Knowledge + Practice

VMware vSphere Foundation 9.0 Administrator (VCP-VVF, 2V0-16.25) (VCP-VVF) (VCP-VVF) — Questions 76–150

517 questions total · 7pages · All types, answers revealed

Take a mock exam Exam hub

Page 2 of 7

76

MCQeasy

An administrator is reviewing the monitoring configuration in vSphere Foundation 9.0 and wants to check the health status of vSAN storage services across the cluster. Where is the primary vSAN health and performance dashboard located in the vSphere Client?

A.Cluster > Monitor > vSAN > Health and Performance

B.Lifecycle Management > vSAN > Status

C.Administration > vSAN Services > Monitoring

D.Storage > Datastores > vSAN Datastore > Configure > Hardware Health

AnswerA

The primary vSAN dashboard is accessed under the specific vSAN cluster's Monitor tab.

Why this answer

vSAN health and performance metrics are integrated directly into the vSphere Client under the Cluster > Monitor > vSAN tab.

Full explanation →

77

Multi-Selecthard

An administrator is managing certificates in a vSphere Foundation 9.0 environment and needs to renew or replace certificates using the certificate management utility. Which THREE certificate types are managed by vSphere Certificate Manager? (Choose three.)

Select 3 answers

A.Aria Operations collector SSL certificate

B.VMCA Root Certificate (acting as the internal certificate authority)

C.Solution User certificates (such as vpxd, rhttpproxy, and vpxd-extension)

D.Machine SSL certificate (securing HTTPS traffic to vCenter Server)

E.ESXi Host Hardware IPMI Management Controller SSL certificate

AnswersB, C, D

The VMware Certificate Authority root certificate can be replaced with a custom enterprise CA root.

Why this answer

vSphere Certificate Manager manages Machine SSL certificates, VMCA root certificates, and Solution User certificates (vpxd, rhttpproxy, etc.).

Full explanation →

78

MCQeasy

An administrator needs to monitor the real-time CPU and memory usage of a specific virtual machine in the vSphere Client. Which tab under the virtual machine view displays these real-time performance graphs?

A.Configure tab -> Resource Allocation.

B.Monitor tab -> Performance -> Advanced.

C.Actions menu -> Export Performance Logs.

D.Summary tab -> Hardware Overview.

AnswerB

The Monitor -> Performance tab provides real-time and historical graphs for CPU, memory, disk, and network.

Why this answer

The Monitor tab of a virtual machine in the vSphere Client contains performance charts for CPU, memory, network, and storage.

Full explanation →

79

MCQmedium

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that virtual machines are automatically balanced across hosts based on active memory and CPU utilization rather than just static allocation. Which DRS metric setting should be emphasized?

A.Storage DRS space utilization thresholds.

B.Host hardware fan speed and ambient thermal telemetry.

C.Default DRS load balancing utilizing active memory and CPU metrics.

D.Fault Tolerance secondary heartbeat intervals.

AnswerC

Correct. DRS evaluates active resource usage to determine when to trigger migrations for optimal load balancing.

Why this answer

VMware DRS uses active metric data to evaluate real-time workload demand and perform load-balancing migrations when inequality thresholds are crossed.

Full explanation →

80

Multi-Selectmedium

An administrator is auditing identity and access management in a vSphere Foundation 9.0 environment. Which THREE authentication or identity sources are natively supported for integration with vCenter Single Sign-On (vCenter SSO)? (Choose three)

Select 3 answers

A.Local operating system user accounts on each individual ESXi host

B.Proprietary relational database tables accessed via direct SQL queries

C.OpenLDAP directory services

D.OpenID Connect (OIDC) federated identity providers

E.Active Directory over LDAP (AD-LDAP)

AnswersC, D, E

OpenLDAP is supported as a standard LDAP identity source.

Why this answer

vCenter SSO natively supports Active Directory, OpenID Connect (OIDC) identity providers, and LDAP/LDAPS directories as identity sources.

Full explanation →

81

MCQeasy

An administrator needs to integrate an external Active Directory identity provider with vCenter Server 9.0 for vSphere Foundation. Which authentication mechanism should be configured to allow users to log in with multi-factor authentication (MFA)?

A.Integrated Windows Authentication (IWA) via direct Kerberos ticket exchange.

B.Identity Provider (IdP) federation using OpenID Connect (OIDC) or SAML 2.0.

C.Anonymous bind LDAP configuration with certificate-based client pinning.

D.Local OS user database synchronization over insecure LDAP ports.

AnswerB

Federated identity providers using OIDC or SAML 2.0 enable integration with modern MFA-enabled enterprise identity providers.

Why this answer

To support MFA in vCenter Server, administrators configure an OpenID Connect (OIDC) or LDAP identity provider that supports identity federation, or integrate with an external provider such as Workspace ONE Access or ADFS via enhanced authentication plugins.

Full explanation →

82

MCQeasy

An administrator wants to deploy a new virtual machine from an OVF template stored on a local workstation using the vSphere Client. Which inventory object should the administrator right-click to initiate this deployment wizard?

A.Data center

B.Cluster or ESXi host

C.vCenter Server root object

D.Virtual machine folder

AnswerB

Right-clicking a cluster, host, or resource pool provides the 'Deploy OVF Template' option.

Why this answer

To deploy a template or OVF/OVA, the administrator right-clicks a cluster, host, or resource pool and selects 'Deploy OVF Template'.

Full explanation →

83

MCQeasy

An administrator wants to view the real-time network throughput and packet drop rates on a specific Distributed Port Group in a VDS. Where can this be monitored in the vSphere Client?

A.Distributed Port Group -> Monitor -> Performance tab.

B.ESXi Host Client -> Networking -> Ports.

C.Cloud Builder -> Network Monitoring.

D.SDDC Manager -> Networking -> Port Group Health.

AnswerA

The Monitor tab on a Distributed Port Group provides real-time graphs for network throughput, packets, and drops.

Why this answer

Distributed Port Group performance metrics can be monitored by navigating to the VDS or Distributed Port Group -> Monitor -> Performance tab.

Full explanation →

84

MCQmedium

An enterprise is designing a multi-site vSphere Foundation 9.0 architecture leveraging stretched clustering. What is the maximum supported Round Trip Time (RTT) network latency for synchronous vSAN storage replication between primary and secondary data centers?

A.500 milliseconds or less

B.100 milliseconds or less

C.5 milliseconds or less

D.25 milliseconds or less

AnswerC

Correct. Synchronous vSAN replication requires strict low-latency links capped at 5ms RTT.

Why this answer

VMware vSAN stretched cluster deployments require a maximum RTT of 5 milliseconds or less between the data centers and the witness site requirements depend on deployment type.

Full explanation →

85

Multi-Selectmedium

An administrator is troubleshooting a virtual machine performance issue where the VM has high CPU ready time and poor application throughput. Which TWO configuration changes can help reduce CPU ready time? (Choose two.)

Select 2 answers

A.Format the ESXi boot bank with VMFS-6.

B.Increase the virtual machine vCPU count to the maximum supported limit.

C.Enable software iSCSI multipathing on the virtual machine guest OS.

D.Right-size the virtual machine by decreasing the number of assigned vCPUs if the workload does not utilize them.

E.Migrate the virtual machine to a less heavily utilized ESXi host in the cluster via vMotion.

