Courseiva

VMware Certified Professional Data Center Virtualization VCP-DCV (VCP-DCV) — Questions 376450

498 questions total · 7pages · All types, answers revealed

Page 5

Page 6 of 7

Page 7
376
MCQeasy

An administrator is creating a new vSphere Standard Switch on an ESXi host. The host has two physical NICs: vmnic0 and vmnic1. The administrator wants to use vmnic0 for VM traffic and vmnic1 for management traffic. How should the administrator configure the switch?

A.Create one standard switch with vmnic0 only and use VLANs for separation.
B.Create one standard switch with both vmnics and separate port groups for VM and VMkernel.
C.Create two standard switches: one with vmnic0 and a VM port group, and another with vmnic1 and a VMkernel port group.
D.Create a vSphere Distributed Switch with both vmnics.
AnswerC

Separation of traffic types.

Why this answer

The requirement is to use separate physical NICs for different traffic types (VM traffic on vmnic0 and management traffic on vmnic1). In vSphere, a standard switch is a per-host virtual switch that connects virtual machines and VMkernel interfaces to physical NICs. To isolate traffic at the physical NIC level, you must create two distinct standard switches: one with vmnic0 and a VM port group for VM traffic, and another with vmnic1 and a VMkernel port group for management traffic.

This ensures that management traffic never traverses vmnic0 and VM traffic never traverses vmnic1, providing physical separation and avoiding contention.

Exam trap

The trap here is that candidates often assume a single standard switch with multiple uplinks and separate port groups is sufficient for traffic separation, but they overlook that physical NIC assignment is per-switch, not per-port-group, so both traffic types could still share the same NICs via teaming or failover unless explicit NIC binding is configured.

How to eliminate wrong answers

Option A is wrong because creating a single standard switch with only vmnic0 and using VLANs for separation does not physically separate management traffic onto vmnic1; management traffic would still be forced through vmnic0, violating the requirement. Option B is wrong because creating one standard switch with both vmnics and separate port groups for VM and VMkernel traffic would allow both traffic types to use either NIC (via teaming or failover), failing to enforce the dedicated NIC assignment. Option D is wrong because a vSphere Distributed Switch (VDS) requires vCenter Server and is not created directly on an ESXi host; it also does not inherently force specific traffic types to dedicated physical NICs without explicit configuration, and the question specifies a standard switch.

377
MCQmedium

An administrator configures a distributed switch with a single uplink on each host and a port group with VLAN 10. After connecting a VM to the port group, the VM cannot communicate with other VMs on the same VLAN but on different hosts. What is a likely cause?

A.The physical switch port is set to access mode with VLAN 10.
B.The distributed switch has no teaming configured.
C.The physical switch port connected to the uplink is set to trunk mode and is tagging the VLAN.
D.The VLAN ID is not set correctly on the VM's virtual network adapter.
AnswerA

Access mode expects untagged traffic, but vSphere tags frames, causing communication failure.

Why this answer

When the physical switch port is in access mode with VLAN 10, it expects untagged frames. However, the distributed port group with VLAN 10 tags the frames with VLAN 10. This mismatch causes the physical switch to drop or mishandle the traffic, preventing the VM from communicating with other VMs on the same VLAN across hosts.

Option B is incorrect because teaming is not required for basic connectivity; a single uplink suffices. Option C describes trunk mode which would actually accept tagged frames, so it would work. Option D is incorrect because the VLAN ID is configured on the port group, not on the VM's virtual adapter.

378
Multi-Selecthard

Which THREE components are part of a vSAN cluster?

Select 3 answers
A.vSAN datastore
B.vSAN network
C.vSAN witness host
D.ESXi hosts
E.vCenter Server
AnswersA, B, D

Correct: The datastore is the aggregated storage.

Why this answer

A vSAN datastore is a core component of a vSAN cluster because it is the aggregated, distributed storage object created from the local disks of the ESXi hosts in the cluster. This datastore is what VMs use for storage, and it is built and managed by the vSAN layer, making it an integral part of the cluster's architecture.

Exam trap

The trap here is that candidates often mistake vCenter Server as a required component of a vSAN cluster, but vCenter Server is only needed for management and initial configuration, not for the cluster's ongoing operation or data plane functionality.

379
Multi-Selecteasy

Which TWO statements are true about datastore heartbeating in vSphere HA? (Choose two.)

Select 2 answers
A.At least two datastores should be selected for heartbeating to provide redundancy.
B.Datastore heartbeating is enabled by default when vSphere HA is configured.
C.Datastore heartbeating is used to detect host isolation.
D.Datastore heartbeating is only supported on VMFS datastores.
E.vSphere HA uses datastore heartbeating as the primary method for failure detection.
AnswersA, D

Correct: Two datastores are recommended to avoid a single point of failure.

380
MCQhard

A vSphere administrator is trying to create a custom ESXi image for a cluster using vSphere Lifecycle Manager. The cluster contains hosts with a specific hardware that requires a third-party component (e.g., a NIC driver). The administrator adds the component to the image definition in vLCM. However, when applying the image, the component does not get installed on the hosts. What is the likely cause?

A.The component version is not compatible with the ESXi version in the image.
B.The administrator did not mount the component ISO during remediation.
C.The component is not signed by a trusted certificate authority.
D.The component must be installed manually on each host first.
AnswerA

vLCM will skip incompatible components during remediation.

Why this answer

VLCM validates component compatibility with the ESXi version; if the component version is not compatible, it will not be applied. Option B is wrong because vLCM uses a depot to distribute components, not ISO mounts. Option C is wrong because although unsigned components are rejected, the scenario implies the component was successfully added to the image definition, so signing is not the issue.

Option D is wrong because vLCM automates component installation.

381
MCQmedium

A company's vSphere environment consists of four ESXi hosts, each with two 10 GbE physical NICs. The administrator configures a VDS with two dvUplinks and uses load-balancing policy 'Route based on IP hash'. To use IP hash, what additional configuration is required on the physical switches?

A.Enable VLAN trunking on the switch ports
B.Configure LACP on the VDS uplink port groups
C.Configure link aggregation (LACP or static EtherChannel) on the switch ports
D.Enable IGMP snooping on the switch
AnswerC

IP hash load balancing requires an aggregated link on the physical switch side.

Why this answer

IP hash requires link aggregation (either LACP or static EtherChannel) to be configured on the physical switch ports to ensure proper hashing and load balancing. Option A is incorrect because VLAN trunking is a separate configuration and not directly required for IP hash. Option B is incorrect because configuring LACP on the VDS uplink port groups is optional and not mandatory for IP hash; the necessary link aggregation must be done on the physical switches.

Option D is incorrect because IGMP snooping is used for managing multicast traffic and is not related to IP hash load balancing.

382
MCQmedium

An administrator is creating a vLCM image for a cluster of Dell PowerEdge R740 servers. The exhibit shows the current image JSON. When attempting to apply the image, compliance errors are reported regarding firmware. What is the most likely missing component?

A.A vendor add-on for Dell is missing.
B.Only Dell models are listed, not all hardware models.
C.The firmware version in hardware_support is wrong.
D.The ESXi version is incorrect.
AnswerA

The vendor add-on provides necessary firmware and drivers for the hardware.

Why this answer

A vendor add-on for Dell is missing from the vLCM image. In vSphere Lifecycle Manager (vLCM), vendor add-ons provide hardware-specific drivers and firmware updates required for proper management. Without the Dell add-on, firmware compliance errors will occur.

Option B is incorrect because listing only Dell models is expected since all servers are Dell PowerEdge R740; not all hardware models need to be listed. Option C is incorrect because the firmware version in hardware_support is automatically populated based on the add-on, but without the add-on the firmware version is irrelevant. Option D is incorrect because the ESXi version is specified in the image and is not the cause of firmware errors.

383
MCQmedium

An administrator needs to migrate a VM from a VMFS5 datastore to a vSAN datastore while preserving the storage policy. Which migration method should be used?

A.Cold migration
B.Clone
C.Storage vMotion
D.vMotion
AnswerC

Storage vMotion migrates disks between datastores with no downtime.

Why this answer

Storage vMotion moves VM disks between datastores while preserving the storage policy association. vMotion moves compute only; cold migration requires downtime; clone creates a copy.

384
Multi-Selecthard

Which THREE parameters are considered by vSphere DRS when generating initial placement recommendations for a new VM?

Select 3 answers
A.Storage I/O latency
B.Host network utilization
C.Host memory load
D.Host CPU load
E.VM power state
AnswersB, C, D

DRS can consider network metrics.

Why this answer

Options B, C, and D are correct. When generating initial placement recommendations for a new VM, vSphere DRS considers host CPU load, host memory load, and host network utilization. Storage I/O latency (option A) is not considered by DRS but by Storage DRS.

VM power state (option E) is not a parameter for placement.

385
Multi-Selecthard

Which THREE techniques are recommended to improve virtual machine network performance in a vSphere environment? (Select three.)

Select 3 answers
A.Enable Jumbo Frames on the virtual switch.
B.Use the VMXNET3 virtual network adapter.
C.Use a dedicated virtual switch for each VM.
D.Use the e1000e network adapter type.
E.Enable SR-IOV on supported NICs.
AnswersA, B, E

Jumbo Frames reduce per-packet CPU overhead, improving throughput.

Why this answer

Correct: A (Enable Jumbo Frames), B (Use VMXNET3), and E (Enable SR-IOV). Jumbo Frames reduce CPU overhead for large packets by allowing larger MTU. VMXNET3 is a paravirtualized adapter that provides high performance and lower latency.

SR-IOV allows a physical NIC to be directly assigned to a VM, bypassing the hypervisor's virtual switch for near-native performance. Option C (dedicated virtual switch per VM) adds complexity without improving performance. Option D (e1000e) is an emulated adapter that is slower than VMXNET3 and should not be used for performance.

386
MCQmedium

A vSphere administrator needs to apply a critical security patch to all ESXi hosts in a cluster that is managed by a baseline. The patch is not yet available as an update in the baseline group. What is the best approach to apply this patch quickly?

A.Remediate each host individually using CLI commands.
B.Create a new baseline group that includes the patch and attach it to the cluster.
C.Download the patch as an offline bundle and use vLCM to apply it directly.
D.Attach the patch as a new baseline to the cluster alongside existing baselines.
AnswerD

Attaching a patch baseline allows remediation of the cluster.

