Knowledge + Practice

CCNA Vsphere Architecture Questions

58 questions · Vsphere Architecture topic · All types, answers revealed

Practice these questions Exam hub All questions

1

Multi-Selectmedium

Which TWO features are available only in the vSphere Enterprise Plus edition?

Select 2 answers

A.vSphere Fault Tolerance

B.Storage vMotion

C.vSphere HA

D.vSphere vMotion

E.vSphere DRS

AnswersA, E

Correct: FT requires Enterprise Plus.

Why this answer

vSphere Fault Tolerance (FT) is an Enterprise Plus exclusive feature that provides continuous availability for virtual machines by creating a secondary VM that runs in lockstep with the primary VM, using vLockstep technology to replicate CPU and memory state. This ensures zero data loss and zero downtime in the event of a host failure, but it requires the Enterprise Plus license tier because of the advanced resource management and coordination overhead.

Exam trap

The trap here is that candidates often confuse vSphere DRS as a Standard edition feature, but DRS is actually an Enterprise Plus exclusive, while vMotion and HA are available in lower editions, leading to incorrect selections.

Practice this question →

2

Matchingmedium

Match each vSphere component to its primary function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Centralized management of ESXi hosts and VMs

Hypervisor that runs VMs

Interface for managing vCenter and ESXi

Live migration of VMs without downtime

Automatic restart of VMs after host failure

Why these pairings

The correct matches: vCenter Server is the centralized management platform; ESXi is the hypervisor; vSphere vMotion enables live migration; vSphere HA provides high availability. Common confusions include mixing up management functions with migration or HA features.

Practice this question →

3

MCQmedium

An administrator is configuring a new iSCSI storage array for a vSphere cluster. The array supports multiple iSCSI targets. What is the recommended best practice for multipathing to ensure high availability and load balancing?

A.Use the management VMkernel port for iSCSI traffic to simplify configuration.

B.Create multiple VMkernel ports for iSCSI, each bound to a separate physical NIC, and configure multiple iSCSI targets.

C.Configure a single physical NIC with multiple VLANs for iSCSI traffic.

D.Use a single VMkernel port for iSCSI and assign multiple IP addresses to it.

AnswerB

This provides path redundancy and load balancing.

Why this answer

VMware best practices for iSCSI multipathing require multiple VMkernel ports, each bound to a separate physical NIC, and multiple iSCSI targets to provide both path redundancy and load balancing. This configuration leverages the Pluggable Storage Architecture (PSA) and native multipathing plugins (NMP) to distribute I/O across active paths while maintaining high availability through automatic path failover. Using separate VMkernel ports and NICs ensures that no single point of failure exists in the storage network.

Exam trap

The trap here is that candidates often confuse logical separation (VLANs or multiple IPs on one NIC) with true physical path redundancy, leading them to select options that appear to provide multipathing but actually create a single point of failure.

How to eliminate wrong answers

Option A is wrong because using the management VMkernel port for iSCSI traffic violates the principle of network isolation and can cause performance contention, as management and storage traffic share the same network stack and resources. Option C is wrong because configuring a single physical NIC with multiple VLANs for iSCSI traffic does not provide true multipathing; a single NIC failure would still cause complete storage connectivity loss, and VLANs alone do not create separate physical paths. Option D is wrong because a single VMkernel port with multiple IP addresses does not create independent paths; all traffic still traverses the same physical NIC and network stack, offering no redundancy or load balancing.

Practice this question →

4

MCQmedium

An administrator wants to replicate a critical VM to a remote site with a Recovery Point Objective (RPO) of 15 minutes. Which vSphere feature should be used?

A.Storage vMotion

B.vSphere Replication

C.vSphere vMotion

D.Site Recovery Manager (SRM)

AnswerB

Supports low RPOs down to 5 minutes.

Why this answer

VSphere Replication supports RPO as low as 5 minutes (depending on configuration). vMotion is for live migration, not replication. Storage vMotion is for storage migration. SRM uses replication but is a disaster recovery orchestration platform, not a replication engine itself.

Practice this question →

5

MCQmedium

Refer to the exhibit. A vSphere administrator is reviewing a cluster configuration JSON. What can be determined from the configuration?

A.The cluster uses a slot-based admission control policy.

B.vSphere DRS is set to partially automated.

C.The cluster can tolerate two host failures.

D.The cluster has admission control disabled.

AnswerA

Correct: 'fixedSlotPolicy' means slot-based.

Why this answer

The 'ha_admission_control_policy' is set to 'fixedSlotPolicy', indicating slot-based admission control.

Practice this question →

6

MCQmedium

An administrator is planning a storage upgrade for a vSphere cluster. The cluster currently uses VMware vSAN as the primary datastore. The administrator wants to add capacity to the vSAN datastore without adding additional hosts. Which action should the administrator take?

A.Replace existing disks in each host with larger capacity disks and claim them to the same disk group

B.Combine disks from different hosts into a single disk group

C.Add a new disk group on each host with additional capacity disks

D.Add a new VMFS datastore and use Storage vMotion to move VMs

AnswerC

Adding a new disk group on each host with additional capacity disks directly increases vSAN capacity without adding hosts, preserving existing storage configurations.

Why this answer

Adding a new disk group on each host with additional capacity disks directly increases vSAN datastore capacity without requiring host replacement. This method allows you to add new capacity disks while preserving existing disk groups and data placement policies. Option A is incorrect because replacing existing disks with larger ones, while possible, typically requires data evacuation or is more disruptive, and it is not the recommended approach when disk slots are available.

Option B is invalid because disk groups are per-host; combining disks across hosts is not supported. Option D does not increase vSAN capacity and introduces a different datastore type.

Exam trap

The trap is that candidates might assume replacing disks (Option A) is the only method to increase capacity, overlooking that adding a new disk group (Option C) is a standard and often simpler approach that avoids data migration.

How to eliminate wrong answers

Option B is wrong because vSAN disk groups are per-host constructs; combining disks from different hosts into a single disk group is not supported by vSAN architecture, as each host maintains its own disk groups. Option C is wrong because adding a new disk group on each host with additional capacity disks would require available disk slots and may exceed the maximum number of disk groups per host (typically 5), but more importantly, it does not address the scenario where the administrator wants to add capacity without adding hosts—this option does add capacity but is not the only valid method; however, the question implies a simple capacity increase, and replacing disks is more straightforward and avoids potential disk group limits. Option D is wrong because adding a new VMFS datastore does not increase the vSAN datastore capacity; it creates a separate datastore that would require Storage vMotion to move VMs, which does not solve the requirement of adding capacity to the existing vSAN datastore.

Practice this question →

7

Multi-Selecthard

Which two of the following are characteristics of the vSphere Enhanced vMotion Compatibility (EVC) feature? (Choose two.)

Select 2 answers

A.It is configured at the host level

B.It allows vMotion between hosts of different CPU generations within the same cluster

C.It enables memory overcommit by default

D.It masks CPU features to a baseline level across all hosts in the cluster

E.It requires all VMs to be powered off before enabling

AnswersB, D

EVC enables vMotion across different CPU generations by masking features.

Why this answer

Options B and D are correct. EVC masks CPU features to a baseline level across all hosts in a cluster (D), enabling vMotion between hosts of different CPU generations (B). Option A is incorrect because EVC is configured at the cluster level, not the host level.

Option C is incorrect because EVC does not enable memory overcommit; memory overcommit is a separate feature. Option E is incorrect because EVC can be enabled with VMs powered on, though some CPUs may require VMs to be powered off if the baseline changes.

Practice this question →

8

MCQeasy

A company has a vSphere cluster with vSphere HA enabled. During a host failure, virtual machines on the failed host do not restart. The administrator checks the HA agent log and sees the error message: 'HA agent on host <hostname> has no master detected'. Which of the following is the most likely cause?

A.Datastore heartbeats are failing on the failed host

B.The management network is isolated and HA isolation response is not configured

C.vCenter Server service is stopped

D.The VDS uplink failure detection policy is set to 'Link Status only'

AnswerB

HA agents rely on management network for master election; isolation prevents master detection.

Why this answer

The error 'HA agent on host <hostname> has no master detected' indicates that the host cannot communicate with the HA master. This is typically caused by management network isolation. If the isolation response is not configured, the host may not take corrective action (e.g., attempt to contact master via datastore heartbeats).

Option A is incorrect because datastore heartbeats are a secondary mechanism for detecting isolation, not the primary cause of the error. Option C is incorrect because vCenter Server being stopped does not prevent HA agents from electing a master among themselves. Option D is incorrect because VDS uplink failure detection policy is related to network teaming and failover, not directly to HA agent communication.

Practice this question →

9

Drag & Dropmedium

Arrange the steps to create a new virtual machine in vSphere Client.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

The standard workflow: initiate creation, choose type, name/place, select compute, then storage and settings.

