Courseiva

VMware vSphere Foundation 9.0 Administrator (VCP-VVF, 2V0-16.25) (VCP-VVF) (VCP-VVF) — Questions 175

517 questions total · 7pages · All types, answers revealed

Page 1 of 7

Page 2
1
MCQmedium

An administrator is configuring a Resource Pool hierarchy in a vSphere Foundation cluster. A child resource pool is set to 'Expandable Reservation'. When does this setting take effect during resource contention?

A.When the parent resource pool runs out of physical memory and triggers vSphere HA.
B.When the child resource pool exhausts its own reservation and the parent has unreserved resources available.
C.When virtual machines inside the child pool are powered off.
D.When Storage DRS initiates a datastore migration.
AnswerB

Child pools can borrow from parents when Expandable Reservation is enabled and contention occurs.

Why this answer

Expandable Reservation allows a child resource pool to borrow unreserved resources from its parent resource pool when its own reservation is exhausted.

2
MCQeasy

An administrator notices that a virtual machine has been orphaned in the vSphere inventory. What does it mean when a VM becomes 'orphaned'?

A.The VM has been successfully migrated to a public cloud provider.
B.The virtual machine is still listed in vCenter inventory, but the ESXi host running it no longer acknowledges or manages its existence.
C.The virtual machine's virtual disk files have been permanently deleted from the datastore.
D.The VM's operating system license has expired and locked the VM out of the cluster.
AnswerB

Orphaned VMs occur when vCenter loses track of the host-level registration, often after host disconnection, removal, or manual datastore manipulation.

Why this answer

An orphaned VM is registered in the vCenter inventory, but the ESXi host managing it no longer recognizes it or the host itself has been removed/re-added without proper state synchronization, typically occurring after a host is removed from the cluster or storage registration is lost.

3
MCQhard

An administrator needs to modify the 'vpxd' log level to debug a specific issue. Where is this configuration located?

A./etc/vmware/vpxd.conf
B.esxcli system log set
C.vSphere Client > Administration > Logging
D.VAMI > Services > vCenter Server
AnswerD

Log levels can be configured here for the vpxd process.

Why this answer

The vCenter Server Appliance Management Interface (VAMI) allows changing log levels for services like vpxd.

4
MCQmedium

An administrator is configuring vSphere HA admission control in a cluster using the 'Percentage of cluster resources reserved' policy. The cluster has 4 hosts with identical capacity, and the administrator sets the failure tolerance to 1 host (FTT = 1). What percentage should the administrator configure for CPU and memory reserves?

A.25 percent
B.100 percent
C.50 percent
D.20 percent
AnswerA

1 out of 4 identical hosts represents 25% of total cluster capacity.

Why this answer

To tolerate 1 host failure in a 4-host cluster of identical hosts, 25% of compute resources must be reserved (1 out of 4 hosts = 25%).

5
MCQhard

An ESXi 9.0 host in a vSphere cluster experiences a purple diagnostic screen (PSOD). Where should the administrator navigate in vSphere Client or use via CLI to locate the core dump file for analysis by VMware Support?

A.Open Aria Operations and download the 'Host Crash Archive' report from the administration tab.
B.Navigate to the VMFS datastore root folder and open the 'vmware-psod.log' text file.
C.Generate a support bundle from the vSphere Client or examine the configured diagnostic partition / scratch partition using 'esxcli system coredump file get'.
D.Log into the vCenter Server appliance shell and check '/var/log/vmware/vpxd/psod/' directory.
AnswerC

The core dump file can be retrieved or configured via the esxcli system coredump namespace, and a full support bundle collects recent logs and dump summaries.

Why this answer

ESXi stores VMkernel core dumps either locally or configured via esxcli system coredump. By default, host core dumps are directed to a shared scratch/core location or a local diagnostic partition. Administrators can also check vCenter events or retrieve logs via the vSphere Client support bundle generator.

6
Multi-Selecthard

When utilizing vSphere Lifecycle Manager (vLCM) to manage a cluster, which THREE tasks can be performed to maintain ESXi hosts?

Select 3 answers
A.Managing firmware updates via integration with hardware support managers
B.Deploying virtual machines to the cluster
C.Installing vendor-provided hardware support packages (add-ons)
D.Configuring Distributed Switch uplinks manually
E.Applying a desired image to all hosts in the cluster
AnswersA, C, E

vLCM supports firmware orchestration via hardware managers.

Why this answer

vLCM handles image management, vendor add-ons, and firmware integration.

7
MCQmedium

An enterprise architect is designing a backup and recovery standard for a vSphere Foundation 9.0 environment. Which technology should be integrated with vCenter Server to enable efficient, crash-consistent or application-consistent virtual machine snapshots without placing heavy processing loads on the ESXi host CPU?

A.Network I/O Control bandwidth throttling shares.
B.Fault Tolerance continuous replication logs.
C.Storage DRS inter-datastore cloning.
D.vSphere APIs for Data Protection (VADP) utilizing Changed Block Tracking (CBT).
AnswerD

Correct. VADP and CBT enable efficient external backup operations by tracking changed disk blocks.

Why this answer

vSphere APIs for Data Protection (VADP) allow backup vendors to offload snapshot creation and data transport using Changed Block Tracking (CBT).

8
MCQhard

An administrator is managing a vSphere cluster with strict licensing compliance rules. A specific virtual machine must be restricted to run on only two designated ESXi hosts out of a six-host cluster. Which construct should the administrator configure?

A.A storage DRS anti-affinity rule on the virtual machine disks.
B.A DRS resource pool share allocation set to restrict CPU scheduling.
C.An Enhanced vMotion Compatibility (EVC) baseline targeting those two hosts.
D.A VM-Host affinity rule specifying a Host Group containing the two designated hosts.
AnswerD

Affinity rules combined with Host Groups enforce strict placement constraints.

Why this answer

Virtual Machine-to-Host affinity rules (using 'Should run on' or 'Must run on' rules with datastores or host groups) restrict VM placement to specific hosts.

9
Multi-Selectmedium

An administrator is managing user permissions in vSphere Foundation 9.0. Which TWO practices are recommended when assigning roles and permissions? (Choose two)

Select 2 answers
A.Assign permissions to Active Directory/OpenID groups rather than individual user accounts.
B.Assign permissions to individual users at the virtual machine level for every single VM.
C.Modify the built-in Administrator role directly to add custom security auditing privileges.
D.Assign roles at the highest logical inventory level (such as datacenter or folder) to leverage inheritance.
E.Grant all developers the global Administrator role to ensure zero operational friction.
AnswersA, D

Using groups simplifies access management when personnel change.

Why this answer

Best practices for RBAC include assigning permissions to Active Directory groups rather than individual users, and assigning roles at the highest appropriate inventory level to minimize management overhead.

