Courseiva

CCNA Deploy Configure And Operate Vvf Questions

75 of 221 questions · Page 2/3 · Deploy Configure And Operate Vvf · Answers revealed

76
MCQhard

An administrator is integrating VMware Aria Operations with a vSphere Foundation 9.0 cluster and wants to create a custom super metric to calculate aggregate CPU and memory stress across all virtual machines. Where must the super metric be enabled after creation to make it available for dashboard widgets and alerts?

A.Via the SDDC Manager dashboard under Workload Domains > Policies > Metrics.
B.Within the active Policy in Aria Operations under the Super Metrics configuration section.
C.In the ESXi host advanced configuration parameter 'Aria.SuperMetrics.Enable'.
D.In the vCenter Global Settings > Super Metrics activation table.
AnswerB

Super metrics must be explicitly enabled in the active management policy to be calculated against inventory objects.

Why this answer

Super metrics in Aria Operations must be enabled within a Policy for them to be calculated and applied to target objects.

77
Multi-Selectmedium

An administrator is troubleshooting a storage performance issue on a vSAN datastore in a VVF cluster. Which TWO tools or views in the vSphere Client and VCF Operations can be used to inspect vSAN health and performance? (Choose two.)

Select 2 answers
A.ESXi DCUI hardware sensor reboot menu.
B.NSX Manager transport node storage status panel.
C.VCF Operations vSAN Performance and Capacity dashboards.
D.Cluster -> Monitor -> vSAN -> Health and Performance views in the vSphere Client.
E.Cloud Builder storage inventory wizard.
AnswersC, D

VCF Operations provides specialized vSAN dashboards for deep analytical metric tracking.

Why this answer

vSAN health is monitored via vCenter (Cluster -> Monitor -> vSAN -> Health) and VCF Operations vSAN dashboards.

78
MCQeasy

When applying a VVF license, where must it be assigned to ensure full compliance across the environment?

A.VM level
B.vCenter Server level
C.Datacenter folder
D.Host level only
AnswerB

Centralized management ensures all cluster hosts are covered.

Why this answer

The vSphere Foundation license must be applied at the vCenter Server level to propagate to the managed hosts.

79
MCQmedium

An administrator is configuring an alarm in vSphere to notify them when a virtual machine's CPU usage remains above 95% for 10 minutes. However, they want the alarm to automatically clear when the CPU drops below 80% for 5 minutes. Where is the reset/clear condition configured?

A.In the advanced vCenter setting 'Alarm.Reset.Threshold'.
B.In the VCF Operations policy management console.
C.Under the Alarm Definition -> Reset condition or tolerance panel.
D.Via esxcli alarm reset-rule configure.
AnswerC

Reset conditions specify when an active alarm transitions back to a green/normal state.

Why this answer

vSphere alarm definitions allow configuring separate trigger and reset (clear) conditions or tolerances to prevent alarm flapping.

80
MCQhard

An administrator is deploying a Supervisor cluster in vSphere Foundation 9.0 and needs to ensure that Developer Namespaces are properly isolated. Which construct is used to enforce resource quotas and network policies across multiple developer namespaces?

A.vCenter Server Alarm definition filters
B.vSphere Distributed Switch VLAN tagging policies
C.ESXi host firewall rules configured via esxcli network firewall
D.Supervisor Namespace limits and vSphere Storage/Compute Quotas
AnswerD

Supervisor Namespaces use resource quotas to restrict CPU, memory, and storage utilization per developer group.

Why this answer

In vSphere with Tanzu / Supervisor clusters, Resource Quotas and Namespace limits are applied directly to Supervisor Namespaces to restrict CPU, memory, and storage consumption.

81
MCQmedium

An administrator is tasked with updating ESXi hosts using vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0. The cluster is managed using a single image. After importing a new vendor addon and base image, the compliance check reports a non-compliant state due to a missing component. How should the administrator resolve this?

A.Edit the cluster image specification to include the required component or vendor addon, then trigger remediation.
B.Restart the vCenter Server Appliance management services to force an immediate cache refresh of host compliance.
C.Convert the cluster from image-based management to baseline-based management to bypass component validation.
D.Manually install the missing component on each ESXi host via an interactive SSH session using esxcli software.
AnswerA

Adding the required component to the desired image spec allows vLCM to enforce compliance and remediate the hosts.

Why this answer

When a cluster is managed by a single image, remediation or compliance resolution requires updating the image specification to include the necessary component or vendor addon, or allowing vLCM to remediate the deviation.

82
MCQeasy

An administrator needs to apply a VVF license key to a cluster managed by vCenter Server. Where is the correct location to assign this license in the vSphere Client?