Practice this question →

10

MCQhard

An administrator wants to deploy a new ESXi host using vSphere Lifecycle Manager (vLCM). The host has a different hardware version than the cluster baseline. Which action is required?

A.Use a host profile to apply the configuration.

B.Create a separate cluster with a compatible image specification for the new host.

C.Replace the host hardware to match the baseline.

D.Manually install the same ESXi version on the host before adding to the cluster.

AnswerB

Hardware differences may require a different image.

Why this answer

vSphere Lifecycle Manager (vLCM) uses image-based management, where a single image specification defines the exact software and firmware versions for all hosts in a cluster. If a host has a different hardware version, it cannot accept the same image because the hardware compatibility requirements differ. Creating a separate cluster with a compatible image specification allows the host to be managed independently with its own lifecycle baseline.

Exam trap

The trap here is that candidates confuse host profiles (which apply configuration) with vLCM image-based management (which enforces hardware compatibility), leading them to incorrectly choose host profiles as the solution.

How to eliminate wrong answers

Option A is wrong because host profiles apply configuration settings (e.g., networking, storage) but do not address hardware version incompatibility with vLCM images; vLCM requires a consistent hardware compatibility across all hosts in a cluster. Option C is wrong because replacing hardware is unnecessary and overly disruptive; vLCM supports heterogeneous hardware through separate clusters with tailored images. Option D is wrong because manually installing ESXi bypasses vLCM's automated image-based management and does not resolve the hardware version mismatch; vLCM requires hosts to be added to a cluster with a compatible image, not manually staged.

Practice this question →

11

MCQeasy

A vSphere administrator needs to ensure that a critical VM restarts automatically if the ESXi host fails. Which feature should be configured?

A.vSphere vMotion

B.vSphere HA

C.vSphere DRS

D.vSphere Fault Tolerance

AnswerB

Correct: HA restarts VMs after host failure.

Why this answer

vSphere HA provides host failure detection and automatic restart of VMs.

Practice this question →

12

MCQmedium

A vSphere administrator deploys a new ESXi host and wants to ensure it is automatically added to a specific cluster and applies the correct host profiles. Which method should the administrator use?

A.Use Clone Host functionality in vSphere Client.

B.Use Auto Deploy with stateful installations.

C.Use Host Profiles to attach the profile to the cluster.

D.Use vCenter Server to add the host manually.

AnswerB

Correct: Auto Deploy automates provisioning and profile application.

Why this answer

Auto Deploy with stateful installations provisions hosts and applies profiles automatically during network boot.

Practice this question →

13

MCQeasy

Which switch type requires a separate vCenter Server to manage its configuration?

A.Virtual Edge Gateway Switch

B.vSphere Distributed Switch

C.vSphere Standard Switch

D.vSphere Edge Switch

AnswerB

Requires vCenter Server for central management.

Why this answer

The vSphere Distributed Switch (VDS) requires a separate vCenter Server to manage its configuration because the VDS is a centralized virtual switch that spans multiple ESXi hosts, and its configuration is stored in the vCenter Server database rather than on individual hosts. Without vCenter, the VDS cannot be created, configured, or managed, as the ESXi hosts rely on vCenter to synchronize the distributed port group settings and network policies across the cluster.

Exam trap

The trap here is that candidates often confuse the vSphere Standard Switch (VSS) with the vSphere Distributed Switch (VDS), assuming both can be managed without vCenter, but the VDS explicitly requires vCenter for any configuration changes, while the VSS can be managed directly on the ESXi host.

How to eliminate wrong answers

Option A is wrong because a Virtual Edge Gateway Switch is not a standard VMware vSphere switch type; it is a component of VMware NSX (specifically the NSX Edge Gateway) used for north-south traffic routing and firewall services, and it does not require a separate vCenter Server for its configuration—it is managed through the NSX Manager, which itself integrates with vCenter. Option C is wrong because the vSphere Standard Switch (VSS) is a host-level virtual switch that is configured locally on each ESXi host using the vSphere Client directly connected to the host or via vCenter, but it does not require a separate vCenter Server to manage its configuration; each VSS is independent and its settings are stored on the individual ESXi host. Option D is wrong because a vSphere Edge Switch is not a recognized VMware product or switch type; the correct term is the NSX Edge virtual router or the VDS, and there is no standalone 'vSphere Edge Switch' that requires vCenter.

Practice this question →

14

MCQhard

A vSphere cluster using vSAN is experiencing high latency for some VMs. The administrator checks the vSAN skyline health and finds that all disk groups are healthy. Which additional step should the administrator take to diagnose the issue?

A.Verify that the vSAN network is configured with jumbo frames.

B.Enable vSAN encryption to improve performance.

C.Increase the number of disk groups on each host.

D.Check the vSAN performance service for object latency breakdown.

AnswerD

Correct: Performance service provides detailed latency metrics.

Why this answer

The vSAN Performance Service provides granular, real-time and historical metrics for vSAN objects, including latency breakdowns at the VM, disk group, and physical disk levels. Since the skyline health check shows all disk groups as healthy, the next logical step is to use the Performance Service to pinpoint whether the high latency is due to congestion on a specific object, such as a VM virtual disk or a particular disk group component, rather than a hardware failure.

Exam trap

The trap here is that candidates assume a healthy skyline health check means there is no underlying performance issue, but vSAN skyline health primarily checks for hardware failures and configuration compliance, not performance bottlenecks, so they must use the Performance Service for latency analysis.

How to eliminate wrong answers

Option A is wrong because jumbo frames (MTU 9000) can improve network throughput but are not a diagnostic step; they are a configuration optimization that may reduce CPU overhead but do not directly reveal the source of latency. Option B is wrong because vSAN encryption adds CPU overhead and can increase latency, not improve performance; it is a security feature, not a performance tuning tool. Option C is wrong because increasing the number of disk groups per host can improve performance by distributing I/O, but it is a capacity planning or reconfiguration action, not a diagnostic step to identify the root cause of existing high latency.

Practice this question →

15

MCQeasy

An administrator deploys a new vCenter Server Appliance (VCSA) using the CLI installer. The administrator wants to ensure the appliance is highly available. Which deployment option should the administrator choose during the installation?

A.Deploy the VCSA with an embedded Platform Services Controller

B.Enable Enhanced vMotion Compatibility (EVC) on the cluster

C.Configure vSphere HA on the cluster that hosts the VCSA

D.Deploy the VCSA with an external Platform Services Controller and enable vCenter HA later

AnswerA

Correct. Deploying with an embedded PSC is the recommended approach in vSphere 7, and vCenter HA can be configured on such a deployment.

Why this answer

To ensure the VCSA is highly available, the administrator should choose option A. In vSphere 7, the external Platform Services Controller (PSC) is deprecated, and vCenter HA works with an embedded PSC. Deploying the VCSA with an embedded PSC allows vCenter HA to be configured later.

Option D is incorrect because an external PSC is no longer supported for new deployments and is not required for vCenter HA. Option B is incorrect because Enhanced vMotion Compatibility (EVC) is for CPU compatibility across hosts, not vCenter HA. Option C is incorrect because vSphere HA provides host-level failure protection, not vCenter-level high availability.

Practice this question →

16

MCQmedium

A company has a vSphere environment with a vCenter Server Appliance (VCSA) that is running low on disk space. The administrator notices that the /storage/archive partition is nearly full. Which action should the administrator take to reclaim space without impacting the functionality of vCenter Server?

A.Increase the size of the VCSA virtual disk using vSphere Web Client.

B.Run the 'vcenter-delete-archive' script from the command line.

C.Use the Windows Disk Cleanup utility on the VCSA.

D.Manually delete files from the /storage/archive directory using SSH.

AnswerB

This script is designed to safely clean up old archived data.

Why this answer

The VCSA runs on a Linux-based operating system, not Windows, so the Windows Disk Cleanup utility is irrelevant. The /storage/archive partition stores historical data such as stats, events, and tasks. VMware provides the 'vcenter-delete-archive' script as the supported method to safely purge old archived data from this partition without risking corruption of the vCenter Server database or services.

Manually deleting files via SSH can leave the database in an inconsistent state, while increasing the virtual disk only postpones the issue without reclaiming space.

Exam trap

The trap here is that candidates assume any manual deletion or disk expansion is acceptable, but VMware specifically tests the understanding that only the provided script can safely clean the archive without breaking vCenter Server functionality.

How to eliminate wrong answers

Option A is wrong because increasing the VCSA virtual disk size expands the partition but does not reclaim space; it only adds more storage, which is not a cleanup action. Option C is wrong because the VCSA is a Linux-based appliance, not a Windows system, so the Windows Disk Cleanup utility cannot be used. Option D is wrong because manually deleting files from /storage/archive via SSH can corrupt the vCenter Server database and is not a supported or safe method; the correct approach is to use the official VMware script.

