Courseiva

VMware vSphere Foundation 9.0 Administrator (VCP-VVF, 2V0-16.25) (VCP-VVF) (VCP-VVF) — Questions 451–517

517 questions total · 7pages · All types, answers revealed

Take a mock examExam hub
Page 6

Page 7 of 7

451
MCQeasy

An administrator is deploying VMware vSphere Foundation 9.0 and needs to understand the primary architectural role of the Supervisor in a vSphere cluster. Which task does the Supervisor directly enable?

A.It serves as the centralized licensing portal for issuing and revoking vSphere Foundation product keys.
B.It transforms a standard vSphere cluster into a platform for managing Kubernetes workloads and containers natively.
C.It automates the end-to-end patching of physical switch firmware across top-of-rack switches.
D.It replaces vCenter Server as the single pane of glass for managing global ESXi host networking configurations.
AnswerB

The Supervisor cluster uses Tanzu integrated services to run Kubernetes control planes directly on ESXi hosts.

Why this answer

The Supervisor transforms a standard vSphere cluster into a Kubernetes-native platform, allowing developers to deploy and manage containers and Kubernetes workloads alongside traditional VMs.

Full explanation →
452
MCQhard

An enterprise storage architect is designing a vSphere Foundation 9.0 vSAN cluster using native NVMe drives. When configuring the vSAN disk group or express storage architecture (ESA), what is the architectural difference between Original Storage Architecture (OSA) and Express Storage Architecture (ESA)?

A.OSA requires Fibre Channel HBAs, whereas ESA runs exclusively over wireless Wi-Fi 7 networks.
B.ESA uses a streamlined single-tier architecture optimized for high-performance NVMe media without explicit cache/capacity disk groups, whereas OSA uses a two-tier caching architecture.
C.OSA does not support virtual machine creation, whereas ESA only supports Windows 3.1 workloads.
D.ESA is designed exclusively for mechanical 5400 RPM hard disk drives, while OSA requires tape libraries.
AnswerB

Correct. ESA eliminates the cache tier requirement found in OSA, processing writes directly and efficiently on NVMe devices.

Why this answer

vSAN ESA is designed for high-performance NVMe media, processing I/O with a single-tier architecture that eliminates caching overhead, whereas OSA uses a two-tier cache/capacity disk group design.

Full explanation →
453
MCQmedium

An administrator is configuring automated alerting in vSphere Foundation 9.0 when a datastore reaches 85% capacity utilization. After setting up the alarm, test simulations do not trigger the email notification. Upon checking the vCenter event logs, no corresponding event was generated. What is the most likely root cause?

A.The vCenter Server statistics collection level for storage metrics is set too low (e.g., Level 1), preventing the collection of detailed datastore usage metrics.
B.Datastore capacity alarms can only be triggered by Aria Operations, not native vCenter alarm definitions.
C.SMTP settings must be configured directly within each ESXi host's advanced configuration parameters.
D.The ESXi firewall is blocking outgoing SMTP traffic on port 25 from the vCenter management interface.
AnswerA

Detailed storage metrics require appropriate statistics collection levels in vCenter settings to trigger threshold-based alarms.

Why this answer

Storage alarms rely on Storage DRS or datastore polling intervals. If datastore capacity alarms are not enabled or if the statistic collection level for storage is set too low in vCenter Server settings, metrics and corresponding events are not generated.

Full explanation →
454
MCQeasy

An administrator is designing a vSphere Foundation 9.0 cluster and wants to optimize memory resource utilization across virtual machines. Which memory management technique reclaims idle memory from running VMs by temporarily reallocating it to VMs experiencing memory pressure?

A.Memory ballooning via the VMware Tools balloon driver (vmmemctl).
B.Enabling Fibre Channel multipathing round-robin policies.
C.Upgrading physical RAM modules without rebooting the ESXi host.
D.Forcibly killing guest operating system background services using remote SSH commands.
AnswerA

Correct. The balloon driver reclaims guest memory under pressure and gives it to the hypervisor pool.

Why this answer

Transparent Page Sharing (TPS) and memory ballooning are classic hypervisor memory reclamation techniques; ballooning actively reclaims allocated guest memory.

Full explanation →
455
MCQhard

An administrator needs to rotate an expired machine SSL certificate on a vCenter Server instance integrated into a VVF deployment. What tool is the primary method to perform this operation via the command line?

A.vdtool --rotate-ssl
B.vcsa-deploy --reconfigure
C.esxcli cert update
D./usr/lib/vmware-vmca/bin/certificate-manager
AnswerD

This is the correct path and utility for certificate management tasks.

Why this answer

The 'certificate-manager' utility is the standard VMware tool for managing certificates on vCenter Server appliances.

Full explanation →
456
MCQmedium

An administrator needs to deploy a virtual machine template securely across multiple vCenter instances in a vSphere Foundation deployment. Which vCenter feature facilitates cross-vCenter template management and synchronization?

A.Enhanced Linked Mode
B.VMware Skyline
C.Content Library
D.vRealize Orchestrator
AnswerC

Content Library provides centralized management and synchronization of VM templates and ISOs across vCenter boundaries.

Why this answer

Content Library is designed to manage and share VM templates, vApps, ISO images, and scripts across multiple vCenter Server instances.

Full explanation →
457
MCQhard

An administrator is configuring certificate replacement for NSX Manager in a VVF environment using the NSX API. They generate a CSR, have it signed by the enterprise CA, and import it using the API. However, NSX services fail to trust the new certificate. What step was likely omitted during the import process?

A.Updating the NSX Manager DNS pointer record in Active Directory.
B.Importing the intermediate and root CA certificates into the NSX Trust Store and assigning the certificate to the API/NODE service.
C.Restarting the vCenter inventory service to push the trust bundle to NSX.
D.Running the certificate-manager utility on the ESXi host command line.
AnswerB

NSX requires the full CA certificate chain in the trust store and explicit assignment of the certificate to the appropriate service (e.g., API, Node).

Why this answer

When importing a signed certificate into NSX Manager via API or UI, the administrator must ensure that the corresponding private key was included or properly paired, and that the chain includes the intermediate and root CA certificates imported into the NSX trust store.

Full explanation →
458
MCQmedium

An administrator is setting up a new vSphere Foundation environment and needs to integrate on-premises vCenter Server instances with cloud-based management tools. Which VMware component provides a unified cloud console for monitoring and managing multiple vCenter instances across hybrid environments?

A.vSphere Host Client
B.vSphere Lifecycle Manager
C.vCenter Server Appliance Shell
D.VMware Aria Operations
AnswerD

VMware Aria Operations delivers comprehensive operations management across hybrid cloud environments.

Why this answer

VMware Aria Operations (formerly vRealize Operations) integrated via vSphere Foundation provides unified monitoring, capacity planning, and health analytics across hybrid and multi-cloud environments.

