leading to further performance degradation.

Full explanation →
428
MCQmedium

During a security audit, it is found that the vCenter Server is using the default self-signed certificate. The administrator is tasked to replace it with a certificate from an enterprise CA. What is the first step after obtaining the CA-signed certificate?

A.Convert the certificate and private key into PEM format and place them in the appropriate directory.
B.Use the vSphere Web Client to upload the certificate.
C.Import the private key into the Windows Certificate Store.
D.Restart the VMware Certificate Service.
AnswerA

vCenter expects PEM files for certificates and keys.

Why this answer

Option A is correct because the certificate must be in a format that vCenter can use; typically, it needs to be combined with the private key. Option B is premature before preparing the certificate. Option C is incorrect because certificate import is done via certificate management tools, not vSphere Web Client.

Option D is incorrect because the private key is included in the signed certificate generation process, not imported separately.

Full explanation →
429
MCQeasy

A rapidly growing company currently uses vSphere 7 Standard Edition across two data centers connected via a high-latency link. They plan to implement a vSAN stretched cluster to provide a unified storage solution and enable automatic failover between sites. The cluster must support VM-level encryption at rest and in transit, as well as intelligent capacity management with deduplication and compression. The budget is strictly allocated to a per-CPU licensing model. Which vSAN edition should the company select to meet all requirements while minimizing costs?

A.vSAN Enterprise
B.vSAN Starter
C.vSAN Advanced
D.vSAN Standard
AnswerA

vSAN Enterprise includes all required features: stretched clusters, encryption, deduplication/compression, and intelligent capacity management.

Why this answer

vSAN Enterprise edition is required to support stretched clusters, encryption, and intelligent capacity management features such as deduplication/compression. vSAN Advanced supports deduplication/compression and encryption but not stretched clusters. vSAN Standard lacks both stretched clusters and encryption. vSAN Starter is intended for small deployments and does not support any of these advanced features. Therefore, vSAN Enterprise is the correct choice.

Full explanation →
430
Multi-Selecthard

A vSphere administrator is using vSphere Lifecycle Manager images to manage a cluster. The administrator wants to add a new custom component (a driver) to the cluster image. Which THREE steps are required to successfully add the component? (Choose three.)

Select 3 answers
A.Download the component offline bundle from the vendor.
B.Create a new software depot on the vCenter Server.
C.Upload the component to the vLCM depot.
D.Add the component to the image definition in vLCM.
E.Validate the component against the current image.
AnswersA, C, D

The bundle must be obtained first.

Why this answer

Options A, B, and D are correct. A: Download the component offline bundle from the vendor. B: Upload the bundle to the vLCM depot.

D: Add the component to the image definition. C is wrong because you do not need to create a new depot. E is wrong because validation is automatic, not a manual step.

Full explanation →
431
MCQeasy

An administrator wants to stage updates to reduce downtime during remediation of a vLCM-managed cluster. What should they configure?

A.Enable 'Stage remediation' in the cluster image configuration.
B.Enable 'Quick Boot' to speed up reboots.
C.Configure the cluster to use a rolling schedule.
D.Create multiple host images for each host.
AnswerA

Staging pre-downloads updates so that during maintenance mode, only installation occurs.

Why this answer

Option A is correct because staging the remediation allows vLCM to download updates to hosts before putting them in maintenance mode, reducing downtime. Option B is wrong because Quick Boot reduces reboot time but not download time. Option C is wrong because multiple images are for heterogeneous clusters.

Option D is wrong because rolling updates are automatic and do not reduce staging time.

Full explanation →
432
MCQmedium

A vSphere administrator is troubleshooting a VM that hosts a critical database. The VM is configured with 8 vCPUs and 64 GB memory on an ESXi host with two 10-core CPUs (hyperthreading enabled). Performance charts show CPU ready time averaging 12% during peak hours, and the database application is experiencing high transaction latency. The administrator has verified that no other VMs are contending for CPU. Which action will most likely reduce CPU ready time without negatively impacting database performance?

A.Disable hyperthreading on the host.
B.Assign a CPU affinity mask to pin the VM to specific physical cores.
C.Increase the VM's memory reservation.
D.Reduce the number of vCPUs assigned to the VM to 4.
AnswerD

Reducing vCPUs decreases CPU scheduling overhead and can lower ready time for many applications.