Practice this question →

17

Multi-Selectmedium

Which TWO of the following are valid use cases for vSphere Fault Tolerance (FT)? (Choose two.)

Select 2 answers

A.A VM that has a snapshot for backup purposes.

B.A VM with 4 vCPUs that must be protected from host failure.

C.A VM running a critical application that requires zero downtime in case of host failure.

D.A VM with a physical RDM (Raw Device Mapping) attached.

E.A VM with 16 vCPUs that requires high availability.

AnswersB, C

FT supports up to 8 vCPUs in vSphere 7 and later.

Why this answer

B is correct because vSphere Fault Tolerance (FT) supports VMs with up to 8 vCPUs (vSphere 7.0+) and provides continuous availability by maintaining a secondary VM that mirrors the primary VM's state via vLockstep, ensuring zero downtime in case of host failure. This makes it suitable for protecting a 4-vCPU VM from host failure.

Exam trap

The trap here is that candidates often confuse vSphere FT with vSphere HA, assuming FT can protect any VM regardless of vCPU count or configuration, but FT has strict limits (max 8 vCPUs, no snapshots, no physical RDMs) that are frequently tested in the exam.

Practice this question →

18

MCQmedium

An administrator notices that a VM with a critical application is experiencing intermittent network connectivity. The VM is configured with an E1000 vNIC. The ESXi host has been upgraded from 6.5 to 7.0. What is the most likely cause?

A.The VM hardware version needs to be upgraded to version 15.

B.The VM needs to be powered off and back on to reset the vNIC.

C.The E1000 vNIC is not supported in ESXi 7.0; VMXNET3 must be used.

D.The E1000 driver is incompatible with ESXi 7.0.

AnswerA

Correct: Upgrading virtual hardware resolves compatibility issues.

Why this answer

The E1000 vNIC is a legacy emulated device that relies on the VM's hardware version for proper compatibility with newer ESXi releases. Upgrading the VM hardware version to version 15 (or later) ensures that the virtual hardware is aligned with ESXi 7.0's supported features and drivers, resolving intermittent network connectivity caused by outdated emulation.

Exam trap

The trap here is that candidates assume the E1000 vNIC is completely unsupported in ESXi 7.0, when in fact it is deprecated but still functional, and the real issue is the VM hardware version not being updated to match the host's capabilities.

How to eliminate wrong answers

Option B is wrong because power cycling the VM resets the vNIC state but does not address the underlying hardware version mismatch; the issue will recur after reboot. Option C is wrong because the E1000 vNIC is still supported in ESXi 7.0, though it is deprecated; VMXNET3 is recommended for performance but not mandatory. Option D is wrong because the E1000 driver is not the root cause—the problem stems from the VM hardware version, not the driver compatibility with ESXi 7.0.

Practice this question →

19

Drag & Dropmedium

Sequence the steps to configure a VM to use a static IP address via vSphere's customization specification.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

The correct sequence ensures that the VM receives the static IP configuration during the first boot after customization. Initiating the customization opens the wizard, selecting or creating a spec defines the settings, configuring IP within the spec sets the static address, applying saves the configuration, and powering on triggers the OS customization process.

Practice this question →

20

MCQeasy

A company has a vSphere cluster of eight ESXi hosts managed by a single vCenter Server. They need to apply a critical security patch to the ESXi hosts with minimal downtime. Which method should the administrator use?

A.Use vMotion to migrate all VMs to one host, apply patch, then move back.

B.Use vSphere vMotion to migrate VMs, then apply patch using CLI on each host.

C.Put each host in maintenance mode and apply the patch via Update Manager.

D.Schedule a host reboot during maintenance window and apply patch via ISO boot.

AnswerC

Correct: Update Manager automates patching with minimal downtime.

Why this answer

VSphere Update Manager (VUM) automates the patching process by placing each host into maintenance mode, migrating VMs via vMotion to other hosts, applying the patch, and then bringing the host back online—all with minimal downtime. This is the recommended method for applying critical security patches to multiple ESXi hosts in a cluster managed by a single vCenter Server.

Exam trap

The trap here is that candidates may think manual vMotion and CLI patching (Option B) is acceptable, but they overlook that Update Manager provides automated, cluster-aware patching with minimal downtime, which is the standard best practice in vSphere environments.

How to eliminate wrong answers

Option A is wrong because manually migrating all VMs to a single host creates a single point of failure and does not leverage the cluster's distributed resources; it also requires manual intervention for each host, which is inefficient and error-prone. Option B is wrong because using vSphere vMotion to migrate VMs and then applying the patch via CLI on each host is not automated and requires the administrator to manually handle maintenance mode and patching, increasing the risk of downtime and misconfiguration. Option D is wrong because scheduling a host reboot during a maintenance window and applying the patch via ISO boot is a disruptive, offline method that causes significant downtime for each host, and it does not use vMotion to migrate VMs, defeating the purpose of minimal downtime.

Practice this question →

21

Multi-Selectmedium

Which TWO capabilities are exclusive to vSphere with Tanzu compared to standard vSphere clusters?

Select 2 answers

A.DRS and HA

B.Tanzu Kubernetes Grid Service

C.Native Kubernetes control plane

D.vMotion

E.vSAN storage policies

AnswersB, C

Creates and manages TKG clusters.

Why this answer

Options B and C are correct. vSphere with Tanzu provides a native Kubernetes control plane and the Tanzu Kubernetes Grid Service for managing Kubernetes workloads, which are not available in standard vSphere clusters. A (DRS and HA) and D (vMotion) are general vSphere features, not exclusive to vSphere with Tanzu. E (vSAN storage policies) is a vSAN capability, not exclusive to vSphere with Tanzu.

Practice this question →

22

Multi-Selecteasy

Which two of the following are valid vSphere licensing tiers for vSphere 7? (Choose two.)

Select 2 answers

A.vSphere Enterprise Plus

B.vSphere Essentials Kit

C.vSphere Platinum

D.vSphere Standard

E.vSphere with Operations Management (vSOM)

AnswersA, D

Correct: vSphere Enterprise Plus is a valid licensing tier for vSphere 7.

Why this answer

Options A and D are correct. The valid vSphere 7 licensing tiers are vSphere Standard and vSphere Enterprise Plus. vSphere with Operations Management (vSOM) is a bundled offering that includes vSphere plus other products, not a standalone vSphere licensing tier. vSphere Essentials Kit (B) is a separate entry-level package, not a standard licensing tier. vSphere Platinum (C) was a tier in earlier versions but is not a standalone tier in vSphere 7; NSX and AppDef are now licensed separately. The third tier in vSphere 7, vSphere with Tanzu, is not listed among the options.

Practice this question →

23

MCQhard

An administrator notices that a virtual machine on an NFS datastore is experiencing intermittent performance degradation. The ESXi hosts are connected to the NFS server via a 10 GbE network. The administrator uses esxtop and sees high average latency on the storage device, but the NFS server reports low latency. What is the most likely cause?

A.Jumbo frames are enabled on the ESXi hosts but not on the NFS server

B.Network congestion is causing TCP retransmissions

C.The NFS server is performing data deduplication on the datastore

D.The NFS datastore is mounted with read-only permissions

AnswerB

Network issues cause retransmissions increasing latency on the client side, while server reports low latency.

Why this answer

When ESXi reports high latency but the NFS server reports low latency, it suggests that the latency is occurring on the network between them. TCP retransmissions caused by network congestion or packet loss can increase latency as seen by ESXi, while the NFS server may complete requests quickly and not observe the delay. Option A is incorrect because jumbo frame misconfiguration would likely cause connectivity issues, not intermittent performance degradation with low server-side latency.

Option C is incorrect because deduplication on the server would affect server-side latency, not cause a discrepancy between ESXi and server latency. Option D is incorrect because read-only permissions would result in write failures, not high latency.

Practice this question →

24

Multi-Selectmedium

Which TWO features are provided by vSphere vDS (Distributed Switch) but not by a standard switch?

Select 2 answers

A.MTU configuration

B.LACP support

C.VLAN support

D.Network I/O Control

E.Port mirroring (NetFlow)

AnswersB, D

LACP support is a feature exclusive to vSphere Distributed Switches, allowing for link aggregation. This is a correct answer.

Why this answer

The correct answers are B and D. LACP support (B) and Network I/O Control (D) are features exclusive to vSphere Distributed Switches. MTU configuration (A) and VLAN support (C) are available on both standard and distributed switches.

Port mirroring (NetFlow) (E) is also a vDS-only feature, but the question specifically asks for TWO features commonly cited in exam objectives; LACP and Network I/O Control are the primary ones.