10
MCQmedium

An administrator is planning the storage architecture for a vSphere Foundation 9.0 cluster utilizing external NFS version 4.1 datastores. What is a key architectural advantage of NFS 4.1 compared to NFSv3 in vSphere?

A.Mandatory integration with Fibre Channel zoning tables.
B.Native multipathing support built into the NFS 4.1 client for load balancing and path failover.
C.Automatic conversion of file shares into block-level VMFS datastores at the hypervisor layer.
D.Elimination of IP address requirements by using MAC-layer bridging.
AnswerB

Correct. NFS 4.1 supports native session multipathing, improving resilience and throughput compared to NFSv3.

Why this answer

NFS 4.1 adds native multipathing support (SESSION trunking/multipathing) directly within the ESXi client, whereas NFSv3 relied on multiple mount points or third-party workarounds for multipathing.

11
MCQmedium

An administrator is configuring vCenter Server Identity Provider settings in vSphere Foundation 9.0. They receive an error stating that the metadata XML file provided by the external IdP cannot be parsed. What is the most likely cause?

A.The vCenter Server has insufficient disk space in the root partition.
B.The ESXi hosts are running an outdated build of vSphere 8.0.
C.The IdP metadata XML contains malformed XML syntax or an unsupported SAML schema declaration.
D.The NTP time synchronization offset between vCenter and the IdP exceeds 3 seconds.
AnswerC

Malformed XML or schema mismatches prevent vCenter from successfully parsing the identity provider metadata.

Why this answer

Metadata XML files from identity providers must strictly adhere to SAML 2.0 metadata schemas. Formatting issues, expired certificates within the metadata, or incomplete XML tags lead to parsing failures.

12
Multi-Selecthard

An administrator is troubleshooting a storage connectivity failure on an ESXi host utilizing software iSCSI. Which THREE configurations or troubleshooting steps are required to ensure correct iSCSI multipathing and connectivity? (Choose three.)

Select 3 answers
A.Configure Enhanced vMotion Compatibility (EVC) on the iSCSI target array.
B.Ensure that physical switch ports and ESXi uplinks support multipathing and that no firewall rules block iSCSI TCP port 3260.
C.Ensure that all iSCSI datastores are formatted with FAT32 to maximize block allocation speed.
D.Verify that VMkernel port binding is correctly configured between the software iSCSI adapter and the dedicated IP storage VMkernel adapters.
E.Check that the iSCSI dynamic or static discovery target IP addresses are correctly entered and reachable via ping/vmkping.
AnswersB, D, E

iSCSI communicates over TCP port 3260; blocking firewalls or switch misconfigurations break session establishment.

Why this answer

Software iSCSI best practices require binding VMkernel ports to the iSCSI software adapter (port binding), configuring multiple active physical NICs for multipathing, ensuring correct target discovery IP addresses, and verifying CHAP authentication if applicable.

13
MCQeasy

An administrator needs to collect log files from an ESXi 9.0 host to attach to a support ticket with VMware Global Support Services. What is the standard procedure to generate and download this collection using the vSphere Client?

A.Navigate to vCenter Administration -> License Management and click 'Export Support Bundle'.
B.Run 'esxcli system logs export' via the host console.
C.Open the VM settings for the host and select 'Download Core Dump'.
D.Right-click the ESXi host in the vSphere Client inventory, select 'Export System Logs' (Generate Support Bundle), and download the resulting archive.
AnswerD

This is the standard vSphere Client workflow for gathering comprehensive diagnostic logs from an ESXi host.

Why this answer

Generating a support bundle from the ESXi host or vCenter Server right-click menu creates a compressed archive containing all essential host logs, configuration files, and diagnostic outputs.

14
Multi-Selecthard

When troubleshooting certificate trust issues in VVF, which THREE components might require manual certificate replacement or refreshing?

Select 3 answers
A.vSphere Client browser cache
B.ESXi Host hardware BIOS password
C.Solution User certificates
D.Machine SSL certificate
E.STS signing certificate
AnswersC, D, E

Used by various internal services.

Why this answer

The Solution Users, Machine SSL, and STS are the three critical certificate components.

15
MCQmedium

An administrator is configuring a cluster in vSphere Foundation and wants to enable vSphere Fault Tolerance (FT) for a mission-critical database VM configured with 4 vCPUs. What prerequisite must the administrator verify regarding the ESXi host configuration?

A.The ESXi hosts must be configured with dedicated high-speed vSphere FT logging networks.
B.The underlying storage datastore must be formatted as VMFS-5 or VMFS-6 with ATS enabled.
C.The cluster must use shared storage with VAAI hardware acceleration enabled.
D.The virtual machine must have CPU hot-add and memory hot-plug disabled.
AnswerA

vSphere FT requires dedicated high-bandwidth, low-latency network connections for synchronous state replication.

Why this answer

Legacy FT supported only single vCPU VMs, but modern vSphere FT supports multi-vCPU VMs, requiring specific host licensing, high-speed logging networks (10GbE+), and compatible processors.

16
MCQeasy

An administrator is reviewing vSphere alarms and notices that a host has triggered a yellow alarm regarding high memory usage. However, the host has plenty of free physical RAM. What is the likely reason for this alarm?

A.The ESXi host physical RAM is failing and must be replaced immediately.
B.The vCenter database has exceeded its 250GB storage limit.
C.The consumed memory or active memory threshold configured in the alarm definition has been reached, even if unallocated physical RAM remains.
D.The host CPU cache has overheated.
AnswerC

Alarms trigger based on specific metric thresholds (like consumed memory percentage), which can fire independently of total unallocated physical RAM.

Why this answer

vSphere memory alarms often monitor 'consumed memory' or active working set rather than just free physical RAM. If reservations or overhead memory are high, or if the consumed memory threshold is exceeded, an alarm triggers even if free physical RAM is available.

17
MCQhard

When configuring log forwarding from vCenter to Aria Operations for Logs, which protocol is typically used?

A.SNMP
B.Syslog (UDP/TCP)
C.SSH
D.HTTPS
AnswerB

Standard syslog is the protocol of choice for log forwarding.

Why this answer

The LiAgent or Syslog protocol is standard for sending logs to the Operations for Logs server.

18
MCQhard

An administrator is reviewing a cluster image compliance failure in vLCM. The error states that a specific VIB included in the vendor add-on has a dependency conflict with an independently installed driver on the ESXi host. How should the administrator remediate this conflict?

A.Upgrade vCenter Server to the next major release to automatically purge conflicting VIBs.
B.Disable vLCM image enforcement and revert the cluster to legacy baseline mode via the ESXi command line.
C.Remove the conflicting independent VIB from the image specification or update the vendor add-on to a version that resolves the dependency tree.
D.Manually delete the VIB file from /var/lib/vmware/vlcmlib/ on each ESXi host using SSH.
AnswerC

vLCM image specifications must be cohesive; resolving VIB conflicts requires aligning the image components without orphaned conflicting drivers.