AnswersD, E

Reducing oversized vCPUs makes it easier for the ESXi scheduler to schedule the VM without long wait times.

Why this answer

High CPU ready time is caused by CPU overcommitment and oversizing. Reducing the number of vCPUs to match actual workload needs and removing unnecessary resource limits or contention helps reduce ready time.

Full explanation →

86

MCQhard

An administrator is configuring vSphere Alarms in a VVF environment to trigger an alert when an ESXi host experiences a hardware sensor failure. To ensure the notification reaches the IT operations team, where must the email notification action be configured?

A.Inside the VMware Aria Operations Alerting policy rules engine

B.Via the vRealize Log Insight agent configuration file on each host

C.On the specific Alarm definition under Configure > Alarm Definitions > Edit > Actions

D.Under vCenter Server > Configure > Advanced Settings > mail.smtp.server

AnswerC

Alarm actions are configured directly within the alarm definition settings.

Why this answer

In vSphere 8, alarm actions are configured directly on the specific alarm definition within the vSphere Client's Configure or Alarms tab, where actions such as sending email can be added.

Full explanation →

87

MCQeasy

An administrator needs to back up the vCenter Server Appliance configuration in a vSphere Foundation 9.0 deployment. Where is this backup feature accessed and initiated?

A.Access the vCenter Server Appliance Management Interface (VAMI) at port 5480, log in as root, and select Backup to configure scheduled or manual backups.

B.Navigate to Lifecycle Manager in the vSphere Client and create a Backup Baseline.

C.Open the vSphere Client, right-click the vCenter root object, and select Export vCenter Appliance Backup.

D.Log in to the ESXi host hosting the vCenter VM and run `vim-cmd vcenter/backup`.

AnswerA

The VAMI (port 5480) provides the native file-based backup and restore functionality for the vCenter appliance.

Why this answer

vCenter Server Appliance native file-based backups are managed through the vCenter Server Appliance Management Interface (VAMI) accessible on port 5480.

Full explanation →

88

MCQhard

An administrator is designing a multi-cluster vSphere Foundation 9.0 architecture and wants to implement Enhanced vMotion Compatibility (EVC) across clusters containing both Intel Xeon Scalable (Ice Lake) and AMD EPYC (Milan) processors. What is the design limitation regarding EVC in this scenario?

A.Cross-vendor EVC between Intel and AMD physical processors is architecturally unsupported.

B.Cross-vendor EVC requires vCenter Server to be deployed on a physical Windows Server with hardware virtualization enabled.

C.EVC automatically emulates AMD instruction sets on Intel hosts using binary translation vCPUs.

D.Cross-vendor EVC is supported as long as the lowest common denominator SSE4 instruction set is enabled in the BIOS.

AnswerA

Correct. EVC baselines can only normalize feature sets between processors from the same hardware vendor (Intel-to-Intel or AMD-to-AMD).

Why this answer

EVC spans across processors within the same manufacturer family (e.g., Intel to Intel, AMD to AMD). Cross-vendor EVC between Intel and AMD physical CPUs is not supported.

Full explanation →

89

MCQhard

A systems architect is evaluating storage policy designs for a vSAN datastore in a vSphere Foundation 9.0 cluster. When configuring the Failures to Resist (FTT) policy using Erasure Coding (RAID-5/6), what is the minimum number of host fault domains required for a RAID-5 storage policy?

A.At least 3 fault domains (hosts)

B.At least 6 fault domains (hosts)

C.At least 2 fault domains (hosts)

D.At least 4 fault domains (hosts)

AnswerD

Correct. RAID-5 requires 4 hosts minimum (3 data / 1 parity).

Why this answer

RAID-5 Erasure Coding in vSAN requires a minimum of 4 fault domains (hosts) to distribute data and parity blocks effectively.

Full explanation →

90

MCQeasy

An organization has purchased VMware vSphere Foundation and needs to apply the license keys across their inventory. Where must the VVF license be assigned to properly license the core virtualization and management capabilities?

A.To the vCenter Server instance and member ESXi hosts

B.To each individual virtual machine requiring advanced OS features

C.Exclusively to the VMware Aria Operations collector nodes

D.Directly to the physical top-of-rack physical switches

AnswerA

VVF license keys are applied to vCenter Server and validate the underlying ESXi host CPU capacities.

Why this answer

VVF licensing is structured around vSphere, and licenses are assigned at the vCenter Server inventory level or directly to ESXi hosts/clusters depending on the core entitlement model.

Full explanation →

91

MCQhard

An administrator is analyzing esxtop memory statistics on an ESXi host. The metric 'MEMSZ' shows 32768 MB, 'GRANT' shows 28672 MB, 'CONS' shows 24576 MB, and 'ACTIVE' shows 16384 MB. What does the difference between 'GRANT' and 'ACTIVE' indicate regarding memory efficiency?

A.The virtual machine has exceeded its memory limit and is experiencing drops.

B.The guest operating system is actively swapping memory to its virtual disk.

C.The memory is granted to the virtual machine by the hypervisor but is currently idle or not actively used.

D.The ESXi host is utilizing ballooning to reclaim memory from the hypervisor swap space.

AnswerC

Granted memory minus active memory indicates idle allocated RAM.

Why this answer

The difference between granted memory and active memory represents allocated RAM that is currently idle or not actively being accessed by the guest workload.

Full explanation →

92

Multi-Selecthard

An infrastructure architect is evaluating storage protocols and features for a vSphere Foundation 9.0 environment. Which THREE advanced vSphere storage features rely on VAAI (vStorage APIs for Array Integration)? (Choose three.)

Select 3 answers

A.Block Zero / Full Copy (accelerated cloning and zeroing operations)

B.Thin Provisioning Space Reclamation (UNMAP)

C.Hardware-Accelerated Locking (Atomic Test and Set - ATS)

D.Software iSCSI software-based software checksum calculation

E.Guest operating system registry file defragmentation

AnswersA, B, C

Correct. Block Zero offloads disk zeroing and cloning tasks directly to the storage array.

Why this answer

VAAI offloads storage operations to hardware arrays, supporting features like Hardware Accelerated Locking (ATS), Block Zero (Full Copy/Zeroing), and Thin Provisioning reclaim.

Full explanation →

93

MCQmedium

A vSphere Foundation cluster has Proactive HA configured with a provider such as Dell OpenManage or HPE OneView. An ESXi host reports a degraded hardware status warning for a redundant power supply. How does Proactive HA respond to this event?

A.Proactive HA generates a recommendation or automatically migrates VMs off the degraded host based on the cluster automation setting.

B.Proactive HA isolates the host from the management network using firewall rules.

C.Proactive HA immediately powers off the host to prevent electrical damage.

D.Proactive HA triggers vSphere HA to perform a hard restart of the host.

AnswerA

Proactive HA responds to provider warnings by evacuating VMs via vMotion based on policy rules.

Why this answer

Proactive HA evaluates vendor-supplied health sensors and acts according to the configured automation level, such as migrating VMs off the degraded host.

Full explanation →

94

MCQmedium

An administrator is configuring a new storage policy in vSphere. The storage policy needs to ensure that virtual machines assigned to it are placed on datastores capable of providing automated tiering between SSD and HDD media. Where is this capability defined?

A.vSphere HA admission control capacity percentages.