A.Datacenter > Settings > Licensing
B.Administration > Licensing > Assets
C.Host and Clusters view > Cluster > Licensing tab
D.vCenter Server Settings > Licensing
AnswerB

The Licensing area under Administration is the standard path for assigning licenses to vCenter assets.

Why this answer

Licensing in VVF is managed at the vCenter Server level via the Licensing global inventory object.

83
MCQeasy

An administrator is deploying a new VVF environment and needs to monitor resource utilization trends across multiple clusters over a 90-day period. Which component included in VVF provides this historical capacity planning and analytics capability?

A.vCenter Performance Charts
B.VMware Cloud Builder
C.VCF Operations (Aria Operations)
D.vSphere Lifecycle Manager (vLCM)
AnswerC

VCF Operations provides advanced capacity planning, trending, and long-term historical analytics.

Why this answer

VVF includes VCF Operations (formerly vRealize Operations / Aria Operations), which delivers AI-driven performance monitoring, capacity planning, and log analysis.

84
MCQeasy

An administrator needs to verify the health status and cluster state of NSX Manager nodes in a VVF deployment. Where in the NSX Manager UI is this information located?

A.vCenter -> Monitor -> NSX Cluster Health.
B.System -> Fabric -> Nodes -> NSX Managers (or Cluster Management).
C.SDDC Manager -> Infrastructure -> NSX Health.
D.Cloud Builder -> Appliance Status.
AnswerB

The NSX Manager cluster management view displays node status, quorum health, and appliance services.

Why this answer

NSX Manager cluster node health, status, and appliance metrics are viewed under System -> Fabric -> Nodes or System -> Appliances / Cluster.

85
Multi-Selecteasy

Which TWO of the following tasks can be performed using the vCenter Server Appliance Management Interface (VAMI)? (Choose two.)

Select 2 answers
A.Monitoring vCenter resource usage
B.Configuring DRS automation levels
C.Performing vCenter updates and patching
D.Configuring vSphere Distributed Switch settings
E.Creating virtual machines
AnswersA, C

The VAMI dashboard shows CPU and memory usage of the appliance.

Why this answer

The VAMI is used for appliance-level tasks like updates and monitoring vCenter health.

86
Multi-Selecthard

An administrator is troubleshooting a performance degradation in a VVF cluster running critical workloads. Which THREE metrics or indicators in VCF Operations should the administrator inspect to diagnose CPU and memory bottlenecks? (Choose three.)

Select 3 answers
A.Physical NUMA locality and remote memory access latency metrics.
B.Cloud Builder deployment queue depth and multicast packet loss.
C.vCenter database table row count and PostgreSQL vacuum frequency.
D.Memory Ballooning, Swapping, and Active memory metrics.
E.CPU Ready Time and Co-Stop metrics for virtual machines and hosts.
AnswersA, D, E

NUMA node contention impacts memory access speeds and overall performance.

Why this answer

CPU ready time, memory ballooning/swapping rates, and physical NUMA node allocation/contention are key indicators of CPU and memory bottlenecks in VCF Operations.

87
MCQmedium

An administrator is configuring a new user role in vCenter Server 9.0 that requires permission to manage virtual machine snapshots, but nothing else. Where should the administrator create this custom role?

A.NSX Manager -> System -> Users -> Roles.
B.VCF Operations -> Administration -> Access Control -> Roles.
C.Administration -> Access Control -> Roles -> Create Role.
D.SDDC Manager -> Administration -> IAM -> Custom Roles.
AnswerC

The Roles management pane allows administrators to define custom roles with specific granular privileges.

Why this answer

Custom roles in vCenter are created and managed under Administration -> Access Control -> Roles.

88
MCQhard

An administrator is managing license keys across multiple vCenter instances in a vSphere Foundation 9.0 deployment. Some licenses are assigned to clusters, while others are assigned directly to individual ESXi hosts. What is the licensing inheritance rule when a host is added to a cluster that already has a vSphere Foundation license assigned?

A.The cluster-level license overrides the host-level license, and the host adopts the cluster licensing assignment.
B.The operation fails, requiring the administrator to manually remove the host license before joining the cluster.
C.Both licenses merge their capacity pools, doubling the available core count for that specific host.
D.The host retains its standalone license key, which causes a licensing compliance warning on the cluster.
AnswerA

Cluster licenses automatically apply to all member hosts upon joining, superseding any existing standalone host licenses.

Why this answer

When an ESXi host is moved into a cluster, the cluster-level license takes precedence and is applied to the host, overriding any previously assigned standalone host license.