Why this answer

When vLCM detects dependency conflicts between custom VIBs and vendor add-ons, the administrator must either remove the conflicting independent VIB from the host image specification or update the image to include a vendor add-on that supersedes or correctly replaces the conflicting component.

19
MCQeasy

An administrator is designing a vSphere Foundation 9.0 environment with high availability. Which component acts as the primary orchestrator for cluster-wide high availability (HA) failover actions if an ESXi host suffers a sudden power failure?

A.The elected HA Master ESXi host in the cluster.
B.The vSAN Witness Appliance residing at the secondary site.
C.The Platform Services Controller embedded in vCenter Server.
D.The external hardware load balancer connected to the vCenter Appliance.
AnswerA

Correct. The Master ESXi host detects failures and coordinates VM restarts across remaining healthy hosts.

Why this answer

In a vSphere HA cluster, one host is elected as the Master host, while the remaining hosts act as Slaves. The Master monitors the cluster state and orchestrates failovers.

20
MCQeasy

An administrator is troubleshooting a vCenter Server 9.0 appliance upgrade failure. Where are the installation and upgrade log files stored on the VCSA filesystem for troubleshooting?

A./usr/lib/vmware/vpxd/upgrade_error.log
B./etc/vmware/upgrade/psod.log
C./var/log/vmware/applmgmt/ and /var/log/firstboot/ (or installer logs in /var/log/)
D./vmfs/volumes/datastore/vcsa-logs.txt
AnswerC

These directories store upgrade logs, installation logs, and component firstboot execution results for VCSA.

Why this answer

VCSA installer and upgrade logs are located under /var/log/autodeploy or /var/log/vmware/applmgmt/ or installer logs in /var/log/opsli/ or /var/log/firstboot/ depending on the phase. Specifically, /var/log/vmware/applmgmt/ and /var/log/firstboot/ contain upgrade logs.

21
MCQmedium

You are tasked with reviewing an alert in vSphere. You notice the alarm was triggered by a high latency metric. Which specific tool can provide the most detailed breakdown of datastore latency?

A.ESXi Shell esxtop
B.VMware Aria Operations
C.vCenter Alarms Tab
D.vCenter Inventory View
AnswerB

Aria Operations provides deep dive metric analysis.

Why this answer

Aria Operations allows for granular visualization of metrics, including datastore latency.

22
MCQeasy

An administrator is reviewing the deployment architecture of VMware vSphere Foundation 9.0. Which component serves as the core unified management platform that brings together vCenter, ESXi, vSAN, and Aria Operations integration?

A.vCenter Server Appliance
B.vSphere Replication Appliance
C.VMware NSX Edge Node
D.VMware Cloud Director
AnswerA

vCenter Server Appliance is the foundational management center for vSphere Foundation environments.

Why this answer

SDDC Manager or the vSphere Foundation unified portfolio architecture centers around vCenter Server and SDDC Manager / Aria Operations integration for comprehensive management.

23
Multi-Selectmedium

An administrator is managing a vSphere Foundation environment and needs to monitor resource utilization and performance. Which THREE built-in tools or methods can be used to monitor ESXi and virtual machine performance? (Choose three.)

Select 3 answers
A.The command-line utility 'esxtop' executed via an ESXi SSH session.
B.Windows Performance Monitor (PerfMon) connected via remote WMI to ESXi vmkernel.
C.Real-time and historical Performance Charts available directly in the vSphere Client interface.
D.VMware Aria Operations (formerly vRealize Operations) for advanced analytics and capacity planning.
E.Raw Device Mapping diagnostic partition dump tools.
AnswersA, C, D

esxtop provides real-time granular performance statistics for CPU, memory, network, and storage.

Why this answer

Performance charts in vSphere Client, esxtop via SSH, and Aria Operations are primary monitoring tools.

24
Multi-Selecthard

An administrator is planning storage performance troubleshooting and optimization for an all-flash vSAN 9.0 cluster hosting heavy database workloads. Which THREE best practices should be implemented to ensure optimal vSAN performance? (Choose three.)

Select 3 answers
A.Disable all storage policies to allow unconstrained direct access to physical flash media.
B.Ensure dedicated high-speed network infrastructure (10GbE or 25GbE+) with proper MTU (Jumbo Frames, 9000 bytes) for vSAN VMkernel traffic.
C.Maintain sufficient free capacity on the vSAN datastore (typically keeping utilization below 70-80%) to allow efficient object rebalancing, snapshot operations, and space reclamation.
D.Configure software iSCSI binding for all internal vSAN cache tiers.
E.Configure multiple disk groups per ESXi host when appropriate to distribute I/O load across multiple cache and capacity devices.
AnswersB, C, E

vSAN traffic is sensitive to network latency and throughput; high-speed networks and jumbo frames reduce CPU overhead and latency.

Why this answer

All-flash vSAN best practices include maintaining adequate free space (e.g., keeping utilization below 70-80% for optimal snapshot and rebalance operations), using multiple disk groups per host if hardware permits to parallelize I/O, ensuring network bandwidth (e.g., 10GbE/25GbE+), and proper queue depth settings.

25
MCQmedium

An administrator is configuring a new vSphere Distributed Switch (VDS) in a VVF environment and wants to ensure that network traffic for vSphere vMotion is isolated from other traffic types. Which VDS feature should be utilized?

A.Enable Private VLANs (PVLANs) on the physical switch uplinks only without port groups.
B.Create a dedicated Distributed Port Group configured on a separate VLAN ID specifically for vMotion traffic.
C.Configure IPFIX netflow sampling on the default management port group.
D.Enable Network I/O Control (NIOC) and set the vMotion share level to Low.
AnswerB

Using a dedicated Distributed Port Group on a distinct VLAN isolates vMotion traffic at layer 2.

Why this answer

Network traffic isolation on a VDS is achieved by placing vMotion traffic onto a dedicated VLAN or Geneve-backed segment, associated with a dedicated Distributed Port Group with specific traffic shaping and security policies.

26
Multi-Selecthard

An infrastructure architect is designing a multi-site vSphere Foundation 9.0 environment with stretched clusters. Which THREE challenges or requirements must be accounted for in a stretched cluster design? (Choose three.)

Select 3 answers
A.Redundant, high-bandwidth inter-site ISL (Inter-Switch Links) for vMotion and storage traffic.
B.Complete elimination of all network gateways across the entire enterprise.
C.Placement of the vSAN Witness node in a third independent failure domain or site.
D.Strict round-trip time (RTT) latency limitations between the primary data centers (typically <= 5ms for vSAN).
E.Converting all virtual machine disks into read-only ISO files.
AnswersA, C, D

Correct. High bandwidth is mandatory to handle continuous cross-site replication and migrations.