Practice this question →

25

Matchingmedium

Match each vSphere error/message to its meaning.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

VM is ready to run but waiting for CPU scheduling

VM waiting for memory pages to be swapped in

VM memory reclaimed by vmmemctl driver

Balances storage I/O and space across datastores

All Paths Down - no storage connectivity

Why these pairings

Correct matches: All Paths Down refers to storage path failure; Device or Resource Busy indicates resource contention; Not Enough Resources means insufficient CPU/memory; Permission Denied relates to authorization. Common confusions involve swapping definitions between All Paths Down and Device or Resource Busy, or between All Paths Down and Permission Denied.

Practice this question →

26

Multi-Selecteasy

Which TWO statements are true regarding vMotion requirements?

Select 2 answers

A.Both source and destination ESXi hosts must be licensed for vMotion.

B.The VM's virtual disks must be stored on shared storage.

C.Both hosts must be in the same cluster.

D.The VM must be powered on.

E.Both hosts must be in the same vCenter Server instance.

AnswersA, D

Correct: vMotion is a licensed feature.

Why this answer

VMotion requires both the source and destination ESXi hosts to have a vMotion license. Without this license, the vMotion feature is not enabled on a host, and the migration cannot be initiated. This is a fundamental licensing requirement enforced by vSphere.

Exam trap

The trap here is that candidates often assume shared storage is mandatory for all vMotion operations, but vSphere supports vMotion with local storage by transferring disk data over the network, making option B a common distractor.

Practice this question →

27

MCQeasy

An administrator needs to upgrade the ESXi hosts in a cluster to version 7.0 U3. The administrator uses vSphere Lifecycle Manager (vLCM) with a cluster image. After staging the image on one host, the administrator attempts to remediate that host but gets an error that the host is not compliant. Which is the most likely reason?

A.The host is not in maintenance mode

B.The ESXi version difference between the image and the host is too large

C.The host does not have the required firmware version

D.The vCenter Server service needs to be restarted

AnswerA

Hosts must be in maintenance mode for remediation using cluster images.

Why this answer

When using vLCM with a cluster image, the host must be in maintenance mode before remediation can proceed. vLCM orchestrates the full software stack update, which requires the host to be evacuated of all running VMs to avoid disruption. The error 'host is not compliant' in this context indicates that the host is not in the required state to begin the remediation process, not that the image itself is invalid.

Exam trap

The trap here is that candidates often assume 'not compliant' refers to a mismatch between the image and the host's current software or firmware, when in fact it is a state-based compliance check requiring maintenance mode before any remediation can begin.

How to eliminate wrong answers

Option B is wrong because vLCM supports upgrading across multiple ESXi versions, including from 6.x to 7.0 U3, as long as the image is valid and the host meets the baseline requirements; the error message specifically states 'not compliant' rather than 'incompatible version'. Option C is wrong because firmware version requirements are validated during the compliance check, but a missing firmware version would produce a different error related to hardware compatibility, not a generic 'not compliant' status. Option D is wrong because restarting the vCenter Server service would not resolve a host compliance state issue; vLCM operations are independent of the vCenter service runtime and such a restart would not change the host's maintenance mode status.

Practice this question →

28

MCQhard

An administrator is troubleshooting a performance issue where a VM is not receiving the expected CPU resources. The VM is a member of a resource pool with a CPU Shares value of 2000. The host has two other resource pools: one with 1000 shares and another with 500 shares. All resource pools are competing for CPU. The VM's reservation is set to 2 GHz, and the host has 8 GHz available. What is the minimum CPU allocation the VM is guaranteed?

A.4 GHz (based on share ratio)

B.2 GHz

C.8 GHz (all host CPU)

D.0 GHz (no guarantee without reservation)

AnswerB

The reservation guarantees 2 GHz regardless of other resource pool shares.

Why this answer

The VM's reservation of 2 GHz guarantees that the host will reserve at least that amount of CPU capacity for the VM, regardless of contention or share values. Shares only affect the distribution of excess resources beyond reservations, not the guaranteed minimum. Since the host has 8 GHz available, the reservation is fully satisfiable, so the VM is guaranteed 2 GHz.

Exam trap

The trap here is that candidates often confuse shares with reservations, assuming that a higher share value guarantees more CPU, when in fact only a reservation provides a hard guarantee, and shares only affect the distribution of unused capacity.

How to eliminate wrong answers

Option A is wrong because it incorrectly applies the share ratio (2000:1000:500 = 4:2:1) to the total host CPU, but shares only determine proportional allocation of unreserved resources, not guaranteed minimums. Option C is wrong because a reservation of 2 GHz does not guarantee all 8 GHz of host CPU; the VM is limited to its reservation unless additional resources are available and shares allow it. Option D is wrong because a reservation explicitly provides a guaranteed minimum allocation; without a reservation, the VM would have no guarantee, but here a reservation is set.

Practice this question →

29

MCQhard

An administrator is troubleshooting a VM that is experiencing high latency on its virtual disks. The VM is connected to a vSphere datastore backed by an NFS share. The ESXi host has multiple VMkernel ports configured for NFS traffic. Which configuration change is most likely to improve storage performance?

A.Configure multiple VMkernel ports for NFS and enable port binding with a route based on originating port ID policy.

B.Use a single VMkernel port for NFS and configure it with the highest priority.

C.Enable jumbo frames on the NFS VMkernel port and the physical switches.

D.Increase the disk queue depth on the VM's virtual SCSI controller.

AnswerA

This leverages multiple network paths to improve performance and redundancy.

Why this answer

NFS port binding (also known as NFS multipathing) allows multiple VMkernel ports to be used for NFS traffic, and when combined with a 'route based on originating port ID' load-balancing policy, it enables the ESXi host to distribute NFS I/O across multiple physical NICs and paths. This increases aggregate throughput and reduces latency by avoiding congestion on a single VMkernel port or physical link, which is the most effective change for improving storage performance in this scenario.

Exam trap

The trap here is that candidates often assume jumbo frames (Option C) are the universal fix for storage latency, but they overlook that NFS port binding directly addresses the root cause of network congestion by enabling multipathing, which is the specific technology tested in this VCP-DCV domain.

How to eliminate wrong answers

Option B is wrong because using a single VMkernel port for NFS, even with the highest priority, does not increase bandwidth or reduce latency; it still creates a single point of contention and cannot leverage multiple network paths. Option C is wrong because while jumbo frames can reduce CPU overhead and improve throughput for large transfers, they do not directly address high latency caused by insufficient network parallelism; they also require end-to-end support and may not help if the bottleneck is I/O distribution. Option D is wrong because increasing the disk queue depth on the VM's virtual SCSI controller can increase throughput in some cases, but it does not resolve network-level congestion or path limitations on the NFS datastore; it may even exacerbate latency by queuing more I/O behind a slow network path.

Practice this question →

30

MCQhard

An administrator is planning a vCenter Server deployment for a large environment with 15 ESXi hosts and 300 VMs. The environment requires high availability for vCenter Server. Which deployment topology should the administrator choose?

A.A Windows vCenter Server with a mirrored SQL database.

B.A VCSA configured with vCenter HA (active-passive).

C.A single VCSA with an embedded database.

D.A VCSA deployed with an external Platform Services Controller.

AnswerB

Correct: vCenter HA provides automatic failover.

Why this answer

vCenter HA (active-passive) provides automatic failover for the vCenter Server Appliance.

Practice this question →

31

MCQeasy

An organization wants to migrate a VM from one vCenter Server to another without shutting down the VM. Both vCenter Servers are in Enhanced Linked Mode. Which migration method should the administrator use?

A.Cold migration

B.Cross-vCenter vMotion

C.Storage vMotion

D.Export the VM as OVF and import it to the other vCenter

AnswerB

This enables live migration across vCenter Servers when they are in Enhanced Linked Mode.

Why this answer

Cross-vCenter vMotion (option B) is the correct method because it allows a live, zero-downtime migration of a running VM between vCenter Server instances, even when both are in Enhanced Linked Mode. This feature uses the vMotion protocol to transfer memory and execution state across vCenter boundaries without requiring shared storage, as long as the source and destination hosts are in the same vCenter Single Sign-On domain and meet compatibility requirements.

Exam trap

The trap here is that candidates may confuse Enhanced Linked Mode with the ability to perform any migration between vCenters, but only Cross-vCenter vMotion supports live migration; Storage vMotion and OVF export/import are often incorrectly chosen because they are associated with moving VMs without understanding the vCenter boundary limitation.