Full explanation →
459
MCQhard

An administrator is troubleshooting an ESXi 9.0 host network configuration issue where custom routes need to be added for a specific backend storage subnet reachable through a specific VMkernel gateway. Which esxcli command adds a static IPv4 route to the ESXi host network stack?

A.esxcli network vswitch standard route set
B.esxcli storage san route add
C.esxcli network ip route ipv4 add --gateway=192.168.100.1 --network=192.168.200.0/24
D.esxcli route static create --ip=192.168.200.0
AnswerC

This command correctly specifies the gateway and target subnet for adding a static IPv4 route in ESXi.

Why this answer

To add a static route in ESXi, administrators use 'esxcli network ip route ipv4 add --gateway=X --network=Y'.

Full explanation →
460
Multi-Selecthard

An administrator is examining advanced memory management mechanisms in ESXi using esxtop. Which THREE memory reclamation techniques does ESXi utilize when physical host memory becomes constrained? (Choose three.)

Select 3 answers
A.Transparent Page Sharing (TPS) to de-duplicate identical memory pages across virtual machines.
B.Storage DRS datastore capacity migration.
C.Automatic conversion of virtual machine hard disks from thin to thick provisioned.
D.Memory ballooning via the vmmemctl driver inside the guest operating system.
E.Hypervisor-level swapping of virtual machine memory to ESXi swap space.
AnswersA, D, E

TPS identifies and merges identical memory pages to save physical RAM.

Why this answer

ESXi uses ballooning, transparent page sharing (TPS), guest memory swapping, and hypervisor swapping.

Full explanation →
461
MCQhard

An infrastructure architect is designing a vSphere Foundation 9.0 cluster and needs to implement SR-IOV (Single Root I/O Virtualization) for high-throughput trading virtual machines. What is a key architectural trade-off when implementing SR-IOV virtual functions (VFs)?

A.SR-IOV requires all virtual machines to run exclusively on Linux kernel version 2.4.
B.Certain vSphere features such as live vMotion, fault tolerance, and snapshots may be limited or require specific hardware vendor support due to direct hardware binding.
C.SR-IOV doubles the CPU utilization of the ESXi host for packet encapsulation.
D.SR-IOV restricts virtual disk sizes to a maximum of 2 gigabytes.
AnswerB

Correct. Bypassing the hypervisor switch layer via SR-IOV restricts hypervisor-level mobility and management features for those virtual machines.

Why this answer

SR-IOV bypasses the hypervisor network stack to deliver near-native hardware performance, but doing so means certain hypervisor-based features like vMotion, live snapshots, and DRS migration compatibility may be restricted or require specific hardware support.

Full explanation →
462
Multi-Selecthard

An administrator is troubleshooting an ESXi host that has suffered a purple diagnostic screen (PSOD). Which THREE steps should the administrator take to analyze the root cause or prepare the data for VMware Support? (Choose three.)

Select 3 answers
A.Capture the register values, stack trace, and error message displayed on the PSOD screen (or via IPMI/ILO remote console).
B.Verify hardware health, system memory status, and check for known driver or firmware bugs matching the PSOD stack signature in the VMware KB.
C.Generate and collect an ESXi support bundle using the vSphere Client or DCUI to preserve vmkernel logs and core dump summaries.
D.Run a Storage vMotion on all virtual machines while the host is in a crashed state.
E.Reformat all VMFS datastores on the host to clear corrupted PSOD cache blocks.
AnswersA, B, C

The on-screen diagnostic information shows the exact instruction pointer, stack trace, and failing module causing the crash.

Why this answer

PSOD troubleshooting involves collecting the support bundle (which contains vmkernel.log and crash summaries), identifying the failing module/stack trace from the screen or core dump, and checking hardware health or known VMware Knowledge Base articles.

Full explanation →
463
Multi-Selectmedium

Which TWO tasks are required to configure log analysis using VMware Aria Operations for Logs?

Select 2 answers
A.Configure syslog redirection on the ESXi host
B.Enable root SSH access on the Log Insight appliance
C.Manually copy log files to the appliance via SCP
D.Restart all virtual machines
E.Install the Log Insight agent on the source
AnswersA, E

ESXi hosts must be pointed at the log collector.

Why this answer

Configuring the agent and pointing the logs to the collector are the required steps.

Full explanation →
464
MCQhard

An administrator is investigating an issue where an ESXi 9.0 host is unable to join an Active Directory domain for authentication. Which log file on the ESXi host should the administrator inspect to review authentication and joinservice errors?

A./var/log/vmware/vpxd.log
B./var/log/syslog.datastore
C./var/log/vsan.log
D./var/log/auth.log (or reviewing messages related to lsass / Active Directory authentication)
AnswerD

auth.log records authentication attempts, PAM events, and Active Directory domain join errors on ESXi.

Why this answer

ESXi authentication and Active Directory integration logs are located under /var/log/auth.log or /var/log/vpxd.log (on vCenter), or host-side join logs in /var/log/lsassd.log or similar auth logs.

Full explanation →
465
MCQhard

A Supervisor cluster is showing a 'Degraded' status in the Workload Management dashboard. Which service should you inspect first to troubleshoot the control plane status?

A.vsan-health
B.eam
C.vpxd
D.vmware-wcp
AnswerD

WCP is the Workload Control Plane service for Supervisors.

Why this answer

The 'vmware-wcp' service is responsible for the Workload Control Plane and its health is directly related to Supervisor status.

Full explanation →
466
MCQmedium

When managing lifecycle updates, what is the advantage of using a 'Cluster Image' over a 'Baseline'?

A.It provides a single desired state for the entire cluster
B.It is only compatible with Windows-based vCenter
C.It allows individual host-level customization that overrides cluster policy
D.It supports offline update repositories only
AnswerA

Cluster images define the exact version and add-ons required for all hosts.

Why this answer

Cluster Images allow for a declarative, unified approach ensuring all hosts have an identical state.

Full explanation →
467
Multi-Selectmedium

An administrator is troubleshooting high memory utilization on an ESXi 9.0 host and wants to identify which virtual machines are consuming the most memory. Which TWO methods can the administrator use to view VM memory consumption? (Choose two.)

Select 2 answers
A.esxtop command-line utility (pressing 'm' to view memory metrics per world/VM).
B.vSphere Lifecycle Manager desired state compliance dashboard.
C.Enhanced vMotion Compatibility (EVC) summary page.
D.vSphere Client performance charts on the ESXi host or cluster (Monitor -> Performance -> Advanced -> Memory views).
E.vSphere HA datastore heartbeat configuration tab.
AnswersA, D

esxtop memory view provides real-time tracking of memory metrics like consumed, ballooned, and swapped memory per VM.

Why this answer

VM memory consumption can be viewed via vSphere Client performance charts (Host -> Monitor -> Performance -> Memory) and esxtop memory view ('m').