Why this answer

Option C is correct because reducing the number of vCPUs to match the actual workload reduces scheduler overhead and improves cache locality. A VM with 8 vCPUs on a host with 40 logical CPUs should not normally have high ready time unless the vCPU count is excessive relative to the workload. Reducing to 4 vCPUs often resolves contention without degrading throughput because many database workloads do not scale linearly beyond 4 vCPUs.

Option A is wrong because disabling hyperthreading reduces logical CPUs, potentially increasing contention. Option B is wrong because increasing memory does not affect CPU ready time. Option D is wrong because CPU affinity can lead to unbalanced load and is not a best practice for DRS clusters.

Full explanation →
433
MCQhard

Refer to the exhibit. An administrator creates a storage policy with the rule: "Rule: provisioningType equals thick". When the policy is applied to a VM on this array, what will be the compliance status?

A.Not compliant - the array does not advertise thick provisioning capability.
B.Not compliant - the replication RPO is too high.
C.Compliant - the storage policy is applied regardless of capabilities.
D.Compliant - the array supports thin provisioning by default.
AnswerA

Correct: The array does not have a thick provisioning capability, so the VM is uncompliant.

Why this answer

The array only advertises thin provisioning and replication capabilities. The policy requires thick provisioning, which is not advertised. Therefore the VM will be marked as uncompliant because the array does not support the required capability.

Option B is incorrect because it does not match; the array supports thin only. Option C is incorrect because VVols do not automatically default to thick. Option D is incorrect because the array does not provide thick.

Full explanation →
434
MCQeasy

Which tool provides real-time performance monitoring at the ESXi host level, including CPU, memory, network, and storage metrics?

A.dcli
B.esxtop
C.resxtop
D.vCenter performance charts
AnswerB

esxtop runs directly on the ESXi host and shows real-time metrics.

Why this answer

esxtop is a command-line tool that provides real-time host performance data. vCenter performance charts are historical. resxtop is for remote usage, and dcli is a different tool.

Full explanation →
435
MCQhard

A vSphere administrator is troubleshooting a performance issue on a cluster with vSphere DRS enabled. The administrator notices that all VMs are on the same host despite DRS being fully automated. What is the most probable cause?

A.DRS automation level is set to 'Manual'.
B.The host with all VMs has a higher DRS migration threshold.
C.The cluster has DRS set to manual mode.
D.The vMotion network is not configured.
AnswerB

Correct: A high threshold makes DRS less aggressive.

Why this answer

A conservative migration threshold (high number) prevents DRS from moving VMs even when load is unbalanced.

Full explanation →
436
Multi-Selecthard

An administrator needs to implement Network I/O Control (NIOC) on a vSphere Distributed Switch to guarantee bandwidth for vSphere Replication traffic. Which two actions are required?

Select 2 answers
A.Enable NIOC on the distributed switch.
B.Create a network resource pool for vSphere Replication.
C.Set the replication VMkernel adapter's traffic shaping to guaranteed.
D.Configure the replication network on a separate VLAN.
E.Assign the vSphere Replication VMkernel adapter to the resource pool.
AnswersA, B

NIOC must be enabled globally on the DVS.

Why this answer

Options A and B are correct. First, NIOC must be enabled on the DVS. Then a network resource pool must be created for vSphere Replication traffic.

Option C is incorrect because assigning the VMkernel adapter to the resource pool is a subsequent step, not one of the two required actions (it is required but the question asks for two). Option D is incorrect because traffic shaping is not used with NIOC. Option E is incorrect because a separate VLAN is not required for NIOC.

Full explanation →
437
Multi-Selectmedium

An administrator is configuring vSphere Trust Authority (vTA) to secure ESXi hosts in a sensitive environment. Which TWO components are required for a vTA deployment? (Choose two.)

Select 2 answers
A.Trusted Host Cluster
B.Certificate Authority (CA)
C.Attestation Service
D.Key Management Server (KMS)
E.Key Provider
AnswersC, E

Required to verify host trust status.

Why this answer

Options B and C are correct. vTA requires an Attestation Service to verify host trust, and a Key Provider to manage keys. Option A is incorrect because Trusted Host Cluster is not a component but a concept. Option D is incorrect because KMS is for VM encryption, not vTA.

Option E is incorrect because a Certificate Authority is not a required component of vTA.