How to eliminate wrong answers

Option A is wrong because cold migration requires the VM to be powered off, which contradicts the requirement of not shutting down the VM. Option C is wrong because Storage vMotion only moves the VM's virtual disks between datastores within the same vCenter Server, not between different vCenter Server instances. Option D is wrong because exporting a VM as OVF and importing it to another vCenter Server requires the VM to be powered off (or at least quiesced) and involves significant downtime, not a live migration.

Practice this question →

32

MCQeasy

Which vSphere component is responsible for managing the lifecycle of ESXi hosts, including patching and upgrading?

A.vSphere Lifecycle Manager

B.Host Profiles

C.Auto Deploy

D.vSphere Distributed Resource Scheduler

AnswerA

It manages patching and upgrades for ESXi hosts.

Why this answer

vSphere Lifecycle Manager (vLCM) is the correct component because it is specifically designed to manage the lifecycle of ESXi hosts, including patching, upgrading, and firmware/driver updates. It uses desired-state management to ensure hosts conform to a specified image or baseline, automating the entire update process across clusters.

Exam trap

The trap here is that candidates often confuse Host Profiles (which manage configuration) with lifecycle management, or they think Auto Deploy handles patching because it deploys images, but Auto Deploy is for initial provisioning, not ongoing patching of existing hosts.

How to eliminate wrong answers

Option B (Host Profiles) is wrong because Host Profiles capture and apply host-level configuration settings (e.g., networking, storage) but do not manage patching or upgrading of ESXi software. Option C (Auto Deploy) is wrong because Auto Deploy provisions ESXi hosts from a central image repository using PXE boot, but it does not handle patching or upgrading of already-deployed hosts; it is primarily for stateless or stateful deployment. Option D (vSphere Distributed Resource Scheduler) is wrong because DRS manages workload placement and resource balancing across hosts in a cluster, not host software lifecycle tasks like patching or upgrading.

Practice this question →

33

MCQeasy

A vSphere administrator is designing a new cluster for a mission-critical application that requires maximum availability. The cluster will consist of four ESXi hosts. Which vSphere feature should be enabled to protect against host failures while minimizing resource waste?

A.Enable vSphere DRS and set the migration threshold to the most aggressive setting.

B.Enable vSphere HA and configure admission control to reserve resources for one host failure.

C.Enable vSphere Fault Tolerance on all VMs in the cluster.

D.Configure vSphere Replication for all VMs to replicate to a secondary site.

AnswerB

This provides the required availability while optimizing resource usage.

Why this answer

VSphere HA with admission control configured to reserve resources for one host failure ensures that if a host fails, the VMs can be restarted on the remaining hosts without overcommitting resources. This provides maximum availability for mission-critical applications while minimizing resource waste by only reserving enough capacity for a single host failure, not for multiple or all hosts.

Exam trap

The trap here is that candidates often confuse vSphere HA (which provides host-level failover) with vSphere DRS (which only optimizes resource usage) or assume that Fault Tolerance is the only way to achieve maximum availability, ignoring its massive resource overhead and practical limitations.

How to eliminate wrong answers

Option A is wrong because vSphere DRS is a load-balancing and placement tool, not a high-availability feature; it does not protect against host failures or provide any failover capability. Option C is wrong because vSphere Fault Tolerance provides continuous availability by creating a secondary VM that mirrors the primary, but it requires significant CPU and memory overhead (often 100%+ resource duplication) and is not practical for all VMs in a cluster due to resource waste and compatibility limitations. Option D is wrong because vSphere Replication is a disaster recovery feature that replicates VMs to a secondary site, which protects against site-level failures but does not provide immediate host-level failover within the same cluster and introduces latency and storage overhead.

Practice this question →

34

MCQmedium

An administrator needs to migrate a powered-on VM from one datastore to another without any downtime. Which vSphere feature should be used?

A.Storage DRS

B.Storage vMotion

C.vSphere Replication

D.vSphere vMotion

AnswerB

Migrates VM files with zero downtime.

Why this answer

Storage vMotion allows live migration of VM files while the VM remains powered on. vMotion migrates compute. vSphere Replication is for DR. Storage DRS balances storage but does not directly migrate without downtime.

Practice this question →

35

MCQhard

A financial services company runs a critical trading application on a vSphere 7 cluster with four ESXi hosts. Each host has 512 GB RAM and dual 16-core CPUs. The application is extremely latency-sensitive and runs in a single VM named TRADER-01. The VM currently has 16 vCPUs and 128 GB RAM assigned. The cluster uses vSphere HA and DRS in fully automated mode with aggressive migration threshold. Recently, the application experienced occasional latency spikes. Monitoring shows that these spikes correlate with DRS migrations of other VMs on the same host as TRADER-01. The administrator needs to eliminate these latency spikes without sacrificing application performance. The company has budget constraints and cannot add new hardware. Which action should the administrator take?

A.Disable DRS on the cluster and rely solely on vSphere HA

B.Create a DRS rule to keep TRADER-01 on a single host and set the host as a preferred host for the VM

C.Set the DRS migration threshold to conservative (level 1) to minimize vmotion events

D.Reduce the vCPU count of TRADER-01 to 8 to reduce CPU schedul time

AnswerC

Reducing migration threshold decreases the number of DRS recommendations and actions, reducing latency spikes.

Why this answer

Setting the DRS migration threshold to conservative (level 1) reduces the frequency of vMotion migrations by requiring a higher imbalance score before DRS recommends or executes a migration. This directly addresses the latency spikes caused by DRS migrations of other VMs on the same host as TRADER-01, as fewer vMotion events will occur, while still allowing DRS to balance the cluster when necessary. The aggressive threshold was triggering migrations too readily, causing resource contention and latency for the latency-sensitive VM.

Exam trap

The trap here is that candidates often assume disabling DRS or using a host affinity rule is the best way to isolate a critical VM, but they overlook that DRS migrations of other VMs onto the same host can still cause latency spikes, and the conservative threshold directly reduces the frequency of those migrations without sacrificing overall cluster balance.

How to eliminate wrong answers

Option A is wrong because disabling DRS entirely would eliminate all automated load balancing, potentially leading to uneven resource utilization and performance degradation across the cluster, and it would not prevent latency spikes from other causes like resource contention. Option B is wrong because creating a DRS rule to keep TRADER-01 on a single host and setting that host as preferred does not prevent DRS from migrating other VMs onto that host, which can still cause latency spikes due to resource contention during vMotion or CPU scheduling. Option D is wrong because reducing the vCPU count of TRADER-01 to 8 would likely degrade application performance by limiting its parallel processing capacity, and the latency spikes are caused by DRS migrations of other VMs, not by CPU overcommitment of TRADER-01 itself.

Practice this question →

36

Multi-Selectmedium

Which TWO of the following are characteristics of vSphere High Availability (HA) heartbeat networks? (Choose two.)

Select 2 answers

A.Datastore heartbeats can be used as a secondary heartbeat mechanism.

B.A separate physical network is required for HA heartbeats.

C.The management network is the primary heartbeat network.

D.The default isolation address is the vCenter Server IP address.

E.Heartbeats are sent over the VM network to avoid interference with management traffic.

AnswersA, C

Datastore heartbeats provide an additional layer to detect host failures.

Why this answer

Datastore heartbeats serve as a secondary heartbeat mechanism in vSphere HA. When the primary management network heartbeat fails, the host checks datastore heartbeats to determine whether it is isolated or has suffered a network partition. This prevents unnecessary VM restarts when the management network is temporarily unavailable but the host is still connected to shared storage.

Exam trap

The trap here is that candidates often assume a separate physical network is mandatory for HA heartbeats (Option B) or that the default isolation address is the vCenter Server IP (Option D), when in fact the management network is primary and the default isolation address is the default gateway.

Practice this question →

37

MCQeasy

A small business runs a small vSphere environment with a single ESXi host (Host-A) and a VCSA on a separate host. The company is concerned about single points of failure for the ESXi host. They have a budget to purchase a second identical ESXi host (Host-B) and want to ensure that VMs can be restarted automatically if Host-A fails. They also want to be able to perform maintenance on Host-A without VM downtime. They have a shared storage array (iSCSI) that both hosts can access. The administrator decides to create a vSphere cluster with HA and DRS. However, after adding both hosts to the cluster and enabling HA, the administrator notices that the cluster does not have a shared datastore accessible by both hosts that serves as the HA heartbeat. Which action should the administrator take to enable HA?

A.Install a second vCenter Server to provide redundancy

B.Create a VMFS datastore on each host's local storage and enable HA

C.Deploy a vSAN cluster using local disks on both hosts

D.Configure the existing iSCSI datastore as a heartbeat datastore for HA

AnswerD

The iSCSI datastore is shared; HA can use it for heartbeat signaling.

Why this answer

The administrator needs to enable HA in the cluster. The issue is that the cluster lacks a shared datastore that can serve as the HA heartbeat. The existing iSCSI storage is shared between both hosts.