Full explanation →
468
MCQeasy

An administrator is monitoring resource performance in vSphere Foundation 9.0 using vCenter Performance Charts. Which metric type reflects the memory actively being used by a virtual machine, accounting for memory reclamation techniques like ballooning?

A.Overhead memory
B.Ballooned memory
C.Consumable memory
D.Active memory
AnswerD

Active memory indicates the actual working set of memory being utilized by the guest OS workload.

Why this answer

Active memory represents the amount of memory that a virtual machine is actively using, distinguishing it from granted or consumed memory which may include idle cached pages.

Full explanation →
469
Multi-Selectmedium

Which THREE items should be verified when a dashboard in Operations is not showing expected data?

Select 3 answers
A.Restart all VMs in the cluster
B.Check network connectivity between the source and the collector
C.Modify the BIOS settings of the vCenter server
D.Verify the user permissions in the Operations dashboard
E.Verify the status of the Operations collector node
AnswersB, D, E

Firewall or network issues block data flow.

Why this answer

Collector health, connectivity, and user permissions are the most common causes.

Full explanation →
470
MCQeasy

An administrator is deploying VMware vSphere Foundation 9.0 using the Cloud Builder appliance. During the environment bring-up validation phase, the precheck fails due to an insufficient number of IP addresses assigned to the ESXi management network pool. Which action must the administrator take to resolve this validation failure?

A.Reboot the Cloud Builder appliance to clear cached allocation tables from previous failed validation runs.
B.Bypass the IP validation phase by editing the Cloud Builder local deployment service configuration properties.
C.Deploy an external DHCP server on the management VLAN to dynamically lease addresses to the ESXi hosts.
D.Modify the JSON specification file to expand the IP address pool range with valid unused IP addresses and restart prechecks.
AnswerD

The JSON input file defines the IP allocation; correcting the range allows Cloud Builder prechecks to pass.

Why this answer

The Cloud Builder deployment requires a specific contiguous block of IP addresses for ESXi management, vCenter, NSX, and SDDC Manager components depending on the scale. The administrator must add valid, unused IP addresses to the IP pool configuration file or JSON specification and re-run the prechecks.

Full explanation →
471
MCQeasy

An administrator needs to quickly identify which ESXi hosts in a VVF cluster are running an outdated firmware version that is flagged by vLCM. Which view in the vSphere Client displays this compliance status?

A.vCenter -> Summary -> Services Status.
B.Host -> Monitor -> Hardware Health -> Firmware.
C.Cluster -> Updates -> Overview / Image compliance tab.
D.Cluster -> Configure -> vSphere Availability.
AnswerC

The Updates tab displays compliance statuses for the cluster image and hardware add-ons.

Why this answer

vSphere Lifecycle Manager (vLCM) provides a dedicated 'Updates' tab at the cluster level where administrators can view image compliance, including hardware support add-ons and firmware statuses.

Full explanation →
472
Multi-Selecthard

An administrator is troubleshooting certificate replacement issues in a vSphere Foundation 9.0 environment using the vSphere Certificate Manager. Which TWO statements regarding VMCA (VMware Certificate Authority) are correct? (Choose two)

Select 2 answers
A.VMCA requires an external hardware security module (HSM) for storing its root private key.
B.VMCA can be configured to act as an intermediate CA signed by an enterprise external Certificate Authority.
C.VMCA automatically generates and provisions certificates for vCenter services and ESXi hosts upon joining the inventory.
D.Replacing VMCA certificates requires rebooting the physical ESXi hosts in the managed cluster.
E.VMCA only supports self-signed certificates and cannot be replaced with custom keys.
AnswersB, C

VMCA supports hybrid architectures where it acts as an intermediate CA signed by an external enterprise CA.

Why this answer

VMCA can act as an intermediate CA signed by a corporate CA, or as a root CA. It automatically provisions certificates to internal vCenter components.

Full explanation →
473
MCQmedium

What is the primary purpose of 'vSphere DRS' (Distributed Resource Scheduler) in a cluster?

A.To balance compute resources
B.To patch ESXi hosts
C.To store virtual machines
D.To provide high availability
AnswerA

DRS ensures that resources are distributed efficiently.

Why this answer

DRS balances the compute load (CPU/Memory) across the hosts in the cluster.

Full explanation →
474
Multi-Selectmedium

An administrator is troubleshooting a vSphere HA cluster where virtual machines failed to restart after a simulated host failure. Which TWO cluster configurations should the administrator verify? (Choose two.)

Select 2 answers
A.vSphere Lifecycle Manager desired state compliance images.
B.Storage I/O Control threshold latencies.
C.Cluster network heartbeating and datastore heartbeat configurations.
D.Enhanced vMotion Compatibility (EVC) CPU baseline levels.
E.vSphere HA Admission Control capacity limits and resource reservations.
AnswersC, E

If heartbeating is misconfigured or network partitions occur without datastore heartbeats configured, failure detection fails.

Why this answer

When VMs fail to restart during an HA event, admission control settings (which might block power-ons if cluster capacity is insufficient) and network isolation responses or overall HA configuration are key factors to verify.

Full explanation →
475
Multi-Selecthard

An administrator is troubleshooting log integration between vCenter Server, ESXi hosts, and VMware Aria Operations for Logs (formerly vRealize Log Insight) in a VVF deployment. Which THREE configuration steps or components are required to successfully forward syslog data from ESXi hosts to Aria Operations for Logs? (Choose three.)

Select 3 answers
A.Disable vCenter Single Sign-On trust validation on the log collector.
B.Ensure ESXi firewall rules allow outgoing syslog traffic on UDP/TCP port 514 (or configured secure port).
C.Configure the syslog forwarding destination (Syslog.global.logHost) on the ESXi hosts pointing to the Log Insight cluster.
D.Install the vRealize Log Insight agent service on the ESXi hypervisor kernel memory.
E.Activate the VMware Aria Operations for Logs integration or configure the target IP/FQDN in vCenter settings.
AnswersB, C, E

Firewall rules on ESXi must permit outbound syslog communication.

Why this answer

Configuring log forwarding involves setting the syslog target on hosts, ensuring firewall rules permit traffic on port 514, and deploying the Log Insight agent or configuring syslog forwarding sinks.

Full explanation →
476
Multi-Selecteasy

An administrator is preparing to deploy a new vSphere Foundation environment using vCenter Server. Which THREE initial foundational components must be established before creating a vSphere cluster and deploying virtual machines? (Choose three)

Select 3 answers
A.Configure VMware Aria Automation for multi-tenant self-service portals.
B.Configure vSphere networking (vSphere Standard Switch or vSphere Distributed Switch).
C.Configure an external hardware load balancer for vCenter High Availability.
D.Deploy and configure one or more ESXi hosts.
E.Install and configure a vCenter Server instance.
AnswersB, D, E

Networking configuration is mandatory for host communication and VM connectivity.

