Courseiva

VMware vSphere Foundation 9.0 Administrator (VCP-VVF, 2V0-16.25) (VCP-VVF) (VCP-VVF) — Questions 151–225

517 questions total · 7pages · All types, answers revealed

Take a mock examExam hub
Page 2

Page 3 of 7

Page 4
151
MCQeasy

An IT planner is reviewing network topologies for a vSphere Foundation 9.0 environment. Which standard defines the encapsulation method used by Geneve tunnels when deployed with NSX in a modern data center design?

A.VLAN tagging (IEEE 802.1Q)
B.Point-to-Point Tunneling Protocol (PPTP)
C.Fibre Channel over Ethernet (FCoE)
D.Geneve (Generic Network Virtualization Encapsulation)
AnswerD

Correct. Geneve is the standard encapsulation protocol used by modern VMware networking architectures to support extensible metadata.

Why this answer

NSX utilizes Geneve (Generic Network Virtualization Encapsulation) as its standard tunneling protocol to encapsulate tenant packets over an IP fabric.

Full explanation →
152
MCQmedium

You are deploying a VVF Supervisor cluster. During the initial configuration of the Workload Management service, which prerequisite must be satisfied to allow the control plane VMs to communicate with the management network?

A.Configure an ephemeral port group for the management network
B.Disable DRS on the cluster before initiating the Supervisor deployment
C.Define a dedicated IP address range for the control plane VMs in the workload network
D.Enable vSAN integration on the management VMkernel interface
AnswerC

A specific IP range must be provided for control plane communication within the Workload Management configuration.

Why this answer

The Supervisor cluster requires a dedicated IP range for the control plane VMs that is routable to the vCenter Server and NSX Manager instances.

Full explanation →
153
Multi-Selecthard

An enterprise environment using vSphere Foundation requires strict regulatory compliance. Which THREE features can be leveraged to secure virtual machines and data at rest or in transit? (Choose three.)

Select 3 answers
A.Fault Tolerance dual-shadow replication to encrypt physical network cards
B.Encrypted vMotion to secure virtual machine data in transit during migration
C.UEFI Secure Boot capability for virtual machines to prevent unauthorized boot loaders from executing
D.Storage DRS anti-affinity rules to encrypt storage pools
E.VM Encryption to protect virtual machine disks and memory state at rest
AnswersB, C, E

Encrypted vMotion encrypts the memory and device state transferred between ESXi hosts during migration.

Why this answer

Security features in vSphere include VM Encryption for data at rest, Encrypted vMotion for data in transit, and Secure Boot for protecting the guest/host boot sequence.

Full explanation →
154
MCQhard

An administrator is troubleshooting a memory overcommitment issue on an ESXi 9.0 host. When host memory is fully utilized, ESXi reclaims memory using ballooning, transparent page sharing (TPS), and memory compression. In what order does ESXi typically attempt these memory reclamation techniques?

A.Memory Compression, Swapping, Ballooning, and then TPS.
B.Ballooning first, followed instantly by powering off idle virtual machines.
C.TPS (Transparent Page Sharing), followed by Ballooning (vmmemctl), Memory Compression, and finally Swapping.
D.Swapping immediately, followed by Ballooning, TPS, and Memory Compression.
AnswerC

ESXi attempts non-intrusive methods like TPS first, then asks the guest via ballooning to free memory, compresses pages, and lastly swaps memory to disk if necessary.

Why this answer

ESXi first attempts Transparent Page Sharing (TPS), then ballooning (MCTLSZ), then memory compression, and finally swapping if pressure persists.

Full explanation →
155
MCQeasy

Which vSphere Foundation feature provides a unified view of resource consumption across multiple clusters?

A.vSphere Lifecycle Manager
B.Host Profiles
C.vCenter Server Performance Charts
D.Aria Operations Dashboards
AnswerD

Aria Operations is designed for cross-cluster and cross-vCenter monitoring.

Why this answer

Aria Operations provides consolidated dashboards that aggregate data from multiple vCenter servers and clusters.

Full explanation →
156
Multi-Selecthard

Which THREE steps are required to properly prepare a vSphere cluster for Supervisor deployment?

Select 3 answers
A.Ensure vSphere HA is enabled
B.Disable DRS to prevent conflicts
C.Enable vSAN storage policy support
D.Disable Content Library synchronization
E.Configure vSphere Distributed Switch for networking
AnswersA, C, E

HA is a prerequisite for Supervisor cluster resilience.

Why this answer

NSX/vDS networking, vSAN storage, and DRS/HA settings are mandatory for Supervisor clusters.

Full explanation →
157
MCQmedium

You need to ensure that specific administrators can only manage virtual machines in a specific folder. What is the correct way to implement this in VVF?

A.Use the vCenter Server permission model to assign roles at the folder level
B.Enable folder-based lockdown mode
C.Configure vSphere Tags to restrict access
D.Modify the global administrator group to exclude specific folders
AnswerA

Permissions are hierarchical; applying them at the folder level limits the scope to that folder and child objects.

Why this answer

Permissions are applied by creating a role and assigning it to a user/group at the specific object level in the inventory.

Full explanation →
158
Multi-Selecthard

An administrator is troubleshooting a vSAN 9.0 stretched cluster network separation issue. Which THREE network requirements must be strictly met between the data sites and the witness site to ensure proper vSAN stretched cluster operation? (Choose three.)

Select 3 answers
A.Running all virtual machines in nested ESXi environments across the witness site.
B.Completely disabling all physical switch firewalls and spanning tree protocols across all access ports.
C.Maximum latency of 10 milliseconds round-trip time (RTT) between the two primary data sites.
D.Maximum latency of 100 milliseconds RTT between each data site and the witness site.
E.Dedicated minimum bandwidth requirements for vSAN traffic based on workload sizing and inter-site replication demands.
AnswersC, D, E

Data sites in a vSAN stretched cluster require low latency (<10ms RTT) for synchronous replication.

Why this answer

vSAN stretched clusters require specific latency limits (e.g., < 10ms round-trip time between data sites, < 100ms between data sites and witness), dedicated bandwidth, and non-routable or routable IP connectivity depending on layout, with specific MTU support.

Full explanation →
159
Multi-Selectmedium

An administrator is reviewing licensing and asset management across a VVF 9.0 deployment. Which TWO statements regarding VVF licensing are correct? (Choose two.)

Select 2 answers
A.VVF licenses are allocated based on physical CPU core counts of the managed ESXi hosts.
B.VVF licensing strictly prohibits the use of vSAN storage and requires separate standalone vSAN keys.
C.SDDC Manager provides centralized tracking and assignment of VVF license keys across the inventory.
D.Cloud Builder is required to validate license keys daily during normal operations.
E.VVF licenses must be applied individually via the ESXi DCUI on each host without vCenter.
AnswersA, C

VMware vSphere Foundation licensing is metered and licensed per physical CPU core.

Why this answer

VVF licenses are typically based on per-core metrics for ESXi hosts and include entitlements for vSphere, vSAN, NSX, and VCF Operations components.