89
MCQmedium

An administrator is configuring role-based access control (RBAC) in a vSphere Foundation 9.0 environment and needs to grant a user permission to manage virtual machines within a specific folder, but inherited permissions from the root vCenter level are granting too many privileges. How should the administrator resolve this?

A.Edit the global vCenter configuration file to block all role inheritance globally.
B.Delete the root-level permissions and recreate all user accounts from scratch.
C.Disable permission inheritance on the specific folder object or assign the No Access role at that level.
D.Move the user account to a separate Active Directory organizational unit without vSphere integration.
AnswerC

Unchecking propagation or assigning 'No Access' at a lower level effectively restricts or stops permission inheritance.

Why this answer

To override inherited permissions, administrators can select 'Propagate' as unchecked when assigning a restricted role on a specific object, or explicitly assign a 'No Access' role to neutralize inherited privileges.

90
MCQeasy

An administrator wants to create a custom dashboard in vSphere Foundation 9.0 using vRealize Operations (Aria Operations) integration to monitor specific KPIs of Tier-1 database virtual machines. Which initial step must be performed to ensure the data from vCenter Server is available in Aria Operations?

A.Create a custom tag in vCenter Server and export it using Content Library templates.
B.Log in to Aria Operations, navigate to Data Sources > Integrations > Accounts, and add the vCenter Server instance as a vCenter Adapter.
C.Install the Aria Operations plugin directly inside the vCenter Server Appliance VAMI interface.
D.Enable vSphere HA heartbeat monitoring on the database cluster.
AnswerB

The vCenter Adapter in Aria Operations establishes the data collection connection to ingest inventory and metric data.

Why this answer

To view vCenter data in Aria Operations, the vCenter Server instance must be registered as a valid cloud account/adapter instance within Aria Operations.

91
Multi-Selectmedium

An administrator is troubleshooting a failing vCenter Server Appliance backup in vSphere Foundation 9.0. Which TWO backup protocols are natively supported by the vCenter Server Native Backup scheduler in VAMI? (Choose two)

Select 2 answers
A.SFTP (Secure File Transfer Protocol)
B.SMTP email attachment streaming
C.HTTPS (Hypertext Transfer Protocol Secure)
D.Bluetooth Low Energy (BLE) peer-to-peer streaming
E.Direct USB pass-through from a local ESXi host management port
AnswersA, C

SFTP is a natively supported backup protocol in VAMI.

Why this answer

vCenter native file-based backup supports protocols such as HTTPS, FTPS, FTP, SFTP, NFS, SMB, and SCP.

92
Multi-Selecteasy

Which TWO features are included in VVF to assist in operational monitoring and alerting?

Select 2 answers
A.Integration with VMware Aria Operations
B.Built-in vSphere Alarms
C.Hardware vendor support contract management
D.Automated VM guest OS patching
E.Direct hardware component management via BIOS
AnswersA, B

VVF includes license entitlement for Aria Operations.

Why this answer

vSphere Alarms and Operations integration are standard monitoring components.

93
Multi-Selecthard

An administrator is configuring advanced alerting and notification rules in VMware Aria Operations for vSphere Foundation. Which THREE actions can be configured as outbound notifications when an alert triggers? (Choose three)

Select 3 answers
A.Directly modifying physical switch VLAN trunk configurations via SSH.
B.Invoking a Webhook to send JSON payloads to third-party incident management systems (e.g., ServiceNow, Slack).
C.Automatically executing a local Bash shell script directly on the ESXi host hypervisor kernel.
D.Generating and dispatching SNMP traps to an external network management system.
E.Sending an email notification via an SMTP server.
AnswersB, D, E

Webhooks enable integration with external REST endpoints and ticketing systems.

Why this answer

Aria Operations supports multiple outbound notification channels including email, SNMP traps, and webhook integrations for third-party systems like ServiceNow or Slack.

94
Multi-Selectmedium

An administrator is configuring alarms and alert notifications in vSphere 9.0. Which TWO actions can be configured as a direct response to a triggered vSphere Alarm? (Choose two.)

Select 2 answers
A.Automatically re-license all hosts with trial keys.
B.Automatically migrate the vCenter Server VM to a secondary public cloud region.
C.Run a command or script on the vCenter Server appliance.
D.Send a notification email to specified administrative distribution lists.
E.Re-install the ESXi host hypervisor operating system from scratch.
AnswersC, D

Executing custom scripts on vCenter is supported for automated alarm responses.

Why this answer

vSphere alarms can be configured to send notification emails or execute a command/script on the vCenter Server.

95
MCQhard

If you need to ensure that specific vCenter services start in a specific order during boot, which tool should be investigated?