B.Storage capabilities derived from VASA providers or user-defined datastore tags.

C.Enhanced vMotion Compatibility baseline configurations.

D.Virtual machine hardware compatibility level settings.

AnswerB

Storage policies evaluate datastore capabilities published by VASA or assigned via tags.

Why this answer

Storage capabilities are exposed to vCenter through storage provider (VASA) integrations or tag-based placement rules.

Full explanation →

95

MCQmedium

An administrator is troubleshooting a VM storage performance issue and observes high disk latency. The datastore is backed by an all-flash array. Which vSphere feature can the administrator enable on the cluster to automatically distribute I/O load across multiple datastores when latency thresholds are breached?

A.Storage vMotion

B.Storage I/O Control (SIOC)

C.Storage DRS (SDRS)

D.Storage Distributed Power Management (DPM)

AnswerC

Storage DRS automates storage load balancing based on latency and capacity.

Why this answer

Storage DRS monitors storage latency and space utilization, automatically migrating VMDKs across datastores in a datastore cluster to balance load.

Full explanation →

96

MCQhard

You have a VVF license assigned. If you need to troubleshoot a Certificate Authority (CA) issue involving 'vmca', where are the logs typically located within the VCSA file system?

A./var/log/vmware/eam/

B./var/log/vmware/sso/

C./var/log/vmware/vmca/

D./var/log/vmware/vpxd/

AnswerC

This is the correct path for VMCA logs.

Why this answer

/var/log/vmware/vmca/ is the designated path for logs related to the VMware Certificate Authority service.

Full explanation →

97

MCQmedium

An administrator needs to configure Enhanced vMotion Compatibility (EVC) on an existing vSphere cluster containing mixed generations of Intel Xeon processors. What is a strict prerequisite before enabling EVC on the cluster?

A.All ESXi hosts in the cluster must be placed into Maintenance Mode simultaneously.

B.All running virtual machines must have CPU hot-add enabled.

C.The cluster must contain no virtual machines powered on with a feature set higher than the baseline.

D.All virtual machines in the cluster must be powered off.

AnswerC

VMs running with CPU features higher than the EVC baseline will fail to power on or require migration/power-off.

Why this answer

All powered-on virtual machines in the cluster must be compatible with the target EVC baseline, often requiring them to be powered off or migrated if their current CPU feature set exceeds the baseline.

Full explanation →

98

MCQhard

A vSphere Foundation administrator needs to configure Network I/O Control (NIOC) version 3 on a vSphere Distributed Switch to guarantee a specific bandwidth percentage for fault tolerance (FT) traffic during periods of high network utilization. Where must this share and reservation configuration be applied?

A.Inside the ESXi host firewall rule set configuration.

B.Inside the advanced properties of each individual virtual machine network adapter.

C.Under the Resource Allocation tab for System Traffic on the vSphere Distributed Switch.

D.Within the physical switch CLI uplink configuration.

AnswerC

System traffic types such as Fault Tolerance, vMotion, and management are managed directly under the VDS Resource Allocation settings for system traffic.

Why this answer

On a vSphere Distributed Switch using NIOC v3, system traffic reservations and shares are configured at the VDS resource allocation level for system traffic types.

Full explanation →

99

MCQeasy

An administrator notices that an ESXi host has lost its connection to vCenter Server, but virtual machines running on the host remain up and accessible via direct console or network. What is the status of the virtual machines while the host is disconnected from vCenter?

A.All virtual machines on the disconnected host immediately enter a suspended state.

B.The virtual machines automatically migrate to surviving hosts via DRS.

C.The virtual machines continue to run normally on the ESXi host; only centralized management and monitoring via vCenter are interrupted.

D.The guest operating systems shut down gracefully after a 5-minute timeout.

AnswerC

ESXi hosts operate autonomously. Loss of vCenter connection does not power down guest workloads.

Why this answer

When an ESXi host disconnects from vCenter, virtual machines continue to run normally because ESXi is a standalone hypervisor. Management from vCenter is temporarily lost, but VM uptime is unaffected.

Full explanation →

100

Multi-Selecthard

An administrator is troubleshooting a Supervisor cluster deployment failure in vSphere Foundation 9.0 where control plane VMs fail to power on. Which THREE log files or diagnostic locations should the administrator inspect on the vCenter Server Appliance? (Choose three)

Select 3 answers

A./var/log/vmware/vpxd/vpxd.log

B./var/log/samba/smbd.log

C./var/log/vmware/wcp/wcp.log

D./var/log/cups/error_log

E./var/log/vmware/clcm/clcm.log

AnswersA, C, E

vpxd.log tracks core vCenter operations and virtual machine provisioning tasks.

Why this answer

Supervisor cluster deployment logs are primarily recorded in vpxd.log, wcp.log (Workload Control Plane service), and clcm.log.

Full explanation →

101

MCQmedium

An administrator is configuring an alert for high CPU usage on a host. Which vSphere feature is used to send this notification to an external email server?

A.vSphere Licensing Service

B.vCenter Server Mail Settings

C.Operations Log Forwarder

D.ESXi Host SMTP Agent

AnswerB

The vCenter Mail settings must be configured to enable SMTP delivery for alarms.

Why this answer

Alarm Actions are configured within vSphere to trigger email notifications when an alarm is raised.

Full explanation →

102

MCQeasy

An administrator is managing a vSphere Foundation environment and needs to place an ESXi host into Maintenance Mode without powering off the virtual machines running on it. Which DRS setting must be configured to ensure these virtual machines are automatically migrated to other hosts in the cluster?

A.Disabled DRS

B.Partially Automated DRS

C.Fully Automated DRS

D.Manual DRS

AnswerC

Fully Automated DRS automatically migrates VMs when entering Maintenance Mode.

Why this answer

Enabling Automated DRS allows vCenter to automatically migrate virtual machines off a host when it enters Maintenance Mode.

Full explanation →

103

MCQeasy

What is the primary function of the vSphere Distributed Switch (VDS) in a multi-host cluster?

A.To encrypt network traffic

B.To replace the need for physical uplink cables

C.To provide physical hardware redundancy

D.To provide a centralized point of network management across hosts

AnswerD

VDS ensures port group consistency across all participating hosts.

Why this answer

The VDS provides a centralized networking interface that spans all hosts in a datacenter, ensuring consistent network configuration.

Full explanation →

104

Multi-Selectmedium

An administrator needs to optimize storage performance and capacity utilization in a vSphere Foundation cluster. Which TWO features or capabilities should be implemented? (Choose two.)

Select 2 answers

A.Storage vMotion to migrate virtual disks between different datastore tiers without downtime

B.Storage I/O Control (SIOC) to prioritize I/O workloads during high latency periods

C.vSphere High Availability to replicate datastore blocks across the network

D.Host Profiles to manage datastore capacity alerts

E.Network I/O Control to compress virtual disk files on the SAN

AnswersA, B

Storage vMotion enables moving disks between high-performance flash arrays and capacity arrays dynamically.

Why this answer

Storage vMotion allows migrating disks to different tiers, and Storage I/O Control manages contention across datastores.

Full explanation →

105

Multi-Selectmedium

An administrator is preparing to enable Workload Management on a vSphere Foundation cluster. Which THREE of the following are required components or configurations? (Choose three.)