Full explanation →
160
Multi-Selecteasy

An administrator needs to monitor cluster resource utilization and set up alerts using VMware Aria Operations in a vSphere Foundation environment. Which TWO object types can have custom alert definitions applied to them? (Choose two)

Select 2 answers
A.Physical Top-of-Rack Switch port cables
B.Individual user passwords in vCenter SSO
C.Virtual Machines
D.ESXi Clusters
E.vCenter database transaction log files
AnswersC, D

Virtual Machines are primary objects that support custom alerts and symptoms.

Why this answer

Aria Operations allows custom alert definitions to be applied across various inventory objects, including Virtual Machines and ESXi Clusters.

Full explanation →
161
Multi-Selecthard

An infrastructure architect is planning disaster recovery and migration strategies in a vSphere Foundation 9.0 environment. Which THREE migration methods are natively supported by vCenter Server for moving running virtual machines? (Choose three.)

Select 3 answers
A.Physical unzipping of VMDK files via manual FTP client uploads
B.Physical courier shipping of hard drives via postal mail services
C.Storage vMotion (migrating virtual disk files between datastores without downtime)
D.Enhanced vMotion (migrating both compute host and storage datastore simultaneously)
E.vMotion (migrating compute execution across hosts without downtime)
AnswersC, D, E

Correct. Storage vMotion migrates VMDK storage files across datastores while powered on.

Why this answer

vCenter Server natively supports vMotion (compute only), Storage vMotion (storage only), and Enhanced vMotion (both compute and storage simultaneously across clusters or vCenters).

Full explanation →
162
MCQmedium

Which component is responsible for orchestrating the lifecycle of ESXi hosts in a cluster?

A.vSphere Lifecycle Manager
B.vCenter Update Manager
C.VMware Aria Automation
D.Host Profile Manager
AnswerA

vLCM is the lifecycle management tool.

Why this answer

vSphere Lifecycle Manager (vLCM) is the dedicated component for managing ESXi lifecycle.

Full explanation →
163
MCQeasy

An administrator is setting up centralized log management for a vSphere Foundation 9.0 environment. Which VMware product integrates seamlessly with ESXi and vCenter Server to provide comprehensive log analysis, real-time log streaming, and troubleshooting dashboards?

A.vSphere HA Datastore Protector
B.VMware Aria Operations for Logs (Log Insight)
C.VMware NSX Edge Firewall Manager
D.vSphere Lifecycle Manager
AnswerB

Aria Operations for Logs collects syslog data from ESXi, vCenter, and other devices, offering pre-built dashboards and powerful query capabilities.

Why this answer

VMware Aria Operations for Logs (formerly vRealize Log Insight) provides centralized log management, analytics, and troubleshooting for vSphere environments.

Full explanation →
164
Multi-Selecthard

An administrator is troubleshooting identity and access management in vSphere Foundation 9.0 where Active Directory over LDAP is used as an Identity Provider. Users report intermittent login failures with 'Invalid Credentials' errors even though their passwords are correct. Which THREE troubleshooting steps should the administrator perform? (Choose three.)

Select 3 answers
A.Check the vCenter Single Sign-On logs (`sso.log`) located in `/var/log/vmware/sso/` for LDAP binding errors.
B.Verify that time synchronization (NTP) is accurate across the vCenter Server Appliance, ESXi hosts, and Active Directory Domain Controllers.
C.Validate that the LDAP bind account credentials have not expired and retain read access to the user search base DN.
D.Convert the identity source to use Local OS users instead of Active Directory.
E.Reinstall the vCenter Server Appliance from scratch to regenerate the security token service (STS) certificates.
AnswersA, B, C

The SSO logs provide detailed error codes regarding LDAP connection timeouts and binding failures.

Why this answer

Troubleshooting AD over LDAP issues involves verifying identity source settings, checking clock synchronization across domain controllers and vCenter, and testing group membership mappings.

Full explanation →
165
MCQeasy

An administrator needs to apply a license key to a new vSphere Foundation deployment. Where should this task be performed in the vSphere Client?

A.Global Inventory Lists > vCenter Servers > Licensing
B.Administration > Licensing > Licenses
C.Host and Clusters > Configure > Licensing
D.Workload Management > Licensing
AnswerB

This is the standard location for managing all vSphere and vSAN license keys.

Why this answer

Licensing in vSphere Foundation is managed globally through the vCenter Server Administration menu.

Full explanation →
166
MCQhard

An administrator is troubleshooting an issue where ESXi host syslog messages are not being forwarded to a remote syslog server. Which command or configuration interface should be checked to verify the local syslog target setting on the ESXi host?

A.esxcli system syslog config get
B.esxcli vm kernel log list
C.esxcli system account list
D.esxcli network firewall get
AnswerA

This command displays the current remote syslog server address, port, and local log settings on the ESXi host.

Why this answer

ESXi host syslog settings can be inspected and modified using 'esxcli system syslog config get'.

Full explanation →
167
MCQmedium

An administrator is deploying a cluster that will host latency-sensitive workloads, such as real-time voice and trading applications. Which advanced vSphere feature should be enabled to guarantee that virtual machine vCPUs are pinned directly to physical CPU cores without scheduling latency?

A.Enhanced vMotion Compatibility set to the latest CPU generation.
B.Latency Sensitivity set to High on the virtual machine advanced settings.
C.Storage I/O Control set to maximum priority.
D.Virtual Machine Component Protection set to aggressive restart.
AnswerB

High Latency Sensitivity disables CPU yielding and dedicates physical cores to the VM.

Why this answer

Latency Sensitivity settings (configured as 'High' on the VM) bypass normal CPU scheduler sharing, dedicating physical CPU resources to the virtual machine.

Full explanation →
168
MCQmedium

An administrator manages a vSphere 9.0 cluster with vSphere DRS enabled. A critical database virtual machine running in the cluster is experiencing CPU performance degradation because it frequently contends for resources with less important batch processing VMs. Which action should the administrator take in the vSphere Client to prioritize this critical VM without changing the cluster-wide DRS automation level?

A.Enable vSphere Predictive DRS using VMware Aria Operations to manually migrate the batch processing VMs.
B.Navigate to the cluster, go to Configure > vSphere DRS > VM Overrides, and add the database VM with a custom automation level or adjusted shares.
C.Edit the cluster settings and change the DRS Aggressiveness slider to Level 5 (Aggressive).
D.Create a new Host Affinity Rule to bind the database VM to a dedicated physical ESXi host within the cluster.
AnswerB

VM Overrides allow fine-grained control over DRS behavior for individual virtual machines.

Why this answer

To prioritize a specific virtual machine without altering the cluster-wide DRS automation level, the administrator can configure VM Overrides. In VM Overrides, specific settings like automation level or CPU/Memory shares can be tailored for individual VMs.

Full explanation →
169
Multi-Selectmedium

An enterprise architect is designing a vSphere Foundation 9.0 cluster and configuring vSphere DRS (Distributed Resource Scheduler). Which THREE migration triggers or automation levels can be configured in DRS? (Choose three.)

Select 3 answers
A.Manual (DRS generates recommendations but does not execute migrations automatically)
B.Randomized Chaos Mode (DRS migrates every VM every 30 seconds regardless of load)
C.Partially Automated (DRS automatically migrates VMs at power-on, but recommends load-balancing migrations)
D.Fully Automated (DRS automatically migrates VMs for initial placement and ongoing load balancing)
E.External Cloud Lock Mode (DRS locks all hosts and prevents any migrations)
AnswersA, C, D

Correct. Manual mode prompts the administrator with migration suggestions without applying them automatically.