A.rc.local
B.systemd
C.vpxd-service-manager
D.vmon
AnswerD

vmon is the correct tool for service lifecycle management.

Why this answer

The 'vmon' tool (VMware Service Lifecycle Manager) manages service dependencies and order.

96
MCQeasy

What is the recommended minimum number of hosts for a production vSphere cluster to ensure high availability during maintenance?

A.5
B.1
C.3
D.2
AnswerC

3 is the industry standard for N+1 availability.

Why this answer

Three hosts are the minimum requirement to maintain N+1 redundancy when one host is down for maintenance.

97
MCQhard

An administrator is configuring log forwarding from NSX Manager to an external SIEM using secure TLS syslog. The syslog server rejects the connection due to an untrusted certificate presented by NSX. How can the administrator resolve this certificate validation error on NSX Manager?

A.Disable TLS verification in the SDDC Manager log forwarding policy settings.
B.Run the Certificate Manager utility on the vCenter appliance to push the root CA to NSX.
C.Modify the ESXi advanced setting 'Syslog.global.sslTrust' via Host Profiles.
D.Import the syslog server's CA certificate into the NSX Manager Trust Store via System -> Certificates -> Certificate Authority.
AnswerD

NSX requires the remote syslog server's CA certificate in its trust store to establish secure TLS syslog connections.

Why this answer

When configuring secure syslog (TLS) on NSX Manager, NSX must trust the syslog server's CA certificate. The administrator must import the syslog server's CA certificate into the NSX Manager trust store.

98
MCQhard

An administrator is performing a manual certificate replacement of the Security Token Service (STS) certificate on a vCenter 9.0 instance. After replacing the STS certificate, internal services fail to authenticate. What post-replacement step must be executed to resolve this?

A.Run the Cloud Builder deployment wizard in repair mode.
B.Re-configure Active Directory integration in vCenter SSO.
C.Reboot the ESXi hosts in the cluster to clear cached STS tokens from memory.
D.Publish the new STS certificate to the Lookup Service and restart all vCenter services.
AnswerD

Updating the Lookup Service and restarting vCenter services ensures that all solution users trust the new STS signing certificate.

Why this answer

When the STS signing certificate is replaced, solution user certificates and trusted root stores must be updated or synchronized, and services must trust the new STS certificate. VMware provides a standard script or command to publish the new STS certificate to the VMDIR store.

99
MCQmedium

When configuring identity for VVF, which identity source type is recommended for seamless integration with enterprise-grade directory services?

A.OpenLDAP
B.Workgroup
C.Identity Federation (OIDC/SAML)
D.Local OS users
AnswerC

Identity Federation provides modern, secure access control integration.

Why this answer

LDAP over SSL or Identity Federation (OIDC/SAML) are standard for modern VVF deployments.

100
MCQmedium

An administrator is reviewing the VVF 9.0 software BOM (Bill of Materials) compatibility before initiating an upgrade via SDDC Manager. Where in SDDC Manager is the target software version bundle downloaded and validated?

A.Lifecycle Management -> Bundle Management or Repository dashboard.
B.vCenter -> Updates -> Lifecycle Manager -> Software Boms.
C.Cloud Builder -> Updates -> BOM Checker.
D.NSX Manager -> System -> Upgrades -> Bundle Store.
AnswerA

Bundle Management in SDDC Manager is where online/offline update bundles are downloaded, inspected, and staged.

Why this answer

SDDC Manager manages software bundles and updates under Administration -> Repository or Lifecycle Management -> Bundle Management.

101
Multi-Selectmedium

An administrator is managing software lifecycle updates for a VVF environment. Which TWO tasks can be performed using SDDC Manager? (Choose two.)

Select 2 answers
A.Provision virtual machines and configure guest operating system user accounts.
B.Design custom virtual machine guest OS disk partitioning layouts.
C.Download and manage software update bundles from VMware online repositories.
D.Configure local user accounts and firewall rules on physical top-of-rack switches.
E.Execute automated lifecycle upgrades for vCenter Server, ESXi hosts, and NSX Manager as a unified stack.
AnswersC, E

SDDC Manager downloads, stages, and manages software update bundles.

Why this answer

SDDC Manager orchestrates lifecycle management and upgrades for the entire VVF/VCF software stack, including vCenter, ESXi, and NSX.

102
MCQmedium

An administrator is configuring a new storage policy in vCenter to provision VMs on a vSAN datastore with specific erasure coding (RAID-5/6) and failure tolerance settings. Where are these vSAN storage rules defined?