Why this answer

Stretched clusters require strict RTT latency limits for storage, reliable witness placement, and redundant high-bandwidth inter-site networking.

27
MCQeasy

An administrator notices that a vSphere cluster's DRS is not rebalancing the cluster automatically. Upon checking the cluster settings, DRS is configured in 'Manual' mode. What does Manual mode mean for DRS operation?

A.DRS only migrates virtual machines when physical hardware fails.
B.DRS restricts all migrations to maintenance windows scheduled via vLCM.
C.DRS is completely turned off and performs no calculations or monitoring.
D.DRS generates migration recommendations when the cluster is imbalanced, but requires an administrator to manually review and apply them.
AnswerD

Manual mode provides visibility and recommendations without taking autonomous action.

Why this answer

In Manual mode, DRS generates migration recommendations and placement suggestions when imbalances occur, but it does not execute them automatically; an administrator must manually apply each recommendation.

28
MCQmedium

An administrator is configuring a new Supervisor cluster in vSphere Foundation 9.0 using vSphere Distributed Switch (VDS). Which networking parameter must be verified prior to enabling the Supervisor?

A.The underlying vSphere Distributed Switch must be upgraded to version 6.5 minimum, with LLDP disabled globally.
B.All ESXi hosts in the cluster must have at least four physical uplinks configured in an active/active port channel.
C.IPv6 must be enforced as the primary transport protocol for all internal Supervisor control plane communication.
D.A dedicated, non-overlapping management network IP block must be allocated for the Supervisor control plane VMs.
AnswerD

The Supervisor requires dedicated IP addresses for its control plane VMs that do not conflict with existing host IPs.

Why this answer

Enabling the Supervisor cluster requires an active VDS with proper NSX or vSphere Distributed Services Engine integration, specifically ensuring that edge/management segment subnets and IP pools are pre-allocated for control plane VMs.

29
MCQeasy

When troubleshooting a vSphere Distributed Switch (vDS) configuration, an administrator needs to check which physical network adapters (vmnics) are assigned to specific uplinks on the switch. Where in the vSphere Client should the administrator look?

A.Check the cluster Quick Stats tab.
B.Open the Virtual Machine settings -> Hardware -> Network Adapter.
C.Navigate to vCenter Administration -> Deployment -> Network Maps.
D.Select the vDS in the inventory, navigate to Configure -> Topology or Uplink port group settings.
AnswerD

The vDS Topology view and Uplink configurations show which physical NICs are bound to each uplink.

Why this answer

Uplink configuration and physical adapter assignments on a vDS are managed under the vDS object -> Configure -> Topology or Uplink port groups / Teaming and Failover settings.

30
MCQmedium

An IT architect is planning network security for a vSphere Foundation 9.0 environment. They want to ensure that inter-VM traffic within the same virtual network is inspected and filtered by distributed firewall rules without having to hairpin traffic out to a physical firewall appliance. Which architectural feature should be deployed?

A.Physical top-of-rack access control lists (ACLs).
B.Storage I/O Control traffic shaping rules.
C.NSX Distributed Firewall (DFW)
D.vCenter Server Appliance software firewall.
AnswerC

Correct. The DFW operates inside the hypervisor kernel, providing stateful micro-segmentation for VM-to-VM traffic.

Why this answer

VMware NSX Distributed Firewall (DFW) inspects traffic directly at the vnic level of each virtual machine within the ESXi kernel, enforcing micro-segmentation without physical hairpinning.

31
Multi-Selecthard

Which TWO actions are necessary to ensure proper lifecycle management of ESXi hosts via vSphere Lifecycle Manager?

Select 2 answers
A.Update the vCenter Server appliance
B.Create a cluster image
C.Install VMware Tools
D.Check compliance against the baseline
E.Disable DRS
AnswersB, D

Required for desired state enforcement.

Why this answer

Image creation and compliance checks are core vLCM tasks.

32
MCQeasy

An administrator wants to view the overall health score and key performance indicators of the VVF infrastructure stack in a single pane of glass. Which tool provides this unified operational overview?

A.vSphere Lifecycle Manager
B.VCF Operations Dashboard
C.VMware Cloud Builder
D.ESXi Host Client
AnswerB

VCF Operations dashboards provide holistic health scores, risk analysis, and efficiency metrics.

Why this answer

VCF Operations (Aria Operations) provides unified dashboards displaying health, risk, and efficiency scores for the entire software-defined data center stack.

33
MCQmedium

You are configuring a Supervisor cluster on a vSphere cluster with vSAN. Which requirement must be met before enabling the Supervisor service?

A.NTP must be disabled on all hosts
B.The cluster must have exactly three nodes
C.The cluster must be using vSphere Distributed Switch (vDS) version 8.0 or later
D.All ESXi hosts must be in Maintenance Mode
AnswerC

Supervisor clusters require vDS to manage the networking for the control plane and workloads.

Why this answer

A vSphere cluster must be configured with a vSAN datastore to support Supervisor cluster persistent volumes.

34
MCQhard

An administrator is troubleshooting a storage performance issue on an ESXi host. The storage array vendor recommends changing the Path Selection Policy (PSP) for active-active LUNs from 'MRU' (Most Recently Used) to 'RR' (Round Robin). Which esxcli command can the administrator use to change the default PSP for all newly discovered devices using the Native Multipathing Plugin (NMP) to Round Robin?

A.esxcli vsan storage psp set --roundrobin
B.esxcli storage core psp modify --default=RR
C.esxcli storage vmfs psp set --policy=RoundRobin
D.esxcli storage nmp satp rule add --satp VMW_SATP_DEFAULT --psp VMW_PSP_RR
AnswerD

This command adds or updates a SATP (Storage Array Type Plugin) rule to automatically claim new devices with the Round Robin (VMW_PSP_RR) Path Selection Policy.

Why this answer

To set the default Path Selection Policy for NMP devices in ESXi, administrators use 'esxcli storage nmp satp rule add' or modify existing device claims, or set default PSP via 'esxcli storage nmp psp roundrobin set' or setting the default PSP for a SATP rule.

35
MCQeasy

An administrator is deploying a new vSphere Foundation 9.0 cluster. Which component provides centralized lifecycle management, image-based cluster updates, and compliance monitoring for ESXi hosts?

A.vRealize Operations / Aria Operations.
B.vSphere Lifecycle Manager (vLCM)
C.vCenter Server Update Planner.
D.VMware Host Client.
AnswerB

Correct. vLCM is the centralized tool for managing ESXi software and hardware firmware images.

Why this answer

vSphere Lifecycle Manager (vLCM) provides image-based and baseline-based lifecycle management for ESXi clusters, including firmware and driver validation.