Full explanation →
438
MCQmedium

An administrator is troubleshooting performance issues on a VMFS datastore hosting SQL Server VMs. Storage I/O Control (SIOC) is enabled, but the administrator notices that congestion is detected but no throttling is applied. What could be the reason?

A.The SIOC congestion threshold is set too high
B.The datastore is deduplicated
C.SIOC is disabled on the datastore
D.The host has exceeded the maximum number of concurrent I/Os
AnswerA

The threshold determines when throttling starts; a high value may prevent activation.

Why this answer

SIOC throttles only when there is congestion and the SIOC queue depth threshold is exceeded. If the threshold is set too high, throttling may not activate. Option B is correct.

Option A (disabled) would not detect congestion. Option C (wrong) about stats interval. Option D (deduplication) is irrelevant.

Full explanation →
439
MCQmedium

A vSphere administrator is planning to upgrade a vSphere 7.0 U3 cluster to vSphere 8.0. The cluster currently uses vSphere Lifecycle Manager (vLCM) with a single image. After the upgrade, the administrator wants to ensure that all ESXi hosts apply firmware updates from a hardware support manager (HSM) integrated with vLCM. Which step must the administrator take before starting the cluster upgrade?

A.Disable vLCM and use baseline-based remediation for the upgrade.
B.Create separate baselines for ESXi and firmware and attach them to the cluster.
C.Remove the HSM integration because vLCM cannot apply firmware updates.
D.Ensure the desired ESXi version and firmware component are specified in the vLCM image.
AnswerD

vLCM with HSM integration requires the firmware component in the image to apply updates.

Why this answer

Option D is correct because vLCM with a single image can include both the ESXi version and firmware components from an integrated hardware support manager (HSM). By specifying the desired ESXi version and firmware component in the vLCM image, the administrator ensures that during the cluster upgrade, vLCM will apply the firmware updates provided by the HSM as part of the image-based remediation process. This is the required step before starting the upgrade to vSphere 8.0.

Exam trap

The trap here is that candidates may think vLCM cannot handle firmware updates or that separate baselines are needed, when in fact vLCM's single-image approach with HSM integration is designed to manage both ESXi and firmware updates together.

How to eliminate wrong answers

Option A is wrong because disabling vLCM and reverting to baseline-based remediation would lose the single-image management and HSM integration capabilities, which are key to applying firmware updates in a unified manner. Option B is wrong because vLCM with a single image does not use separate baselines for ESXi and firmware; instead, it uses a single image that includes both components, and attaching separate baselines would conflict with the image-based approach. Option C is wrong because vLCM can apply firmware updates when integrated with an HSM, and removing the HSM would prevent firmware updates from being applied during the upgrade.

Full explanation →
440
MCQeasy

Which feature allows a VM to use storage directly from the host's local disks, pooled across a cluster?

A.VMFS
B.vFlash
C.NFS
D.vSAN
AnswerD

vSAN creates a distributed datastore from local disks.

Why this answer

vSAN pools local disks from multiple hosts into a shared datastore. VMFS is a filesystem, NFS is network storage, vFlash is caching.

Full explanation →
441
MCQmedium

An administrator configures DRS on a cluster with two hosts. The administrator wants to ensure that two critical VMs (VM1 and VM2) always run on separate hosts. Which rule type should the administrator create?

A.Separate Virtual Machines
B.Virtual Machines to Hosts (Should run)
C.Keep Virtual Machines Together
D.Virtual Machines to Hosts (Must not run)
AnswerA

This rule ensures VMs are on different hosts.

Why this answer

Option B is correct because 'Separate Virtual Machines' rule ensures VMs run on different hosts. Option A is incorrect as 'Keep Virtual Machines Together' causes them to run on same host. Option C is incorrect because 'Virtual Machines to Hosts' rule is for affinity to specific hosts.

Option D is incorrect as 'Host Affinity' is for VM groups to host groups.

Full explanation →
442
MCQmedium

A vSphere environment experiences periodic performance degradation during peak business hours. Analysis shows that one ESXi host's CPU ready time for a specific mission-critical VM is consistently above 20%. Which corrective action should be taken first?

A.Increase the VM's memory reservation
B.Set a higher CPU limit on the VM
C.Migrate the VM to a different host with lower CPU utilization
D.Add more vCPUs to the VM
AnswerC

Moving the VM to a host with more available CPU resources reduces ready time directly.