A.NSX Manager -> Storage -> Profiles.
B.SDDC Manager -> Storage -> vSAN Profiles.
C.VCF Operations -> Policies -> vSAN Storage Rules.
D.Policies and Profiles -> VM Storage Policies -> Create vSAN Storage Policy.
AnswerD

VM Storage Policies define vSAN capabilities such as RAID levels, striping, and failures to tolerate.

Why this answer

vSAN storage policies are created and managed in vCenter under Policies and Profiles -> VM Storage Policies.

103
MCQhard

An administrator is configuring vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0 to use a local depot mirror in an air-gapped environment. How must the local depot be configured so vLCM can successfully sync updates?

A.Deploy an OVF template of the VMware Update Manager Download Service (UMDS) on an ESXi host.
B.Mount an NFS datastore containing the depot files to the root directory /var/lib/vmware/vLCM/depot/ on every ESXi host.
C.Configure the local depot URL under vSphere Lifecycle Manager > Settings > Patch Setup > Add Local Depot Source.
D.Modify the vCenter global setting vLCM.depot.offlineMode to true and paste the base64 payload into the advanced settings.
AnswerC

vLCM settings allow administrators to define custom local depot sources to ingest updates without direct internet access.

Why this answer

For air-gapped environments, vLCM can be pointed to a local web server hosting the downloaded VMware and vendor JSON/ZIP update payloads, configured as an additional local depot source in vLCM settings.

104
MCQmedium

An administrator is attempting to run a pre-upgrade health check using SDDC Manager before upgrading the VVF environment. The pre-check fails with an error stating that API connectivity to the vCenter Server is unreachable. What is the most appropriate troubleshooting step?

A.Verify network connectivity and ensure vCenter API services (vpxd and associated web services) are running and accessible on TCP port 443.
B.Re-configure the ESXi host direct management passwords via DCUI.
C.Reboot the SDDC Manager appliance into single-user recovery mode.
D.Re-install the NSX Policy Manager appliance.
AnswerA

SDDC Manager communicates with vCenter via REST APIs over port 443; verifying service health and network access resolves this.

Why this answer

SDDC Manager relies on API connectivity over HTTPS (port 443) to communicate with vCenter. The administrator should check network connectivity, credential validity, and ensure the vCenter web services are running.

105
Multi-Selecthard

An administrator is troubleshooting a certificate management failure when replacing certificates on a vCenter 9.0 instance. Which THREE logs or utilities are critical for diagnosing certificate issues on the vCenter appliance? (Choose three.)

Select 3 answers
A./var/log/vmware/sso/sso.log for Security Token Service and STS certificate trust errors
B./var/log/vmware/nsx-manager/nsx-syslog.log
C./var/log/vmware/vcf/sddc-manager/sddc-manager.log
D./var/log/vmware/vmdird/vmdird.log for directory service and certificate store replication issues
E.vSphere Certificate Manager CLI utility logs and output prompts
AnswersA, D, E

sso.log captures STS and token-signing certificate validation issues.

Why this answer

Certificate management relies on the vSphere Certificate Manager utility, vmdird logs, and vpxd or sso logs depending on the exact component failing.

106
MCQhard

An administrator is troubleshooting a vSphere Foundation 9.0 cluster where vSphere Lifecycle Manager (vLCM) remediation fails with an error stating that the host cannot enter maintenance mode because certain virtual machines cannot be migrated. What is the most robust way to handle this during vLCM cluster remediation?

A.Configure the remediation settings to power off or suspend conflicting virtual machines, or temporarily disable conflicting DRS rules.
B.Permanently delete all virtual machines from the cluster inventory before triggering remediation.
C.Manually SSH into each VM and stop the guest OS services prior to running remediation.
D.Disable vSphere HA across the entire cluster to bypass maintenance mode checks.
AnswerA

vLCM settings allow administrators to define power-off behavior or handle migration blockers during maintenance mode entry.

Why this answer

When vLCM encounters VMs that cannot be migrated (e.g., due to device connections or affinity rules), the administrator can configure remediation settings to power off those VMs or suspend them, or address the underlying migration block.

107
MCQmedium

An administrator is tasked with replacing default VMCA-signed certificates with custom certificates signed by a Microsoft Enterprise Certificate Authority in a VVF environment. Which tool should the administrator use to generate Certificate Signing Requests (CSRs) and replace the certificates seamlessly?

A.VMware Aria Operations administration portal
B.vCenter Server Certificate Manager utility (certificate-manager)
C.VMware Certificate Authority (VMCA) web console
D.vSphere Lifecycle Manager
AnswerB

certificate-manager is the standard interactive CLI tool for replacing vCenter certificates.