In vSphere HA, datastore heartbeats are used in addition to network heartbeats to detect host failures. By configuring the existing iSCSI datastore as a heartbeat datastore, HA can function properly. Option A is incorrect because a second vCenter Server does not provide HA heartbeat functionality and is unnecessary for this issue.

Option B is incorrect because local VMFS datastores are not shared, so they cannot be used for HA heartbeats. Option C is incorrect because vSAN would require additional licensing and configuration, and the question already states there is shared iSCSI storage available. Therefore, the correct action is to configure the existing iSCSI datastore as a heartbeat datastore for HA.

Practice this question →

38

Multi-Selecthard

Which THREE components are part of a vSAN cluster?

Select 3 answers

A.vSAN datastore

B.vSAN network

C.vSAN witness host

D.ESXi hosts

E.vCenter Server

AnswersA, B, D

Correct: The datastore is the aggregated storage.

Why this answer

A vSAN datastore is a core component of a vSAN cluster because it is the aggregated, distributed storage object created from the local disks of the ESXi hosts in the cluster. This datastore is what VMs use for storage, and it is built and managed by the vSAN layer, making it an integral part of the cluster's architecture.

Exam trap

The trap here is that candidates often mistake vCenter Server as a required component of a vSAN cluster, but vCenter Server is only needed for management and initial configuration, not for the cluster's ongoing operation or data plane functionality.

Practice this question →

39

MCQmedium

A company's vSphere environment consists of four ESXi hosts, each with two 10 GbE physical NICs. The administrator configures a VDS with two dvUplinks and uses load-balancing policy 'Route based on IP hash'. To use IP hash, what additional configuration is required on the physical switches?

A.Enable VLAN trunking on the switch ports

B.Configure LACP on the VDS uplink port groups

C.Configure link aggregation (LACP or static EtherChannel) on the switch ports

D.Enable IGMP snooping on the switch

AnswerC

IP hash load balancing requires an aggregated link on the physical switch side.

Why this answer

IP hash requires link aggregation (either LACP or static EtherChannel) to be configured on the physical switch ports to ensure proper hashing and load balancing. Option A is incorrect because VLAN trunking is a separate configuration and not directly required for IP hash. Option B is incorrect because configuring LACP on the VDS uplink port groups is optional and not mandatory for IP hash; the necessary link aggregation must be done on the physical switches.

Option D is incorrect because IGMP snooping is used for managing multicast traffic and is not related to IP hash load balancing.

Practice this question →

40

Multi-Selecthard

Which THREE parameters are considered by vSphere DRS when generating initial placement recommendations for a new VM?

Select 3 answers

A.Storage I/O latency

B.Host network utilization

C.Host memory load

D.Host CPU load

E.VM power state

AnswersB, C, D

DRS can consider network metrics.

Why this answer

Options B, C, and D are correct. When generating initial placement recommendations for a new VM, vSphere DRS considers host CPU load, host memory load, and host network utilization. Storage I/O latency (option A) is not considered by DRS but by Storage DRS.

VM power state (option E) is not a parameter for placement.

Practice this question →

41

MCQmedium

A vSphere administrator is planning to deploy a vCenter Server Appliance (VCSA) with an embedded Platform Services Controller (PSC). The company policy requires that all vCenter services be highly available. Which deployment topology should the administrator choose?

A.Deploy a single VCSA with embedded PSC on a standalone host.

B.Deploy a VCSA with an external PSC, and install the PSC on a separate VM.

C.Deploy a VCSA with embedded PSC on a cluster with vSphere HA enabled.

D.Deploy two VCSAs in separate vCenter Single Sign-On domains and configure multi-site.

AnswerC

vSphere HA restarts the VCSA if the host fails, providing high availability.

Why this answer

Deploying a VCSA with an embedded PSC on a cluster with vSphere HA enabled ensures that if the ESXi host running the VCSA fails, the VCSA is automatically restarted on another host in the cluster, providing high availability for all vCenter services. The embedded PSC topology is fully supported with vSphere HA, and this approach meets the policy requirement without the complexity of external PSCs or multi-site configurations.

Exam trap

The trap here is that candidates often confuse high availability (HA) with fault tolerance or disaster recovery, leading them to choose multi-site or external PSC options, but vSphere HA on a cluster is the simplest and correct method to achieve high availability for a single VCSA with embedded PSC.

How to eliminate wrong answers

Option A is wrong because a single VCSA on a standalone host provides no redundancy; if the host fails, the VCSA and all vCenter services become unavailable, violating the high availability requirement. Option B is wrong because deploying a VCSA with an external PSC does not inherently provide high availability for the vCenter services; it only separates authentication services, and the VCSA itself remains a single point of failure unless additional clustering (e.g., vSphere HA) is applied. Option D is wrong because deploying two VCSAs in separate vCenter Single Sign-On domains with multi-site is designed for disaster recovery across sites, not for high availability within a single site, and it introduces domain isolation that prevents unified management.

Practice this question →

42

MCQeasy

An administrator needs to migrate a running VM from one datastore to another without any downtime. Which vSphere feature allows this?

A.Cross vCenter vMotion

B.Storage vMotion

C.Storage DRS

D.vMotion

AnswerB

Correct: Storage vMotion moves virtual disks live.

Why this answer

Storage vMotion migrates VM storage while the VM is running, with no downtime.

Practice this question →

43

MCQmedium

A company uses Linked Mode vCenter Servers across two data centers. One of the links fails. What happens to the management capabilities?

A.Both vCenter Servers become unavailable.

B.Each vCenter Server can manage its own inventory, but cross-datacenter tasks fail.

C.One vCenter Server takes over management of both data centers.

D.vSphere HA on both clusters reactivates the link.

AnswerB

Linked Mode allows independence; only cross-datacenter features are impacted.

Why this answer

In a Linked Mode configuration, each vCenter Server operates independently but shares licensing, roles, and permissions across the group. When the link fails, each vCenter Server retains full management capability over its own inventory, but cross-datacenter operations—such as moving a VM between clusters managed by different vCenter Servers—fail because the inter-vCenter communication channel is unavailable.

Exam trap

The trap here is that candidates often confuse Linked Mode with Enhanced Linked Mode or assume a single point of failure, when in fact each vCenter Server remains fully functional for its own domain even if the replication link goes down.

How to eliminate wrong answers

Option A is wrong because Linked Mode vCenter Servers are designed to operate independently; a link failure does not cause both servers to become unavailable—each continues to manage its own inventory. Option C is wrong because there is no automatic failover or takeover mechanism in Linked Mode; each vCenter Server remains responsible for its own data center and cannot assume management of the other. Option D is wrong because vSphere HA is a host-level availability feature that reacts to host failures, not to network link failures between vCenter Servers; it cannot reactivate a failed inter-vCenter link.

Practice this question →

44

Multi-Selectmedium

Which two of the following are required to deploy a vSphere cluster with vSphere HA and DRS? (Choose two.)

Select 2 answers

A.Clock synchronization across all hosts (NTP)

B.A minimum of two vCenter Server instances

C.Network connectivity between hosts for management traffic

D.An active Directory service for authentication

E.Shared storage accessible by all hosts in the cluster

AnswersA, C

HA and DRS require synchronized time for proper operation.

Why this answer

Options A and C are correct. Clock synchronization (NTP) is required for vSphere HA master election and DRS recommendation consistency. Network connectivity for management traffic is required for host communication and vCenter management.

Option B is incorrect because a single vCenter Server can manage both HA and DRS. Option D is incorrect because Active Directory is optional. Option E is incorrect because shared storage is not a prerequisite for HA or DRS; HA can use datastore heartbeats on any accessible storage, and DRS works with or without shared storage.

Practice this question →

45

MCQeasy

A rapidly growing company currently uses vSphere 7 Standard Edition across two data centers connected via a high-latency link. They plan to implement a vSAN stretched cluster to provide a unified storage solution and enable automatic failover between sites. The cluster must support VM-level encryption at rest and in transit, as well as intelligent capacity management with deduplication and compression. The budget is strictly allocated to a per-CPU licensing model. Which vSAN edition should the company select to meet all requirements while minimizing costs?

A.vSAN Enterprise

B.vSAN Starter

C.vSAN Advanced

D.vSAN Standard

AnswerA

vSAN Enterprise includes all required features: stretched clusters, encryption, deduplication/compression, and intelligent capacity management.

Why this answer

vSAN Enterprise is the only edition that includes all required features: stretched cluster support, VM-level encryption at rest and in transit, and deduplication and compression. It also supports per-CPU licensing, aligning with the budget constraint. vSAN Advanced and Standard lack encryption at rest and in transit, while vSAN Starter does not support stretched clusters or deduplication/compression.