Why this answer

To build a functional vSphere environment, an administrator must deploy an ESXi host, manage it via a vCenter Server instance, and configure network connectivity using Standard or Distributed Switches.

Full explanation →
477
MCQhard

An administrator is configuring certificate management for a vSphere Foundation 9.0 environment using VMCA (VMware Certificate Authority) in hybrid mode. What is the design purpose of hybrid mode certification?

A.VMCA delegates all cryptographic operations to an external hardware TPM chip on vCenter.
B.VMCA automatically disables all SSL verification to allow unencrypted communication with legacy ESXi 5.5 hosts.
C.VMCA alternates between self-signed certificates and public Let's Encrypt certificates every 90 days.
D.VMCA acts as an intermediate certificate authority signed by an external enterprise CA, automatically issuing subordinate certificates to ESXi and vCenter.
AnswerD

Correct. Hybrid mode uses VMCA as an intermediate CA tied to your corporate Public Key Infrastructure (PKI).

Why this answer

Hybrid mode allows VMCA to act as an intermediate CA signed by an enterprise third-party Certificate Authority (like Microsoft CA), rather than acting as a self-signed root CA or replacing all certificates manually.

Full explanation →
478
Multi-Selectmedium

An administrator is preparing to deploy the Supervisor cluster within a vSphere cluster for VVF Workload Management. Which TWO prerequisites must be met prior to initiating the Supervisor configuration wizard? (Choose two.)

Select 2 answers
A.The underlying cluster must be configured with a vSphere Distributed Switch (vDS).
B.Storage policies must be disabled across all datastores in the cluster.
C.NSX must be uninstalled from all transport nodes in the cluster.
D.The ESXi hosts must be licensed with vSphere Standard edition only.
E.A subscribed or local Content Library containing the prescribed Kubernetes OVA image must be available.
AnswersA, E

A vDS is mandatory for networking Kubernetes namespaces and pods across cluster hosts.

Why this answer

Supervisor requires a vSphere Distributed Switch (vDS) and a content library containing the required Kubernetes OVA templates.

Full explanation →
479
MCQeasy

An administrator needs to configure a new VMware vSphere 9 cluster to ensure high availability for virtual machines in the event of a host failure. Which feature should be enabled in the vSphere Cluster settings to automatically restart VMs on surviving hosts?

A.vSphere HA
B.vSphere Distributed Switch
C.Storage vMotion
D.vSphere DRS
AnswerA

vSphere High Availability provides rapid recovery from downtime and cost-effective high availability for applications running in virtual machines.

Why this answer

vSphere High Availability (HA) monitors ESXi hosts and automatically restarts virtual machines on other available hosts in the cluster if a host failure is detected.

Full explanation →
480
Multi-Selecthard

An administrator is troubleshooting a virtual machine that is failing to migrate via vMotion. Which THREE conditions could cause a vMotion migration to fail validation checks? (Choose three.)

Select 3 answers
A.The virtual machine has snapshot files older than 30 days.
B.The virtual machine is configured with a memory limit lower than its allocated RAM.
C.The source and destination hosts have incompatible CPU feature sets and EVC is not enabled.
D.The destination ESXi host lacks access to the virtual machine's datastore.
E.The virtual machine has a CD/ROM drive attached to an ISO image located on a local datastore inaccessible by the target host.
AnswersC, D, E

CPU feature mismatches prevent live vMotion without EVC.

Why this answer

vMotion validation checks CPU compatibility, storage accessibility, and network connectivity between source and destination hosts.

Full explanation →
481
MCQmedium

An administrator is configuring a new virtual machine in vSphere 9 and needs to attach a persistent raw LUN directly from the storage array. Which disk provisioning type should be selected?

A.Thick Provision Eager Zeroed
B.Thick Provision Lazy Zeroed
C.Thin Provision
D.Raw Device Mapping (RDM) Physical Mode
AnswerD

RDM Physical Mode passes all SCSI commands directly from the guest OS to the storage device, ideal for backup software utilizing SAN snapshots.

Why this answer

RDM (Raw Device Mapping) allows a storage LUN to be directly connected to a virtual machine, supporting either virtual compatibility mode or physical compatibility mode.

Full explanation →
482
MCQeasy

When configuring a VVF license, which location in the vSphere Client is used to apply the license key to the cluster?

A.Datacenter > Settings > Subscription
B.Global Inventory Lists > Licensing
C.Administration > Licensing > Assets
D.Host and Cluster view > Configure > Licensing
AnswerC

Licensing assignment is managed through the Administration menu.

Why this answer

Licensing is managed under the Administration section of the vSphere Client.

Full explanation →
483
Multi-Selectmedium

Which TWO actions must an administrator perform to correctly configure identity and access control for VVF using vCenter Single Sign-On?

Select 2 answers
A.Configure group-based permissions to manage access within the vSphere inventory
B.Join the vCenter Server to an Active Directory domain or add an OIDC provider
C.Assign the 'Administrator' role at the root level to all domain groups
D.Manually create individual local user accounts for every domain user
E.Disable the vsphere.local domain to force external authentication
AnswersA, B

Role-based access control requires assigning permissions to groups or users.

Why this answer

Adding an identity source and assigning appropriate global permissions are the fundamental steps for SSO integration.

Full explanation →
484
MCQhard

An administrator is managing a vSphere Foundation cluster where DRS is configured in fully automated mode. However, a specific virtual machine frequently generates migration recommendations that are ignored by the administrator. How can the administrator prevent DRS from generating recommendations for this specific VM without disabling DRS for the entire cluster?

A.Assign a CPU limit of 0 to the virtual machine.
B.Create a VM-VM anti-affinity rule pairing the VM with itself.
C.Configure a DRS automation override for the specific virtual machine to set its automation level to Disabled.
D.Place the virtual machine into a dedicated Resource Pool with shares set to zero.
AnswerC

VM-level DRS overrides allow customization of automation behavior per virtual machine.

Why this answer

DRS override settings allow administrators to adjust automation levels or disable DRS on a per-VM basis.

Full explanation →
485
MCQhard

A security architect is hardening a vSphere Foundation 9.0 environment and needs to restrict access to the ESXi host CIM (Common Information Model) service. Which design practice aligns with modern security hardening standards?

A.Grant CIM access permissions to all authenticated Active Directory users.
B.Configure the CIM service to use unencrypted HTTP ports for faster hardware polling.
C.Disable the CIM server service on ESXi hosts if hardware monitoring is handled out-of-band via IPMI/iLO/iDRAC.
D.Route all CIM traffic through the vCenter Server database layer.
AnswerC

Correct. Disabling unused services like CIM when out-of-band management is present hardens the ESXi host.