Why this answer

Certificate Manager (certificate-manager utility) is the supported command-line tool in vCenter Server to manage and replace all certificates including machine SSL and STSSigCert.

108
MCQeasy

An administrator wants to configure real-time monitoring and log analysis for a vSphere Foundation 9.0 environment. Which native VMware product integrates directly to provide centralized log management and analytics across ESXi hosts and vCenter?

A.VMware vCenter Server Heartbeat
B.VMware ESXi Dump Collector
C.VMware vRealize Orchestrator
D.VMware Aria Operations for Logs (Log Insight)
AnswerD

Aria Operations for Logs provides centralized log collection, analytics, and alerting for vSphere environments.

Why this answer

VMware Aria Operations for Logs (or vRealize Log Insight / vCF Operations Log Insight) is the native log management solution that integrates directly with vSphere environments.

109
Multi-Selecthard

An administrator is configuring role-based access control (RBAC) across a VVF 9.0 deployment. Which THREE statements regarding RBAC management across vCenter and NSX are correct? (Choose three.)

Select 3 answers
A.Assigning a role in vCenter automatically grants identical administrative privileges in NSX Manager.
B.Global Permissions in vCenter apply exclusively to a single ESXi host and cannot span across Linked Mode vCenters.
C.Administrators can create custom roles in vCenter with specific granular privileges (e.g., VM snapshot management only).
D.vCenter permissions applied to an inventory folder can be configured to propagate to child objects.
E.NSX Manager maintains its own separate RBAC and role assignment engine, independent of vCenter roles.
AnswersC, D, E

Custom roles allow fine-tuning least-privilege access models.

Why this answer

vCenter permissions can propagate down the inventory hierarchy, custom roles can be defined with granular privileges, and NSX manages its own RBAC policies independently.

110
MCQmedium

A VVF 9.0 administrator needs to enable vSphere Supervisor on a vSphere cluster to support Kubernetes workloads. The selected cluster consists of four ESXi hosts managed by vCenter 9.0. When attempting to configure the Supervisor through the vSphere Client, the option is greyed out. What is the most likely missing prerequisite?

A.The vCenter Server has not been joined to an Active Directory domain for identity federation.
B.NSX is not installed, or the cluster has not been prepared for NSX networking required by Workload Management.
C.The ESXi hosts have not been licensed with VMware vSphere Foundation keys.
D.Shared VMFS datastores have not been mounted across all four hosts in the cluster.
AnswerB

Workload Management (Supervisor) depends heavily on networking constructs provided by NSX or compatible VDS configurations.

Why this answer

Enabling Supervisor requires that NSX is deployed and configured on the cluster, or that vSphere Distributed Switch with vSphere Distributed Services Engine / NSX networking is fully operational, and vCenter has appropriate licensing for VVF.

111
MCQhard

An administrator is troubleshooting an issue where SDDC Manager fails to execute a life-cycle upgrade task because a pre-check reports an invalid vCenter SSO administrator password. The password was recently rotated. Where must the administrator update the stored credentials in SDDC Manager so the upgrade can proceed?

A.vCenter Server -> SSO -> Configuration -> Credentials.
B.Administration -> Credentials / Password Management in SDDC Manager.
C.Cloud Builder appliance configuration properties.
D.NSX Manager -> System -> Users -> Password Policy.
AnswerB

SDDC Manager's Password Management feature allows updating stored credentials for vCenter, NSX, and ESXi hosts.

Why this answer

SDDC Manager maintains inventory credentials for vCenter, ESXi, and NSX. When credentials are changed natively on the target appliance, they must be updated in SDDC Manager under Administration -> Credentials or Inventory -> Passwords.

112
MCQmedium

An administrator is auditing access control within a vSphere Foundation 9.0 environment. A specific group of security operators requires permission to view and manage VM snapshots across all production virtual machines, but they must not be allowed to power off virtual machines or modify networking settings. What is the best practice method to implement this?

A.Modify the default 'No Access' role to include snapshot creation rights for the production cluster.
B.Assign the built-in Administrator role to the security group and remove individual permissions via advanced host policies.
C.Grant the security group Read-Only access at the vCenter root and enable snapshot delegation in Host Profiles.
D.Create a custom vSphere role containing only the required snapshot privileges and assign it to the security group on the production VM folder with propagation enabled.
AnswerD

Custom roles enforce the principle of least privilege by bundling specific operational rights without granting broader administrative control.

Why this answer

Role-based access control (RBAC) in vSphere requires creating a custom role with only the necessary privileges (e.g., Virtual Machine > State > Create Snapshot, Remove Snapshot) and assigning it to the security group on the folder or cluster level.