Why this answer

Attaching the patch as a new baseline to the cluster alongside existing baselines allows you to quickly apply the critical security patch without modifying the existing baseline group. This method is efficient and directly addresses the immediate need. Option A is incorrect because remediating each host individually via CLI is time-consuming and less efficient for a cluster.

Option B is incorrect because creating a new baseline group is unnecessary and may cause disruption by replacing the current baseline group. Option C is incorrect because vLCM is used for image-based management, not baseline-based management, and the cluster is managed by baselines, not images.

387
MCQmedium

A vSphere administrator is planning to deploy a vCenter Server Appliance (VCSA) with an embedded Platform Services Controller (PSC). The company policy requires that all vCenter services be highly available. Which deployment topology should the administrator choose?

A.Deploy a single VCSA with embedded PSC on a standalone host.
B.Deploy a VCSA with an external PSC, and install the PSC on a separate VM.
C.Deploy a VCSA with embedded PSC on a cluster with vSphere HA enabled.
D.Deploy two VCSAs in separate vCenter Single Sign-On domains and configure multi-site.
AnswerC

vSphere HA restarts the VCSA if the host fails, providing high availability.

Why this answer

Deploying a VCSA with an embedded PSC on a cluster with vSphere HA enabled ensures that if the ESXi host running the VCSA fails, the VCSA is automatically restarted on another host in the cluster, providing high availability for all vCenter services. The embedded PSC topology is fully supported with vSphere HA, and this approach meets the policy requirement without the complexity of external PSCs or multi-site configurations.

Exam trap

The trap here is that candidates often confuse high availability (HA) with fault tolerance or disaster recovery, leading them to choose multi-site or external PSC options, but vSphere HA on a cluster is the simplest and correct method to achieve high availability for a single VCSA with embedded PSC.

How to eliminate wrong answers

Option A is wrong because a single VCSA on a standalone host provides no redundancy; if the host fails, the VCSA and all vCenter services become unavailable, violating the high availability requirement. Option B is wrong because deploying a VCSA with an external PSC does not inherently provide high availability for the vCenter services; it only separates authentication services, and the VCSA itself remains a single point of failure unless additional clustering (e.g., vSphere HA) is applied. Option D is wrong because deploying two VCSAs in separate vCenter Single Sign-On domains with multi-site is designed for disaster recovery across sites, not for high availability within a single site, and it introduces domain isolation that prevents unified management.

388
Drag & Dropmedium

Order the steps to enable vSphere HA on a cluster.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct sequence for enabling vSphere HA ensures that all prerequisites are met, starting with cluster selection, then accessing the HA configuration page, toggling the enable option, customizing settings, and applying changes. Common mistakes include attempting to configure options before enabling HA or accessing settings before selecting the cluster.

389
MCQeasy

An administrator needs to migrate a running VM from one datastore to another without any downtime. Which vSphere feature allows this?

A.Cross vCenter vMotion
B.Storage vMotion
C.Storage DRS
D.vMotion
AnswerB

Correct: Storage vMotion moves virtual disks live.

Why this answer

Storage vMotion migrates VM storage while the VM is running, with no downtime.

390
Drag & Dropmedium

Place the steps to create a new standard virtual switch in vSphere in order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct sequence for creating a new standard virtual switch in vSphere is: select a host, access its networking settings, click Add Networking, choose the connection type (e.g., Virtual Machine), and finally create and configure the new standard switch. This order ensures you follow the wizard's logical steps and avoid errors.

391
Multi-Selecthard

Which THREE components are required to configure Storage DRS affinity and anti-affinity rules?

Select 3 answers
A.A resource pool
B.Datastores
C.An ESXi host
D.Virtual machines
E.A datastore cluster
AnswersB, D, E

Datastores that are members of the datastore cluster are required for defining affinity/anti-affinity rules, as the rules specify relationships between VMs and datastores.

Why this answer

Storage DRS affinity and anti-affinity rules require a datastore cluster (option E) where the rules are defined, individual datastores (option B) that are members of the cluster and are associated with the rules, and virtual machines (option D) that are the targets of the rules. A resource pool (option A) is used for compute resource management and is not required for these rules. An ESXi host (option C) is also not a component; the rules operate at the datastore cluster level independently of hosts.

392
Multi-Selecthard

Which THREE factors should be considered when designing a vSphere environment to minimize vCPU overcommitment and improve performance for CPU-intensive workloads?

Select 3 answers
A.Align VM memory with NUMA nodes to reduce remote memory access.
B.Select hosts with a high physical core count per socket.
C.Use VMs with a high number of vCPUs (e.g., 2:1 ratio to pCPUs).
D.Enable Hyper-Threading on all hosts.
E.Use CPU scheduling modes like 'Core Level' to increase performance.
AnswersA, B, E

NUMA-aware placement improves memory access performance.

Why this answer

NUMA-aware VM placement ensures that vCPUs access memory from the local NUMA node, reducing remote memory latency and improving performance for CPU-intensive workloads. Option B is correct because selecting hosts with a high physical core count per socket reduces CPU contention and provides more dedicated resources for each VM. Option E is correct because CPU scheduling modes like 'Core Level' allow vSphere to schedule VMs at the core level, minimizing co-scheduling overhead and improving performance for CPU-bound workloads.

Option C is incorrect because using VMs with a high number of vCPUs (e.g., 2:1 ratio to pCPUs) increases vCPU overcommitment, leading to resource contention and degraded performance for CPU-intensive workloads. Option D is incorrect because enabling Hyper-Threading increases logical CPUs, but for heavily CPU-bound workloads that saturate physical cores, Hyper-Threading can cause resource sharing conflicts and may not improve performance; it can even degrade it due to increased contention for shared execution resources.

393
MCQhard

A company has a cluster with DRS set to Fully Automated. A VM named VM1 has a reservation of 4 GHz and a limit of 8 GHz on a host with 10 GHz available. The VM is running a batch job that requires as much CPU as possible. The administrator notices that the VM's CPU usage never exceeds 4 GHz. What is the most likely reason?

A.The CPU reservation is preventing the VM from using more than the reserved amount.
B.The CPU shares are too low, causing the VM to be starved.
C.The VM has a CPU limit set to 4 GHz via a resource pool or VM override.
D.DRS is not migrating the VM to a host with more resources.
AnswerC

Correct: A limit caps the maximum CPU usage; the specified limit of 8 GHz may be overridden by a lower limit.

Why this answer

A CPU limit explicitly caps the maximum CPU usage a VM can consume, regardless of available resources. In this scenario, the VM has a reservation of 4 GHz and a limit of 8 GHz on the host, but the administrator observes usage never exceeding 4 GHz, indicating a more restrictive limit is applied via a resource pool or VM override. This overrides the host-level limit, effectively capping the VM at 4 GHz, which matches the observed behavior.

Exam trap

The trap here is that candidates often confuse CPU reservation with CPU limit, assuming a reservation restricts maximum usage, when in fact a reservation only guarantees a minimum and a separate limit must be explicitly set to cap usage.

How to eliminate wrong answers

Option A is wrong because a CPU reservation guarantees a minimum amount of CPU resources to the VM, not a maximum; the VM can burst above the reservation if resources are available, so a reservation of 4 GHz does not prevent usage beyond 4 GHz. Option B is wrong because CPU shares determine relative priority during contention, but since the host has 10 GHz available and the VM is not contending for resources, low shares would not starve the VM; the VM would still be able to use more than 4 GHz if no limit were in place. Option D is wrong because DRS migration is irrelevant when the VM is already on a host with sufficient resources (10 GHz) and the issue is a hard cap on CPU usage, not a lack of available resources on the current host.

394
MCQeasy

An administrator is troubleshooting a failed attempt to add an ESXi host to a vCenter Server domain. The error message states: 'The host's certificate has been tampered with or is invalid.' What is the most likely cause?

A.The vCenter Server's account lockout policy has been triggered.
B.The ESXi host's SSH keys have been rotated.
C.The ESXi host's certificate has expired.
D.The ESXi host's certificate thumbprint does not match the thumbprint stored in vCenter Server.
AnswerD

This mismatch causes the 'tampered' error.

Why this answer

The error 'The host's certificate has been tampered with or is invalid' occurs when the ESXi host presents a certificate whose thumbprint does not match the thumbprint that vCenter Server has stored for that host. This mismatch can happen if the host's certificate was replaced (e.g., due to a reinstall or manual rotation) without updating the vCenter Server's trusted store. vCenter Server verifies the host's identity by comparing the SHA-1 or SHA-256 thumbprint of the presented certificate against its stored record; a mismatch triggers this specific error.

Exam trap

The trap here is that candidates often confuse certificate expiration with thumbprint mismatch, but the error message 'tampered with or invalid' specifically points to a thumbprint mismatch rather than a date-based validity issue.

How to eliminate wrong answers

Option A is wrong because an account lockout policy would produce a different error, such as 'Login failed' or 'Access denied', not a certificate tampering message. Option B is wrong because SSH keys are used for SSH authentication, not for the SSL/TLS certificate validation that occurs during host addition to vCenter Server; rotating SSH keys does not affect certificate thumbprint matching. Option C is wrong because an expired certificate would generate an error like 'Certificate has expired' or 'Certificate is not yet valid', not a 'tampered with or invalid' message, which specifically indicates a thumbprint mismatch rather than a validity period issue.

395
MCQhard

Refer to the exhibit. An administrator runs the 'esxcli storage core device list' command and sees the output. The storage array is an active-passive array with ALUA. The current path selection policy is set to Fixed with no preferred path. What is the consequence of this configuration?

A.The I/O is load-balanced across all four paths
B.ALUA is not supported, so the host will use only one path
C.I/O may be sent to a non-optimized path, causing higher latency
D.The device cannot be used for VMDKs, only for RDM
AnswerC

Without preferred path, the host may use a path that is not in active state.

Why this answer

With an active-passive ALUA array, the Fixed path selection policy without a preferred path means the host may not switch to the optimized active path for a given LUN. Since no preferred path is set, the host can select any available path, potentially sending I/O through a non-optimized passive path. This results in higher latency as the array must redirect I/O through the partner controller.

Option C correctly identifies this consequence. Option A is incorrect because Fixed policy does not load-balance; it uses a single path unless it fails. Option B is wrong because ALUA is supported and the host can use multiple paths but only one is active.

Option D is irrelevant as VMDKs can be used on any path.