Why this answer

Disabling unused or insecure management services like CIM (or restricting access) reduces the attack surface of the ESXi hypervisor.

Full explanation →
486
MCQhard

An administrator is configuring the Supervisor on a vSphere cluster within a vSphere Foundation 9.0 environment. After enabling workload management, the control plane VMs fail to power on, and the status shows that the primary storage policy assigned to the Supervisor namespace cannot be validated against the datastore clusters. What is the most likely cause and corrective action?

A.Assign a storage policy that is backed by vSAN or an SPM-compliant datastore and ensure the policy tags match the requirements of the control plane nodes.
B.Disable DRS on the cluster because Supervisor control plane VMs cannot run on DRS-enabled clusters.
C.Convert the target datastore from VMFS to NFS, as Supervisor control planes do not support VMFS datastores.
D.Log in to each ESXi host via SSH and manually create VMDK files for the control plane VMs in the datastore root.
AnswerA

Supervisor control planes require valid vSAN or supported shared storage policies with correct capabilities enabled.

Why this answer

Supervisor control plane VMs require a storage policy that meets performance and availability requirements. If the referenced storage policy lacks the necessary capabilities or cannot be accessed on the chosen datastore cluster, initialization fails.

Full explanation →
487
MCQhard

An infrastructure architect is designing a vSphere Foundation 9.0 environment where virtual machines running cryptographic workloads require hardware random number generator access. Which design approach satisfies this requirement?

A.Configure software iSCSI multipathing with round-robin load balancing.
B.Configure virtual machines with a virtual hardware random number generator (vHRNG) device backed by the host hardware entropy source.
C.Set the virtual machine CPU hot-add setting to active.
D.Install a third-party USB entropy dongle directly into every virtual machine via software USB redirection.
AnswerB

Correct. vHRNG passes entropy from the ESXi host hardware to the guest OS for secure cryptographic operations.

Why this answer

Providing virtual machines with access to a virtual hardware random number generator (vHRNG) allows guest operating systems to draw entropy from the ESXi host's hardware RNG or TPM.

Full explanation →
488
MCQeasy

An administrator is troubleshooting a storage connectivity problem where a newly presented LUN is not visible to an ESXi host. What is the first manual action required in the vSphere Client to discover the new LUN?

A.Create a new virtual machine on the host.
B.Rescan the storage adapters on the ESXi host.
C.Reboot the vCenter Server appliance.
D.Restart the CIM monitoring service.
AnswerB

Rescanning storage adapters prompts the host to query the storage fabric for newly added LUNs or paths.

Why this answer

When new LUNs are presented from a storage array, the ESXi host must perform a storage adapter rescan to discover the new storage devices and extents.

Full explanation →
489
MCQeasy

An administrator needs to generate a compliance report showing all security configuration benchmarks met by the ESXi hosts in a VVF cluster. Which feature provides this auditing capability?

A.Host Profiles compliance check view in the vSphere Client.
B.SDDC Manager -> Infrastructure -> Security Audit.
C.vCenter Performance Charts -> Security tab.
D.Cloud Builder pre-check report generator.
AnswerA

Host Profiles verify compliance against a gold standard configuration profile, reporting any drift.

Why this answer

vSphere Compliance and Host Profiles allow administrators to check ESXi configuration compliance against predefined security baselines or desired state profiles.

Full explanation →
490
MCQmedium

An administrator is deploying VMware vSphere Foundation 9.0 using the automated installer. During the validation phase, the precheck fails with an error indicating that the target ESXi hosts cannot resolve the DNS records of the vCenter Server Appliance. Which deployment component configuration must be verified to resolve this issue?

A.Restart the NSX Manager appliance to refresh its internal DNS cache.
B.Enable SSH on all ESXi hosts and restart the management agents.
C.Modify the vpxd.cfg file on the ESXi host to point to the local hosts file.
D.Verify that the management network gateway and DNS server IP addresses are correctly configured in the JSON configuration file used by the installer.
AnswerD

The JSON input file defines the network settings for the appliances and hosts during automated deployment, and incorrect DNS entries here cause precheck failures.

Why this answer

During VVF deployment, the target ESXi hosts and management components require accurate forward and reverse DNS records. The installer validation checks DNS resolution before proceeding.

Full explanation →
491
MCQmedium

An administrator is troubleshooting a vSAN 9.0 stretched cluster where the witness host has lost management connectivity to the primary site. The data sites remain operational. What is the expected immediate impact on the vSAN storage pools?

A.All virtual machines on the affected site immediately power off to prevent split-brain.
B.Storage remains available as long as the primary site and the witness maintain data path connectivity, but vSAN health alarms will trigger due to management loss.
C.The vSAN cluster automatically falls back to a standard single-site cluster layout.
D.The vSAN datastore becomes entirely read-only across all sites.
AnswerB

Management network loss does not automatically tear down the vSAN data path (VMkernel traffic), though monitoring and alarm propagation are impaired.

Why this answer

In a vSAN stretched cluster, the witness host is required to maintain quorum when a site fails. A loss of management connectivity alone does not drop data paths if IP/vSAN traffic remains, but complete loss of the witness requires careful quorum evaluation. Assuming witness data path is severed, a 2-node or stretched cluster split-brain prevention kicks in.

If the witness cannot communicate with one site, that site loses quorum unless overridden.

Full explanation →
492
MCQmedium

An administrator is troubleshooting a virtual machine performance issue where the VM experiences intermittent high storage latency. The datastore is backed by a vSAN 9.0 cluster. Which vSAN performance service metric helps identify if client-side or server-side caching tiers are experiencing congestion?

A.vSAN Cache Tier Congestion and Hit Ratio metrics
B.vSphere HA datastore heartbeat response time
C.Enhanced vMotion Compatibility CPU usage
D.Network packet drop rate on management VMkernel ports
AnswerA

Cache tier congestion metrics show if write buffers or read caches are saturated, leading to latency spikes.

Why this answer

vSAN performance service provides cache tier congestion counters and hit/miss ratios to evaluate whether the cache tier is bottlenecked.

Full explanation →
493
Multi-Selecthard

An administrator is configuring vSphere Supervisor on a VVF cluster. Which THREE prerequisites must be met before enabling Workload Management? (Choose three.)

Select 3 answers
A.VMware Cloud Builder must remain powered on and connected to the Supervisor management network.
B.Active Directory must be configured as the exclusive identity provider for Kubernetes control plane APIs.
C.The cluster must contain hosts licensed with VMware vSphere Foundation (VVF) and appropriate CPU core allocations.
D.NSX must be deployed and the cluster must be prepared for NSX networking, or a valid VDS networking setup must be completed.
E.Shared storage (such as vSAN or NFS/VMFS) must be available and accessible by all hosts in the cluster.
AnswersC, D, E

VVF licensing is mandatory to enable Workload Management features on the cluster.