113
MCQeasy

An administrator needs to verify whether all ESXi hosts in a VVF cluster have uniform NTP settings configured. Which interface provides a quick summary of host time synchronization status?

A.Host -> Configure -> Time Configuration.
B.VCF Operations -> Inventory -> NTP Widget.
C.SDDC Manager -> Infrastructure -> Host Time Sync.
D.NSX Manager -> Fabric -> Nodes -> NTP.
AnswerA

Time Configuration displays the NTP client status, active servers, and synchronization state.

Why this answer

The vSphere Client summary page for each ESXi host or cluster displays time synchronization status under Configure -> Time Configuration (NTP).

114
Multi-Selecteasy

An administrator is preparing to deploy a Supervisor cluster in a vSphere Foundation 9.0 environment. Which TWO prerequisites must be met prior to enabling Workload Management? (Choose two)

Select 2 answers
A.All ESXi hosts in the cluster must be configured with a minimum of 512 GB of RAM.
B.IPv6 must be the default and sole networking protocol on all vmkernel interfaces.
C.Shared storage (such as vSAN or NFS/VMFS) must be available to all hosts in the cluster.
D.The cluster must be configured with a vSphere Distributed Switch (VDS).
E.NSX-T Data Center must be deployed as a mandatory prerequisite for all Supervisor configurations.
AnswersC, D

Shared storage is required to support stateful Kubernetes volumes and control plane VMs.

Why this answer

Enabling Workload Management (Supervisor) requires an active vSphere Distributed Switch (VDS) and properly licensed ESXi hosts in a cluster with shared storage.

115
Multi-Selecthard

Which THREE actions are part of the process when using vSphere Lifecycle Manager to update an ESXi cluster to a new baseline? (Choose three.)

Select 3 answers
A.Running a compliance check
B.Remediating the cluster hosts
C.Importing an ESXi image or baseline
D.Updating the vCenter Server version before the hosts
E.Manually SSHing into hosts to apply patches
AnswersA, B, C

The check identifies hosts that do not match the target version.

Why this answer

The lifecycle process involves importing the image, running a compliance check, and then remediating the hosts.

116
MCQhard

An administrator observes that log forwarding from vCenter to Aria Operations is failing. Which configuration file should be checked on the vCenter appliance to verify the remote syslog target?

A./etc/vmware/vpxa.cfg
B./etc/vmware/vcenter-server/vcenter.yaml
C./etc/vmware/log-forwarding.conf
D./etc/rsyslog.conf
AnswerD

The rsyslog configuration is the standard Linux method for forwarding logs from the appliance.

Why this answer

The configuration for the vCenter syslog service is handled via the 'vpxd' log settings or the 'esxcli system syslog' configuration, typically accessed through the vCenter appliance shell.

117
MCQmedium

An administrator is deploying a Supervisor cluster in VMware vSphere Foundation. During the initial configuration of the Workload Management service, which network requirement must be met for the Supervisor control plane VMs?

A.All Supervisor VMs must be placed in a single DRS affinity rule to ensure high availability.
B.The control plane VMs must reside on a distributed switch with LACP enabled.
C.Each ESXi host must have a dedicated physical NIC connected to a separate management VLAN.
D.The network must support a dedicated IP pool for the Supervisor control plane VMs.
AnswerD

A dedicated IP pool is required for the Supervisor control plane and the management of Kubernetes nodes.

Why this answer

The Supervisor control plane VMs require a dedicated IP range for the Kubernetes API server and a specific Load Balancer configuration to handle ingress traffic for the control plane.

118
MCQmedium

You want to automate the deployment of several similar VMs. Which feature in vCenter allows you to create a template and manage its versioning?

A.Datastore Browser
B.VMware Tools update manager
C.Content Library
D.Virtual Machine Snapshots
AnswerC

Content Libraries support VM templates and versioning.

Why this answer

Content Libraries are the designated way to store and version templates in vSphere.

119
MCQhard

An administrator is configuring an alert in VMware Aria Operations to trigger when a datastore's free space drops below 10%. The administrator wants the notification email to include specific custom properties of the datastore, such as its assigned Tier and Business Owner. How can this be accomplished?

A.Hardcode the datastore properties into the static subject line of the email notification rule.
B.Use notification rule payload variables referencing the object's custom properties in the notification template.
C.Configure a syslog forwarding rule that translates custom properties into RFC 5424 structured data.
D.Edit the vCenter alarm definition script to query the vCenter database for custom attributes.
AnswerB

Aria Operations notification templates support variables that dynamically pull object custom properties into alerts.