Exam trap

The trap here is that candidates often assume vSAN Advanced includes encryption because it supports vSphere encryption, but VM-level encryption at rest and in transit is exclusive to vSAN Enterprise.

How to eliminate wrong answers

Option B (vSAN Starter) is wrong because it does not support stretched clusters, deduplication/compression, or encryption at rest/in transit; it is intended for ROBO or small deployments. Option C (vSAN Advanced) is wrong because it lacks encryption at rest and in transit, which are required for the VM-level encryption needs. Option D (vSAN Standard) is wrong because it does not include encryption at rest or in transit, and it does not support stretched clusters or deduplication/compression.

Practice this question →

46

MCQmedium

An administrator configures DRS on a cluster with two hosts. The administrator wants to ensure that two critical VMs (VM1 and VM2) always run on separate hosts. Which rule type should the administrator create?

A.Separate Virtual Machines

B.Virtual Machines to Hosts (Should run)

C.Keep Virtual Machines Together

D.Virtual Machines to Hosts (Must not run)

AnswerA

This rule ensures VMs are on different hosts.

Why this answer

The 'Separate Virtual Machines' rule (option A) is correct because it explicitly instructs DRS to place VM1 and VM2 on different ESXi hosts, ensuring host-level isolation for availability. This rule type enforces an anti-affinity constraint that DRS respects during initial placement and subsequent load-balancing migrations, preventing both VMs from running on the same host simultaneously.

Exam trap

The trap here is that candidates often confuse 'Separate Virtual Machines' (anti-affinity between VMs) with 'Virtual Machines to Hosts – Must not run' (anti-affinity between VMs and specific hosts), leading them to select the wrong rule type for VM-to-VM separation.

How to eliminate wrong answers

Option B (Virtual Machines to Hosts – Should run) is wrong because it defines an affinity rule that attempts to keep VMs on a specified set of hosts, not separate them; it does not enforce separation between two VMs. Option C (Keep Virtual Machines Together) is wrong because it creates an affinity rule that forces the VMs to run on the same host, which is the opposite of the desired separation. Option D (Virtual Machines to Hosts – Must not run) is wrong because it restricts VMs from running on specific hosts, not from running on the same host as another VM; it addresses host-level prohibition, not VM-to-VM separation.

Practice this question →

47

MCQeasy

What is the maximum number of ESXi hosts that can be managed by a single vCenter Server instance in vSphere 8 (standard domain)?

A.1000

B.500

C.4000

D.2000

AnswerD

vCenter Server 8 supports up to 2000 hosts per instance.

Why this answer

In vSphere 8, a single vCenter Server instance can manage up to 2000 ESXi hosts in the standard domain. Option A (1000) is the limit for vCenter Server 7.x and earlier.

Option B (500) is not the correct limit for any recent version. Option C (4000) is the limit for hosts in a linked mode group but not for a single instance.

Practice this question →

48

MCQhard

An administrator attempts to vMotion a powered-on VM from ESXi host A to host B. The vMotion fails with the error: 'the destination host does not have access to the virtual machine's network'. The VM is connected to a standard switch on host A with a VLAN ID 100. Host B is connected to a VDS that also has a portgroup with VLAN ID 100. What is the most likely cause?

A.The VM is using a standard switch while host B uses a VDS

B.The VM is connected to a network that is not present on the destination host

C.Host B does not have the correct MTU set

D.Host B does not have the correct VLAN configuration

AnswerA

vMotion requires the source and destination to have the same network label; standard and VDS are different.

Why this answer

The error 'the destination host does not have access to the virtual machine's network' occurs because vMotion requires network compatibility between source and destination hosts. Since the VM is connected to a standard switch on host A, but host B only has a VDS with a similarly named portgroup, the vMotion fails because standard switches and VDS are separate network constructs and cannot be directly mapped during a vMotion operation. The VLAN ID being identical is irrelevant because the network object types (standard vs. distributed) must match for the migration to succeed.

Exam trap

The trap here is that candidates assume matching VLAN IDs alone ensure network compatibility, overlooking that vMotion requires identical network switch types (standard-to-standard or VDS-to-VDS) for the migration to proceed.

How to eliminate wrong answers

Option B is wrong because the network (VLAN 100) is present on the destination host via the VDS portgroup, so the issue is not the absence of the network but the mismatch of switch types. Option C is wrong because an MTU mismatch would typically cause connectivity issues or performance degradation, not a specific error about network access during vMotion. Option D is wrong because the VLAN configuration on host B is correct (VLAN ID 100), so the problem is not a VLAN misconfiguration but the switch type incompatibility.

Practice this question →

49

MCQmedium

A financial services firm maintains a multi-site vSphere environment with independent vCenter Server systems in New York and London, each managing approximately 200 virtual machines. The company requires a disaster recovery solution that can orchestrate failover of an entire site with automated IP address changes and integrated testing capabilities. They also need centralized management and the ability to attach the recovery site's vCenter to the same vCenter Single Sign-On domain as the protected site. The current vCenter versions are 7.0 Update 3. Which solution best meets these requirements while adhering to VMware best practices?

A.Implement a vSAN stretched cluster across both data centers and enable proactive HA policies.

B.Deploy vCenter Site Recovery (SRM) paired with vSphere Replication, and use Enhanced Linked Mode to connect the vCenter systems.

C.Configure vCloud Availability for vCloud Director to replicate VMs between sites.

D.Use vCenter High Availability (VCHA) to protect the vCenter Server and rely on vSphere HA for VMs.

AnswerB

SRM provides orchestrated failover, IP customization, and testing; Enhanced Linked Mode allows centralized management and a single SSO domain.

Why this answer

VMware Site Recovery Manager (SRM) with vSphere Replication provides orchestrated disaster recovery with automated IP address changes and integrated testing capabilities. Enhanced Linked Mode allows both vCenter Server systems to share the same vCenter Single Sign-On domain, meeting the centralized management requirement. This combination is the VMware best-practice solution for multi-site failover with independent vCenter Servers.

Exam trap

The trap here is that candidates often confuse vSphere HA with site-level disaster recovery, overlooking that SRM is specifically designed for orchestrated failover with automated IP changes and testing, while vSphere HA only handles host-level failures within a single cluster.

How to eliminate wrong answers

Option A is wrong because a vSAN stretched cluster requires a single vCenter Server managing both sites and does not support independent vCenter Server systems; it also lacks orchestrated failover with automated IP changes and integrated testing. Option C is wrong because vCloud Availability for vCloud Director is designed for service providers and multi-tenant environments, not for a financial firm's private vSphere deployment with independent vCenter Servers; it does not provide the required SRM-level orchestration or Enhanced Linked Mode integration. Option D is wrong because vCenter High Availability (VCHA) only protects the vCenter Server appliance itself, not the virtual machines, and vSphere HA alone cannot orchestrate site-level failover with automated IP changes or provide integrated testing capabilities.

Practice this question →

50

MCQhard

Refer to the exhibit. An administrator runs the vmkfstools command on a VMFS datastore. Which information can be derived from the output?

A.The datastore ID is the file system UUID.

B.The datastore is formatted with VMFS version 6.82.

C.The datastore supports ESXi 6.5 and later.

D.The datastore has 1 TB capacity.

AnswerA

Correct: The UUID is displayed.

Why this answer

The output shows the file system UUID directly.

Practice this question →

51

Multi-Selecthard

Which THREE components are required to implement vSphere with Tanzu (Workload Management)? (Choose three.)

Select 3 answers

A.A separate vCenter Server for Tanzu management

B.A vSphere Distributed Switch (vDS)

C.NSX-T Data Center for networking

D.A vSphere cluster with vSphere DRS enabled

E.Shared storage accessible by all ESXi hosts in the cluster

AnswersB, D, E

vDS is required for Tanzu networking.

Why this answer

A vSphere Distributed Switch (vDS) is required for vSphere with Tanzu because it provides the centralized management and network segmentation needed for Kubernetes workloads. The vDS enables features like Network I/O Control and port groups that are essential for the NSX-T integration and the overlay networks used by Tanzu clusters. Without a vDS, the required network isolation and policy enforcement for pods and services cannot be achieved.

Exam trap

The trap here is that candidates often assume NSX-T is mandatory for vSphere with Tanzu, but the exam tests that a vDS is the minimum networking requirement, with NSX-T being an optional but recommended component for advanced networking features.

Practice this question →

52

MCQhard

An organization has a vSphere 7.0 environment with three ESXi hosts (Host A, B, C) in a cluster. Each host has 256 GB of RAM and 2 sockets with 16 cores each. The cluster hosts 50 VMs with varying resource requirements. The administrator enabled vSphere DRS and set the migration threshold to 3 (conservative). Recently, the administrator noticed that Host A's memory usage averages 90%, while Host B and C average 50%. The administrator wants to balance the memory load without causing unnecessary vMotion migrations. The VMs on Host A are critical, and the administrator wants to avoid manually migrating them. The cluster has vSphere HA enabled with admission control set to reserve resources for one host failure. The administrator decides to adjust DRS settings. Which course of action should the administrator take to improve memory load balancing while minimizing migrations?