Why this answer

Enabling vSphere Supervisor requires compatible vSphere clusters, proper licensing, and NSX networking or vSphere Distributed Switch configured for workload networking.

Full explanation →
494
MCQeasy

An administrator notices that an ESXi host is displaying a warning banner in the Direct Console User Interface (DCUI) indicating that the evaluation license is about to expire. Where should the administrator navigate in the vSphere Client to assign a permanent vSphere Foundation license key?

A.Edit the virtual machine hardware settings to include a license key vNIC.
B.Open vSphere Lifecycle Manager -> Baseline Management -> Licenses.
C.Log into the ESXi DCUI, select 'Troubleshooting Options', and enter the license key.
D.Navigate to vCenter Administration -> Licensing -> Assets -> Licenses and add/assign the new license key.
AnswerD

The Licensing inventory section in vCenter manages all product license keys and asset assignments across hosts and clusters.

Why this answer

Assigning and managing vSphere license keys is performed under vCenter Administration -> Licensing or Host -> Configure -> Licensing.

Full explanation →
495
MCQhard

An administrator needs to configure secure access to a vCenter Server instance in VVF using an external Identity Provider (IdP) via OIDC/OAuth 2.0. In the vSphere Client, under Administration > Single Sign-On > Configuration, which tab must the administrator navigate to register the external IdP?

A.Access Control > Roles
B.Advanced Tokens
C.Identity Sources
D.Configuration > Identity Providers
AnswerD

The Identity Providers tab supports OIDC registration for modern federation.

Why this answer

Identity Providers is the correct tab in vCenter SSO configuration to set up OIDC-based identity providers like Azure AD or Okta.

Full explanation →
496
MCQmedium

An administrator is designing a high-density vSphere Foundation 9.0 cluster and plans to utilize vSphere Quick Boot. What is the primary prerequisite for successfully executing a Quick Boot operation on an ESXi host?

A.All virtual machines on the host must be powered off before initiating the reboot command.
B.The host must be configured to boot exclusively from an external iSCSI LUN.
C.The vCenter Server must be running on a separate physical cluster outside the scope of Quick Boot.
D.All server device drivers and firmware installed on the ESXi host must be certified compatible with Quick Boot.
AnswerD

Correct. Incompatible drivers or firmware can cause purple diagnostics screens if hardware initialization is bypassed during Quick Boot.

Why this answer

Quick Boot bypasses the hardware POST (Power-On Self-Test) routine during a reboot; therefore, all installed drivers and firmware on the host must be fully compatible with Quick Boot.

Full explanation →
497
MCQeasy

An administrator notices that a virtual machine has a warning icon in the vSphere Client indicating that 'VMware Tools is not running'. What is the impact of VMware Tools not running on virtual machine manageability and performance monitoring?

A.Guest OS IP addresses will not appear in vCenter, graceful guest shutdowns/reboots will be unavailable, and guest performance metrics will be limited.
B.The virtual machine's virtual disks will automatically become read-only.
C.The virtual machine will immediately power off to prevent guest corruption.
D.Storage vMotion will be permanently disabled for that specific VM.
AnswerA

VMware Tools provides the heartbeat and guest agent communication channel required for IP reporting, graceful power operations, and advanced metrics.

Why this answer

Without VMware Tools, guest OS heartbeats are lost, IP addresses do not report to vCenter, graceful shutdowns fail, and performance metrics are less granular.

Full explanation →
498
MCQmedium

An administrator is designing a vSphere Foundation 9.0 cluster and wishes to implement Network I/O Control (NIOC) version 3 to manage traffic contention on 10GbE/25GbE uplinks. How does NIOC prioritize traffic across system traffic types?

A.By enforcing strict packet drop rules on management traffic when vMotion exceeds 80% utilization.
B.By rewriting DSCP bits on physical core switch headers directly.
C.By allocating user-defined shares and reservation percentages to specific system traffic types on the distributed switch uplinks.
D.By dynamically migrating virtual machines to less congested physical switches using BGP routing.
AnswerC

Correct. NIOC v3 allows administrators to guarantee bandwidth via reservations and prioritize via shares for system traffic.

Why this answer

NIOC version 3 uses shares, reservation, and limits applied to defined system traffic types (such as vMotion, FT, vSAN, iSCSI, NFS, and Management) on the distributed switch.

Full explanation →
499
Multi-Selecthard

An administrator is troubleshooting a performance issue in a vSphere Foundation 9.0 environment where virtual machines are experiencing sluggish storage responsiveness on a VMFS datastore. Which THREE native tools or commands can the administrator use to gather detailed storage performance and path diagnostic data? (Choose three.)

Select 3 answers
A.esxcli license assign --diagnostic
B.vSphere Client Performance Charts (Datastore and VM storage views)
C.esxtop (pressing 'u' then 's' to view storage statistics and latency metrics like DAVG, KAVG, and QAVG).
D.esxcli vswandb query
E.esxcli storage nmp path list and esxcli storage core device list
AnswersB, C, E

vSphere Client charts provide historical latency and throughput trends for datastores and VMs.

Why this answer

Storage troubleshooting tools include esxcli storage commands, esxtop (storage view 's'), vSphere performance charts in vCenter, and command-line utilities like vmkfstools or vsi.

Full explanation →
500
MCQeasy

An administrator notices that a virtual machine's hard disk size needs to be increased. The virtual machine is powered on, and the datastore has ample free space. What is the recommended best practice before expanding the VMDK in the vSphere Client?

A.Power down the entire ESXi host cluster.
B.Format the guest operating system's C: drive using NTFS.
C.Disable all firewall rules on the vSphere Distributed Switch.
D.Take a manual snapshot or backup of the virtual machine as a safeguard before modifying disk capacity.
AnswerD

Creating a restore point via snapshot or backup ensures data safety if storage operations encounter unexpected issues.

Why this answer

Taking a manual snapshot or ensuring a recent backup exists before making major hardware configuration or disk expansion changes is standard best practice to protect against unexpected failures.

Full explanation →
501
MCQmedium

An administrator is configuring a new alarm in vSphere 9.0 to monitor high memory consumption across virtual machines. The alarm triggers correctly, but the notification email fails to send. Where are the global SMTP mail server settings configured for vCenter Server alarms?

A.The vSphere Client under Administration > Single Sign-On > Configuration > Email
B.VMware Aria Operations under Administration > Outbound > Mail Settings
C.The vSphere Client under Administration > General Settings > Edit Settings (Mail server)
D.vCenter Server Appliance Management Interface (VAMI) under Email Settings
AnswerC

Mail server settings for vCenter alarms are located in Administration under General Settings.

Why this answer

Global SMTP settings for vCenter email alerts are configured in the vSphere Client under Administration > General Settings > Mail server configuration.