Why this answer

DRS supports automation levels including Manual, Partially Automated, and Fully Automated, as well as proactive and load-balancing triggers.

Full explanation →
170
MCQmedium

An administrator notices that a virtual machine's clock is drifting significantly compared to the ESXi host time. Which configuration best ensures accurate time synchronization for the virtual machine in a vSphere environment?

A.Configure the ESXi host BIOS to sync time directly with the virtual machine's vmx file.
B.Disable VMware Tools entirely and let the physical switch handle clock synchronization.
C.Configure NTP inside the guest operating system and appropriately manage VMware Tools time synchronization settings to prevent conflicting time adjustments.
D.Set vSphere DRS to automatically migrate time-drifted VMs to the fastest CPU host.
AnswerC

Relying solely on VMware Tools can cause large time jumps during heavy load or migrations, whereas guest NTP combined with careful tool sync maintains accurate time.

Why this answer

Enabling VMware Tools periodic time synchronization alongside configuring standard NTP inside the guest operating system ensures the VM clock remains accurate without abrupt time jumps.

Full explanation →
171
MCQmedium

An enterprise administrator is configuring vSphere Proactive HA in a vSphere Foundation 9.0 cluster. How does Proactive HA interact with hardware health monitoring systems from vendors like Dell, HPE, or Cisco?

A.By receiving hardware vendor provider alerts (such as memory or fan degradation) and automatically placing degraded hosts into maintenance or quarantine mode.
B.By adjusting physical server CPU voltage regulators to save electricity.
C.By executing firmware flashing routines on physical RAID controllers during peak business hours.
D.By rebooting the top-of-rack physical network switches when BGP convergence fails.
AnswerA

Correct. Proactive HA acts on vendor hardware warnings to migrate workloads off failing hardware before a crash occurs.

Why this answer

Proactive HA receives provider-generated health events via vCenter hardware integrations and takes automated mitigation actions (such as evacuating hosts) before hardware failures lead to full outages.

Full explanation →
172
MCQeasy

An administrator is planning an upgrade of ESXi hosts in a vSphere Foundation 9.0 cluster using vSphere Lifecycle Manager. What is the role of a hardware support manager (HSM) or vendor add-on in vLCM?

A.To manage physical switch port VLAN assignments via SNMP traps.
B.To act as an external license server for Microsoft Windows guest operating systems.
C.To provide vendor-validated firmware and driver packages that integrate into the unified ESXi cluster software image.
D.To provide active directory domain controller replication services.
AnswerC

Correct. Vendor add-ons supply hardware-specific drivers and firmware so vLCM can patch both hypervisor and hardware simultaneously.

Why this answer

Vendor add-ons supplied by hardware partners (like Dell, HPE, Lenovo) provide validated firmware and driver bundles that integrate into vLCM image management.

Full explanation →
173
MCQeasy

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that when an ESXi host loses its connection to all storage devices (All Paths Down - APD), affected virtual machines are handled appropriately. Which vSphere HA setting configures this behavior?

A.Storage DRS placement aggregation rules.
B.VM Component Protection (VMCP)
C.Network I/O Control bandwidth reservations.
D.Enhanced vMotion Compatibility baselines.
AnswerB

Correct. VMCP detects APD and PDL storage events and executes predefined restart or failover actions for affected VMs.

Why this answer

VM Component Protection (VMCP) in vSphere HA manages storage failure conditions such as All Paths Down (APD) and Permanent Device Loss (PDL), allowing automated restart policies for affected VMs.

Full explanation →
174
MCQhard

An infrastructure designer is evaluating storage protocols for a high-performance vSphere Foundation 9.0 database cluster. Which architectural characteristic distinguishes NVMe-oF over RDMA (RoCEv2) from traditional NVMe-oF TCP?

A.RDMA restricts maximum block transfer sizes to 4KB, whereas TCP supports unlimited block sizes.
B.TCP encrypts all storage payloads by default, whereas RDMA requires an external IPsec gateway.
C.RDMA utilizes direct memory-to-memory transfers between storage and host memory, bypassing the CPU network stack for lower latency.
D.NVMe-oF TCP requires dedicated Fibre Channel switches, whereas RDMA runs on standard unmanaged Ethernet switches.
AnswerC

Correct. RDMA avoids CPU stack processing overhead, resulting in ultra-low latency.

Why this answer

RoCEv2 (RDMA over Converged Ethernet) bypasses the host operating system network stack entirely using hardware offload, whereas NVMe-oF TCP processes packets through the standard TCP/IP stack.

Full explanation →
175
MCQeasy

An administrator is troubleshooting a storage connectivity failure where an NFS datastore has become 'All Paths Down' (APD) or disconnected. Where should the administrator verify the NFS server export path and mount parameters in the vSphere Client?

A.Select the NFS datastore -> Configure -> Connectivity and Reachability tab to check server and export details.
B.Open the VMkernel adapter binding table under Network Settings.
C.Navigate to vSphere HA -> Datastore Heartbeats.
D.Check the vSphere Lifecycle Manager baseline repository.
AnswerA

The Connectivity and Reachability tab displays the NFS server IP address, export path, and accessibility status.

Why this answer

NFS datastore configuration, server IP, and mount shares are verified under Storage -> Datastore -> Configure -> Connectivity or by re-inspecting the mount specification during datastore addition.

Full explanation →
176
MCQeasy

An administrator is designing a vSphere Foundation 9.0 cluster. When configuring high availability (HA) admission control, which admission control policy is recommended to ensure sufficient resources are reserved for failover without over-complicating capacity math?

A.Percentage of Cluster Resources reserved for CPU and Memory.
B.Static manual reservation of 32 physical CPU cores per virtual machine.
C.Routing failover requests through an external public cloud broker.
D.Disabling admission control entirely to allow 100% resource overcommit.
AnswerA

Correct. The percentage policy dynamically adjusts as hosts are added or removed, making it flexible and reliable.

Why this answer

Host failures to tolerate (FTT) or Percentage of Cluster Resources are standard, modern HA admission control policies that automatically scale as cluster size changes.

Full explanation →
177
Multi-Selecthard

An administrator is troubleshooting a failed vCenter Server 9.0 file-based backup. Which THREE potential issues should the administrator investigate to resolve the failure? (Choose three.)

Select 3 answers
A.Verify network connectivity and firewall rules between the VCSA and the remote backup server (e.g., SFTP/HTTPS port access).
B.Ensure that the vCenter Server database is converted from PostgreSQL to Microsoft SQL Server prior to backup.
C.Verify that all ESXi hosts in the vCenter inventory are powered off during the backup process.
D.Verify that the backup user credentials and target directory write permissions on the remote server are correct.
E.Check if there is sufficient disk space available on the remote backup destination server.
AnswersA, D, E

Network blocks or firewall drops prevent VCSA from transferring backup payloads to the remote server.

Why this answer

File-based backups of VCSA require valid credentials, correct network/protocol access (SFTP, HTTPS, FTPS, SCP), sufficient storage space on the backup destination server, and ensuring no conflicting backup jobs are currently running.