396
MCQeasy

A small financial services company runs a critical trading application on a single vSphere host with two NUMA nodes (each with 8 cores). The VM is configured with 12 vCPUs and 64 GB memory. The application is not yet live, but load testing shows that CPU performance is satisfactory, but memory bandwidth is lower than expected. The application is known to benefit from fast memory access within a single NUMA domain. The administrator notices that the VM's memory is spread across both NUMA nodes. The administrator wants to force the VM to use only one NUMA node to maximize performance. However, the VM requires 12 vCPUs, which exceeds the 8 physical cores per node. What is the best course of action to improve memory bandwidth for this VM?

A.Enable Hyper-Threading and reassign vCPUs to 12, and the VM will automatically run within one NUMA node.
B.Keep the vCPU count at 12 but configure a NUMA Affinity to prefer the first NUMA node, and accept some cross-node memory access.
C.Keep the vCPU count at 12 but set CPU affinity to the first NUMA node only, leaving the second node unused.
D.Reduce the number of vCPUs to 8 to fit within one NUMA node, and keep the same memory size.
AnswerB

NUMA affinity prefers one node for memory allocation, keeping most memory local while allowing vCPUs to use both nodes as needed, balancing performance.

Why this answer

NUMA affinity allows you to prefer a specific NUMA node for memory allocation. Even though the VM has 12 vCPUs exceeding the 8 cores per node, the VM will still run across both nodes for CPU, but memory will be preferentially allocated from the first NUMA node. This reduces cross-node memory access, improving memory bandwidth for the application.

Option A is incorrect because enabling Hyper-Threading does not change the physical core count; 12 vCPUs still exceed 8 cores per node, and the VM cannot be placed entirely within one NUMA node. Option C is incorrect because setting CPU affinity to only the first NUMA node would restrict the VM to 8 cores, causing severe CPU contention and performance degradation. Option D is incorrect; reducing vCPUs to 8 may harm application performance if it requires more CPU resources, and the goal is to improve memory bandwidth while maintaining CPU capacity.

397
Multi-Selecteasy

Which THREE of the following are true about vSphere Storage DRS?

Select 3 answers
A.Storage DRS always automatically migrates VMs.
B.Storage DRS works only with VMFS datastores.
C.Storage DRS can be configured with affinity rules.
D.Storage DRS can move virtual machine files between datastores.
E.Storage DRS requires vMotion.
AnswersC, D, E

Affinity rules allow keeping VMs on specific datastores.

Why this answer

Storage DRS can be configured with affinity rules to control which datastores a virtual machine's files should be placed on or kept together, ensuring performance or compliance requirements are met. This is a core feature that allows administrators to define VM-to-datastore affinity and anti-affinity rules within a datastore cluster.

Exam trap

The trap here is that candidates often assume Storage DRS requires vMotion for all operations, but while Storage DRS does use Storage vMotion for migrations, the requirement for vMotion (host-based) is a common confusion—Storage DRS actually relies on Storage vMotion, not host vMotion, though both are often enabled together.

398
MCQmedium

Based on the exhibit, which statement about the virtual machine's memory state is TRUE?

A.The VM is using the memory balloon driver to reclaim memory.
B.The VM is using transparent page sharing to reduce memory usage.
C.The VM has no memory pressure and is performing optimally.
D.The VM is actively swapping memory because of memory pressure.
AnswerD

SWCUR and swap rates confirm swapping is occurring.

Why this answer

SWCUR (current swapped memory) is 512 MB, and SWR/s and SWW/s show non-zero swap rates, indicating that the VM is actively swapping memory to disk. MCTLSZ is 0, meaning no ballooning is occurring. The VM's memory size is 4096 MB.

Swapping is a sign of memory pressure.

399
MCQmedium

A company uses Linked Mode vCenter Servers across two data centers. One of the links fails. What happens to the management capabilities?

A.Both vCenter Servers become unavailable.
B.Each vCenter Server can manage its own inventory, but cross-datacenter tasks fail.
C.One vCenter Server takes over management of both data centers.
D.vSphere HA on both clusters reactivates the link.
AnswerB

Linked Mode allows independence; only cross-datacenter features are impacted.

Why this answer

In a Linked Mode configuration, each vCenter Server operates independently but shares licensing, roles, and permissions across the group. When the link fails, each vCenter Server retains full management capability over its own inventory, but cross-datacenter operations—such as moving a VM between clusters managed by different vCenter Servers—fail because the inter-vCenter communication channel is unavailable.

Exam trap

The trap here is that candidates often confuse Linked Mode with Enhanced Linked Mode or assume a single point of failure, when in fact each vCenter Server remains fully functional for its own domain even if the replication link goes down.

How to eliminate wrong answers

Option A is wrong because Linked Mode vCenter Servers are designed to operate independently; a link failure does not cause both servers to become unavailable—each continues to manage its own inventory. Option C is wrong because there is no automatic failover or takeover mechanism in Linked Mode; each vCenter Server remains responsible for its own data center and cannot assume management of the other. Option D is wrong because vSphere HA is a host-level availability feature that reacts to host failures, not to network link failures between vCenter Servers; it cannot reactivate a failed inter-vCenter link.

400
MCQmedium

An administrator manages a cluster of 10 identical ESXi hosts using vLCM with image-based management. After importing a new hardware support package (HSP) and applying a new image specification, 5 hosts report non-compliant with the error 'Firmware version not supported'. The compliant hosts and non-compliant hosts are from the same vendor model. What is the most likely cause?

A.The image specification was applied only to the compliant hosts.
B.The non-compliant hosts have a different manufacturer than the compliant ones.
C.The vLCM service failed to download the HSP to the non-compliant hosts.
D.The firmware version on the non-compliant hosts is newer than what the hardware support package supports.
AnswerD

vLCM checks firmware compatibility against the HSP; newer firmware causes non-compliance.

Why this answer

The error 'Firmware version not supported' indicates that the firmware on the non-compliant hosts is newer than what the hardware support package (HSP) supports. vLCM checks firmware compatibility against the HSP, and if the firmware version is outside the supported range, it reports non-compliance. Since all hosts are the same vendor model, the difference must be in firmware versions. Option A is incorrect because the image specification is applied cluster-wide via vLCM, not selectively per host.

Option B is incorrect because all hosts are from the same vendor model. Option C is incorrect because the error is about firmware version, not download failure; the HSP is imported and available.

401
MCQhard

An administrator configures a resource pool with a reservation of 10 GHz and a limit of 20 GHz. The pool contains two VMs: VM1 has a reservation of 6 GHz and no limit, VM2 has no reservation and a limit of 8 GHz. The host has only 12 GHz available. During peak usage, both VMs demand more than their shares. Which statement is true?

A.VM1 gets at least 6 GHz, VM2 gets at most 8 GHz, but because the pool limit is 20 GHz and host only 12, VM2's limit is effectively 6 GHz after VM1's reservation
B.VM1 gets at least 6 GHz, VM2 gets at most 8 GHz, and the remaining 4 GHz is divided by share
C.VM1 gets exactly 6 GHz, VM2 gets exactly 8 GHz, and the pool's reservation is ignored
D.VM1 gets at least 6 GHz, VM2 gets at least 2 GHz due to pool reservation, and both use remaining as share
AnswerA

VM1's reservation takes 6 GHz, leaving 6 GHz for VM2, which is within VM2's limit of 8 GHz, so VM2 gets 6 GHz.

Why this answer

The resource pool has a reservation of 10 GHz and a limit of 20 GHz, but the host only has 12 GHz available. VM1 has a reservation of 6 GHz, so it is guaranteed at least 6 GHz. VM2 has a limit of 8 GHz, which means it cannot exceed 8 GHz.

However, after allocating VM1's reservation, only 6 GHz remains on the host (12 - 6 = 6), which is less than VM2's limit of 8 GHz. Therefore, VM2 effectively gets at most 6 GHz. The pool's reservation of 10 GHz is satisfied because VM1 gets 6 GHz and VM2 gets 6 GHz (6+6=12 >=10).

The pool's limit of 20 GHz is not relevant because the host capacity is the bottleneck. Option B is incorrect because the remaining 0 GHz (12 - 6 - 6 = 0) cannot be divided by share. Option C is incorrect because VM2 cannot get 8 GHz due to insufficient host capacity.

Option D is incorrect because the pool's reservation does not guarantee additional resources beyond individual VM reservations; it only ensures the total allocated to the pool meets that level.

402
MCQhard

A vSphere cluster uses vSAN with deduplication and compression enabled. An administrator notices that IOPS for a VM is lower than expected despite low CPU and memory utilization on hosts. Which of the following is most likely the cause?

A.The VM storage policy has no read cache reservation
B.vSAN object repair is consuming disk bandwidth
C.The VM is running on a host with a vSAN disk capacity tier that is 80% full
D.Deduplication and compression overhead is causing increased CPU usage on storage controller
AnswerD

Dedupe/compression consumes CPU, and if saturated, can throttle I/O operations.

Why this answer

Deduplication and compression are CPU-intensive operations on vSAN. For workloads requiring high IOPS, the CPU overhead from these features can become a bottleneck, especially if the storage controller or host CPU is saturated, leading to lower IOPS. Option A is incorrect: read cache reservation in a VM storage policy affects read caching but is not a primary cause of low IOPS given low CPU/memory.

Option B is incorrect: vSAN object repair is typically a background task and should not normally impact VM IOPS unless during maintenance. Option C is incorrect: a vSAN disk capacity tier at 80% full does not directly reduce IOPS; vSAN may start rebalancing when near full (above 80% might trigger some activity), but the most likely cause given deduplication and compression enabled is the CPU overhead.

403
Multi-Selecthard

An administrator is configuring Storage DRS on a datastore cluster. Which THREE conditions must be met for Storage DRS to migrate virtual disks?

Select 3 answers
A.The source and destination datastores must be part of the same datastore cluster.
B.The ESXi host must have a valid Storage vMotion license.
C.The virtual disk must not be attached to a snapshot.
D.The storage array must support VAAI.
E.The virtual machine must be powered on.
AnswersA, B, E

Storage DRS operates within a datastore cluster.

Why this answer

Storage DRS operates within a single datastore cluster, which is a collection of datastores that share resources and are managed as a single entity. For Storage DRS to migrate virtual disks via Storage vMotion, both the source and destination datastores must be members of the same datastore cluster; cross-cluster migrations are not supported by Storage DRS.