36
MCQhard

A vSphere Foundation administrator is configuring Proactive HA within a cluster backed by hardware vendor provider integrations. A hardware health sensor detects an impending memory degradation event on host ESXi-03. How does Proactive HA respond by default when configured in Automated mode?

A.It triggers an immediate HA host isolation response and restarts VMs on another node.
B.It places the host into maintenance mode and uses DRS to evacuate virtual machines.
C.It immediately powers off all virtual machines on the host to protect hardware state.
D.It generates an SNMP trap and waits for manual administrator intervention.
AnswerB

Proactive HA responds to provider provider events by placing the host in maintenance or quarantine mode and triggering DRS evacuation.

Why this answer

In Automated mode for Proactive HA, vSphere DRS automatically migrates VMs off the degraded host based on the severity of the provider health alert.

37
MCQeasy

An administrator is designing a new vSphere Foundation 9.0 cluster using 32-core AMD EPYC processors. Which hardware design standard must be verified to ensure maximum VM density and NUMA efficiency without cross-socket memory latency penalties?

A.Size virtual machine vCPUs to fit within the core and cache boundaries of a single physical NUMA node.
B.Configure the hypervisor to span all vCPUs evenly across all sockets regardless of core counts.
C.Enable Fault Tolerance for every virtual machine to force physical socket load-balancing.
D.Disable hyperthreading globally across all hosts in the vCenter Server cluster settings.
AnswerA

Correct. Keeping vCPUs within a single NUMA node optimizes memory access and reduces remote memory latency.

Why this answer

Ensuring the VM vCPU count fits neatly within a single physical NUMA node prevents cross-socket memory access, maintaining low latency.

38
Multi-Selecthard

An administrator is preparing to deploy the Supervisor on a vSphere cluster. Which THREE of the following are prerequisites for the management network?

Select 3 answers
A.A dedicated VLAN for the workload network
B.An IP address pool for the Supervisor control plane VMs
C.A /27 or larger subnet for the Supervisor control plane
D.A /24 subnet for the management network
E.MTU set to 1500 or higher
AnswersB, C, E

Control plane VMs require a dedicated IP pool.

Why this answer

Management network prerequisites include specific subnet sizing, MTU settings, and address pools for the control plane.

39
MCQhard

An administrator is analyzing storage performance using esxtop. In the disk device view (press 'd'), which metric represents the average time taken by the physical storage array to process a read or write command, excluding queue latency?

A.QAVG (Queue Average Latency)
B.GAVG (Guest Average Latency)
C.KAVG (Kernel Average Latency)
D.DAVG (Device Average Latency)
AnswerD

DAVG measures the actual response time of the physical storage array.

Why this answer

In esxtop, GAVG (Guest Average Latency) is total latency, KAVG (Kernel Average Latency) is queuing time inside the ESXi kernel, and DAVG (Device Average Latency) is the latency at the hardware/storage array level.

40
MCQeasy

An administrator needs to take a snapshot of a critical database virtual machine before applying a patch. Which option should be selected to ensure that memory state is NOT included in the snapshot file?

A.Power off the virtual machine prior to snapshotting
B.Enable quiescing on the virtual machine settings
C.Deselect 'Snapshot virtual machine memory'
D.Select 'Disable Guest Customization'
AnswerC

Deselecting memory ensures a standard crash-consistent snapshot is captured.

Why this answer

Unchecking 'Snapshot virtual machine memory' creates a crash-consistent snapshot without capturing the running RAM state.

41
MCQmedium

An architect is planning a vSphere Foundation 9.0 deployment for a remote office/branch office (ROBO) location with limited physical security. Which feature should be implemented to protect virtual machine data at rest against physical server theft?

A.RAID 6 parity disk grouping on local RAID controllers.
B.vSphere VM Encryption managed via a trusted KMIP-compliant key management server.
C.Software iSCSI multipathing over encrypted IPsec tunnels.
D.Storage DRS auto-evacuation rules triggered by ambient temperature sensors.
AnswerB

Correct. VM Encryption encrypts disks at rest, rendering stolen physical drives unreadable without the keys.

Why this answer

vSphere VM Encryption protects virtual machine disk files (VMDKs) and configuration files at rest without requiring specific storage array capabilities.

42
MCQhard

An administrator is managing a cluster with vSphere DRS and notices that a virtual machine has a high CPU Ready (%RDY) time. Upon inspecting esxtop, the administrator sees that the VM has 32 vCPUs while the physical host has 16 physical cores. What phenomenon is primarily contributing to this high CPU Ready time?

A.Enhanced vMotion Compatibility is enforcing strict CPU instruction filtering.
B.Memory ballooning is reclaiming guest memory, causing paging delays.
C.The large number of vCPUs creates co-stop and strict co-scheduling delays as the hypervisor waits for sufficient physical cores.
D.Storage I/O Control is throttling the virtual disk queues.
AnswerC

Oversized vCPUs require strict co-scheduling, increasing CPU ready wait times.

Why this answer

Oversized vCPUs (co-scheduling requirements) force the hypervisor to wait until enough physical cores are simultaneously free to schedule all vCPUs at once, causing high CPU ready times.

43
MCQeasy

An administrator is creating a new custom role in vCenter Server to grant a user permission to manage virtual machine snapshots. Which category of privileges should the administrator select in the privilege tree?

A.Virtual Machine -> State
B.Host -> Configuration
C.Datastore -> Allocate space
D.Global -> Licenses
AnswerA

Snapshot creation, removal, and reversion privileges reside under VM State.

Why this answer

Snapshot management privileges for virtual machines are located under the 'Virtual Machine -> State' privilege category.

44
MCQeasy

Which interface is used to perform basic operational tasks like host shutdown, management network configuration, and service restarts on an individual ESXi host?

A.Direct Console User Interface (DCUI)
B.vSphere Client
C.vCenter Management Portal
D.ESXi Shell
AnswerA

DCUI is the primary local management tool for ESXi.

Why this answer

The Direct Console User Interface (DCUI) provides direct local access for these fundamental management tasks.

45
Multi-Selectmedium

Which TWO methods can be used to monitor vCenter Server performance metrics?

Select 2 answers
A.Running 'esxtop' on vCenter Server
B.Enabling 'Performance' mode in vCenter settings
C.VMware Aria Operations
D.Direct SNMP configuration on individual VMs
E.vSphere Client > Monitor > Performance tab
AnswersC, E

Aria Operations is the primary tool for detailed monitoring.

Why this answer

Both the Performance tab in the client and Aria Operations are standard monitoring tools.

46
MCQmedium

A cluster is suffering from frequent VM restarts due to host failures. To improve resilience, the team wants to ensure that if a host fails, there is sufficient capacity to restart the affected VMs. What should be configured in the vSphere HA settings?