Full explanation →
502
MCQhard

An administrator is troubleshooting an issue where scheduled reports in VCF Operations fail to be emailed to the operations team. After confirming that the SMTP settings are correctly configured in VCF Operations, what underlying authentication mechanism could be causing the failure?

A.Expired NSX Manager API tokens.
B.Misconfigured ESXi host vSwitch security policies.
C.Incorrect SMTP authentication credentials or mismatched TLS/SSL encryption port requirements in VCF Operations mail settings.
D.Expired vCenter machine SSL certificates.
AnswerC

Mail delivery failures in VCF Operations often stem from incorrect SMTP credentials or port/TLS mismatch.

Why this answer

If the mail server requires STARTTLS or secure authentication (SMTP AUTH) with credentials that have changed or are not supported by the legacy relay configuration, the outbound email service fails. The administrator must verify SMTP authentication credentials and encryption port settings in VCF Operations.

Full explanation →
503
MCQmedium

An administrator needs to configure alarm actions in vCenter Server 9.0 so that when a virtual machine experiences high CPU utilization (>90% for 15 minutes), an email notification is sent and a script is automatically executed on a management server. Where must the administrator configure this alarm?

A.Open vCenter Server > Administration > Advanced Settings and modify the alarm.action.script parameters.
B.Navigate to vRealize Log Insight (Aria Operations for Logs) and create a webhook alert for CPU metrics.
C.Select the vCenter Server or VM in the inventory, navigate to Configure > Alarm Definitions, create a new alarm, and define actions under the Actions tab.
D.Configure an alert rule inside the vSphere Lifecycle Manager settings panel.
AnswerC

Alarm Definitions under the Configure tab allow setting up triggers, conditions, and explicit actions like email or script execution.

Why this answer

Custom alarms and their associated actions (such as sending emails or running scripts) are configured on the specific inventory object or at the vCenter root under Configure > Alarm Definitions.

Full explanation →
504
MCQeasy

An administrator needs to configure an automated alert in VCF Operations that triggers whenever a virtual machine experiences high memory pressure (ballooning or swapping). Where are symptom definitions and alert thresholds customized in VCF Operations?

A.vCenter Server -> Alarms -> Custom Alarms -> Memory Pressure.
B.SDDC Manager -> Monitoring -> Alert Policies.
C.NSX Manager -> System -> Fabric -> Alarms.
D.Administration -> Policies -> Policy Library -> Edit active Policy -> Symptom Definitions.
AnswerD

Policies in VCF Operations control symptom definitions, thresholds, and alert generation rules.

Why this answer

Symptom definitions and alert thresholds in VCF Operations are managed within Policies under Administration -> Policies.

Full explanation →
505
MCQmedium

An administrator is troubleshooting a performance bottleneck in a vSphere Foundation 9.0 environment where virtual machines are experiencing high memory swap-out rates. What does a high swap-out rate indicate about the ESXi host memory state?

A.Physical host memory is completely exhausted, and memory reclamation mechanisms have failed to free enough RAM, forcing the hypervisor to swap active memory to disk.
B.VMware Tools has failed to start inside the guest operating system.
C.The storage array is experiencing high hardware latency.
D.The virtual machine has too much physical RAM allocated, causing memory corruption.
AnswerA

Swapping to disk severely degrades performance because disk I/O is orders of magnitude slower than physical RAM.

Why this answer

Memory swap-out (or swap usage increase) indicates that the ESXi host has exhausted physical RAM, ballooning and compression were insufficient, and the hypervisor was forced to write active VM memory pages to the host swap file on disk.

Full explanation →
506
MCQeasy

An administrator is preparing to deploy vCenter Server 9.0 in a high-availability architecture. What is the fundamental prerequisite regarding DNS for the vCenter Server Appliance (VCSA) deployment?

A.Static ARP entries mapped on all upstream core routing devices.
B.Configured Forward (A) and Reverse (PTR) DNS records corresponding to the VCSA FQDN.
C.Network Time Protocol (NTP) disabled during the initial installation wizard.
D.Active Directory domain controller roles installed directly onto the appliance OS.
AnswerB

Correct. Both forward and reverse DNS resolution must be fully operational prior to deployment.

Why this answer

VCSA deployment requires valid Forward (A) and Reverse (PTR) DNS records to ensure reliable identification and certificate generation.

Full explanation →
507
MCQmedium

An administrator is troubleshooting a vSphere cluster where Distributed Resource Scheduler (DRS) is not migrating virtual machines despite significant CPU imbalances across hosts. Upon reviewing the DRS affinity rules, the administrator notices a conflict. Which rule type takes highest precedence over DRS automated load-balancing migration recommendations?

A.vSphere HA admission control percentage limits.
B.Enhanced vMotion Compatibility (EVC) baselines.
C.Storage I/O Control share allocations.
D.VM-to-Host and VM-to-VM affinity / anti-affinity rules (such as 'Must run on' or 'Keep Virtual Machines Together').
AnswerD

Mandatory affinity and anti-affinity rules are absolute constraints that DRS cannot violate for load balancing.

Why this answer

VM-to-Host and VM-to-VM affinity and anti-affinity rules take strict precedence over DRS load balancing recommendations.

Full explanation →
508
MCQhard

An administrator is troubleshooting a storage connectivity loss on an ESXi 9.0 host utilizing software iSCSI. The host can no longer reach the iSCSI storage targets. Which esxcli command should be used to rescan all iSCSI adapters and discover newly restored paths?

A.esxcli storage core adapter rescan --all
B.esxcli storage filesystem mount
C.esxcli vsan cluster refresh
D.esxcli network ip connection list
AnswerA

This command rescans all storage adapters on the ESXi host, refreshing paths to Fibre Channel, FCoE, and iSCSI targets.

Why this answer

To rescan software iSCSI adapters via the CLI, administrators use 'esxcli storage core adapter rescan' or 'esxcli storage iscsi rescan'. Specifically, the storage core subsystem handles adapter rescan operations.

Full explanation →
509
MCQeasy

An administrator notices that a virtual machine has a CD/ROM drive attached to an ISO image residing on a datastore that needs to be unmounted. Where in the vSphere Client should the administrator go to disconnect the ISO from the VM?

A.Run 'esxcli vm hardware disconnect' via SSH.
B.Navigate to vCenter Administration -> Datastore ISO Repository -> Delete.
C.Right-click the VM -> Edit Settings -> expand the CD/ROM drive -> uncheck 'Connect at power on' and disconnect the ISO file.
D.Open vSphere HA settings -> uncheck ISO heartbeats.
AnswerC

This is the standard vSphere Client workflow for managing virtual hardware connections like ISO media.

Why this answer

Disconnecting an ISO or CD/ROM image is managed under the virtual machine's Edit Settings -> CD/ROM drive -> Datastore ISO File -> uncheck 'Connect at power on' and disconnect.