Select 3 answers

A.vSphere Distributed Switch

B.Dedicated IP address pool for Supervisor

C.A dedicated ESXi management cluster

D.VMware Tools installed on all host physical NICs

E.Shared storage (vSAN or VMFS)

AnswersA, B, E

A VDS is mandatory for Supervisor cluster network management.

Why this answer

Workload Management requires a distributed switch, vSAN or shared storage, and a dedicated network IP pool for the Supervisor.

Full explanation →

106

MCQhard

An administrator is configuring storage I/O control (SIOC) on a datastore shared by multiple clusters in a vSphere Foundation environment. During peak hours, a batch processing VM overwhelms the datastore with IOPS. Which SIOC configuration prevents this VM from starving other critical workloads?

A.Increase the datastore congestion threshold percentage from 30ms to 50ms.

B.Configure a hard IOPS limit on the specific virtual machine disks causing contention.

C.Disable Storage DRS on the shared datastore cluster.

D.Assign a higher disk share value to the batch processing virtual machine.

AnswerB

A hard IOPS limit caps the storage throughput consumed by the targeted virtual disks.

Why this answer

Setting an explicit IOPS limit or shares configuration per virtual disk in SIOC governs the maximum IOPS a VM can consume on the shared datastore.

Full explanation →

107

Multi-Selecteasy

An administrator is configuring dashboards in VMware Aria Operations for vSphere Foundation. Which TWO widget types are commonly used to display metric trends over time? (Choose two)

Select 2 answers

A.Scoreboard widget

B.Temperature Map widget

C.Area Chart / Line Chart widgets (or Metric Chart configured for lines)

D.Metric Chart widget

E.Topology widget

AnswersC, D

Line and area charts display time-series metric trends.

Why this answer

Trend data over time is best displayed using chart widgets such as Metric Chart or Super Metric charts.

Full explanation →

108

MCQmedium

An administrator notices that vSphere DRS is failing to migrate virtual machines automatically to balance cluster load. Upon checking the cluster configuration, DRS is enabled and set to Fully Automated. What is a likely cause preventing DRS from executing migrations?

A.Enhanced vMotion Compatibility (EVC) mode is set to a baseline higher than the host CPUs.

B.Conflicting VM-to-Host or VM-to-VM affinity rules that prevent placement on the targeted balanced hosts.

C.HA admission control is disabled in the cluster.

D.The vCenter inventory service database is missing the DRS license key.

AnswerB

Affinity and anti-affinity rules take precedence over load balancing recommendations and can block DRS from migrating workloads.

Why this answer

Host or VM affinity rules, or anti-affinity rules, can restrict DRS movement. If rules conflict or if VMs have specific hardware dependencies (e.g., connected USB devices or strict placement rules), DRS will suppress migrations.

Full explanation →

109

MCQhard

During the deployment of a Supervisor cluster in vSphere Foundation 9.0, the validation phase fails with an error indicating that the control plane VM IPs cannot reach the designated Gateway. Upon troubleshooting, the administrator discovers that the Edge Uplink profile is misconfigured. Where is this profile configured within the vSphere Client?

A.In the Cluster > Configure > vSphere Native Edge > Networking wizard.

B.Under the vSphere Distributed Switch settings in Networking > [VDS Name] > Configure > Settings > Network Profiles

C.Within the Workload Management configuration wizard under Cluster > Configure > Workload Management > Networking.

D.Under Administration > Deployment > Supervisor > Network Profiles

AnswerC

Workload Management configuration handles the IP pools, control plane network parameters, and uplink details directly under the cluster settings.

Why this answer

Supervisor cluster networking configuration relies on configuring the vSphere Distributed Switch and associated network segments, where uplink and port group parameters are tied to the distributed switch port groups.

Full explanation →

110

MCQhard

An administrator is reviewing host power management policies in a vSphere Foundation 9.0 cluster. To ensure compliance with strict application performance SLAs while achieving energy efficiency, which DPM (Distributed Power Management) and CPU power management standard should be implemented?

A.Enable aggressive DPM with automated host power-off triggered every 5 minutes.

B.Configure ESXi power management policy to 'High Performance' and tune BIOS to OS-controlled or static maximum frequency.

C.Disable Intel SpeedStep or AMD Cool'n'Quiet without specifying an ESXi power policy.

D.Set CPU power efficiency policy to maximum energy savings across all database nodes.

AnswerB

Correct. High performance policies prevent processor throttling and latency spikes caused by frequency scaling.

Why this answer

Setting the host BIOS and ESXi power management policy to 'High Performance' or 'Static' prevents CPU P-state/C-state latency overheads that could impact sensitive latency-critical applications.

Full explanation →

111

Multi-Selecthard

An administrator is troubleshooting a performance issue in a vSphere Foundation 9.0 environment where virtual machines are experiencing high memory latency and paging. Which THREE esxtop memory metrics or fields should the administrator examine in the memory view ('m') to diagnose the issue? (Choose three.)

Select 3 answers

A.SWCUR (Current swap space used)

B.DAVG (Device latency)

C.MCTLSZ (Ballooned memory size)

D.%CSTP (Co-stop percentage)

E.SWTPS (Swap throughput / pages swapped per second)

AnswersA, C, E

SWCUR shows how much VM memory is currently swapped to disk.

Why this answer

In esxtop memory view ('m'), critical metrics include SWCUR (current swap), SWTPS (swap pages/sec), MCTLSZ (balloon size), and overhead memory metrics.

Full explanation →

112

MCQmedium

An administrator is managing a vSphere cluster where a host has failed. vSphere HA successfully restarts the virtual machines on surviving hosts. However, one specific virtual machine fails to restart because its required virtual disk is locked by another surviving host. What vSphere HA setting or mechanism prevents this locking issue in shared storage environments?

A.Setting the VM swap file location to 'Always store with virtual machine'.

B.Datastore heartbeating and VM component protection (VMCP) settings.

C.Enabling Storage I/O Control on the datastore.

D.Configuring an anti-affinity rule for the VM disks.

AnswerB

VMCP detects storage accessibility failures and coordinates HA responses to prevent stale locks.

Why this answer

Proper storage multipathing, persistent reservation support, and locking mechanisms prevent split-brain storage access during HA failovers.

Full explanation →

113

MCQmedium

A vSphere Foundation administrator is troubleshooting memory overcommit in a cluster. Several virtual machines are experiencing sluggish performance. Which vSphere memory reclamation technique uses a hypervisor-level driver installed inside the guest operating system to reclaim idle memory?

A.Host Memory Compression

B.VMkernel Swap

C.Memory Ballooning

D.Transparent Page Sharing (TPS)

AnswerC

Memory ballooning uses the vmmemctl driver inside the guest to allocate memory and force the guest OS to page out inactive memory.

Why this answer

The vSphere Memory Balloon driver (vmmemctl) works collaboratively with the guest OS to reclaim memory from idle VMs when memory pressure occurs.

Full explanation →

114

Multi-Selecthard

An administrator is troubleshooting a vSphere Distributed Switch (vDS) where network connectivity between virtual machines on different hosts is failing. Which THREE vDS or physical network settings should the administrator verify? (Choose three.)

Select 3 answers

A.Verify that all virtual machine guest operating systems have Windows Firewall enabled.