Why this answer

High ready time indicates CPU contention. Moving the VM to a less loaded host using DRS or manual migration can immediately reduce ready time. Increasing resources without addressing contention is ineffective.

Full explanation →
443
MCQeasy

A vSphere administrator wants to ensure that all ESXi hosts in a cluster boot from a consistent set of software packages, including firmware and drivers. Which vSphere feature should be used to achieve this?

A.vSphere Update Manager (VUM)
B.vSphere Lifecycle Manager (vLCM) with a single image
C.Host Profiles
D.Quick Boot
AnswerB

vLCM with single image ensures consistent software across hosts.

Why this answer

vSphere Lifecycle Manager (vLCM) with a single image is the correct choice because it allows the administrator to define a complete software specification—including ESXi version, firmware, drivers, and add-ons—as a single desired state image. When applied to a cluster, vLCM ensures every ESXi host boots from exactly the same set of software packages, eliminating drift and guaranteeing consistency across all hosts.

Exam trap

The trap here is that candidates often confuse Host Profiles (which manage configuration settings) with image-based lifecycle management, not realizing that Host Profiles cannot enforce firmware or driver versions, while vLCM with a single image provides a holistic, boot-level software consistency.

How to eliminate wrong answers

Option A is wrong because vSphere Update Manager (VUM) applies updates and patches but does not enforce a single, unified image that includes firmware and driver baselines across all hosts; it operates on individual baselines and can leave hosts with different software combinations. Option C is wrong because Host Profiles capture host-level configuration settings (e.g., networking, storage, security) but do not manage firmware or driver versions; they are not designed to control the boot-time software package set. Option D is wrong because Quick Boot is a feature that reduces reboot time during updates by skipping hardware reinitialization; it has no role in ensuring consistent software packages across hosts.

Full explanation →
444
Multi-Selecthard

Which THREE actions would help reduce network latency for VMs in a vSphere environment?

Select 3 answers
A.Separate vMotion traffic onto a different VLAN.
B.Enable jumbo frames on the virtual switch and physical network.
C.Increase the MTU on the vSphere Standard Switch to 9000.
D.Use Network I/O Control to set a higher network share for latency-sensitive VMs.
E.Assign dedicated physical NICs for VM traffic.
AnswersB, D, E

Larger MTU reduces per-packet overhead.

Why this answer

B is correct because enabling jumbo frames (MTU 9000) on both the virtual switch and physical network reduces CPU overhead and improves throughput by allowing larger packets, which decreases the number of packets per second and thus lowers latency for VM traffic. This is particularly effective for storage and high-bandwidth workloads, as it reduces fragmentation and processing delays.

Exam trap

The trap here is that candidates often confuse increasing MTU on the virtual switch alone (Option C) as sufficient, forgetting that jumbo frames require end-to-end consistency across the entire physical network to avoid fragmentation and performance degradation.

Full explanation →
445
MCQeasy

What is the maximum number of ESXi hosts that can be managed by a single vCenter Server instance in vSphere 8 (standard domain)?

A.1000
B.500
C.4000
D.2000
AnswerD

vCenter Server 8 supports up to 2000 hosts per instance.

Why this answer

Option A is correct. In vSphere 8, a single vCenter Server can manage up to 2000 ESXi hosts. Option B (1000) is the limit for earlier versions.

Options C and D are incorrect.

Full explanation →
446
Multi-Selectmedium

Which TWO of the following are functions of a vSphere Distributed Switch that are not available in a vSphere Standard Switch? (Select exactly two.)

Select 2 answers
A.Port mirroring (Distributed Port Mirroring).
B.NIC teaming with explicit failover order.
C.Network I/O Control (NIOC).
D.Traffic shaping policies.
E.VLAN tagging and trunking.
AnswersA, C

Distributed switches support advanced port mirroring; standard switches only have basic mirroring via third-party solutions.

Why this answer

Options B and C are correct. Network I/O Control (NIOC) is only available on vDS. Port mirroring (using Distributed Port Mirroring) is a vDS-only feature.

Option A is incorrect because VLAN tagging is available on both switch types. Option D is incorrect because NIC teaming is available on standard switches as well. Option E is incorrect because traffic shaping is available on standard switches (per port group).