A.Decrease the DRS migration threshold to level 1 to minimize migrations.

B.Increase the DRS migration threshold to a more aggressive setting (e.g., level 4 or 5) to encourage more migrations for load balancing.

C.Create an affinity rule to keep VMs on Host A, as they are critical.

D.Disable DRS and manually migrate VMs from Host A to Host B and C during a maintenance window.

AnswerB

A more aggressive threshold will cause DRS to recommend more migrations to balance memory.

Why this answer

Increasing the DRS migration threshold to a more aggressive setting (e.g., level 4 or 5) will cause DRS to generate more frequent and stronger recommendations for vMotion migrations, actively balancing the memory load across the cluster. Since Host A's memory usage is at 90% and the other hosts are at 50%, a higher threshold will trigger migrations to relieve the imbalance without manual intervention, while still respecting the conservative starting point (level 3). This aligns with the administrator's goal of improving load balancing without manually migrating critical VMs.

Exam trap

The trap here is that candidates often confuse 'conservative' with 'better for stability' and choose to lower the threshold (Option A), not realizing that a higher threshold (more aggressive) is needed to actively correct an existing imbalance, while a lower threshold only reduces unnecessary migrations when the cluster is already balanced.

How to eliminate wrong answers

Option A is wrong because decreasing the DRS migration threshold to level 1 (most conservative) would make DRS even less likely to recommend migrations, worsening the memory imbalance rather than improving it. Option C is wrong because creating an affinity rule to keep VMs on Host A would explicitly prevent vMotion migrations away from the overloaded host, directly counteracting the goal of balancing memory load. Option D is wrong because disabling DRS and manually migrating VMs during a maintenance window contradicts the requirement to avoid manual migrations and would also disrupt critical VMs, whereas DRS can perform automated, non-disruptive vMotion migrations.

Practice this question →

53

MCQhard

A vSAN cluster uses a storage policy with FTT=2 (RAID-6). Each object is 256 GB. What is the minimum usable capacity required to store 10 such objects, accounting for overhead?

A.5.12 TB

B.2.56 TB

C.6.4 TB

D.10.24 TB

AnswerC

RAID-6 with overhead gives approximately 6.4 TB usable.

Why this answer

FTT=2 RAID-6 requires 3 copies (data + 2 parity). For 256 GB objects, total raw capacity per object = 768 GB. For 10 objects, raw = 7680 GB.

With default overhead (~1.2x), usable is about 6.4 TB. Option A ignores overhead, B underestimates, D overestimates.

Practice this question →

54

MCQeasy

Refer to the exhibit. An ESXi 7.0 host is being configured for vSphere Trust Authority. The administrator runs the command shown and gets the output. What does this indicate?

A.The TPM 2.0 device is present but not accessible.

B.The command is incorrect; the correct command is 'esxcli system visorfs tpm list'.

C.The host does not have a TPM 2.0 chip, so vSphere Trust Authority cannot be used.

D.The host has a TPM 2.0 chip but it is not supported by ESXi.

AnswerC

Correct: TPM 2.0 is required.

Why this answer

The output shows 'No TPM device found', which indicates that the ESXi 7.0 host does not have a TPM 2.0 chip installed or it is not detected by the system. vSphere Trust Authority (vTA) requires a TPM 2.0 chip on each ESXi host to establish hardware-based attestation and secure the trusted infrastructure. Without a TPM 2.0, the host cannot participate in vTA, making option C correct.

Exam trap

The trap here is that candidates may confuse the absence of a TPM with a misconfiguration or an incorrect command, when in fact the output clearly indicates the hardware requirement is not met, and vTA cannot be enabled without a physical TPM 2.0 chip.

How to eliminate wrong answers

Option A is wrong because the output explicitly states 'No TPM device found', not that the TPM is present but inaccessible; an inaccessible TPM would typically show a different error or status. Option B is wrong because the command 'esxcli system visorfs tpm list' is not a valid ESXi command; the correct command to list TPM devices is 'esxcli hardware tpm list' (or similar), and the command shown in the exhibit is actually correct for checking TPM presence. Option D is wrong because if the host had a TPM 2.0 chip that was unsupported by ESXi, the output would likely indicate an unsupported version or a compatibility issue, not 'No TPM device found'.

Practice this question →

55

MCQmedium

A managed service provider manages multiple vSphere environments for various customers. One customer's cluster consists of 6 ESXi hosts (3 pairs of identical hardware) and uses vSAN as shared storage. The cluster runs over 100 VMs with varying workloads. The administrator notices that a specific host (Host-C) is using significantly more storage capacity than its peers, even though it hosts a similar number of VMs. The administrator suspects the vSAN storage policies are not configured optimally. Upon investigation, the administrator finds that all VMs use the default vSAN policy with 'RAID-0 (Striping) - No failure tolerance' and 'Object space reservation' set to 100%. Which change would most evenly distribute storage consumption across all hosts?

A.Increase 'Object space reservation' to 200%?

B.Change the policy to 'RAID-5/6 (Erasure Coding)' to reduce capacity overhead

C.Enable deduplication and compression on the vSAN datastore

D.Set 'Number of failures to tolerate' to 1 (mirroring)

AnswerD

Mirroring creates a second replica on another host, distributing capacity more evenly.

Why this answer

The current default policy ('RAID-0 (Striping) - No failure tolerance') with Object space reservation at 100% implies a failure tolerance of 0, meaning each VM's objects are stored on a single host. This can lead to uneven capacity distribution if many VMs are placed on Host-C. Setting 'Number of failures to tolerate' to 1 (Option D) enables RAID-1 mirroring, which creates two copies of each object on different hosts.

This forces the data to be distributed across at least two hosts, balancing storage consumption. Option A (increasing reservation) does not affect placement. Option B (RAID-5/6) reduces overhead but still uses a single copy per stripe, not ensuring distribution.

Option C (deduplication/compression) reduces total capacity used but does not change where data is stored; the uneven distribution remains.

Practice this question →

56

MCQmedium

A company experiences frequent host failures. The cluster has 5 hosts with 128 GB RAM each. The VMs have vCPU and memory reservations ranging from 1 GHz/512 MB to 4 GHz/8 GB. The administrator needs to ensure that if one host fails, the remaining hosts can accommodate all VMs. Which admission control policy is recommended?

A.Define slot sizes based on the largest VM.

B.Use cluster resource percentage - reserve 20% CPU and memory.

C.Disable admission control and rely on DRS.

D.Use cluster resource percentage - reserve 25% CPU and memory.

AnswerB

20% (1/5) ensures one host failure is tolerated efficiently.

Why this answer

Percentage-based admission control with 20% reserve (equivalent to 1 out of 5 hosts) provides headroom for a single host failure while minimizing wasted capacity. For mixed VM sizes, slot-based admission control (Option A) can be inefficient due to varying reservation sizes. Disabling admission control (Option C) risks resource shortages during a failure.

Option D reserves 25%, which is more than necessary and wastes resources.

Practice this question →

57

MCQmedium

A company has a vSphere environment with multiple clusters. The network team reports that a specific VLAN used for vMotion is intermittently dropping packets. What is the impact on vMotion operations?

A.vMotion will use the management network as fallback.

B.vMotion will fail with an error.

C.vMotion will work but at a reduced speed.

D.vMotion will automatically switch to another available network.

AnswerB

Correct: Packet loss causes vMotion failure.

Why this answer

If the dedicated vMotion network drops packets, vMotion will fail unless an alternate network is configured.

Practice this question →

58

MCQhard

An administrator creates a DRS rule to separate two VMs (VM1 and VM2) using a 'Should' rule (separate VMs). After the rule is created, VM1 is manually vMotioned to a host that already runs VM2. What is the expected behavior?

A.VM1 remains on the host and a compliance violation is logged.

B.DRS automatically migrates VM1 to a compliant host.

C.The target host is placed into maintenance mode.

D.VM1 is powered off to prevent performance issues.

AnswerA

'Should' rules allow the violation and log it.

Why this answer

With a 'Should' rule (separate VMs), DRS does not enforce the rule; it only logs a compliance violation if VMs run on the same host. Manual vMotion overrides DRS, so VM1 will remain on the host with VM2 and a violation is logged. Option A correctly describes this behavior. 'Must' rules would enforce separation, but 'Should' rules are advisory only.

Practice this question →

Ready to test yourself?

Try a timed practice session using only Vsphere Architecture questions.

Start 20-question session