B.Verify that the MTU (Maximum Transmission Unit) settings on the vDS and physical switch fabric match (e.g., both configured for standard 1500 or jumbo 9000).

C.Ensure that the vCenter Server database is running on Microsoft SQL Server.

D.Check physical uplink (vmnic) status and teaming/failover policies to ensure active links are functioning properly on both ESXi hosts.

E.Verify that the VLAN ID on the distributed port group matches the trunk configuration on the physical switch ports across all connected hosts.

AnswersB, D, E

Mismatched MTU sizes cause packet drops on large frames.

Why this answer

Troubleshooting cross-host VM network connectivity involves checking VLAN tagging consistency on the port group and physical switch trunk ports, verifying physical uplink connectivity (vmnics), and checking MTU settings (jumbo frames consistency).

Full explanation →

115

Multi-Selecthard

Which TWO actions are required to perform a successful cold migration of a virtual machine between two different vCenter servers?

Select 2 answers

A.The VM must have a snapshot

B.The virtual machine must be powered off

C.vSphere Fault Tolerance must be enabled on the source

D.Both vCenter Servers must be in the same Single Sign-On (SSO) domain

E.Both hosts must have the exact same hardware model

AnswersB, D

Cold migration requires the VM to be in a powered-off state.

Why this answer

Cold migration requires both vCenters to be accessible and the source/destination storage to be compatible.

Full explanation →

116

MCQeasy

An administrator notices that a vCenter Server appliance (VCSA 9.0) user interface is loading very slowly, and alarms indicate high disk usage on the root partition. Which tool should the administrator use first to clean up log files or safely manage VCSA disk space?

A.Reinstall vCenter Server using the deployment wizard.

B.Run a Storage vMotion on the VCSA to a larger datastore, which automatically shrinks guest OS partitions.

C.Log into the VAMI (port 5480) or appliance shell via SSH to identify which partition is full and inspect log directories under /var/log/.

D.Reboot the physical ESXi host hosting the VCSA VM.

AnswerC

VAMI and appliance shell commands allow administrators to locate space-consuming logs and safely prune old diagnostic files.

Why this answer

The vCenter Server Appliance Management Interface (VAMI) on port 5480 provides built-in disk space monitoring and tools to manage updates and configuration, while SSH access allows running native disk cleanup scripts or checking logs. However, VAMI or command-line log management is standard. Specifically, checking disk usage via VAMI gives visibility, and the appliance shell provides utilities.

Full explanation →

117

Multi-Selecthard

An administrator is configuring vSphere Trust Authority (vTA) within a vSphere Foundation 9.0 environment to protect encrypted virtual machines. Which THREE components are required to successfully deploy and operate vSphere Trust Authority? (Choose three.)

Select 3 answers

A.Attestation Service (to verify the hardware and software integrity of ESXi hosts)

B.VMware Cloud Foundation SDDC Manager appliance for automated key rotation

C.Key Provider Service (to manage and release encryption keys to verified hosts)

D.Trust Authority Cluster (dedicated to hosting the kernel and attestation services)

E.An external Microsoft Active Directory Certificate Authority for issuing ESXi TPM quotes

AnswersA, C, D

The Attestation Service checks the TPM 2.0 status and boot integrity of workload hosts.

Why this answer

vSphere Trust Authority requires a trusted cluster (running the encrypted workloads), a primary key provider or KMIP-compliant external key manager, and a dedicated attestation service architecture.

Full explanation →

118

Multi-Selecthard

An IT architect is evaluating storage policy options for a vSAN datastore in a vSphere Foundation 9.0 cluster. Which THREE storage policy rules can be enforced via vSAN storage policies? (Choose three.)

Select 3 answers

A.Failures to Resist (FTT / RAID level configuration)

B.Automatic physical switch port VLAN reconfiguration

C.Flash Read Cache Reservation

D.Active Directory domain controller password complexity rules

E.Disk Stripe Width

AnswersA, C, E

Correct. FTT defines how many simultaneous host or disk failures a VM object can withstand.

Why this answer

vSAN storage policies allow administrators to configure rules such as Failures to Resist (FTT), stripe width, and object space reservation.

Full explanation →

119

MCQeasy

An administrator notices that an ESXi host has triggered an alarm stating 'Host connection and power state'. What does this alarm indicate?

A.All virtual machines on the host have been deleted.

B.The physical server power supply has failed.

C.The ESXi host has successfully completed a software upgrade.

D.vCenter Server has lost communication with the ESXi host's management agent (vpxa), causing the host to appear disconnected.

AnswerD

This alarm directly reflects a loss of heartbeats and agent connectivity between vCenter and the ESXi host.

Why this answer

The 'Host connection and power state' alarm fires when vCenter loses communication with the ESXi host (e.g., host disconnects, reboots, or loses agent responsiveness).

Full explanation →

120

MCQeasy

An administrator is planning the IP addressing architecture for a vSphere Foundation 9.0 deployment. Which network segment requires routable IP addresses across the enterprise network?

A.The ESXi management and vCenter Server network.

B.Fault Tolerance logging traffic between isolated secondary virtual machines.

C.Internal private back-end isolated vSAN traffic within a single rack.

D.Local scratch log partition loops.

AnswerA

Correct. Management networks must be accessible across the network to allow administrators and vCenter to reach ESXi hosts.

Why this answer

vCenter Server and ESXi management networks must be routable across the enterprise to enable centralized management, monitoring, and administration.

Full explanation →

121

MCQhard

An administrator is troubleshooting a certificate validation error between vCenter Server 9.0 and an external third-party Identity Provider. The error points to an untrusted root certificate. Where must the administrator upload the custom root CA certificate to establish trust within vCenter's SSO subsystem?

A.Host -> Configure -> Security Profile -> Trusted Certificates.

B.VMware Cloud Builder -> Security -> Certificate Authority Store.

C.Administration -> Single Sign-On -> Configuration -> Certificates -> Trusted Root Certificates.

D.SDDC Manager -> Security -> Certificate Management -> Root Store.

AnswerC

Trusted Root Certificates store in SSO manages certificates used by external IDPs, LDAPS, and identity sources.

Why this answer

To add trusted root certificates for external identity providers or LDAPS/OIDC endpoints in vCenter, the administrator must use the vSphere Client under Administration -> Single Sign-On -> Configuration -> Certificates -> Trusted Root Certificates.

Full explanation →

122

MCQeasy

An administrator needs to export a virtual machine as an OVF template from the vSphere Client. Which menu option should the administrator select after right-clicking the virtual machine?

A.Export OVF Template

B.Clone to Template

C.Migrate to Content Library

D.Convert to Virtual Machine

AnswerA

Export OVF Template packages the VM configuration and disks for download.

Why this answer

Right-clicking a VM and selecting 'Template -> Export OVF Template' generates the package for download.

Full explanation →

123

Multi-Selectmedium

An administrator is deploying and configuring a new VVF 9.0 environment. Which TWO tasks must be completed prior to initiating the Cloud Builder bring-up process? (Choose two.)

Select 2 answers

A.Deploy an external Microsoft SQL clustering group for vCenter database persistence.

B.Configure forward and reverse DNS records for all ESXi hosts, vCenter, NSX, and SDDC Manager components.

C.Upgrade all ESXi hosts to the latest community-supported community VIB drivers via esxcli.

D.Configure vSphere Trust Authority clusters on physical hardware management cards.