Full explanation →
178
MCQeasy

A newly deployed virtual machine is unable to communicate with other VMs on the same vSphere Distributed Switch (vDS), although it shares the same port group. What is the most common misconfiguration to check on the vDS port group settings?

A.Ensure that NetFlow is enabled on the distributed switch uplinks.
B.Verify the VLAN ID configured on the distributed port group matches the physical switch trunk configuration for that network.
C.Confirm that Link Aggregation Control Protocol (LACP) is disabled on all host physical adapters.
D.Check whether the port group is configured with static binding instead of ephemeral binding.
AnswerB

If the VLAN ID on the port group does not match the physical switch port encapsulation, traffic will be dropped at the switch boundary.

Why this answer

VLAN tagging mismatches or incorrect VLAN IDs assigned to the port group are frequent causes of isolation. Alternatively, security policies like Promiscuous Mode or MAC address changes might block traffic, but VLAN configuration is the primary layer-2 requirement.

Full explanation →
179
MCQeasy

An administrator is tasked with updating the ESXi hypervisor version and driver firmware across a cluster of 16 hosts uniformly. Which native tool in vSphere Foundation should be utilized to create a unified image-based baseline for cluster compliance and remediation?

A.vSphere Lifecycle Manager (vLCM)
B.VMware Update Manager (VUM) legacy client
C.VMware Aria Operations for Networks
D.vRealize Automation orchestrator workflows
AnswerA

vSphere Lifecycle Manager provides image-based management to ensure consistent ESXi versions and firmware across cluster hosts.

Why this answer

vSphere Lifecycle Manager (vLCM) uses a single image or baselines to manage ESXi upgrades, patches, and vendor firmware across cluster hosts.

Full explanation →
180
MCQmedium

An administrator is setting up identity and access control for a multi-cluster environment. What is the benefit of using an Identity Provider (IdP) instead of local SSO users?

A.It allows local accounts to be converted to global accounts.
B.It bypasses the need for multi-factor authentication.
C.It eliminates the need for vCenter Server to be part of an Active Directory domain.
D.It automatically assigns permissions to all users in the organization.
AnswerC

Using OIDC or SAML based IdP removes the dependency on native domain joins.

Why this answer

Integrating an external IdP (such as Okta or Active Directory Federation Services) allows for centralized authentication and consistent policy enforcement.

Full explanation →
181
Multi-Selecthard

An infrastructure architect is designing a high-performance vSphere Foundation 9.0 environment. Which THREE architectural configurations optimize virtual machine memory performance and reduce latency? (Choose three.)

Select 3 answers
A.Reserving 100% of guest virtual machine memory to prevent swapping and ballooning overhead
B.Enabling Large Pages (Transparent Huge Pages / 2MB pages) to reduce TLB miss overhead
C.Configuring aggressive memory overcommitment exceeding 300% on database nodes
D.Sizing virtual machine memory to fit within physical NUMA node boundaries
E.Disabling physical server RAM interleaving in the BIOS
AnswersA, B, D

Correct. 100% memory reservation guarantees physical RAM allocation and eliminates hypervisor memory reclamation overhead.

Why this answer

Memory performance is optimized by avoiding memory overcommit (reserving 100%), keeping vCPUs and memory within single NUMA nodes, and configuring large memory pages (Huge Pages).

Full explanation →
182
Multi-Selecthard

An administrator is configuring vSphere Trust Authority within a vSphere Foundation architecture to protect encrypted virtual machines. Which THREE components are core architectural elements of vSphere Trust Authority? (Choose three.)

Select 3 answers
A.Key Provider to securely manage and store encryption keys
B.vRealize Orchestrator plugin for automated snapshot generation
C.Attestation Service to verify the integrity and boot state of ESXi hosts
D.Software-defined load balancer for distributing vMotion packets
E.Trust Cluster containing specialized hosts that manage trust services separately from workload clusters
AnswersA, C, E

Key Providers (Standard or Trusted Key Providers) manage the cryptographic keys required for VM and vMotion encryption.

Why this answer

vSphere Trust Authority utilizes Trust Providers, Attestation Hosts, and Key Providers to ensure secure key release only to verified, trusted ESXi hosts.

Full explanation →
183
MCQeasy

A cluster in vSphere Foundation 9 has vSphere DRS enabled in fully automated mode. A newly powered-on virtual machine is placed onto a specific host. Which component makes this initial placement decision?

A.vSphere DRS Initial Placement
B.vCenter Server Single Sign-On
C.Storage DRS
D.VMware Host Client
AnswerA

DRS determines the optimal host for a VM when it is powered on for the first time or migrated into the cluster.

Why this answer

DRS calculates initial placement for newly powered-on VMs based on available cluster resources and affinity rules to ensure an even distribution.

Full explanation →
184
MCQeasy

An administrator is setting up a new virtual machine and needs to attach a persistent raw disk device. Which disk provisioning type should the administrator select during the virtual machine creation wizard?

A.Raw Device Mapping (RDM)
B.Thick Provision Lazy Zeroed
C.Thin Provision
D.Thick Provision Eager Zeroed
AnswerA

RDM provides direct access to physical storage LUNs.

Why this answer

Raw Device Mapping (RDM) allows a virtual machine to directly access a storage volume (LUN) from the SAN.

Full explanation →
185
MCQhard

An administrator is reviewing performance metrics in vRealize Operations / Aria Operations for a vSphere Foundation environment. A virtual machine is flagged for 'CPU Demand' exceeding its 'CPU Allocation'. What does the CPU Demand metric represent?

A.The peak CPU ready time recorded by the hypervisor scheduler.
B.The exact amount of CPU time the VM consumed during the last polling interval.
C.The CPU reservation value configured in the virtual machine settings.
D.The amount of CPU resource the VM would use if there were no resource contention or limits.
AnswerD

CPU demand models the unconstrained CPU requirements of the workload.

Why this answer

CPU demand represents the amount of CPU resource a virtual machine would use if there were no CPU contention or limits constraining its execution.

Full explanation →
186
MCQhard

An administrator is integrating VMware Aria Operations with a vSphere Foundation 9.0 cluster and wants to create a custom super metric to calculate aggregate CPU and memory stress across all virtual machines. Where must the super metric be enabled after creation to make it available for dashboard widgets and alerts?

A.Via the SDDC Manager dashboard under Workload Domains > Policies > Metrics.
B.Within the active Policy in Aria Operations under the Super Metrics configuration section.
C.In the ESXi host advanced configuration parameter 'Aria.SuperMetrics.Enable'.
D.In the vCenter Global Settings > Super Metrics activation table.
AnswerB

Super metrics must be explicitly enabled in the active management policy to be calculated against inventory objects.

Why this answer

Super metrics in Aria Operations must be enabled within a Policy for them to be calculated and applied to target objects.

Full explanation →
187
MCQmedium

An IT architect is configuring an enterprise vSphere Foundation 9.0 environment with external identity providers. Which standard protocol does vCenter Server support for federated identity management with providers such as Okta or Microsoft Entra ID?

