VCP-DCV Configure and Manage vSphere Networking Practice Question
Exhibit
Refer to the exhibit. # esxcli network ip connection list | grep -E "10.10.10.1|10.10.10.2" tcp 0 0 10.10.10.1:22 10.10.10.2:45678 ESTABLISHED new-session udp 0 0 10.10.10.1:123 0.0.0.0:* # esxcli network ip route ipv4 list Network Netmask Gateway Interface 0.0.0.0 0.0.0.0 10.10.10.254 vmk0 10.10.10.0 255.255.255.0 0.0.0.0 vmk0 169.254.0.0 255.255.0.0 0.0.0.0 vmk1
An administrator is troubleshooting SSH connectivity to an ESXi host from a management workstation at 10.10.10.2. The SSH session is established, but the administrator cannot ping the host's IP 10.10.10.1. Based on the exhibit, what is the most likely cause?
⚠ Common exam trap
It's easy for candidates to assume SSH connectivity implies full network reachability, but the ESXi firewall selectively permits services, so a successful SSH session does not guarantee that ICMP or other protocols are allowed.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ICMP traffic is blocked by the ESXi firewall.
The administrator can establish an SSH session, which proves that the ESXi host's SSH service is running and that TCP port 22 is reachable from the management workstation. However, the inability to ping the host's IP address (10.10.10.1) indicates that ICMP echo requests are being blocked. By default, the ESXi firewall blocks ICMP traffic, so the most likely cause is that ICMP is filtered by the host firewall.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The default gateway is not set correctly.
Why it's wrong here
Route shows default gateway.
- ✓
ICMP traffic is blocked by the ESXi firewall.
Why this is correct
ESXi firewall blocks ping by default.
- ✗
The SSH service is not running on the host.
Why it's wrong here
SSH is established.
- ✗
The management workstation is on a different VLAN.
Why it's wrong here
SSH works, so layer 3 connectivity exists.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every VCP-DCV question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.