E.Prepare and validate the JSON deployment parameter file with correct IP allocations and network settings.

AnswersB, E

DNS infrastructure must be fully operational and configured with correct records before bringing up VVF.

Why this answer

Prior to running Cloud Builder bring-up, the administrator must ensure valid JSON specification files are properly populated and that all required DNS records and static IP address allocations are ready.

Full explanation →

124

Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and configuring VMkernel networking. Which TWO system traffic types can be enabled with a dedicated VMkernel network service checkbox? (Choose two.)

Select 2 answers

A.vSAN

B.Microsoft Active Directory Domain Controller replication

C.Linux kernel makefile compilation

D.Apple AirPlay media streaming

E.vMotion

AnswersA, E

Correct. vSAN has a dedicated VMkernel service checkbox.

Why this answer

VMkernel adapters support dedicated checkboxes for system traffic types including vMotion, vSAN, Provisioning, and Fault Tolerance logging.

Full explanation →

125

MCQhard

An infrastructure architect is configuring network security standards for a vSphere Foundation 9.0 environment. They want to ensure that all virtual machine traffic traversing a vSphere Distributed Switch cannot be sniffed by compromised guest operating systems using promiscuous mode. Which configuration setting must be enforced?

A.Set Promiscuous Mode, MAC Address Changes, and Forged Transmits to 'Reject' at the distributed port group security policy level.

B.Configure IP Source Guard on the physical switch access ports.

C.Deploy an external hardware tap appliance inline with the physical uplinks.

D.Enable BPDU Guard on all physical uplink switch ports connected to the ESXi host NICs.

AnswerA

Correct. Rejecting these settings prevents unauthorized packet capture and traffic spoofing at the virtual switch port level.

Why this answer

Port group security policies on the vSphere Distributed Switch include Promiscuous Mode, MAC Address Changes, and Forged Transmits, which should be set to 'Reject' to prevent sniffing and spoofing.

Full explanation →

126

Multi-Selectmedium

Which THREE factors influence vSphere HA virtual machine restart priority?

Select 3 answers

A.Virtual Machine restart priority settings

B.VMware Tools heartbeat status

C.Virtual Machine disk size

D.Host resource capacity

E.VMware vSphere Distributed Switch port speed

AnswersA, B, D

High, Medium, and Low settings dictate restart order.

Why this answer

HA uses the restart priority setting, the presence of specific dependencies, and host capacity availability.

Full explanation →

127

Multi-Selecthard

An administrator is configuring identity federation in vSphere Foundation 9.0 using an OIDC-compliant identity provider. Which THREE configuration parameters must be supplied in the vSphere Client under Identity Provider settings? (Choose three)

Select 3 answers

A.Root ESXi host administrative SSH password

B.Physical Top-of-Rack switch IP address

C.Issuer URI (Discovery endpoint)

D.Redirect URI / Callback URL

E.Client ID and Client Secret

AnswersC, D, E

The Issuer URI is required to fetch OIDC well-known configuration metadata.

Why this answer

Configuring an OIDC identity provider in vCenter requires parameters such as the Issuer URI, Client ID, Client Secret, and redirect URIs.

Full explanation →

128

Multi-Selectmedium

Which TWO items are required to configure an Active Directory identity source in vCenter?

Select 2 answers

A.vCenter Server license key

B.Active Directory Domain Name

C.vSAN datastore path

D.Active Directory Service Account Credentials

E.SNMP community string

AnswersB, D

You must specify the domain to join.

Why this answer

The domain name and machine account or service account credentials are required.

Full explanation →

129

MCQmedium

An administrator observes that log forwarding to a centralized server is not working. Where should they check the log settings in the vCenter Server Appliance?

A.SSH > /etc/syslog.conf

B.vSphere Client > Configure > Logging

C.vSphere Client > Administration > Log Browsing

D.Port 5480 > Administration > Syslog

AnswerD

The VAMI (port 5480) includes the configuration for remote syslog servers.

Why this answer

The vCenter Server Appliance Management Interface (VAMI) is the correct place to configure remote logging.

Full explanation →

130

MCQeasy

An administrator needs to apply a VMware vSphere Foundation 9.0 license key to a newly deployed vCenter Server instance and its associated ESXi hosts. Which inventory view in the vSphere Client must the administrator use to manage and assign these licenses?

A.Go to Administration > Licensing to add the license keys and assign them to vCenter Server, ESXi hosts, and clusters.

B.Navigate to Lifecycle Manager > Updates > Licensing to synchronize keys with VMware Cloud Services.

C.Open Host Profiles and attach a license profile to each ESXi host.

D.Right-click the vCenter Server root object and select Edit Settings > Licensing.

AnswerA

The Licensing section under Administration is the dedicated location for managing product licenses in vSphere 9.0.

Why this answer

License management across vCenter and inventory objects is centralized in vCenter Administration under Licensing.

Full explanation →

131

MCQhard

An enterprise architect is designing a multi-site vSphere Foundation 9.0 environment with stretched clusters. When configuring vSAN stretched cluster witness traffic, what is the architectural recommendation regarding the witness network connection?

A.Ensure the witness network link meets minimum bandwidth requirements and maintains an RTT latency of 100 milliseconds or less.

B.Configure the witness node to run on the exact same physical ESXi host as the primary storage controller.

C.Route witness traffic exclusively through unencrypted public dial-up modems.

D.Disable all IP keepalive heartbeats on the witness vmkernel adapter.

AnswerA

Correct. Witness traffic requires low latency (<100ms RTT) and adequate bandwidth depending on component counts.

Why this answer

The vSAN witness traffic must traverse a reliable, lower-latency IP network connection to the primary cluster nodes, with specific minimum bandwidth and latency thresholds (typically < 100ms RTT for witness traffic, < 5ms for data sites).

Full explanation →

132

MCQhard

During a firmware update via vSphere Lifecycle Manager, an ESXi host enters a non-compliant state. What is the first step the administrator should take to identify the root cause?

A.Remove the host from the cluster

B.Reboot the host

C.Check the Image Compliance status in the Updates tab

D.Refresh the inventory

AnswerC

This tab lists the specific components that failed to match the desired state image.

Why this answer

Viewing the 'Image Compliance' status in the cluster's 'Updates' tab provides detailed information about why a host is non-compliant.

Full explanation →

133

Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure networking redundancy. Which TWO teaming and failover methods are supported on vSphere Distributed Switches? (Choose two.)

Select 2 answers

A.Route Based on Originating Virtual Port

B.Border Gateway Protocol Autonomous System Path Prepending

C.Spanning Tree Protocol Root Bridge Selection

D.Route Based on IP Hash

E.Point-to-Point Serial Line Framing

AnswersA, D

Correct. Port-based routing assigns virtual ports to specific physical uplinks.

Why this answer

VDS support multiple teaming policies including Route Based on Originating Virtual Port and Route Based on IP Hash.

Full explanation →

134

MCQhard

An administrator is designing a stretched vSphere Foundation 9.0 cluster across two data centers separated by 30km. According to vSphere clustering design best practices, where should the vCenter Server Appliance be placed?

A.Hosted in one of the primary data centers with vCenter High Availability (VCHA) configured across the sites, ensuring the active, passive, and witness nodes are appropriately distributed.