A.HA Admission Control
B.DRS Affinity Rules
C.Proactive HA
D.vSphere FT
AnswerA

Admission Control reserves capacity specifically for VM restarts after a host failure.

Why this answer

Admission Control is the mechanism HA uses to ensure sufficient resources are available to support failover.

47
MCQhard

When configuring identity sources, what is the primary benefit of using LDAPS over LDAP?

A.Prevents domain controller overload
B.Allows usage of non-standard ports
C.Faster synchronization with Active Directory
D.Encryption of the authentication traffic
AnswerD

Security is the main driver for using SSL/TLS.

Why this answer

LDAPS (LDAP over SSL) provides encryption for sensitive credentials during authentication.

48
MCQmedium

You notice that virtual machines on a specific host are experiencing high disk latency. You want to identify which VM is consuming the most IOPS. Which tool in the vSphere Client should you use?

A.Performance Charts in the vSphere Client
B.null
C.vSphere Lifecycle Manager
D.vSphere Distributed Switch (VDS) Topology
E.Storage Policy Based Management (SPBM)
AnswerA

These charts provide real-time and historical monitoring of storage latency and throughput per VM.

Why this answer

The vSphere Client Performance charts allow for granular monitoring of storage metrics including IOPS per virtual machine.

49
MCQeasy

An administrator needs to check the current license capacity and expiration date for a vSphere Foundation deployment. Which dashboard or tool provides a consolidated view of all software licenses across the SDDC?

A.ESXi host Summary tab under Hardware Details
B.vSphere Lifecycle Manager Compliance Overview
C.VMware Aria Operations License Usage report widget
D.vCenter Server Administration > Licensing dashboard
AnswerD

The Licensing dashboard displays total capacity, assigned quantities, and expiration dates for all keys.

Why this answer

License inventory and usage tracking are centrally managed in vCenter Server under Administration > Licensing.

50
MCQeasy

An administrator needs to modify the hardware configuration of a running virtual machine, specifically adding more vCPUs, without causing downtime. Which vSphere feature makes this possible when supported by the guest operating system?

A.vSphere Fault Tolerance (FT)
B.Distributed Resource Scheduler (DRS)
C.Enhanced vMotion Compatibility (EVC)
D.Hot-Plug / Hot-Add CPU and Memory
AnswerD

Hot-Add allows dynamic scaling of CPU and memory resources on running virtual machines.

Why this answer

Hot-add capabilities allow administrators to add virtual hardware resources such as CPUs and memory to a running virtual machine without requiring a power cycle, provided the guest OS supports it.

51
Multi-Selectmedium

An administrator is managing user access and permissions within a vSphere Foundation vCenter Server environment. Which TWO best practices should be followed when assigning privileges? (Choose two.)

Select 2 answers
A.Assign permissions to Active Directory groups rather than local vCenter users when integrating directory services.
B.Apply the principle of least privilege by assigning custom or built-in roles with only necessary access rights.
C.Disable the Administrator@vsphere.local account permanently immediately after installation.
D.Assign all administrators the Global Administrator role to prevent lockout scenarios.
E.Assign permissions directly to individual user accounts for easier tracking.
AnswersA, B

Integrating directory services and assigning roles to groups simplifies lifecycle management when users join or leave the organization.

Why this answer

Best practices for vSphere access control include assigning permissions to Active Directory groups rather than individuals and applying the principle of least privilege using built-in or custom roles.

52
MCQmedium

An administrator is configuring log rotation and retention policies for ESXi hosts using Host Profiles. Which advanced setting must be adjusted within the Host Profile to control the maximum size of local log files before rotation?

A.Mem.ZipMemAllocPercent
B.Config.HostAgent.log.level
C.Vpx.Vpxd.QueueSize
D.Syslog.global.logDefaultMaxSize
AnswerD

Syslog.global.logDefaultMaxSize controls the maximum size of individual local log files on ESXi hosts.

Why this answer

ESXi host log rotation and size parameters are managed via advanced system settings such as 'Syslog.global.logDefaultMaxSize'.

53
MCQmedium

An administrator is managing vSphere Foundation licenses. If the cluster grows beyond the capacity covered by the current VVF license, what happens?

A.The vCenter service will immediately shut down.
B.The host will lose network connectivity.
C.The cluster will enter a non-compliant state.
D.Virtual machines will be suspended.
AnswerC

The vCenter will report a license non-compliance warning.

Why this answer

vSphere Foundation licensing is capacity-based; exceeding CPU count requires additional license purchase to maintain compliance, though the system will not immediately shut down.

54
MCQhard

An administrator is deploying VMware vSphere Foundation 9.0 and needs to configure NSX components to support micro-segmentation across workload clusters. After deploying the NSX Manager cluster, the transport nodes fail to prepare because the transport node profile cannot communicate with the ESXi host's vSphere Distributed Switch (VDS). What is the most critical networking prerequisite that must be validated?

A.Verify that all ESXi management VMkernels are configured with static IP addresses and disabled DHCP.
B.Assign a vSphere Distributed Switch uplink to the management network vmk0 interface.
C.Configure vSphere FT (Fault Tolerance) logging on all transport node ESXi hosts.
D.Ensure that the MTU on the physical switches, VDS, and Transport Zone is set to at least 1600 bytes to accommodate the Geneve encapsulation overhead.
AnswerD

Geneve tunneling adds overhead to packet size; insufficient MTU causes packet drop and transport node preparation failure.

Why this answer

NSX transport node creation on a VDS requires correct VLAN backing for the geneve overlay traffic and proper MTU settings across the physical switch and VDS.

55
Multi-Selectmedium

An administrator is troubleshooting a vSAN 9.0 cluster where performance has degraded. Which TWO tools or dashboards within vSphere and Aria Operations can help diagnose vSAN performance bottlenecks? (Choose two.)

Select 2 answers
A.VMware Aria Operations vSAN management dashboards and metric correlation views
B.vSphere Lifecycle Manager desired state compliance report
C.Enhanced vMotion Compatibility (EVC) configuration wizard
D.vCenter License Allocation summary tab
E.vSphere Client vSAN Performance Service (Monitor -> vSAN -> Performance)
AnswersA, E

Aria Operations offers advanced analytics, capacity planning, and troubleshooting for vSAN clusters and datastores.

Why this answer

vSAN performance service in vSphere Client and Aria Operations vSAN dashboards provide detailed insights into IOPS, throughput, latency, and component health.

56
MCQeasy

An administrator notices that an ESXi host's time is out of sync with the NTP server. Where in the vSphere Client should the administrator configure or restart the NTP service for the host?