A.NetBIOS name broadcasting over UDP port 137.
B.RADIUS token authentication via serial modem lines.
C.OIDC (OpenID Connect) and SAML 2.0 federation protocols.
D.Plain text LDAP binding without SSL certificates.
AnswerC

Correct. Modern vCenter versions support OIDC and SAML for enterprise identity federation.

Why this answer

vCenter Server supports OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) 2.0 for federated identity provider integration.

Full explanation →
188
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere DRS affinity rules. Which TWO types of DRS affinity/anti-affinity rules can be established? (Choose two.)

Select 2 answers
A.Datastore-Datacenter Geolocation rules
B.User-Group Active Directory Password rules
C.VM-Host Affinity / Anti-Affinity rules
D.VM-VM Affinity / Anti-Affinity rules
E.Switch-Port MAC Binding rules
AnswersC, D

Correct. VM-Host rules dictate which specific hosts a virtual machine must or must not run on.

Why this answer

DRS supports VM-VM affinity/anti-affinity rules and VM-Host affinity/anti-affinity rules.

Full explanation →
189
Multi-Selecthard

An infrastructure architect is designing a high-security vSphere Foundation 9.0 environment. Which THREE architectural features contribute directly to hardening ESXi hosts and virtual machines against attacks? (Choose three.)

Select 3 answers
A.Unencrypted Telnet management daemons running on port 23.
B.Trusted Platform Module (TPM) 2.0 chips providing hardware-root-of-trust measurements.
C.Permitting root access via unauthenticated anonymous FTP sessions.
D.Unified Extensible Firmware Interface (UEFI) Secure Boot enabled on physical servers.
E.vSphere VM Encryption protecting virtual disk files at rest.
AnswersB, D, E

Correct. TPM 2.0 stores and verifies platform measurements for ESXi integrity.

Why this answer

ESXi hardening involves features like TPM 2.0 for boot integrity, vSphere VM Encryption for data at rest, and Secure Boot enabled in UEFI firmware.

Full explanation →
190
Multi-Selectmedium

An administrator is troubleshooting a storage performance issue on a vSAN datastore in a VVF cluster. Which TWO tools or views in the vSphere Client and VCF Operations can be used to inspect vSAN health and performance? (Choose two.)

Select 2 answers
A.ESXi DCUI hardware sensor reboot menu.
B.NSX Manager transport node storage status panel.
C.VCF Operations vSAN Performance and Capacity dashboards.
D.Cluster -> Monitor -> vSAN -> Health and Performance views in the vSphere Client.
E.Cloud Builder storage inventory wizard.
AnswersC, D

VCF Operations provides specialized vSAN dashboards for deep analytical metric tracking.

Why this answer

vSAN health is monitored via vCenter (Cluster -> Monitor -> vSAN -> Health) and VCF Operations vSAN dashboards.

Full explanation →
191
MCQeasy

When applying a VVF license, where must it be assigned to ensure full compliance across the environment?

A.VM level
B.vCenter Server level
C.Datacenter folder
D.Host level only
AnswerB

Centralized management ensures all cluster hosts are covered.

Why this answer

The vSphere Foundation license must be applied at the vCenter Server level to propagate to the managed hosts.

Full explanation →
192
MCQmedium

An administrator is troubleshooting a virtual machine performance issue in a vSphere 9.0 cluster. The VM has 8 vCPUs, but the guest OS workload is single-threaded and running slowly. Upon checking esxtop, the administrator notices high co-stop (%CSTP) time. What is the recommended optimization action?

A.Switch the vDS uplink teaming policy from Route Based on Originating Port to IP Hash.
B.Enable Storage I/O Control on the datastore.
C.Reduce the number of vCPUs assigned to the virtual machine to match its actual workload concurrency requirements.
D.Increase the virtual machine memory reservation to 100%.
AnswerC

Right-sizing vCPUs eliminates unnecessary co-scheduling overhead and reduces co-stop time.

Why this answer

Assigning too many vCPUs (oversizing) to a single-threaded workload forces the ESXi scheduler to wait for all vCPUs to be ready simultaneously before scheduling them (%CSTP), hurting performance. Right-sizing the VM by reducing the vCPU count resolves this.

Full explanation →
193
MCQmedium

A data center architect is planning a vSphere Foundation 9.0 deployment utilizing NVMe-oF (NVMe over Fabrics) with TCP. Which architectural requirement is mandatory for the underlying physical network infrastructure?

A.Configure spanning tree protocol (STP) with PortFast disabled on all access ports.
B.Enforce a maximum transmission unit (MTU) of 9000 bytes across all physical switch ports and VMkernel adapters handling NVMe-oF traffic.
C.Implement static routing tables between every ESXi VMkernel port and storage controller.
D.Deploy Fibre Channel over Ethernet (FCoE) gateways on all top-of-rack switches.
AnswerB

Correct. Jumbo frames minimize CPU utilization and maximize throughput for high-performance block storage protocols.

Why this answer

NVMe over Fabrics relies heavily on lossless or near-lossless low-latency packet delivery, making Jumbo Frames (MTU 9000) a standard architectural recommendation to reduce CPU overhead and fragmentation.

Full explanation →
194
Multi-Selecteasy

An administrator wants to secure access to the vSphere Client. Which TWO authentication or authorization mechanisms are supported natively in vCenter Server? (Choose two.)

Select 2 answers
A.Public key infrastructure certificates stored exclusively on virtual machine guest operating systems.
B.Identity Providers such as Active Directory, OpenID Connect, and LDAP integrated via vCenter Single Sign-On.
C.Role-Based Access Control (RBAC) mapping users and groups to specific permissions and roles.
D.Local Linux root account SSH keys stored in ESXi pam.d modules.
E.Physical hardware smart card readers attached to ESXi management ports.
AnswersB, C

vCenter SSO integrates with external identity sources for user authentication.

Why this answer

vCenter supports Identity Providers (Active Directory, OpenID Connect) and Role-Based Access Control (RBAC).

Full explanation →
195
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere HA response actions. Which TWO configurable actions can vSphere HA take when a host isolation event is detected (Host Isolation Response)? (Choose two.)

Select 2 answers
A.Leave virtual machines powered on
B.Power off virtual machines
C.Reformat all attached datastores with VMFS-6
D.Permanently decommission the ESXi motherboard
E.Instantly migrate all VMs to public cloud AWS EC2 instances
AnswersA, B

Correct. Leaving VMs powered on ensures continuous local execution if isolation is temporary.

Why this answer

When an ESXi host becomes isolated from the rest of the HA cluster network, it can be configured to Power off VMs, Shut down guest OS, or Leave VMs powered on.

Full explanation →
196
MCQeasy

An architect is planning the port requirements for a vSphere Foundation 9.0 environment. Which standard TCP port must be open on firewalls between ESXi hosts and vCenter Server for primary agent communication (vpxa)?

A.TCP port 1433
B.TCP port 3389
C.TCP port 902
D.TCP port 80
AnswerC

Correct. Port 902 UDP/TCP is required for heartbeats and agent communication between vCenter and ESXi.

Why this answer

TCP port 902 is used by vCenter Server to communicate with the heartbeat agent (vpxa) on ESXi hosts.

Full explanation →
197
MCQeasy

An administrator needs to check the current build number and update version of an ESXi 9.0 host. Where can the administrator easily view this information in the vSphere Client?