B.Installed directly onto a physical laptop kept at the administrator's desk.

C.Split evenly across both data centers running active-active clustering simultaneously on the same IP address.

D.Running exclusively inside a public cloud AWS region with no local network connectivity to the ESXi hosts.

AnswerA

Correct. VCHA protects the vCenter management plane across sites when deployed with proper node separation.

Why this answer

Placing vCenter Server on one of the preferred data centers or running it with high availability (such as vCenter HA) inside the primary site while ensuring database consistency is standard architecture, avoiding split-brain across sites without proper witness support.

Full explanation →

135

MCQhard

An administrator is managing a vSphere Foundation 9.0 cluster using vSphere Lifecycle Manager (vLCM) with an image-based approach. The compliance check reports that several ESXi hosts are non-compliant because their firmware versions do not match the vendor add-on specification. However, the hardware vendor's Hardware Support Manager (HSM) extension is not showing any available firmware updates. What is the most likely cause?

A.The Hardware Support Manager (HSM) vCenter extension is offline, unregistered, or experiencing authentication issues with the vendor's firmware repository.

B.Firmware updates require a legacy Update Manager baseline attached alongside the vLCM image.

C.The ESXi hosts are running in maintenance mode, which temporarily suspends HSM firmware polling.

D.The vCenter Server firewall is blocking inbound TCP port 443 traffic from the ESXi host management vmknics.

AnswerA

vLCM depends on the registered HSM provider plugin to pull firmware catalogs and perform compliance checks.

Why this answer

vLCM image-based firmware integration relies on a registered Hardware Support Manager (HSM) vCenter extension provided by the hardware vendor. If the HSM provider is offline, unregistered, or missing valid credentials, firmware catalogs cannot be queried.

Full explanation →

136

MCQhard

An administrator is troubleshooting a memory-constrained vSphere cluster. A virtual machine with a configured memory size of 32 GB has a balloon driver (vmmemctl) that is actively reclaiming 8 GB of guest memory. Which underlying condition explains why the memory balloon driver is active?

A.The guest operating system has experienced a hardware memory error on the physical DIMM.

B.The virtual machine has exceeded its configured memory reservation limit.

C.The virtual machine has a memory limit set lower than its active working set.

D.The ESXi host memory usage has crossed the active reclamation threshold, requiring memory reclamation.

AnswerD

Host-level memory pressure forces ESXi to use ballooning to reclaim guest OS memory.

Why this answer

Ballooning activates when host-level memory consumption exceeds the target free threshold, prompting the ESXi hypervisor to reclaim memory from VMs.

Full explanation →

137

Multi-Selectmedium

An enterprise architect is planning the deployment of vSphere Fault Tolerance (FT) in a vSphere Foundation 9.0 cluster. Which THREE requirements or limitations apply to virtual machines configured with vSphere FT? (Choose three.)

Select 3 answers

A.Compliance with maximum vCPU limits supported by the specific vSphere FT release

B.Dedicated FT logging VMkernel adapters configured on participating ESXi hosts

C.Disabling all network redundancy across the cluster uplinks

D.Hosting the primary VM exclusively on a local unshared USB drive

E.Shared storage accessible simultaneously by both primary and secondary host nodes

AnswersA, B, E

Correct. FT has strict vCPU count limitations per virtual machine to maintain deterministic instruction synchronization.

Why this answer

vSphere FT requires specific vCPU limits depending on the version, dedicated FT logging network adapters, and shared storage accessible by both hosts.

Full explanation →

138

Multi-Selecteasy

An administrator is reviewing vSphere Foundation 9.0 licensing and deployment components. Which TWO features are typically unlocked or enhanced when deploying the complete vSphere Foundation suite compared to standalone vSphere Standard? (Choose two)

Select 2 answers

A.Free unlimited perpetual hardware warranties from server vendors

B.Automatic physical server rack assembly and cabling automation

C.Direct database write access to the vCenter embedded PostgreSQL database

D.VMware Aria Operations and Aria Operations for Logs integration

E.Advanced vSphere Lifecycle Manager (vLCM) image-based cluster management

AnswersD, E

Aria Operations and Log Insight integration are key components of the vSphere Foundation stack.

Why this answer

vSphere Foundation includes advanced capabilities such as vSphere Lifecycle Manager, Aria Operations integration, vSAN storage, and Tanzu Kubernetes capabilities.

Full explanation →

139

MCQmedium

An administrator is replacing certificates in a vSphere Foundation 9.0 environment and needs to verify the status of the VMware Certificate Authority (VMCA). Which CLI command executed via SSH on the vCenter Server Appliance checks the VMCA service status?

A.certool --query-status

B.service-control --status vmware-vmca

C.vpxd -check-vmca-status

D.esxcli vmca status get

AnswerB

The service-control utility with '--status' and the service name 'vmware-vmca' queries the running state of the VMCA service.

Why this answer

vCenter services are managed using the service-control command-line utility. Checking VMCA status involves querying the vmware-stssvc or vmca services using service-control.

Full explanation →

140

MCQmedium

An administrator is troubleshooting a snapshot deletion issue where a virtual machine's snapshot consolidate task fails repeatedly with a 'file locked' error. What is the recommended troubleshooting step to resolve this condition?

A.Reboot the vCenter Server appliance to clear guest OS file locks.

B.Power on the VM with '-f forceConsolidate' from the ESXi command line.

C.Check for stale backup operations, third-party software locks, or hanging CBT processes holding file locks on the delta VMDK files, and terminate the offending process or backup session.

D.Instantly format the datastore using VMFS-6 repair mode.

AnswerC

Third-party backup tools or stuck CBT operations frequently lock delta disks, preventing consolidation.

Why this answer

If a snapshot consolidation fails due to file locks, it is often because a backup application, third-party security agent, or dangling process has a lock on the delta disk vmdk files. Checking active tasks or releasing the lock is required.

Full explanation →

141

MCQmedium

An administrator is troubleshooting a performance issue where virtual machines in a cluster are experiencing high memory contention. The cluster has Distributed Resource Scheduler (DRS) enabled. How does DRS assist in mitigating memory contention across cluster hosts?

A.By migrating virtual machines from heavily utilized hosts to hosts with available memory resources via vMotion.

B.By compressing all VM guest operating systems into smaller memory footprints.

C.By powering off idle virtual machines when memory utilization exceeds 50%.

D.By automatically expanding physical RAM on ESXi hosts using software virtualization.

AnswerA

DRS balances memory load across hosts by moving memory-constrained VMs to hosts with lower memory utilization.

Why this answer

DRS monitors cluster resource utilization (both CPU and memory) and migrates virtual machines via vMotion from heavily utilized hosts to hosts with more available physical RAM.

Full explanation →

142

MCQmedium

You are deploying a VVF cluster and need to configure the Supervisor. Which tool is primarily used to enable the Supervisor service on a vSphere Cluster?

A.vSphere Client

B.vSphere Lifecycle Manager

C.vCenter Server CLI

D.Aria Operations

AnswerA

The vSphere Client provides the Workload Management workflow to enable the Supervisor.

Why this answer

The vSphere Client is the primary administrative interface for enabling and configuring the Supervisor service on a cluster.

Full explanation →

143

MCQhard

An administrator is troubleshooting a network issue where a virtual machine cannot ping its default gateway. The administrator runs 'esxcli network ip connection list' on the ESX host. Why is this specific command unhelpful for troubleshooting a VM's internal guest networking path?