A.Open virtual machine settings -> Guest OS Time.
B.Navigate to vCenter Administration -> Licensing -> Time Sync.
C.Check the vSphere Lifecycle Manager repository tab.
D.Select the ESXi host -> Configure -> System -> Time Configuration (Date and Time).
AnswerD

Time configuration allows administrators to add NTP servers, set start policies (start and stop with host), and restart the ntpd service.

Why this answer

NTP time synchronization and date/time settings on an ESXi host are configured under Host -> Configure -> Time Configuration (Date and Time).

57
Multi-Selectmedium

An administrator is troubleshooting high memory utilization on an ESXi 9.0 host using esxtop. Which TWO memory metrics in esxtop are primary indicators that the host is experiencing severe memory pressure and actively reclaiming memory from virtual machines? (Choose two.)

Select 2 answers
A.MCTLSZ (Ballooned memory size)
B.SWCUR (Current swap usage)
C.MEMSZ (Total memory size assigned)
D.RPCT (Reservation percentage)
E.CPSIZ (Compressed page size)
AnswersA, B

MCTLSZ shows the amount of memory reclaimed by the VM's balloon driver, indicating host memory pressure.

Why this answer

In esxtop (memory view), 'SWCUR' (current swap space used) and 'COW' or 'ACTV' (active memory) or 'SHRD' indicate state, but memory reclamation techniques such as transparent page sharing (TPS), ballooning, and swapping are tracked by specific counters. Specifically, 'MEMSZ', 'TRES', 'SWCUR', and ballooning metrics like 'MCTLSZ' (memory control size) indicate balloon driver activity, and 'SWCUR' indicates swapping.

58
MCQeasy

What is the primary function of a 'Host Profile' in vSphere?

A.To backup virtual machines
B.To patch ESXi hosts
C.To monitor hardware sensors
D.To standardize host configuration
AnswerD

Host profiles ensure consistent host settings.

Why this answer

Host Profiles allow for the standardization of host configurations across a cluster.

59
MCQhard

An administrator is troubleshooting a failure during an automated VVF cluster expansion in SDDC Manager. The task fails while attempting to configure the new ESXi host's Distributed Switch uplinks. Which log file on SDDC Manager should the administrator examine first to diagnose the API payload failure?

A./var/log/vmware/nsx-manager/cluster.log
B./var/log/vmware/vcf/sddc-manager/sddc-manager.log
C./var/log/vmware/loudmouth.log
D./var/log/vmware/vpxd.log
AnswerB

sddc-manager.log contains detailed application execution logs for workflows, cluster expansions, and API integrations.

Why this answer

SDDC Manager operations log API calls and workflow executions in /var/log/vmware/vcf/sddc-manager/sddc-manager.log or related service log directories.

60
MCQmedium

An administrator is utilizing vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0 to manage ESXi host updates across a cluster. The cluster is configured with a single software image. The administrator attempts to remediate the cluster, but pre-checks report that a third-party ESXi IOVP driver installed on the hosts is not compatible with the target ESXi version. What is the correct procedure to remediate this issue?

A.Bypass the vLCM pre-check by enabling override mode in the vSphere Client advanced settings.
B.Revert the cluster to a manual baseline configuration and disable vSphere Lifecycle Manager.
C.Uninstall the third-party driver manually using ESXCLI on each host, then perform an upgrade using legacy Update Manager baselines.
D.Update the vLCM cluster image specification to include a compatible vendor add-on or updated component version that supports the target ESXi release.
AnswerD

vLCM allows adding vendor add-ons and firmware/driver components directly into the image specification to resolve compatibility issues.

Why this answer

When using vLCM image-based management, all components (ESXi base image, vendor add-ons, and firmware/drivers) must be compatible. Incompatible drivers must be updated or removed via the vLCM image specification before remediation.

61
MCQeasy

An administrator notices that a virtual machine has a snapshot that cannot be deleted or consolidated, and the vSphere Client reports a locked file error. Where should the administrator check for active backup operations or external locks?

A.Restart the vCenter Server license service.
B.Format the datastore to release all file locks instantly.
C.Reboot the physical upstream network switch.
D.Check active tasks in vSphere, review third-party backup appliance status, and inspect host logs for processes holding a lock on the redo logs.
AnswerD

Active backup integrations or stuck CBT processes frequently lock delta disks, causing consolidation failures.

Why this answer

Checking active tasks in vSphere, checking third-party backup software jobs (e.g., Veeam, Commvault), or examining host logs for file lock holders is standard troubleshooting procedure.

62
MCQhard

An administrator is troubleshooting a vSphere Distributed Switch (vDS) configuration where LACP (Link Aggregation Control Protocol) is enabled between ESXi hosts and the physical upstream switches. The port channel is down. Which command or log file should the administrator check on the ESXi host to inspect LACP state and negotiation status?

A.esxcli storage core path list
B.esxcli system ip route list
C.esxcli network vswitch dvs lacp status get or inspecting lacp logs in /var/log/
D.esxcli vsan cluster get
AnswerC

This command displays LACP partner status, active port channels, and negotiation states on the distributed switch.

Why this answer

ESXi provides net-vmswitch and esxcli network vswitch dvs lacp commands or log inspection in /var/log/lacp.log or vpxd.log to check LACP state.

63
MCQhard

You are managing certificate lifecycles in VVF. Where should you update the trusted root CA for the vCenter Server to ensure secure communication?

A.Host Profile
B.vLCM Image
C.Aria Operations Settings
D.vSphere Client Certificate Management
AnswerD

The Certificate Management UI in vCenter is the correct place to update trust.

Why this answer

The vSphere Certificate Authority (VMCA) or the vCenter Certificate Management tool is used to manage trusted roots.

64
MCQmedium

An administrator is configuring vSphere Supervisor in a VVF cluster and needs to assign permissions so that a specific developer team can manage namespaces. Where in the vSphere Client are namespace permissions managed?

A.vCenter Server -> Administration -> Access Control -> Roles.
B.SDDC Manager -> Supervisor -> Access Control.
C.Cluster -> Configure -> Workload Management -> Namespaces -> Select Namespace -> Permissions.
D.NSX Manager -> System -> Identity -> Namespace Role Bindings.
AnswerC

Namespace-level permissions are managed directly under the Workload Management namespace configuration.

Why this answer

vSphere Namespaces are managed under Workload Management. Namespace permissions are assigned by selecting the Supervisor or Namespace object in the vSphere Client and configuring permissions under the 'Permissions' tab.

65
Multi-Selectmedium

An administrator is configuring a new virtual machine in a vSphere Foundation environment and needs to attach storage. Which TWO storage types can be natively provisioned and attached directly to a virtual machine in vSphere? (Choose two.)

Select 2 answers
A.Local ESXi BIOS flash memory partition.
B.Shared ESXi scratch log volume.
C.Raw physical PCIe graphics card memory without virtualization.
D.Virtual Machine Disk (VMDK) stored on a VMFS or NFS datastore.
E.Physical Raw Device Mapping (RDM) pointing directly to a SAN LUN.
AnswersD, E

VMDKs are the native virtual disk format in vSphere.