Exam trap

The trap here is that candidates often assume Storage DRS requires VAAI for migrations, but VAAI is only an optimization for certain operations (like hardware-assisted locking or copy offload) and is not a prerequisite for Storage DRS to function.

404
MCQeasy

An administrator needs to separate vMotion traffic from management traffic. Which should be created?

A.A new physical NIC.
B.A new VMkernel adapter on a different subnet.
C.A new VLAN on the existing port group.
D.A new standard switch port group.
AnswerB

A separate VMkernel adapter on a different network isolates vMotion traffic.

Why this answer

Creating a separate VMkernel adapter on a different subnet isolates vMotion traffic from management traffic. Option A is incorrect because a new physical NIC alone does not provide network separation; a separate VMkernel adapter and IP subnet are required. Option C is incorrect because using the same VLAN but different IP subnet still shares the same broadcast domain.

Option D is incorrect because a new standard switch port group alone does not separate traffic without a different IP network for the VMkernel adapter.

405
MCQeasy

What is the maximum number of virtual CPUs (vCPUs) that can be allocated to a virtual machine on vSphere 8 Enterprise Plus?

A.128
B.512
C.64
D.256
AnswerD

vSphere 8 supports up to 256 vCPUs per VM.

Why this answer

256 vCPUs. vSphere 8 Enterprise Plus supports up to 256 virtual CPUs per virtual machine. Option A (128) was the maximum in vSphere 6.5 and earlier, not vSphere 8. Option B (512) exceeds the vSphere 8 limit.

Option C (64) is below the current maximum and incorrect.

406
MCQmedium

An administrator observes that a VM with 4 vCPUs running on a host with hyperthreading enabled shows high %CSTP (co-stop) values in esxtop. What is a likely cause?

A.The VM has CPU affinity configured forcing vCPUs to specific pCPUs.
B.The VM's memory reservation is too high.
C.The host has deep C-states enabled causing CPU idle savings.
D.The host memory is overcommitted causing swapping.
AnswerA

CPU affinity can restrict scheduling and cause co-stop when pCPUs are not all available.

Why this answer

Co-stop occurs when the hypervisor is unable to schedule all vCPUs of a VM simultaneously because the pCPUs are not all available at the same time. This is often due to CPU affinity settings or physical CPU contention. C-state issues and memory pressure do not directly cause co-stop.

407
MCQmedium

A company is implementing vSphere 7.0 and wants to encrypt all vMotion traffic between ESXi hosts in a cluster. The cluster is not using any other encryption features. What is the minimum requirement to enable vMotion encryption?

A.A VM Encryption Key Management Server must be configured.
B.The ESXi hosts must be joined to an Active Directory domain.
C.The ESXi hosts must have a host profile applied with encryption enabled.
D.The cluster must be configured with Enhanced vMotion Compatibility (EVC).
AnswerC

A host profile applied with encryption enabled is the minimum requirement because it ensures consistent encryption policy across the cluster, leveraging default certificate trust.

Why this answer

In vSphere 7.0, enabling vMotion encryption does not require Active Directory, a Key Management Server, Enhanced vMotion Compatibility (EVC), or host profiles. The minimum requirement is simply to configure the vMotion encryption policy on each ESXi host (set to 'Required' or 'Opportunistic'). No additional infrastructure or profiles are needed.

Exam trap

Candidates often mistakenly believe that vMotion encryption requires external configuration such as host profiles, AD, or a KMS. In reality, it uses built-in certificate trust and can be enabled directly on each host without any additional setup.

How to eliminate wrong answers

Option A is wrong because a VM Encryption Key Management Server is required for encrypting virtual machine disks (VM-level encryption), not for vMotion traffic; vMotion encryption uses Kerberos from Active Directory, not a KMS. Option C is wrong because a host profile is a management tool for applying consistent configurations across hosts, but it is not a prerequisite for enabling vMotion encryption; the encryption setting can be configured directly on each host via advanced system parameters (e.g., 'VMkernel.Boot.vmotionEncryption'). Option D is wrong because Enhanced vMotion Compatibility (EVC) ensures CPU compatibility for live migrations but has no role in encrypting vMotion traffic; EVC does not provide any encryption or authentication mechanism.

408
MCQhard

After upgrading vCenter to 8.0, the administrator cannot see any vLCM images in the vSphere Client. What is the most likely cause?

A.The vSphere Auto Deploy service is disabled.
B.The vCenter Server is not registered with VMware.
C.The vLCM service is not started.
D.The vCenter license does not include vLCM.
AnswerC

The vLCM service must be running for images to be managed.

Why this answer

VLCM requires the vSphere Lifecycle Manager service to be running on vCenter for images to appear. Option A is incorrect: Auto Deploy is a separate service for host provisioning and does not affect vLCM image visibility. Option B is incorrect: registration with VMware is not required for images to be displayed; it is needed for downloading updates but not for showing local images.

Option D is incorrect: while vLCM licensing may restrict use, the most common reason for missing images is the service not started, not the license.

409
MCQeasy

A vSphere administrator is tasked with automating the lifecycle management of ESXi hosts in a cluster using vLCM. The cluster currently has 10 hosts with various ESXi versions (7.0, 7.0 U1, 7.0 U2). The administrator wants to bring all hosts to a consistent version 7.0 U3. The administrator creates a new image with ESXi 7.0 U3 and attempts to remediate the cluster. The remediation fails with the error 'Host does not have the required power state to perform remediation'. All hosts are powered on and connected. What is the most likely cause?

A.The administrator must manually put all hosts into maintenance mode before remediation.
B.Some hosts are in standby mode or powered off.
C.vSphere DRS is not enabled on the cluster.
D.There is a stale lock on the vLCM image specification.
AnswerC

vLCM requires DRS to be enabled for automated remediation to move VMs off hosts and put them in maintenance mode.

Why this answer

VSphere Lifecycle Manager (vLCM) requires vSphere DRS to be enabled on the cluster to automate the placement of hosts into maintenance mode during remediation. Without DRS, vLCM cannot automatically evacuate VMs from a host, so the remediation fails with the 'Host does not have the required power state' error, even though all hosts are powered on and connected.

Exam trap

The trap here is that candidates assume the error 'Host does not have the required power state' refers to the host being powered off or in standby, but the actual requirement is that the host must be in maintenance mode, which vLCM can only automate if DRS is enabled.

How to eliminate wrong answers

Option A is wrong because vLCM can automatically place hosts into maintenance mode if DRS is enabled; manual maintenance mode is not required. Option B is wrong because the question explicitly states all hosts are powered on and connected, so standby or powered-off states are not the issue. Option D is wrong because a stale lock on the vLCM image specification would typically cause a different error, such as 'Image specification is locked' or 'Unable to acquire lock', not a power state error.

410
MCQeasy

Based on the exhibit, which VM (indicated by the row) is most likely experiencing severe CPU scheduling contention?

A.The VM with %RDY = 2.3
B.The VM with %RDY = 30.0
C.The VM with %RDY = 15.5
D.The VM with %RDY = 0.5
AnswerB

30% ready time indicates severe CPU scheduling contention.

Why this answer

The row with the highest %RDY (30.0) indicates the VM is spending a large percentage of time ready to run but not being scheduled, which is a sign of severe CPU contention. The other rows have lower %RDY values.

411
Multi-Selecthard

An administrator is troubleshooting a vLCM cluster that has multiple ESXi hosts with non-compliant status. The cluster uses a single image with an HSM for firmware. Which TWO actions should the administrator take to identify the root cause of non-compliance? (Choose two.)

Select 2 answers
A.Validate the cluster image against the desired image specification.
B.Run the vSphere Update Manager baseline scan on each host.
C.Verify the HSM is properly connected and reporting firmware inventory.
D.Review the vLCM compliance status for each host in the cluster to see specific missing components.
E.Check the baseline compliance report for the cluster.
AnswersC, D

If HSM is offline or misconfigured, firmware component cannot be applied.

Why this answer

The Hardware Support Manager (HSM) is responsible for reporting firmware inventory to vLCM. If the HSM is not properly connected or is failing to report, vLCM cannot determine the current firmware state of the hosts, leading to non-compliant status. Verifying the HSM connection and inventory reporting is a critical first step in isolating the root cause.

Exam trap

The trap here is that candidates may confuse vLCM image-based compliance with legacy VUM baseline scans, leading them to select options that reference baselines or baseline reports, which are not applicable in a vLCM context.

412
MCQmedium

An administrator notices that a VMFS datastore has only one optimized path. The exhibit shows the output of esxcli storage nmp path list for that datastore. What should the administrator do to fully utilize both storage controllers?

A.Rescan the storage adapters.
B.Change the PSP to Round Robin.
C.Enable the path failover policy.
D.Change the SATP to VMW_SATP_ALUA.
AnswerD

VMW_SATP_ALUA correctly recognizes optimized and non-optimized paths, allowing the PSP to use both paths for I/O.

Why this answer

The exhibit shows only one optimized path because the storage array uses Asymmetric Logical Unit Access (ALUA), which requires the VMW_SATP_ALUA SATP to properly recognize and manage both active/optimized and active/non-optimized paths. With the default SATP (e.g., VMW_SATP_DEFAULT_AA), the host treats all paths as active but fails to distinguish optimized from non-optimized paths, often resulting in only one path being used. Changing to VMW_SATP_ALUA allows the host to correctly identify the optimized path and actively use both storage controllers for load balancing.

Exam trap

The trap here is that candidates assume a Round Robin PSP alone will solve multipathing issues, but they overlook that the SATP must first correctly classify the path states for ALUA arrays before the PSP can distribute I/O across them.

How to eliminate wrong answers

Option A is wrong because rescanning storage adapters only discovers new LUNs or changes in path state; it does not alter the path selection policy or SATP, so it cannot enable the use of both controllers. Option B is wrong because changing the PSP to Round Robin would distribute I/O across all available paths, but if the SATP does not recognize the non-optimized path as active (or marks it as dead), Round Robin will still only use the single optimized path. Option C is wrong because there is no generic 'path failover policy' to enable; path failover is inherent to the NMP and SATP behavior, and the issue is about path classification, not failover activation.

413
MCQhard

A multinational corporation runs a vSphere environment with 100 ESXi hosts managed by a single vCenter Server. The security team mandates that all virtual machine disks (VMDKs) must be encrypted at rest. The administrator enables vSphere Virtual Machine Encryption and creates a Key Management Server (KMS) cluster. After encrypting a test VM, the VM powers on successfully, but the administrator notices that the VM's configuration files (VMX, NVRAM) are not encrypted. The security policy requires that all VM files, including configuration files, be encrypted. The administrator checks the VM storage policy and sees that the policy is set to 'VM Encryption Policy' with 'Disk Encryption' enabled. What should the administrator do to ensure the entire VM is encrypted?