A.Navigate to vSphere HA -> Cluster Summary.
B.Check the virtual machine guest operating system properties.
C.Select the ESXi host in the inventory and view the Summary tab.
D.Open vCenter Administration -> License Management.
AnswerC

The host Summary tab displays the ESXi version, build number, hardware model, uptime, and general configuration status.

Why this answer

ESXi host version and build numbers are displayed on the host's Summary tab in the vSphere Client.

Full explanation →
198
Multi-Selecthard

An administrator is troubleshooting a performance bottleneck in a vSphere Foundation 9.0 cluster and decides to use esxtop. Which THREE esxtop interactive commands (single keystrokes) toggle between different resource metric views? (Choose three.)

Select 3 answers
A.Pressing 'd' to view disk adapter statistics
B.Pressing 'm' to view memory statistics
C.Pressing 'z' to reboot the ESXi host kernel
D.Pressing 'c' to view CPU statistics
E.Pressing 'q' to format all VMFS datastores
AnswersA, B, D

The 'd' key switches esxtop to the physical disk adapter view.

Why this answer

In esxtop, pressing 'c' switches to CPU view, 'm' switches to memory view, 'd' switches to disk adapter view, 'v' switches to virtual disk view, and 'n' switches to network view.

Full explanation →
199
MCQeasy

An administrator notices that a virtual machine has become unresponsive (hung). Which tool or method should the administrator use first to attempt a graceful shutdown or restart of the guest operating system before resorting to a hard power-off?

A.Immediately click 'Power Off' (hard power off) without attempting a guest shutdown.
B.Unplug the virtual machine's virtual network adapter.
C.Send a Guest Shutdown or Guest Restart command via the vSphere Client (relying on VMware Tools).
D.Delete the virtual machine and restore it from last night's backup.
AnswerC

Guest shutdown prompts the operating system to perform a clean, graceful shutdown, preserving application data.

Why this answer

If VMware Tools is running, requesting a guest shutdown sends a graceful ACPI/OS shutdown signal. If unresponsive, resetting via guest or vSphere Client is standard.

Full explanation →
200
MCQmedium

An administrator is configuring an alarm in vSphere to notify them when a virtual machine's CPU usage remains above 95% for 10 minutes. However, they want the alarm to automatically clear when the CPU drops below 80% for 5 minutes. Where is the reset/clear condition configured?

A.In the advanced vCenter setting 'Alarm.Reset.Threshold'.
B.In the VCF Operations policy management console.
C.Under the Alarm Definition -> Reset condition or tolerance panel.
D.Via esxcli alarm reset-rule configure.
AnswerC

Reset conditions specify when an active alarm transitions back to a green/normal state.

Why this answer

vSphere alarm definitions allow configuring separate trigger and reset (clear) conditions or tolerances to prevent alarm flapping.

Full explanation →
201
MCQhard

An administrator is deploying a Supervisor cluster in vSphere Foundation 9.0 and needs to ensure that Developer Namespaces are properly isolated. Which construct is used to enforce resource quotas and network policies across multiple developer namespaces?

A.vCenter Server Alarm definition filters
B.vSphere Distributed Switch VLAN tagging policies
C.ESXi host firewall rules configured via esxcli network firewall
D.Supervisor Namespace limits and vSphere Storage/Compute Quotas
AnswerD

Supervisor Namespaces use resource quotas to restrict CPU, memory, and storage utilization per developer group.

Why this answer

In vSphere with Tanzu / Supervisor clusters, Resource Quotas and Namespace limits are applied directly to Supervisor Namespaces to restrict CPU, memory, and storage consumption.

Full explanation →
202
MCQmedium

An administrator is tasked with updating ESXi hosts using vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0. The cluster is managed using a single image. After importing a new vendor addon and base image, the compliance check reports a non-compliant state due to a missing component. How should the administrator resolve this?

A.Edit the cluster image specification to include the required component or vendor addon, then trigger remediation.
B.Restart the vCenter Server Appliance management services to force an immediate cache refresh of host compliance.
C.Convert the cluster from image-based management to baseline-based management to bypass component validation.
D.Manually install the missing component on each ESXi host via an interactive SSH session using esxcli software.
AnswerA

Adding the required component to the desired image spec allows vLCM to enforce compliance and remediate the hosts.

Why this answer

When a cluster is managed by a single image, remediation or compliance resolution requires updating the image specification to include the necessary component or vendor addon, or allowing vLCM to remediate the deviation.

Full explanation →
203
MCQhard

You are migrating a VM between two vCenters. Which vSphere feature must be licensed and configured to allow this cross-vCenter migration?

A.vSphere Replication
B.Cross-vCenter vMotion
C.vSphere Fault Tolerance
D.Content Library
AnswerB

This feature allows moving workloads between different vCenter management domains.

Why this answer

Cross-vCenter vMotion is a standard feature, but it requires the vCenter servers to be in Enhanced Linked Mode or properly federated to simplify the workflow.

Full explanation →
204
MCQeasy

An administrator needs to apply a VVF license key to a cluster managed by vCenter Server. Where is the correct location to assign this license in the vSphere Client?

A.Datacenter > Settings > Licensing
B.Administration > Licensing > Assets
C.Host and Clusters view > Cluster > Licensing tab
D.vCenter Server Settings > Licensing
AnswerB

The Licensing area under Administration is the standard path for assigning licenses to vCenter assets.

Why this answer

Licensing in VVF is managed at the vCenter Server level via the Licensing global inventory object.

Full explanation →
205
MCQeasy

An administrator is troubleshooting a virtual machine that is experiencing slow performance. The administrator opens vSphere Client performance charts and notices that the guest OS CPU usage is low, but the host CPU ready time for the VM is extremely high. What does this indicate?

A.The host physical CPUs are overcommitted, causing the hypervisor to delay scheduling the virtual machine's vCPUs.
B.The datastore backing the VM is experiencing high I/O latency.
C.The virtual machine has been configured with too many vCPUs relative to workload demand.
D.The guest operating system's internal firewall is blocking CPU execution threads.
AnswerA

High ready time is a direct sign of CPU contention and overcommitment on the ESXi host.

Why this answer

High CPU ready time with low guest OS CPU usage means the VM wants to run and is ready, but the ESXi scheduler is making it wait because the physical host CPUs are heavily overcommitted or constrained.

Full explanation →
206
MCQeasy

An administrator is deploying a new VVF environment and needs to monitor resource utilization trends across multiple clusters over a 90-day period. Which component included in VVF provides this historical capacity planning and analytics capability?

A.vCenter Performance Charts
B.VMware Cloud Builder
C.VCF Operations (Aria Operations)
D.vSphere Lifecycle Manager (vLCM)
AnswerC

VCF Operations provides advanced capacity planning, trending, and long-term historical analytics.

Why this answer

VVF includes VCF Operations (formerly vRealize Operations / Aria Operations), which delivers AI-driven performance monitoring, capacity planning, and log analysis.

Full explanation →
207
MCQhard

You are tasked with securing the vSphere environment. Which feature allows you to encrypt virtual machine files (vmdk, vmx) at the hypervisor level?