Why this answer

VMs can attach virtual disks (VMDKs) or Raw Device Mappings (RDMs).

66
MCQeasy

An administrator needs to review the history of user logins and administrative tasks performed in vCenter Server over the past 30 days. Which vCenter feature or view provides this audit trail?

A.vCenter -> Monitor -> Tasks and Events.
B.Host -> Configure -> Advanced Settings -> Audit.Log.
C.SDDC Manager -> Audit -> Activity Log.
D.VCF Operations -> Administration -> Access Audit.
AnswerA

The Tasks and Events tab provides a comprehensive audit trail of actions performed within the inventory.

Why this answer

The vCenter Tasks and Events tab tracks historical user actions, logins, and task executions across inventory objects.

67
MCQeasy

An administrator is reviewing vSphere Foundation 9.0 identity access management and needs to understand where Local OS users are authenticated if they are not using Active Directory. Which built-in service handles local user accounts on vCenter Server?

A.SDDC Manager Identity Broker service
B.vCenter Single Sign-On (vCenter SSO) with the vsphere.local domain
C.Windows Security Account Manager (SAM)
D.ESXi Direct Console User Interface (DCUI) local shadow file
AnswerB

vCenter SSO manages local accounts within the default vsphere.local identity domain.

Why this answer

vCenter Single Sign-On (vCenter SSO) manages authentication domains, including the local vsphere.local domain and integrated identity sources.

68
MCQhard

An enterprise storage architect is designing a VMware vSAN datastore within a vSphere Foundation 9.0 cluster using a 2-node direct-connect topology at a remote site. Which architectural component is mandatory to provide a tie-breaker vote and prevent split-brain scenarios?

A.An active-active dual-controller hardware Fibre Channel bridge.
B.An external physical quorum disk connected via USB to both ESXi hosts.
C.A remote vSAN Witness Node deployed at a separate third failure domain.
D.A secondary vCenter Server Appliance running in linked mode.
AnswerC

Correct. 2-node clusters use a witness node to provide the third vote required for quorum.

Why this answer

A 2-node vSAN cluster requires a vSAN Witness node (usually deployed as a lightweight virtual appliance at a third site or primary data center) to maintain quorum.

69
MCQmedium

An administrator needs to check if a host is compliant with the desired image in vLCM. What is the process to trigger a compliance check?

A.Select Cluster > Updates > Check Compliance
B.Select Host > Remediate
C.vCenter > Settings > Lifecycle
D.Host > Monitor > Lifecycle
AnswerA

This is the correct UI path for vLCM checks.

Why this answer

The 'Check Compliance' button under the Updates tab allows manual verification of image state.

70
MCQeasy

Which administrative role in vSphere has the most privileges by default?

A.Administrator
B.Resource Pool Administrator
C.No Cryptographic Administrator
D.Read Only
AnswerA

The Administrator role provides full access.

Why this answer

The Administrator role has full access to all objects and settings.

71
MCQeasy

An administrator is designing the management network for a vSphere Foundation 9.0 cluster. Which protocol is standard for secure command-line administration and troubleshooting access to ESXi hosts?

A.Secure Shell (SSH)
B.Telnet
C.Trivial File Transfer Protocol (TFTP)
D.Remote Desktop Protocol (RDP)
AnswerA

Correct. SSH provides encrypted terminal access for ESXi administration.

Why this answer

SSH (Secure Shell) is the standard encrypted protocol used for secure command-line management and troubleshooting access to ESXi hosts.

72
MCQmedium

An administrator is configuring a new alert in vSphere 9.0 to monitor when an ESXi host loses connection to a primary storage datastore. After saving the alarm, they want to test it. What is the safest method to verify the alarm triggers correctly without causing an outage?

A.Unmount the production VMFS datastore from all ESXi hosts simultaneously during peak business hours.
B.Disconnect the physical Fibre Channel cables from the core SAN switch.
C.Trigger a test notification action directly from the vSphere Client alarm definition menu if available, or simulate the event in a test cluster.
D.Restart the vpxd service on vCenter while I/O is running.
AnswerC

Testing alarm actions or using a non-production test environment is the safest way to verify notification workflows.

Why this answer

Testing alarms without causing production outages can be simulated by testing the alarm action directly from the alarm definition wizard or triggering a test event if supported, or by placing a test datastore into maintenance mode / unmounting it in a non-production test cluster.

73
MCQhard

An administrator is configuring identity federation using Microsoft Entra ID (Azure AD) with vCenter 9.0. During authentication, users receive an OIDC token validation error. Upon checking the vCenter sso log (/var/log/vmware/sso/sso.log), it indicates a clock skew issue between vCenter and the IdP. How should the administrator resolve this?

A.Configure and synchronize Network Time Protocol (NTP) on both the vCenter Server appliance and the external Identity Provider.
B.Regenerate the vCenter machine SSL certificate using the Certificate Manager utility.
C.Modify the sso.properties file on vCenter to increase the token lifetime tolerance to 72 hours.
D.Disable OAuth token verification in the advanced vCenter SSO configuration settings.
AnswerA

Synchronizing time via NTP ensures tokens fall within valid time windows without clock skew discrepancies.

Why this answer

OIDC token validation relies heavily on accurate timestamps. A clock skew between vCenter and the external IdP causes token expiration or premature validation errors. Both systems must synchronize time using NTP.

74
MCQmedium

An administrator needs to enforce uniform configuration settings across 20 ESXi hosts in a vSphere Foundation 9 cluster to prevent configuration drift. Which vSphere tool provides compliance checking and automated remediation of host settings?

A.vCenter Update Planner
B.vSphere Host Profiles
C.vSphere Lifecycle Manager
D.vRealize Log Insight
AnswerB

Host Profiles automate host configuration management, checking for compliance and applying remediation when discrepancies occur.

Why this answer

Host Profiles capture the configuration of a reference ESXi host and allow administrators to apply it to other hosts or clusters for compliance monitoring and drift remediation.

75
MCQhard

An administrator is configuring a new vSphere Foundation cluster and needs to enable Workload Management. What is the prerequisite for the storage policy used by the Supervisor cluster?

A.The storage policy must be a standard VMFS policy.
B.The storage policy must be applied to all existing VMs in the cluster.
C.The storage policy must be defined with tags.
D.The storage policy must be associated with a compatible datastore (e.g., vSAN).
AnswerD

The Supervisor requires a storage policy that maps to a datastore capable of hosting the Kubernetes control plane VMs.

Why this answer

The Supervisor control plane needs a storage policy to ensure that its internal components are placed on supported datastores, typically vSAN.

Page 1 of 7

Page 2

All pages