A.Modify the VM storage policy to include encryption of VM home files
B.Enable encryption on the datastore where the VM resides
C.Add a second KMS cluster for redundancy
D.Enable vSphere Host Encryption on each ESXi host
AnswerA

The policy must include 'Virtual Machine Home' encryption.

Why this answer

The VM storage policy 'VM Encryption Policy' with only 'Disk Encryption' enabled encrypts VMDK files but not the VM configuration files (VMX, NVRAM, logs, etc.). To encrypt all VM files, the storage policy must include the 'Encrypt VM home files' option, which applies encryption to the entire VM home directory on the datastore. This ensures compliance with the security mandate for full VM encryption at rest.

Exam trap

The trap here is that candidates assume 'VM Encryption Policy' with 'Disk Encryption' covers all VM files, but VMware explicitly separates disk encryption from home file encryption in the storage policy settings.

How to eliminate wrong answers

Option B is wrong because datastore-level encryption (e.g., vSAN encryption or Storage DRS encryption) is a separate feature that encrypts the entire datastore, but it does not selectively encrypt VM home files when using VM Encryption Policy; the policy must explicitly include home file encryption. Option C is wrong because adding a second KMS cluster provides redundancy for key management but does not affect which VM files are encrypted; the encryption scope is defined by the storage policy, not the KMS topology. Option D is wrong because vSphere Host Encryption encrypts host memory and vMotion traffic, not VM files at rest on the datastore; it does not address VMDK or configuration file encryption.

414
MCQhard

A vSphere administrator observes that a VM's memory usage is high, and the host memory is overcommitted. The VM has a memory balloon driver installed and running. Which metric in esxtop would the administrator check to confirm that ballooning is reclaiming memory?

A.SWCUR
B.MCTLSZ
C.ACTV
D.VMMEMCTL
AnswerB

MCTLSZ is the memory balloon size, showing how much memory the balloon driver has reclaimed.

Why this answer

The MCTLSZ field in esxtop's memory section shows the current amount of memory reclaimed by the balloon driver. ACTV shows active memory, SWCUR shows swapped memory, and VMMEMCTL shows memory control overhead. MCTLSZ directly indicates balloon activity.

415
Matchingmedium

Match each vSphere storage concept to its definition.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Cluster file system for VM storage

Network file system protocol for VM storage

Block storage protocol over IP networks

Raw device mapping for direct LUN access

Hyper-converged storage from local disks

Why these pairings

Correct matches: VMFS is a cluster file system for block storage; NFS is a network file system for NAS; vSAN aggregates local disks for shared storage; VVols enable VM-level storage management. Common confusions: mixing VMFS and vSAN definitions, or swapping NFS and VMFS.

416
Multi-Selectmedium

Which two of the following are required to deploy a vSphere cluster with vSphere HA and DRS? (Choose two.)

Select 2 answers
A.Clock synchronization across all hosts (NTP)
B.A minimum of two vCenter Server instances
C.Network connectivity between hosts for management traffic
D.An active Directory service for authentication
E.Shared storage accessible by all hosts in the cluster
AnswersA, C

HA and DRS require synchronized time for proper operation.

Why this answer

Options A and C are correct. Clock synchronization (NTP) is required for vSphere HA master election and DRS recommendation consistency. Network connectivity for management traffic is required for host communication and vCenter management.

Option B is incorrect because a single vCenter Server can manage both HA and DRS. Option D is incorrect because Active Directory is optional. Option E is incorrect because shared storage is not a prerequisite for HA or DRS; HA can use datastore heartbeats on any accessible storage, and DRS works with or without shared storage.

417
MCQhard

A vSphere administrator is troubleshooting a performance issue on a VM that has high average latency on its virtual disks. The VM is stored on a VMFS datastore backed by an all-flash array. The VM has 4 vCPUs and 16GB memory. The administrator runs esxtop and sees %USEDRDY: 0.5, %MLMTD: 10, %SWPWT: 0. What is the most likely cause of the high disk latency?

A.Memory ballooning is causing excessive swapping
B.CPU ready time is high
C.Storage controller queue depth is full
D.The VM is experiencing memory contention that is manifesting as disk latency
AnswerD

High %MLMTD (10%) indicates memory contention, which can degrade overall VM performance including disk I/O.

Why this answer

%MLMTD indicates the percentage of time the VM was ready to run but was not given CPU resources due to memory constraints, i.e., memory contention. A value of 10% means the VM is experiencing significant memory throttling, which can cause all I/O operations, including disk, to appear slow. Option D is correct.

Option A is incorrect because %SWPWT is 0, meaning no swapping is occurring, and ballooning would typically lead to swapping. Option B is incorrect because %USEDRDY is only 0.5%, indicating low CPU ready time, not high. Option C is incorrect because there is no metric given (like QFULL) that indicates a full storage queue; the high latency is due to memory pressure, not storage queuing.

418
MCQmedium

A company runs a four-node vSphere 7 cluster with all-flash storage and 25GbE networking. The cluster hosts 50 VMs, including a critical database VM with 16 vCPUs and 64 GB memory. The database VM's performance has degraded over the past week. vCenter reports high CPU ready time (average 15%) for the database VM, while other VMs show less than 2%. CPU utilization on the host is 70%. The database VM is configured with CPU affinity pinned to cores 0-15 on a dual-socket host with 16 cores per socket (32 total). The administrator also notices that the database VM's CPU co-stop counter is high. What should the administrator do to improve performance?

A.Migrate the database VM to a host with fewer VMs.
B.Enable CPU hot-add for the database VM.
C.Remove the CPU affinity setting for the database VM.
D.Increase the number of vCPUs for the database VM to 32.
AnswerC

Allows the scheduler to balance across NUMA nodes, reducing ready time and co-stop.

Why this answer

The high CPU ready time (15%) and elevated co-stop counter indicate that the database VM is suffering from contention due to CPU affinity pinning to cores 0-15. On a dual-socket host with 16 cores per socket, pinning to cores 0-15 restricts the VM to a single NUMA node, preventing the scheduler from load-balancing across both sockets. Removing the affinity allows the ESXi scheduler to distribute vCPUs across all 32 cores, reducing co-scheduling overhead and ready time.

Exam trap

The trap here is that candidates often assume high ready time means the host is overloaded and choose to migrate or add vCPUs, overlooking that CPU affinity artificially constrains the scheduler and causes co-stop delays.

How to eliminate wrong answers

Option A is wrong because migrating to a host with fewer VMs does not address the root cause—the CPU affinity restriction causing NUMA imbalance and co-stop contention; the current host already has low overall CPU utilization (70%). Option B is wrong because enabling CPU hot-add does not reduce ready time or co-stop counter; it only allows adding vCPUs without reboot, which would likely worsen contention. Option D is wrong because increasing vCPUs to 32 would exacerbate co-scheduling overhead and co-stop delays, especially with affinity pinning to a single socket, leading to further performance degradation.

419
MCQmedium

During a security audit, it is found that the vCenter Server is using the default self-signed certificate. The administrator is tasked to replace it with a certificate from an enterprise CA. What is the first step after obtaining the CA-signed certificate?

A.Convert the certificate and private key into PEM format and place them in the appropriate directory.
B.Use the vSphere Web Client to upload the certificate.
C.Import the private key into the Windows Certificate Store.
D.Restart the VMware Certificate Service.
AnswerA

vCenter expects PEM files for certificates and keys.

Why this answer

The certificate must be in a format that vCenter can use; typically, it needs to be combined with the private key. Option B is premature before preparing the certificate. Option C is incorrect because certificate import is done via certificate management tools, not vSphere Web Client.

Option D is incorrect because the private key is included in the signed certificate generation process, not imported separately.

420
MCQeasy

A rapidly growing company currently uses vSphere 7 Standard Edition across two data centers connected via a high-latency link. They plan to implement a vSAN stretched cluster to provide a unified storage solution and enable automatic failover between sites. The cluster must support VM-level encryption at rest and in transit, as well as intelligent capacity management with deduplication and compression. The budget is strictly allocated to a per-CPU licensing model. Which vSAN edition should the company select to meet all requirements while minimizing costs?

A.vSAN Enterprise
B.vSAN Starter
C.vSAN Advanced
D.vSAN Standard
AnswerA

vSAN Enterprise includes all required features: stretched clusters, encryption, deduplication/compression, and intelligent capacity management.

Why this answer

vSAN Enterprise is the only edition that includes all required features: stretched cluster support, VM-level encryption at rest and in transit, and deduplication and compression. It also supports per-CPU licensing, aligning with the budget constraint. vSAN Advanced and Standard lack encryption at rest and in transit, while vSAN Starter does not support stretched clusters or deduplication/compression.

Exam trap

The trap here is that candidates often assume vSAN Advanced includes encryption because it supports vSphere encryption, but VM-level encryption at rest and in transit is exclusive to vSAN Enterprise.

How to eliminate wrong answers

Option B (vSAN Starter) is wrong because it does not support stretched clusters, deduplication/compression, or encryption at rest/in transit; it is intended for ROBO or small deployments. Option C (vSAN Advanced) is wrong because it lacks encryption at rest and in transit, which are required for the VM-level encryption needs. Option D (vSAN Standard) is wrong because it does not include encryption at rest or in transit, and it does not support stretched clusters or deduplication/compression.

421
Multi-Selecthard

A vSphere administrator is using vSphere Lifecycle Manager images to manage a cluster. The administrator wants to add a new custom component (a driver) to the cluster image. Which THREE steps are required to successfully add the component? (Choose three.)

Select 3 answers
A.Download the component offline bundle from the vendor.
B.Create a new software depot on the vCenter Server.
C.Upload the component to the vLCM depot.
D.Add the component to the image definition in vLCM.
E.Validate the component against the current image.
AnswersA, C, D

The bundle must be obtained first.

Why this answer

Options A, C, and D are correct. A: Download the component offline bundle from the vendor. C: Upload the component to the vLCM depot.

D: Add the component to the image definition in vLCM. B is incorrect because you do not need to create a new software depot; the vLCM depot already exists and you upload the bundle to it. E is incorrect because validation is not a required step to add the component; it can be performed later as part of image compliance checking.