Full explanation →
510
MCQmedium

An administrator is configuring Active Directory authentication for ESXi hosts directly via the Host Client. After entering the domain credentials and joining the domain, users in the domain are still unable to log into the ESXi host. What step was missed during the configuration?

A.Enabling Network Time Protocol (NTP) synchronization across all domain controllers.
B.Restarting the vCenter Server service to synchronize the Active Directory forest schema.
C.Assigning specific roles and permissions to the Active Directory users or groups on the ESXi host's Permissions tab.
D.Modifying the Active Directory Group Policy Object (GPO) to allow remote desktop connections.
AnswerC

Authentication success does not grant authorization; permissions must be assigned locally on the host.

Why this answer

Joining an ESXi host to Active Directory adds the computer account, but permissions must still be explicitly assigned to AD users or groups under the host's 'Permissions' tab to allow login access.

Full explanation →
511
Multi-Selecteasy

Which TWO of the following are valid methods to increase the storage capacity of an existing VMDK in vSphere?

Select 2 answers
A.Change the Datastore type from VMFS to vSAN
B.Extend the partition within the guest operating system
C.Add a new virtual disk to the VM
D.Increase the disk size in the Edit Settings menu of the VM
E.Use vMotion to move the disk to a larger datastore
AnswersB, D

After expanding the vmdk, the OS must see and grow the partition.

Why this answer

You can increase the size of a disk in the VM settings, and then extend the partition within the guest OS.

Full explanation →
512
MCQmedium

An enterprise architect is designing a multi-cluster vSphere Foundation 9.0 environment and needs to implement Content Library synchronization. What is the architectural purpose of a subscribed Content Library?

A.To provide automatic load balancing of virtual machine swap files during memory contention.
B.To mirror the vCenter PostgreSQL database in real-time across wide-area networks.
C.To cache physical switch firmware binaries for top-of-rack automated updates.
D.To automatically synchronize and maintain identical golden VM templates and ISOs from a published library source across clusters or vCenters.
AnswerD

Correct. Subscribed libraries allow automated content distribution across multiple vCenter instances or clusters.

Why this answer

A subscribed Content Library syncs templates and ISO images from a published library (either locally or across vCenters), ensuring standardized deployments across the enterprise.

Full explanation →
513
MCQmedium

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure Storage I/O Control (SIOC) on a shared block storage datastore. What is the primary function of SIOC?

A.To perform automatic RAID reconstruction when a physical disk drive fails.
B.To automatically migrate virtual machines across different physical data centers using wide-area replication.
C.To encrypt all disk blocks written to the datastore using AES-256 keys.
D.To prevent a single noisy virtual machine from monopolizing datastore I/O queues during periods of high latency congestion.
AnswerD

Correct. SIOC uses shares to manage I/O fairness and prevent noisy neighbor issues on shared datastores.

Why this answer

Storage I/O Control measures datastore latency and dynamically throttles I/O queues of lower-priority virtual machines when congestion and latency exceed a specified threshold.

Full explanation →
514
MCQeasy

An administrator needs to configure centralized log forwarding from ESXi hosts to an external syslog server in a VVF environment. Where in the vSphere Client should the administrator configure the syslog collector settings for an ESXi host?

A.vCenter -> Administration -> Deployment -> Syslog Gateway.
B.Host -> Configure -> Advanced System Settings -> Syslog.global.logHost.
C.SDDC Manager -> Infrastructure -> Log Forwarding.
D.Cluster -> Settings -> vSphere Availability -> Logging.
AnswerB

Syslog.global.logHost is the standard advanced system setting to specify remote syslog servers on ESXi.

Why this answer

Syslog settings (Advanced Settings under System -> Advanced Settings or Host -> Configure -> Advanced System Settings) are used to configure syslog destinations such as Syslog.global.logHost.

Full explanation →
515
MCQhard

An administrator is configuring identity federation in vCenter 9.0 for VVF, integrating an Enterprise Identity Provider (IDP) via OIDC. Users report that after successfully authenticating against the external IdP, they receive an authorization failure when attempting to log into the vSphere Client. Where should the administrator check to verify group mappings and role assignments?

A.vRealize Operations -> Administration -> Access Control -> Authentication Sources.
B.Administration -> Single Sign-On -> Configuration -> Identity Provider under the IdP Groups mapping tab.
C.NSX Manager -> System -> Users -> Role Binding configuration panel.
D.Cloud Builder -> Infrastructure -> SSO Settings -> Federation Map.
AnswerB

IdP Group mapping tab in SSO Configuration defines how external IdP groups map to local SSO groups for RBAC.

Why this answer

Identity federation in vCenter maps external IdP groups to vCenter Single Sign-On groups or direct global permissions. The administrator must check Administration -> Access Control -> Global Permissions or Single Sign-On -> Configuration -> Identity Provider.

Full explanation →
516
Multi-Selecthard

An administrator is configuring the Supervisor in a vSphere Foundation 9.0 environment. Which THREE network configurations are prerequisites for successful Supervisor deployment on a vSphere cluster? (Choose three.)

Select 3 answers
A.A Fibre Channel SAN zoning configuration for container persistent volume replication.
B.A dedicated management network CIDR block for the Supervisor control plane VMs.
C.A Pod CIDR block allocated for Kubernetes container networking within the cluster.
D.An Ingress CIDR block for services exposed externally via load balancers.
E.IPv6 multicast routing enabled on all physical core switches.
AnswersB, C, D

Control plane VMs require dedicated IP addresses from a routable management network.

Why this answer

Supervisor cluster deployment requires specific network allocations including a management network for control planes, a workload network for pods, and ingress/egress CIDR blocks for load balancing.

Full explanation →
517
MCQhard

An administrator needs to configure custom alarms in vSphere 9.0 to monitor datastore latency spikes. The alarm must execute a script on the vCenter Server when latency exceeds 30 milliseconds. Where must the script be placed on the vCenter Server Appliance for vCenter to successfully execute it as an alarm action?

A./storage/vsphere/actions/bin/
B./usr/lib/vmware-vpxd/actions/
C./var/log/vmware/vpxd/actions/
D./etc/vmware/vmware-vpx/custom_scripts/
AnswerB

vCenter looks in designated directories such as /usr/lib/vmware-vpxd/actions/ to locate scripts triggered by alarm actions.

Why this answer

Scripts executed by vCenter alarms must reside in specific supported directories on the vCenter appliance, typically /usr/lib/vmware-vpxd/actions/ or a designated custom action directory, with appropriate execute permissions.

Full explanation →
Page 6

Page 7 of 7

All pages

1234567

Practice VCP-VVF by domain

Target a specific domain to shore up weak areas.

Deploy Configure And Operate VvfIT Architectures Technologies StandardsVmware Vsphere Foundation FundamentalsTroubleshoot And Optimize
See all domains with question counts →