Full explanation →
447
MCQmedium

An administrator configures a resource pool with a CPU reservation and expandable reservation enabled. The root resource pool has 100% of cluster CPU resources. A VM inside the resource pool with no reservation requests CPU resources. What will happen when the VM tries to power on?

A.The VM can power on but will be limited to the resource pool's shares.
B.The VM can power on using resources from the resource pool or its parent due to expandable reservation.
C.The VM cannot power on because the resource pool has a reservation set.
D.The VM can power on using resources from the resource pool only if it has a reservation.
AnswerB

Expandable reservation allows the pool to borrow from parent if needed, so the VM can start.

Why this answer

Option D is correct because expandable reservation allows the resource pool to borrow CPU resources from the parent pool if needed. Since the VM has no reservation, it can power on as long as there are any unreserved resources in the resource pool or parent. Option A is incorrect because the VM can power on without a reservation.

Option B is incorrect because reservation is not mandatory to power on. Option C is incorrect because expandable reservation allows borrowing from parent.

Full explanation →
448
MCQmedium

An organization has deployed a vSphere Distributed Switch (vDS) across multiple ESXi hosts. The security team requires that no virtual machine can change its MAC address to impersonate another device. Which security policy setting on the distributed port group should be configured to fulfill this requirement?

A.Set 'Forged transmits' to 'Reject'.
B.Set 'MAC address changes' to 'Reject'.
C.Set 'Promiscuous mode' to 'Reject'.
D.Enable traffic shaping and set a low average bandwidth.
AnswerA

When forged transmits is rejected, the vSwitch drops frames that do not originate from the VM's actual MAC address, thus preventing MAC spoofing.

Why this answer

Option B is correct because the 'Forged transmits' policy, when set to 'Reject', drops any outbound frames with a source MAC address different from the one assigned to the virtual NIC. This prevents MAC impersonation. Option A is incorrect because 'Promiscuous mode' allows the VM to see all traffic on the port, which is a security risk and unrelated to MAC impersonation.

Option C is incorrect because 'MAC address changes' controls whether the VM can change its effective MAC address, but the question is about outward impersonation. Option D is incorrect because traffic shaping limits bandwidth, not MAC security.

Full explanation →
449
MCQhard

A cluster has mixed hardware vendors. The administrator wants to use a single vLCM image specification for all hosts. What is the best approach?

A.Do not use vLCM
B.Use a generic ESXi image without vendor add-ons
C.Create a composite image with add-ons for each vendor
D.Use separate images per vendor
AnswerB

A generic ESXi image can be applied to all hosts if it includes the necessary drivers; otherwise, consider separate images.

Why this answer

Option D is correct because vLCM cluster images support only one vendor add-on per image. For mixed hardware, the best approach is to use a generic ESXi image without vendor-specific add-ons and rely on the base image's driver set. If hardware-specific drivers are needed, separate images per hardware type may be required.

Full explanation →
450
MCQhard

An administrator attempts to vMotion a powered-on VM from ESXi host A to host B. The vMotion fails with the error: 'the destination host does not have access to the virtual machine's network'. The VM is connected to a standard switch on host A with a VLAN ID 100. Host B is connected to a VDS that also has a portgroup with VLAN ID 100. What is the most likely cause?

A.The VM is using a standard switch while host B uses a VDS
B.The VM is connected to a network that is not present on the destination host
C.Host B does not have the correct MTU set
D.Host B does not have the correct VLAN configuration
AnswerA

vMotion requires the source and destination to have the same network label; standard and VDS are different.

Why this answer

Option D is correct because vMotion requires compatible network configurations; the standard switch portgroup and VDS portgroup are not considered the same network even if VLAN IDs match. Option A is incorrect because VDS can support vMotion if networks are compatible. Option B is incorrect because different vSwitch types cause incompatibility.

Option C is incorrect because host B may have the correct VLAN, but the network must be the same type or bridged via port groups with matching names.

Full explanation →
Page 5

Page 6 of 7

Page 7

All pages

1234567

Practice VCP-DCV by domain

Target a specific domain to shore up weak areas.

vSphere Architecture, Products and SolutionsConfigure and Manage vSphere NetworkingConfigure and Manage vSphere StoragevSphere Lifecycle ManagementvSphere SecurityvSphere Performance and Scaling
See all domains with question counts →