422
MCQmedium

A vSphere administrator is troubleshooting a VM that hosts a critical database. The VM is configured with 8 vCPUs and 64 GB memory on an ESXi host with two 10-core CPUs (hyperthreading enabled). Performance charts show CPU ready time averaging 12% during peak hours, and the database application is experiencing high transaction latency. The administrator has verified that no other VMs are contending for CPU. Which action will most likely reduce CPU ready time without negatively impacting database performance?

A.Disable hyperthreading on the host.
B.Assign a CPU affinity mask to pin the VM to specific physical cores.
C.Increase the VM's memory reservation.
D.Reduce the number of vCPUs assigned to the VM to 4.
AnswerD

Reducing vCPUs decreases CPU scheduling overhead and can lower ready time for many applications.

Why this answer

Reducing the number of vCPUs to 4 reduces CPU scheduler overhead and can lower CPU ready time when the VM has more vCPUs than needed. With 8 vCPUs on a host with 20 physical cores (40 logical with HT), and 12% ready time, the VM is likely oversubscribed for its workload. Many database applications do not scale linearly beyond 4 vCPUs, so reducing to 4 often improves performance by decreasing contention and improving cache locality.

Option A is wrong: disabling hyperthreading reduces logical CPUs, potentially increasing contention. Option B is wrong: CPU affinity can lead to unbalanced load and is not recommended in DRS clusters. Option C is wrong: increasing memory reservation does not affect CPU ready time.

423
MCQhard

Refer to the exhibit. An administrator creates a storage policy with the rule: "Rule: provisioningType equals thick". When the policy is applied to a VM on this array, what will be the compliance status?

A.Not compliant - the array does not advertise thick provisioning capability.
B.Not compliant - the replication RPO is too high.
C.Compliant - the storage policy is applied regardless of capabilities.
D.Compliant - the array supports thin provisioning by default.
AnswerA

Correct: The array does not have a thick provisioning capability, so the VM is uncompliant.

Why this answer

The array only advertises thin provisioning and replication capabilities. The policy requires thick provisioning, which is not advertised. Therefore the VM will be marked as uncompliant because the array does not support the required capability.

Option B is incorrect because it does not match; the array supports thin only. Option C is incorrect because VVols do not automatically default to thick. Option D is incorrect because the array does not provide thick.

424
MCQeasy

Which tool provides real-time performance monitoring at the ESXi host level, including CPU, memory, network, and storage metrics?

A.dcli
B.esxtop
C.resxtop
D.vCenter performance charts
AnswerB

esxtop runs directly on the ESXi host and shows real-time metrics.

Why this answer

esxtop is a command-line tool that provides real-time host performance data. vCenter performance charts are historical. resxtop is for remote usage, and dcli is a different tool.

425
Multi-Selecthard

An administrator needs to implement Network I/O Control (NIOC) on a vSphere Distributed Switch to guarantee bandwidth for vSphere Replication traffic. Which two actions are required?

Select 2 answers
A.Enable NIOC on the distributed switch.
B.Create a network resource pool for vSphere Replication.
C.Set the replication VMkernel adapter's traffic shaping to guaranteed.
D.Configure the replication network on a separate VLAN.
E.Assign the vSphere Replication VMkernel adapter to the resource pool.
AnswersA, B

NIOC must be enabled globally on the DVS.

Why this answer

Options A and B are the two actions required to implement NIOC for vSphere Replication. NIOC must first be enabled on the distributed switch (A), then a network resource pool must be created for the replication traffic (B). Option C is incorrect because traffic shaping is a separate rate-limiting mechanism and is not used with NIOC; NIOC relies on resource pools for guaranteed bandwidth.

Option D is incorrect because a separate VLAN provides network segmentation but does not guarantee bandwidth; NIOC is needed for that. Option E is incorrect because assigning the VMkernel adapter to the resource pool is a subsequent step that is necessary but not one of the two primary actions asked for in the question.

426
Multi-Selectmedium

An administrator is configuring vSphere Trust Authority (vTA) to secure ESXi hosts in a sensitive environment. Which TWO components are required for a vTA deployment? (Choose two.)

Select 2 answers
A.Trusted Host Cluster
B.Certificate Authority (CA)
C.Attestation Service
D.Key Management Server (KMS)
E.Key Provider
AnswersC, E

Required to verify host trust status.

Why this answer

The correct answers are C (Attestation Service) and E (Key Provider). In a vSphere Trust Authority deployment, the Attestation Service verifies the trust status of ESXi hosts, and the Key Provider manages the keys used for vTA operations. Option A (Trusted Host Cluster) is a concept in vTA, not a component.

Option B (Certificate Authority) is not a required component; vTA uses existing certificates. Option D (Key Management Server) is used for VM encryption, not vTA.

427
MCQmedium

An administrator is troubleshooting performance issues on a VMFS datastore hosting SQL Server VMs. Storage I/O Control (SIOC) is enabled, but the administrator notices that congestion is detected but no throttling is applied. What could be the reason?

A.The SIOC congestion threshold is set too high
B.The datastore is deduplicated
C.SIOC is disabled on the datastore
D.The host has exceeded the maximum number of concurrent I/Os
AnswerA

The threshold determines when throttling starts; a high value may prevent activation.

Why this answer

SIOC (Storage I/O Control) throttles I/O from VMs when congestion is detected and the queue depth threshold is exceeded. If the congestion threshold is set too high, throttling may not be triggered even when congestion is detected, because the actual queue depth may not exceed the threshold. Option B (the datastore is deduplicated) is not relevant because deduplication does not affect SIOC throttling.

Option C (SIOC is disabled) would mean congestion would not be detected. Option D (host exceeded max concurrent I/Os) is a host-side issue, not directly related to SIOC threshold.

428
MCQmedium

A vSphere administrator is planning to upgrade a vSphere 7.0 U3 cluster to vSphere 8.0. The cluster currently uses vSphere Lifecycle Manager (vLCM) with a single image. After the upgrade, the administrator wants to ensure that all ESXi hosts apply firmware updates from a hardware support manager (HSM) integrated with vLCM. Which step must the administrator take before starting the cluster upgrade?

A.Disable vLCM and use baseline-based remediation for the upgrade.
B.Create separate baselines for ESXi and firmware and attach them to the cluster.
C.Remove the HSM integration because vLCM cannot apply firmware updates.
D.Ensure the desired ESXi version and firmware component are specified in the vLCM image.
AnswerD

vLCM with HSM integration requires the firmware component in the image to apply updates.

Why this answer

VLCM with a single image can include both the ESXi version and firmware components from an integrated hardware support manager (HSM). By specifying the desired ESXi version and firmware component in the vLCM image, the administrator ensures that during the cluster upgrade, vLCM will apply the firmware updates provided by the HSM as part of the image-based remediation process. This is the required step before starting the upgrade to vSphere 8.0.

Exam trap

The trap here is that candidates may think vLCM cannot handle firmware updates or that separate baselines are needed, when in fact vLCM's single-image approach with HSM integration is designed to manage both ESXi and firmware updates together.

How to eliminate wrong answers

Option A is wrong because disabling vLCM and reverting to baseline-based remediation would lose the single-image management and HSM integration capabilities, which are key to applying firmware updates in a unified manner. Option B is wrong because vLCM with a single image does not use separate baselines for ESXi and firmware; instead, it uses a single image that includes both components, and attaching separate baselines would conflict with the image-based approach. Option C is wrong because vLCM can apply firmware updates when integrated with an HSM, and removing the HSM would prevent firmware updates from being applied during the upgrade.

429
MCQeasy

Which feature allows a VM to use storage directly from the host's local disks, pooled across a cluster?

A.VMFS
B.vFlash
C.NFS
D.vSAN
AnswerD

vSAN creates a distributed datastore from local disks.

Why this answer

vSAN pools local disks from multiple hosts into a shared datastore. VMFS is a filesystem, NFS is network storage, vFlash is caching.

430
MCQmedium

An administrator configures DRS on a cluster with two hosts. The administrator wants to ensure that two critical VMs (VM1 and VM2) always run on separate hosts. Which rule type should the administrator create?

A.Separate Virtual Machines
B.Virtual Machines to Hosts (Should run)
C.Keep Virtual Machines Together
D.Virtual Machines to Hosts (Must not run)
AnswerA

This rule ensures VMs are on different hosts.

Why this answer

The 'Separate Virtual Machines' rule (option A) is correct because it explicitly instructs DRS to place VM1 and VM2 on different ESXi hosts, ensuring host-level isolation for availability. This rule type enforces an anti-affinity constraint that DRS respects during initial placement and subsequent load-balancing migrations, preventing both VMs from running on the same host simultaneously.

Exam trap

The trap here is that candidates often confuse 'Separate Virtual Machines' (anti-affinity between VMs) with 'Virtual Machines to Hosts – Must not run' (anti-affinity between VMs and specific hosts), leading them to select the wrong rule type for VM-to-VM separation.

How to eliminate wrong answers

Option B (Virtual Machines to Hosts – Should run) is wrong because it defines an affinity rule that attempts to keep VMs on a specified set of hosts, not separate them; it does not enforce separation between two VMs. Option C (Keep Virtual Machines Together) is wrong because it creates an affinity rule that forces the VMs to run on the same host, which is the opposite of the desired separation. Option D (Virtual Machines to Hosts – Must not run) is wrong because it restricts VMs from running on specific hosts, not from running on the same host as another VM; it addresses host-level prohibition, not VM-to-VM separation.

431
MCQmedium

A vSphere environment experiences periodic performance degradation during peak business hours. Analysis shows that one ESXi host's CPU ready time for a specific mission-critical VM is consistently above 20%. Which corrective action should be taken first?

A.Increase the VM's memory reservation
B.Set a higher CPU limit on the VM
C.Migrate the VM to a different host with lower CPU utilization
D.Add more vCPUs to the VM
AnswerC

Moving the VM to a host with more available CPU resources reduces ready time directly.

Why this answer

High ready time indicates CPU contention. Moving the VM to a less loaded host using DRS or manual migration can immediately reduce ready time. Increasing resources without addressing contention is ineffective.

432
MCQeasy

A vSphere administrator wants to ensure that all ESXi hosts in a cluster boot from a consistent set of software packages, including firmware and drivers. Which vSphere feature should be used to achieve this?