A.Because virtual machines do not use TCP/IP connections in vSphere Foundation 9.0.

B.Because the command displays TCP/IP connections belonging to the ESXi VMkernel stack rather than internal virtual machine guest network flows or vDS port traffic.

C.Because esxcli commands are only permitted when vCenter Server is offline.

D.Because the command only works for IPv6 addresses and drops IPv4 queries.

AnswerB

VM internal traffic and virtual switch packet forwarding are handled by the hypervisor's network switch layer, not the ESXi host's IP connection table.

Why this answer

'esxcli network ip connection list' shows active TCP/IP connections terminated on the ESXi VMkernel stack itself, whereas virtual machine network traffic flows through virtual switch ports and vNICs, bypassing the ESXi management stack unless it involves VMkernel services like vMotion or NFS.

Full explanation →

144

MCQhard

An administrator is replacing default VMCA-signed certificates with custom Certificate Authority (CA) signed certificates in a vSphere Foundation 9.0 environment using vSphere Certificate Manager. During the replacement of machine SSL certificates, the operation fails at the step of generating the Certificate Signing Request (CSR). What is the most likely reason for this failure?

A.The `certtool.cfg` configuration file contains incorrect or missing parameters such as organization name, country code, or IP address fields.

B.The custom CA root certificate was imported into the user store instead of the MACHINE_SSL_STAMP store.

C.The vCenter Server Appliance root password has expired and must be updated via the VAMI before modifying certificates.

D.VMware Certificate Authority (VMCA) service was stopped on the Platform Services Controller.

AnswerA

vSphere Certificate Manager reads `certtool.cfg` to build the CSR; invalid syntax or missing required fields causes immediate failure.

Why this answer

The certificate manager relies on the configuration parameters defined in the `certtool.cfg` file. If fields such as Organization, Country, or IPAddress are improperly formatted or missing, CSR generation fails.

Full explanation →

145

MCQeasy

An administrator is configuring vSphere HA on a VVF cluster and wants to ensure that critical virtual machines are restarted with higher priority than non-critical virtual machines during a host failure. Where is this configured?

A.VCF Operations -> Policies -> High Availability Rules.

B.Cluster -> Configure -> vSphere Availability -> VM Restart Priority.

C.SDDC Manager -> Cluster Settings -> HA Policy.

D.Virtual Machine -> Edit Settings -> VM Options -> Boot Options.

AnswerB

VM Restart Priority settings allow grouping virtual machines into High, Medium, or Low priority restart tiers.

Why this answer

vSphere HA VM restart priority is configured under Cluster -> Configure -> vSphere Availability -> VM Restart Priority.

Full explanation →

146

Multi-Selectmedium

An administrator is configuring a new vSphere cluster and needs to ensure that mission-critical virtual machines are automatically restarted if the host they reside on fails. Which TWO features or services must be properly configured to achieve this behavior? (Choose two.)

Select 2 answers

A.Storage I/O Control (SIOC) enabled on all datastores.

B.Virtual Machine Component Protection (VMCP) set to disabled.

C.vSphere High Availability (HA) enabled on the cluster.

D.Enhanced vMotion Compatibility (EVC) enabled.

E.vSphere Distributed Resource Scheduler (DRS) enabled with automated placement.

AnswersC, E

vSphere HA automatically restarts VMs on surviving hosts upon host failure.

Why this answer

vSphere HA and DRS work together to monitor host health and restart VMs upon failure.

Full explanation →

147

MCQmedium

An administrator wants to configure an alarm in vSphere 9.0 to trigger an email notification when a datastore's free space drops below 15%. After creating the alarm definition and specifying the trigger condition, no emails are received when the threshold is breached. What is the most likely missing configuration?

A.The datastore was formatted with VMFS-5 instead of VMFS-6.

B.The ESXi firewall is blocking outbound TCP port 443 to the mail server.

C.SNMP traps must be enabled on the physical switch interconnecting the management network.

D.The vCenter mail server (SMTP) settings have not been defined in vCenter Server settings.

AnswerD

vCenter requires valid SMTP server parameters to dispatch alert emails.

Why this answer

To send email alerts from vCenter, the SMTP mail server settings must be configured in vCenter Server Settings under 'General' or 'Email' configuration, and the alarm action must be explicitly set to 'Send a notification email'.

Full explanation →

148

MCQmedium

A administrator needs to ensure that a critical production VM always has access to 4GB of physical RAM. Which memory management setting should be configured?

A.Memory Shares

B.Memory Reservation

C.Memory Limit

D.Memory Ballooning

AnswerB

Reservations provide a guaranteed allocation of physical memory.

Why this answer

Setting a memory reservation ensures that the hypervisor reserves that specific amount of physical RAM for the virtual machine.

Full explanation →

149

MCQhard

An administrator is reviewing performance dashboards in VCF Operations integrated with VVF 9.0. A critical virtual machine is experiencing high CPU ready time, but the predefined dashboard does not show the underlying physical NUMA node contention. Which action should the administrator take to isolate the NUMA performance bottleneck?

A.Navigate to the VM object in VCF Operations, open the Metrics tab, and examine CPU -> Interconnect and NUMA metrics.

B.Log into the ESXi shell and execute the command 'esxtop', press 'm', and review the SWCUR column.

C.Open SDDC Manager and run the Virtual Machine Hardware Health diagnostic script.

D.Modify the vCenter Server Advanced Settings to force all VMs onto a single NUMA node.

AnswerA

VCF Operations tracks physical topology metrics, including NUMA node locality and remote memory access latency.

Why this answer

To view physical NUMA node allocation and memory/CPU locality metrics in VCF Operations, the administrator should navigate to the virtual machine object, select the 'Advanced' or 'Metric' analysis tab, and search for CPU utilization metrics broken down by NUMA node or remote memory access.

Full explanation →

150

Multi-Selectmedium

An administrator is troubleshooting a storage performance problem where virtual machines are experiencing high I/O latency. Which TWO techniques or features can help optimize storage performance in a vSphere Foundation environment? (Choose two.)

Select 2 answers

A.Set the virtual machine memory reservation to 0% to free up storage overhead.

B.Configure the Path Selection Policy (PSP) to 'Round Robin' for multi-pathing active-active storage arrays to balance I/O across available paths.

C.Set all VMDK files to thick-provision lazy zeroed across all datastores regardless of available capacity.

D.Configure Storage I/O Control (SIOC) to manage datastore queue congestion and prioritize critical workloads.

E.Disable all ESXi firewall rules to accelerate network-attached storage traffic.

AnswersB, D

Round Robin distributes I/O across multiple active paths, optimizing throughput and load balancing.

Why this answer

Storage performance can be optimized by enabling Storage I/O Control (SIOC) to manage queue contention, using all-flash storage or vSAN disk groups with appropriate caching, and selecting correct Path Selection Policies (PSP) like Round Robin for multi-pathing.

Full explanation →

Page 2 of 7

All pages

Practice VCP-VVF by domain

Target a specific domain to shore up weak areas.

Deploy Configure And Operate Vvf IT Architectures Technologies Standards Vmware Vsphere Foundation Fundamentals Troubleshoot And Optimize

See all domains with question counts →