A.VMware vSAN Encryption
B.vCenter Server Appliance (VCSA) encryption
C.Data-at-Rest Encryption (DARE)
D.vSphere Virtual Machine Encryption
AnswerD

VM Encryption provides per-VM encryption capabilities at the hypervisor level.

Why this answer

vSphere Virtual Machine Encryption allows administrators to encrypt virtual machine files at rest.

Full explanation →
208
MCQhard

An administrator is troubleshooting a storage performance issue on a vSAN 9.0 cluster. The vSAN performance service indicates high object read latency on a specific VMDK. Which command line utility executed on an ESXi host can be used to inspect individual vSAN disk group health and component status directly?

A.esxcli storage vmfs extent list
B.esxcli vsan cluster get
C.esxcli network ip route list
D.esxcli vsan storage list
AnswerD

This command outputs the health state, operational status, and disk UUIDs for all disks participating in the vSAN disk groups.

Why this answer

'esxcli vsan storage list' displays detailed storage pool and disk information, while 'esxcli vsan debug' or 'cmmds-tool' can inspect component status. Among standard esxcli namespaces, 'esxcli vsan storage' is standard for examining vSAN disk health.

Full explanation →
209
Multi-Selecthard

An administrator is troubleshooting a vSAN 9.0 cluster health alarm indicating that a disk group is 'Degraded' and several components are absent. Which THREE actions can the administrator take to remediate or investigate this condition? (Choose three.)

Select 3 answers
A.If the disk has failed permanently, replace the physical drive and rebuild or recreate the vSAN disk group, allowing vSAN to automatically rebuild missing components based on storage policies.
B.Check if the host containing the disk group is in maintenance mode or has been disconnected from the cluster.
C.Review the vSAN Health service in vSphere Client to identify specific unhealthy components, failed disks, or network partitions.
D.Reboot vCenter Server, which automatically forces vSAN to recreate lost disk groups.
E.Reformat the entire vSAN datastore to factory defaults.
AnswersA, B, C

vSAN automatically rebuilds missing components on healthy remaining capacity once a failed disk is replaced or re-added.

Why this answer

When vSAN components are absent, investigating via health checks, checking disk state using esxcli or vSAN health UI, and understanding whether the host/disk is permanently lost or temporarily offline (e.g., maintenance mode vs disk failure) is critical. If permanently lost, allowing object repair or replacing the disk is necessary.

Full explanation →
210
Multi-Selecthard

An administrator is troubleshooting a high-availability failover issue in a vSphere 9.0 cluster where virtual machines on a failed host were not restarted by vSphere HA. Which THREE underlying causes could explain this failure? (Choose three.)

Select 3 answers
A.A complete network partition occurred where the surviving hosts cannot communicate with the isolated host and datastore heartbeats were also unavailable.
B.Enhanced vMotion Compatibility (EVC) mode was disabled on the cluster.
C.The virtual machines were running with manual restart priority set to 'Disabled' or excluded from HA protection in the cluster settings.
D.Admission control is enabled, and the remaining healthy hosts in the cluster lack sufficient unreserved capacity to power on the failed VMs.
E.Storage I/O Control (SIOC) latency threshold was set below 10ms.
AnswersA, C, D

Without network heartbeats or datastore heartbeats, HA cannot reliably verify host state or safely initiate restarts.

Why this answer

Common reasons for HA failover failure include insufficient cluster compute resources under admission control, network isolation without configured isolation response, or datastore accessibility loss affecting heartbeat files and cluster communication.

Full explanation →
211
MCQeasy

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that ESXi host configuration drift is prevented across all nodes in the cluster. Which feature should be implemented?

A.Storage I/O Control latency metrics.
B.vSphere Distributed Switch health check.
C.vSphere Host Profiles
D.Fault Tolerance auto-restart policies.
AnswerC

Correct. Host Profiles establish a golden configuration standard and alert administrators to any compliance drift.

Why this answer

ESXi Host Profiles capture a reference host configuration and apply it to other hosts in the cluster, automatically checking and remediating any configuration drift.

Full explanation →
212
MCQeasy

An administrator needs to verify the health status and cluster state of NSX Manager nodes in a VVF deployment. Where in the NSX Manager UI is this information located?

A.vCenter -> Monitor -> NSX Cluster Health.
B.System -> Fabric -> Nodes -> NSX Managers (or Cluster Management).
C.SDDC Manager -> Infrastructure -> NSX Health.
D.Cloud Builder -> Appliance Status.
AnswerB

The NSX Manager cluster management view displays node status, quorum health, and appliance services.

Why this answer

NSX Manager cluster node health, status, and appliance metrics are viewed under System -> Fabric -> Nodes or System -> Appliances / Cluster.

Full explanation →
213
MCQmedium

An administrator is troubleshooting a performance bottleneck in a vSphere Foundation 9.0 environment. Using VMware Aria Operations, the administrator notices that a virtual machine has a high 'Risk' badge score. What does a high Risk badge indicate in Aria Operations?

A.It highlights impending capacity exhaustion, bottlenecks, or constraints that will impact the object in the near future based on usage trends.
B.It indicates that VMware Tools is outdated.
C.It calculates the likelihood of a purple diagnostic screen (PSOD) on the host.
D.It measures the current hardware temperature and fan speed failures.
AnswerA

Risk predicts future performance or capacity problems before they breach critical thresholds.

Why this answer

The Risk badge in Aria Operations indicates impending capacity shortages, time-to-remaining exhaustion, or compliance/policy violations in the near future.

Full explanation →
214
Multi-Selecteasy

Which TWO of the following tasks can be performed using the vCenter Server Appliance Management Interface (VAMI)? (Choose two.)

Select 2 answers
A.Monitoring vCenter resource usage
B.Configuring DRS automation levels
C.Performing vCenter updates and patching
D.Configuring vSphere Distributed Switch settings
E.Creating virtual machines
AnswersA, C

The VAMI dashboard shows CPU and memory usage of the appliance.

Why this answer

The VAMI is used for appliance-level tasks like updates and monitoring vCenter health.

Full explanation →
215
Multi-Selectmedium

An enterprise architect is planning vCenter Server 9.0 High Availability (VCHA) in a vSphere Foundation environment. Which THREE nodes comprise a fully configured VCHA deployment? (Choose three.)

Select 3 answers
A.Active Node
B.Passive Node
C.Database Replica Node
D.Witness Node
E.Proxy Controller Node
AnswersA, B, D

Correct. The Active node runs the active vCenter Server instance and services.

Why this answer

vCenter High Availability consists of three nodes: Active, Passive, and Witness, which provide automated failover protection for the management plane.

Full explanation →
216
Multi-Selectmedium

An administrator is troubleshooting high CPU usage on an ESXi host and suspects a runaway virtual machine. Using esxtop, which TWO columns in the CPU panel should the administrator examine to identify the specific VM consuming the most physical CPU resources? (Choose two.)

Select 2 answers
A.SWCUR (Current swap usage)
B.%RUN (Percentage of time scheduled on a physical CPU)
C.MCTLSZ (Ballooned memory size)
D.DAVG (Device latency)
E.%USED (Percentage of physical CPU used)
AnswersB, E

%RUN indicates how much CPU time the world was actively running on physical cores.

Why this answer

In esxtop (CPU view), %USED and %CSTP or %RDY are used, but %USED and %RUN indicate active CPU consumption. Specifically, %USED represents physical CPU used, and %RUN represents CPU time scheduled on physical cores.