A.vSphere Update Manager (VUM)
B.vSphere Lifecycle Manager (vLCM) with a single image
C.Host Profiles
D.Quick Boot
AnswerB

vLCM with single image ensures consistent software across hosts.

Why this answer

vSphere Lifecycle Manager (vLCM) with a single image is the correct choice because it allows the administrator to define a complete software specification—including ESXi version, firmware, drivers, and add-ons—as a single desired state image. When applied to a cluster, vLCM ensures every ESXi host boots from exactly the same set of software packages, eliminating drift and guaranteeing consistency across all hosts.

Exam trap

The trap here is that candidates often confuse Host Profiles (which manage configuration settings) with image-based lifecycle management, not realizing that Host Profiles cannot enforce firmware or driver versions, while vLCM with a single image provides a holistic, boot-level software consistency.

How to eliminate wrong answers

Option A is wrong because vSphere Update Manager (VUM) applies updates and patches but does not enforce a single, unified image that includes firmware and driver baselines across all hosts; it operates on individual baselines and can leave hosts with different software combinations. Option C is wrong because Host Profiles capture host-level configuration settings (e.g., networking, storage, security) but do not manage firmware or driver versions; they are not designed to control the boot-time software package set. Option D is wrong because Quick Boot is a feature that reduces reboot time during updates by skipping hardware reinitialization; it has no role in ensuring consistent software packages across hosts.

433
MCQeasy

What is the maximum number of ESXi hosts that can be managed by a single vCenter Server instance in vSphere 8 (standard domain)?

A.1000
B.500
C.4000
D.2000
AnswerD

vCenter Server 8 supports up to 2000 hosts per instance.

Why this answer

In vSphere 8, a single vCenter Server instance can manage up to 2000 ESXi hosts in the standard domain. Option A (1000) is the limit for vCenter Server 7.x and earlier.

Option B (500) is not the correct limit for any recent version. Option C (4000) is the limit for hosts in a linked mode group but not for a single instance.

434
Multi-Selectmedium

Which TWO of the following are functions of a vSphere Distributed Switch that are not available in a vSphere Standard Switch? (Select exactly two.)

Select 2 answers
A.Port mirroring (Distributed Port Mirroring).
B.NIC teaming with explicit failover order.
C.Network I/O Control (NIOC).
D.Traffic shaping policies.
E.VLAN tagging and trunking.
AnswersA, C

Distributed switches support advanced port mirroring; standard switches only have basic mirroring via third-party solutions.

Why this answer

Options A and C are correct. Port mirroring (Distributed Port Mirroring) is a feature exclusive to the vSphere Distributed Switch (vDS). Network I/O Control (NIOC) is also only available on vDS, allowing for bandwidth allocation and prioritization.

Option B is incorrect because NIC teaming with explicit failover order is available on both standard and distributed switches. Option D is incorrect because traffic shaping policies are available on vSphere Standard Switches (vSS) at the port group level. Option E is incorrect because VLAN tagging and trunking are supported on both switch types.

435
MCQmedium

An administrator configures a resource pool with a CPU reservation and expandable reservation enabled. The root resource pool has 100% of cluster CPU resources. A VM inside the resource pool with no reservation requests CPU resources. What will happen when the VM tries to power on?

A.The VM can power on but will be limited to the resource pool's shares.
B.The VM can power on using resources from the resource pool or its parent due to expandable reservation.
C.The VM cannot power on because the resource pool has a reservation set.
D.The VM can power on using resources from the resource pool only if it has a reservation.
AnswerB

Expandable reservation allows the pool to borrow from parent if needed, so the VM can start.

Why this answer

With expandable reservation enabled, the resource pool can borrow CPU resources from the parent resource pool (root) if needed. Since the VM has no reservation, it does not require any guaranteed CPU capacity; it can power on as long as there are any unreserved resources in the resource pool or parent. Option A is incorrect because shares only affect priority during contention, not the ability to power on.

Option C is incorrect because the reservation on the resource pool does not prevent VMs without reservations from powering on; it only guarantees that a certain amount of resources is reserved for the pool. Option D is incorrect because the VM does not need a reservation to power on; it can use unreserved resources from the pool or borrowed from the parent.

436
MCQmedium

An organization has deployed a vSphere Distributed Switch (vDS) across multiple ESXi hosts. The security team requires that no virtual machine can change its MAC address to impersonate another device. Which security policy setting on the distributed port group should be configured to fulfill this requirement?

A.Set 'Forged transmits' to 'Reject'.
B.Set 'MAC address changes' to 'Reject'.
C.Set 'Promiscuous mode' to 'Reject'.
D.Enable traffic shaping and set a low average bandwidth.
AnswerA

When forged transmits is rejected, the vSwitch drops frames that do not originate from the VM's actual MAC address, thus preventing MAC spoofing.

Why this answer

The 'Forged transmits' policy, when set to 'Reject', drops any outbound frames with a source MAC address different from the one assigned to the virtual NIC. This prevents a VM from impersonating another device by spoofing its MAC address. Option B is incorrect because 'MAC address changes' controls whether the VM can change its effective MAC address, but this does not prevent the VM from sending frames with a forged source MAC.

Option C is incorrect because 'Promiscuous mode' allows the VM to see all traffic on the port, which is a security risk but unrelated to MAC impersonation. Option D is incorrect because traffic shaping limits bandwidth, not MAC security.

437
MCQhard

A cluster has mixed hardware vendors. The administrator wants to use a single vLCM image specification for all hosts. What is the best approach?

A.Do not use vLCM
B.Use a generic ESXi image without vendor add-ons
C.Create a composite image with add-ons for each vendor
D.Use separate images per vendor
AnswerB

A generic ESXi image can be applied to all hosts if it includes the necessary drivers; otherwise, consider separate images.

Why this answer

VLCM cluster images support only one vendor add-on per image. For mixed hardware vendors, the best approach is to use a generic ESXi image without vendor-specific add-ons, relying on the base image's driver set. If hardware-specific drivers are needed, separate images per hardware type may be required, but the question asks for a single image specification, so using a generic image is the best single-image approach.

438
MCQhard

An administrator attempts to vMotion a powered-on VM from ESXi host A to host B. The vMotion fails with the error: 'the destination host does not have access to the virtual machine's network'. The VM is connected to a standard switch on host A with a VLAN ID 100. Host B is connected to a VDS that also has a portgroup with VLAN ID 100. What is the most likely cause?

A.The VM is using a standard switch while host B uses a VDS
B.The VM is connected to a network that is not present on the destination host
C.Host B does not have the correct MTU set
D.Host B does not have the correct VLAN configuration
AnswerA

vMotion requires the source and destination to have the same network label; standard and VDS are different.

Why this answer

The error 'the destination host does not have access to the virtual machine's network' occurs because vMotion requires network compatibility between source and destination hosts. Since the VM is connected to a standard switch on host A, but host B only has a VDS with a similarly named portgroup, the vMotion fails because standard switches and VDS are separate network constructs and cannot be directly mapped during a vMotion operation. The VLAN ID being identical is irrelevant because the network object types (standard vs. distributed) must match for the migration to succeed.

Exam trap

The trap here is that candidates assume matching VLAN IDs alone ensure network compatibility, overlooking that vMotion requires identical network switch types (standard-to-standard or VDS-to-VDS) for the migration to proceed.

How to eliminate wrong answers

Option B is wrong because the network (VLAN 100) is present on the destination host via the VDS portgroup, so the issue is not the absence of the network but the mismatch of switch types. Option C is wrong because an MTU mismatch would typically cause connectivity issues or performance degradation, not a specific error about network access during vMotion. Option D is wrong because the VLAN configuration on host B is correct (VLAN ID 100), so the problem is not a VLAN misconfiguration but the switch type incompatibility.

439
MCQeasy

An administrator needs to ensure that a service account used for vCenter Server backups has the minimum required privileges. The account should only be able to perform backup and restore operations. Which role should be assigned?

A.ReadOnly
B.Administrator
C.BackupOperator
D.NoAccess
AnswerC

This role is specifically designed for backup and restore operations with minimal privileges.

Why this answer

(BackupOperator) is correct. The BackupOperator role in vCenter Server provides the minimum required privileges to perform backup and restore operations without granting full administrative access. Option A (ReadOnly) is incorrect because it only allows read access and cannot perform backup/restore actions.

Option B (Administrator) is incorrect because it grants full administrative privileges, exceeding the minimum required. Option D (NoAccess) is incorrect because it denies all permissions, preventing any backup operations.

440
Multi-Selecteasy

Which TWO features are valid components of vSphere Lifecycle Manager (vLCM) image-based management? (Choose two.)

Select 2 answers
A.Host profiles
B.vCenter Update Manager (VUM)
C.Baseline groups
D.Cluster images
E.Hardware Compatibility List (HCL)
AnswersD, E

Cluster images define the software and firmware for a group of hosts.

Why this answer

Options D and E are correct. Cluster images are the core of image-based management in vLCM, allowing consistent OS and software versions across hosts. The Hardware Compatibility List (HCL) is used to validate that hardware, firmware, and drivers are compatible with the selected image.

Option A (Host profiles) is separate and used for host configuration, not image management. Option B (vCenter Update Manager, VUM) is the older tool replaced by vLCM; it uses baselines, not images. Option C (Baseline groups) are deprecated in vLCM.

441
MCQmedium

A vSphere administrator notices that a VM running a critical database is experiencing high latency on its virtual disk. The VM uses a VMDK on a datastore shared by several other VMs. The datastore is backed by an all-flash array. Which action would best reduce latency without increasing storage capacity?

A.Increase the virtual disk shares for the VM
B.Move the VM to another datastore
C.Set a higher I/O limit on the VM
D.Enable Storage I/O Control (SIOC) on the datastore
AnswerD

SIOC uses latency thresholds to throttle I/O and reduce congestion, improving latency for critical VMs.

Why this answer

Storage I/O Control (SIOC) can enforce I/O shares and limits to prioritize latency-sensitive VMs. Increasing shares or limits may not reduce latency if the array is saturated. Moving to another datastore may not be feasible.

442
MCQmedium

A company has a vSphere cluster consisting of 8 ESXi hosts connected to a single Fibre Channel SAN array. They use VMFS6 datastores to store virtual machine files. The storage administrator has scheduled a firmware upgrade for the SAN array that requires a controller reboot. This will cause a temporary loss of connectivity to one LUN (datastore) for approximately 5 minutes. The datastore hosts 15 production VMs, including critical database servers. The cluster has sufficient spare capacity on other datastores, but the VMs are large (each about 200 GB). The vSphere administrator must ensure that these VMs remain available during the upgrade. The cluster has vSphere HA enabled with default settings. What should the administrator do to meet the requirement?

A.Use Storage vMotion to migrate all VMs on the affected datastores to a healthy datastore before the upgrade.
B.Configure a vSphere HA admission control policy to reserve resources in case of host failure.
C.Place all ESXi hosts into maintenance mode.
D.Enable Storage I/O Control on the affected datastore to manage I/O during the upgrade.
AnswerA

Storage vMotion allows live migration of VM files without downtime, keeping VMs available during the storage upgrade.

Why this answer

Storage vMotion (option A) allows live migration of virtual machines to a different datastore with zero downtime. Since the cluster has sufficient spare capacity on other datastores, migrating the VMs before the firmware upgrade ensures they remain available during the temporary LUN disconnection. Option B (HA admission control) is designed to reserve resources for host failures, not storage disruptions.

Option C (placing hosts into maintenance mode) would evacuate VMs to other hosts, but the VMs would still be on the affected datastore and would lose access during the upgrade. Option D (Storage I/O Control) manages I/O congestion but does not prevent VM downtime from a LUN disconnect.

443
MCQhard

Refer to the exhibit. An engineer tries to ping the DNS server 10.0.0.1 from the management interface vmk0 but gets 'Network is unreachable'. What is the most likely cause?

A.The DNS server 10.0.0.1 is down.
B.The MTU of 1500 is too small for DNS traffic.
C.The vmk0 interface does not have a default gateway configured; the default gateway is on vmk1.
D.The DNS server IP address is misconfigured.
AnswerC

vmk0's subnet is 192.168.10.0/24, and there is no route for 10.0.0.1 via vmk0. The default route goes through vmk1, but vmk0 cannot use that gateway because it's on a different subnet.

Why this answer

The routing table shows the default gateway is on vmk1 (192.168.20.1), but vmk0 is on a different subnet (192.168.10.0/24). Traffic from vmk0 to 10.0.0.1 is not directly reachable and must go through a gateway. Since there is no route for 10.0.0.0/24 or default route via vmk0, the kernel reports network unreachable.

The correct fix is to add a default gateway on vmk0 or a specific route.

444
Drag & Dropmedium

Order the steps to take a snapshot of a virtual machine.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

The correct order for taking a snapshot in VMware vSphere is to first initiate the snapshot by right-clicking the VM and selecting 'Snapshot > Take Snapshot', then in the dialog provide a name and optional description, select whether to snapshot the virtual machine's memory and whether to quiesce the file system, and finally confirm by clicking OK. This sequence ensures that all necessary parameters are set before the snapshot is created.

445
MCQmedium

A financial services firm maintains a multi-site vSphere environment with independent vCenter Server systems in New York and London, each managing approximately 200 virtual machines. The company requires a disaster recovery solution that can orchestrate failover of an entire site with automated IP address changes and integrated testing capabilities. They also need centralized management and the ability to attach the recovery site's vCenter to the same vCenter Single Sign-On domain as the protected site. The current vCenter versions are 7.0 Update 3. Which solution best meets these requirements while adhering to VMware best practices?

A.Implement a vSAN stretched cluster across both data centers and enable proactive HA policies.
B.Deploy vCenter Site Recovery (SRM) paired with vSphere Replication, and use Enhanced Linked Mode to connect the vCenter systems.
C.Configure vCloud Availability for vCloud Director to replicate VMs between sites.
D.Use vCenter High Availability (VCHA) to protect the vCenter Server and rely on vSphere HA for VMs.
AnswerB

SRM provides orchestrated failover, IP customization, and testing; Enhanced Linked Mode allows centralized management and a single SSO domain.

Why this answer

VMware Site Recovery Manager (SRM) with vSphere Replication provides orchestrated disaster recovery with automated IP address changes and integrated testing capabilities. Enhanced Linked Mode allows both vCenter Server systems to share the same vCenter Single Sign-On domain, meeting the centralized management requirement. This combination is the VMware best-practice solution for multi-site failover with independent vCenter Servers.

Exam trap

The trap here is that candidates often confuse vSphere HA with site-level disaster recovery, overlooking that SRM is specifically designed for orchestrated failover with automated IP changes and testing, while vSphere HA only handles host-level failures within a single cluster.

How to eliminate wrong answers

Option A is wrong because a vSAN stretched cluster requires a single vCenter Server managing both sites and does not support independent vCenter Server systems; it also lacks orchestrated failover with automated IP changes and integrated testing. Option C is wrong because vCloud Availability for vCloud Director is designed for service providers and multi-tenant environments, not for a financial firm's private vSphere deployment with independent vCenter Servers; it does not provide the required SRM-level orchestration or Enhanced Linked Mode integration. Option D is wrong because vCenter High Availability (VCHA) only protects the vCenter Server appliance itself, not the virtual machines, and vSphere HA alone cannot orchestrate site-level failover with automated IP changes or provide integrated testing capabilities.

446
MCQmedium

A vSphere administrator is troubleshooting a VM that has been disconnected from its virtual disk. The VM's virtual disk file (vmdk) is still present on the datastore, but the VM cannot be powered on. Which step should the administrator take first to resolve the issue?

A.Create a new VM and attach the existing vmdk file.
B.Re-add the virtual disk from the datastore browser to the VM.
C.Use the vmkfstools command to re-register the virtual disk.
D.Perform a storage vMotion of the VM to another datastore.
AnswerC

vmkfstools -i can recreate the descriptor file from the flat vmdk.

Why this answer

When a VM is disconnected from its virtual disk but the .vmdk file remains on the datastore, the issue is often a corrupt or missing disk descriptor file. The vmkfstools command with the -fix option can repair the descriptor file, re-establishing the connection between the VM and its virtual disk without requiring VM recreation or manual re-attachment.

Exam trap

The trap here is that candidates assume the disk must be manually re-attached via the GUI (Option B), but vSphere requires the descriptor file to be intact for the disk to be recognized, and vmkfstools is the proper tool to repair it without data loss.

How to eliminate wrong answers

Option A is wrong because creating a new VM and attaching the existing .vmdk file is unnecessary and time-consuming; it does not address the underlying descriptor corruption and may cause additional configuration mismatches. Option B is wrong because re-adding the virtual disk from the datastore browser assumes the disk is properly formatted and recognized, but if the descriptor file is corrupt, the datastore browser may not list the disk correctly or the re-add operation will fail. Option D is wrong because performing a Storage vMotion moves the VM to another datastore but does not repair the disconnected disk; the disk would remain disconnected after the migration, and the VM still cannot power on.

447
Multi-Selectmedium

Which THREE security hardening measures should be applied to an ESXi host? (Choose three.)

Select 3 answers
A.Increase memory resource allocation for management VMs
B.Enable lockdown mode
C.Enable SNMP v3
D.Apply a host profile for security settings
E.Disable ESXi Shell and SSH services
AnswersB, D, E

Restricts direct host access.

Why this answer

Options B, D, and E are correct. Enabling lockdown mode restricts direct root access to the ESXi host via the DCUI, enhancing security. Applying a host profile ensures consistent security configurations across hosts.

Disabling ESXi Shell and SSH services reduces the attack surface by eliminating remote CLI access. Option A is incorrect because increasing memory resource allocation for management VMs does not directly improve security; it is a resource management practice. Option C is incorrect because although SNMPv3 provides authentication and encryption, enabling SNMP services is not a standard hardening measure and is often disabled to reduce the attack surface.

448
Multi-Selectmedium

A vSphere administrator wants to enable vLCM image-based management for an existing cluster that currently uses baseline-based remediation. Which TWO prerequisites must be met before the migration can proceed?

Select 2 answers
A.All hosts must have the same hardware compatibility (HCL).
B.All ESXi hosts must be running version 7.0 U2 or later.
C.The vCenter Server must be registered with VMware Cloud.
D.The cluster must have a single reference host that represents the desired state.
E.The cluster must have at least one host with vSphere Lifecycle Manager enabled.
AnswersB, D

vLCM image-based management is only available on ESXi 7.0 Update 2 and newer.

Why this answer

VLCM image-based management requires ESXi hosts to be at version 7.0 U2 or later, as the image-based lifecycle management feature was introduced in vSphere 7.0 Update 2. Option D is correct because a single reference host must be selected to define the desired software image for the cluster, which vLCM then uses to ensure all hosts match that specification.

Exam trap

The trap here is that candidates often think all hosts must have identical hardware (Option A) or that vLCM must already be enabled on a host (Option E), but the actual prerequisites are purely about ESXi version and the existence of a reference host to define the desired state.

449
MCQhard

Refer to the exhibit. An administrator runs the vmkfstools command on a VMFS datastore. Which information can be derived from the output?

A.The datastore ID is the file system UUID.
B.The datastore is formatted with VMFS version 6.82.
C.The datastore supports ESXi 6.5 and later.
D.The datastore has 1 TB capacity.
AnswerA

Correct: The UUID is displayed.

Why this answer

The output shows the file system UUID directly.

450
MCQmedium

An administrator sees the above error in the vLCM remediation history. What is the most likely cause?

A.The desired image validation failed before remediation.
B.The host's acceptance level does not allow the VIB.
C.The host firmware is incompatible with the VIB.
D.The vCenter Server cannot reach the VMware depot.
AnswerD

The error shows a failed download from the depot URL.

Why this answer

The error shown in the vLCM remediation history indicates a failure to download the desired image components. vLCM relies on the vCenter Server to fetch VIBs and software depots from the VMware online depot (or a local depot). If the vCenter Server cannot reach the VMware depot due to network issues, proxy misconfiguration, or firewall blocks (e.g., port 443 to *.vmware.com), the remediation will fail with a download error, not a validation or acceptance-level error.

Exam trap

The trap here is that candidates often confuse a depot connectivity error with a VIB acceptance-level or validation error, because all can prevent remediation, but only the depot error manifests as a download failure in the remediation history.

How to eliminate wrong answers

Option A is wrong because a validation failure would produce a specific error message about image compliance or component mismatch, not a download failure. Option B is wrong because an acceptance-level mismatch would generate a host-level error during VIB installation, not a depot connectivity issue. Option C is wrong because firmware incompatibility is checked during hardware compatibility validation, not during depot download, and would produce a different error related to hardware support.

Page 5

Page 6 of 7

Page 7

All pages