Full explanation →
217
Multi-Selectmedium

An enterprise architect is planning a vSphere Foundation 9.0 upgrade using vSphere Lifecycle Manager (vLCM). Which THREE components can be managed and validated as part of a vLCM single cluster image? (Choose three.)

Select 3 answers
A.ESXi base image version
B.Top-of-rack physical switch firmware images
C.Vendor Add-on (hardware-specific driver and firmware bundle)
D.Firmware and Driver Add-ons (additional component-level updates)
E.Microsoft Windows Server guest operating system patches
AnswersA, C, D

Correct. The ESXi base image defines the hypervisor major/minor version and patch level.

Why this answer

vLCM cluster images manage ESXi base ISO/version, vendor add-on firmware/drivers, and optional component firmware updates.

Full explanation →
218
MCQmedium

An administrator needs to upgrade host firmware and drivers across a cluster in a consistent manner. Which tool is best suited for this task?

A.VMware Update Manager
B.vCenter Server Profiles
C.Host Profiles
D.vSphere Lifecycle Manager
AnswerD

vLCM allows for complete image-based management of hosts.

Why this answer

vSphere Lifecycle Manager (vLCM) allows for declarative management of host images, including firmware and driver baselines.

Full explanation →
219
MCQhard

An administrator is investigating a storage performance bottleneck on an ESXi host using esxtop. In the disk adapter view ('d'), the administrator observes high DAVG/LAT values while KAVG/LAT remains near zero. What conclusion should the administrator draw from these metrics?

A.Transparent Page Sharing (TPS) is thrashing the datastore metadata.
B.The latency is originating from the physical storage array, SAN fabric, or HBAs, rather than the ESXi kernel storage stack.
C.The ESXi host queue depth is misconfigured and needs to be reduced to zero.
D.The virtual machine guest operating system is experiencing CPU starvation.
AnswerB

Low KAVG indicates ESXi is processing I/O efficiently, while high DAVG isolates the delay to the storage array or transport network.

Why this answer

DAVG measures overall device latency (time spent at the storage array and transport layer), while KAVG measures time spent in the ESXi kernel. Low KAVG and high DAVG point directly to the storage array or SAN fabric as the source of latency.

Full explanation →
220
Multi-Selecthard

An administrator is troubleshooting a performance degradation in a VVF cluster running critical workloads. Which THREE metrics or indicators in VCF Operations should the administrator inspect to diagnose CPU and memory bottlenecks? (Choose three.)

Select 3 answers
A.Physical NUMA locality and remote memory access latency metrics.
B.Cloud Builder deployment queue depth and multicast packet loss.
C.vCenter database table row count and PostgreSQL vacuum frequency.
D.Memory Ballooning, Swapping, and Active memory metrics.
E.CPU Ready Time and Co-Stop metrics for virtual machines and hosts.
AnswersA, D, E

NUMA node contention impacts memory access speeds and overall performance.

Why this answer

CPU ready time, memory ballooning/swapping rates, and physical NUMA node allocation/contention are key indicators of CPU and memory bottlenecks in VCF Operations.

Full explanation →
221
MCQmedium

An administrator is configuring a new user role in vCenter Server 9.0 that requires permission to manage virtual machine snapshots, but nothing else. Where should the administrator create this custom role?

A.NSX Manager -> System -> Users -> Roles.
B.VCF Operations -> Administration -> Access Control -> Roles.
C.Administration -> Access Control -> Roles -> Create Role.
D.SDDC Manager -> Administration -> IAM -> Custom Roles.
AnswerC

The Roles management pane allows administrators to define custom roles with specific granular privileges.

Why this answer

Custom roles in vCenter are created and managed under Administration -> Access Control -> Roles.

Full explanation →
222
MCQhard

An administrator is managing license keys across multiple vCenter instances in a vSphere Foundation 9.0 deployment. Some licenses are assigned to clusters, while others are assigned directly to individual ESXi hosts. What is the licensing inheritance rule when a host is added to a cluster that already has a vSphere Foundation license assigned?

A.The cluster-level license overrides the host-level license, and the host adopts the cluster licensing assignment.
B.The operation fails, requiring the administrator to manually remove the host license before joining the cluster.
C.Both licenses merge their capacity pools, doubling the available core count for that specific host.
D.The host retains its standalone license key, which causes a licensing compliance warning on the cluster.
AnswerA

Cluster licenses automatically apply to all member hosts upon joining, superseding any existing standalone host licenses.

Why this answer

When an ESXi host is moved into a cluster, the cluster-level license takes precedence and is applied to the host, overriding any previously assigned standalone host license.

Full explanation →
223
MCQeasy

An administrator needs to modify the IP address and hostname of a newly deployed virtual machine automatically using a customization specification. Where are guest customization specifications created in the vSphere Client?

A.Administration -> Single Sign-On -> Customizations
B.Policies and Profiles -> Guest Customization Specifications
C.Content Library -> OVF Templates -> Customize
D.Virtual Machine -> Configure -> Guest OS Settings
AnswerB

Guest customization specs are created and edited under Policies and Profiles.

Why this answer

Customization specifications are managed in vCenter under Policies and Profiles -> Guest Customization Specifications.

Full explanation →
224
MCQhard

An administrator is troubleshooting a storage performance issue on an ESXi host. Using esxtop, the administrator notices a high value in the 'ABORT' column for a storage adapter. What does this metric indicate?

A.The ESXi storage stack or storage array has timed out on I/O requests, forcing command aborts.
B.The virtual machine guest operating system is aborting active network TCP sessions.
C.Storage vMotion has aborted a migration due to insufficient space.
D.Storage DRS has cancelled a datastore load-balancing recommendation.
AnswerA

High adapter aborts indicate storage command timeouts and unresponsive paths.

Why this answer

High abort counts in esxtop indicate that the ESXi kernel or storage stack had to cancel/abort outstanding I/O requests due to timeouts or unresponsive hardware paths.

Full explanation →
225
MCQmedium

An administrator is configuring role-based access control (RBAC) in a vSphere Foundation 9.0 environment and needs to grant a user permission to manage virtual machines within a specific folder, but inherited permissions from the root vCenter level are granting too many privileges. How should the administrator resolve this?

A.Edit the global vCenter configuration file to block all role inheritance globally.
B.Delete the root-level permissions and recreate all user accounts from scratch.
C.Disable permission inheritance on the specific folder object or assign the No Access role at that level.
D.Move the user account to a separate Active Directory organizational unit without vSphere integration.
AnswerC

Unchecking propagation or assigning 'No Access' at a lower level effectively restricts or stops permission inheritance.

Why this answer

To override inherited permissions, administrators can select 'Propagate' as unchecked when assigning a restricted role on a specific object, or explicitly assign a 'No Access' role to neutralize inherited privileges.

Full explanation →
Page 2

Page 3 of 7

Page 4

All pages

1234567

Practice VCP-VVF by domain

Target a specific domain to shore up weak areas.

Deploy Configure And Operate VvfIT Architectures Technologies StandardsVmware Vsphere Foundation FundamentalsTroubleshoot And Optimize
See all domains with question counts →