Why this answer

In Aria Operations, alert notification templates support variables and custom properties assigned to objects, allowing administrators to inject property values into notification emails.

120
Multi-Selectmedium

An administrator is configuring custom alarms and alert notifications in vSphere Foundation 9.0. Which TWO actions can be configured directly as responses to an alarm trigger in vCenter Server? (Choose two.)

Select 2 answers
A.Automatically re-image the ESXi host using vSphere Lifecycle Manager.
B.Trigger an automatic failover of the vCenter HA cluster nodes.
C.Run a command or script on the vCenter Server.
D.Send a notification email to specified recipients.
E.Power off all virtual machines on the cluster immediately.
AnswersC, D

Executing a script on the vCenter Server is a native response action for alarms.

Why this answer

vCenter alarms support several native actions when a trigger fires, including sending email notifications and running a command/script on the vCenter server or management endpoint.

121
MCQmedium

An administrator is integrating VMware Aria Operations with vCenter Server in a vSphere Foundation 9.0 environment. After registration, data collection fails for one of the vCenter instances, and the adapter instance status shows 'Down'. What is the first troubleshooting step the administrator should take?

A.Verify network connectivity on port 443 and ensure the vCenter service account credentials used by the adapter are valid and not locked.
B.Modify the vCenter database connection string to point directly to the Aria Operations analytics node.
C.Reboot all ESXi hosts in the managed vCenter inventory simultaneously.
D.Uninstall and reinstall the vCenter Server Appliance operating system packages.
AnswerA

Adapter communication relies on HTTPS (port 443) and valid credentials with Read-Only or Administrator privileges.

Why this answer

When an Aria Operations adapter instance fails to connect to vCenter, verifying credentials, network connectivity (ports such as 443), and ensuring the service account has appropriate permissions are primary troubleshooting steps.

122
Multi-Selecteasy

Which TWO methods are available for adding a host to a vCenter inventory?

Select 2 answers
A.Using a USB thumb drive serial
B.Using the host's MAC address
C.Using an IP address
D.Using the FQDN
E.Using the CPU serial number
AnswersC, D

IP is a valid way to identify a host.

Why this answer

You can add a host by its FQDN or IP address.

123
MCQmedium

An administrator finds that the 'vCenter HA' state is 'Not Configured'. What is the purpose of this feature?

A.To back up the vCenter configuration
B.To provide high availability for VMs
C.To balance load across vCenters
D.To provide redundancy for the vCenter Server appliance
AnswerD

vCenter HA protects the appliance from failure.

Why this answer

vCenter HA provides high availability for the vCenter appliance itself, protecting against failures.

124
Multi-Selecthard

An administrator is configuring monitoring, log analysis, and alerting in a VVF 9.0 environment. Which THREE actions can be performed within VCF Operations (Aria Operations)? (Choose three.)

Select 3 answers
A.Configure direct BGP routing tables on physical top-of-rack switches.
B.Directly patch ESXi host base images and execute vLCM remediation tasks.
C.Configure outbound alert notifications and integrations with external ITSM systems like ServiceNow via webhooks.
D.Create custom dashboards utilizing widgets such as Heat Maps, Metric Sparklines, and Object Lists.
E.Define capacity planning policies with custom CPU, memory, and storage exhaustion projections.
AnswersC, D, E

Outbound plugins allow VCF Operations to forward alerts to webhooks and ITSM ticketing platforms.

Why this answer

VCF Operations supports creating custom dashboards, configuring outbound alert plugins to ITSM systems, and setting up advanced capacity planning policies.

125
Multi-Selectmedium

An administrator is managing cluster updates using vSphere Lifecycle Manager (vLCM) in vSphere Foundation 9.0. Which TWO actions can vLCM perform during cluster image remediation? (Choose two)

Select 2 answers
A.Directly repartition the local ESXi datastore filesystems to increase VMFS capacity.
B.Install missing software components, drivers, and vendor addons specified in the cluster image.
C.Downgrade the vCenter Server Appliance operating system version.
D.Automatically upgrade the underlying physical server BIOS without vendor firmware addons.
E.Automatically place ESXi hosts into maintenance mode and evacuate running virtual machines via DRS.
AnswersB, E

vLCM ensures hosts match the declarative image spec by installing missing components.

Why this answer

vLCM remediates clusters by checking compliance against images, installing missing components, updating firmware via vendor addons, and putting hosts into maintenance mode.

126
Multi-Selectmedium

Which THREE steps are required when configuring identity federation for vSphere with an OIDC provider?

Select 3 answers
A.Enable SSL verification
B.Assign a global administrator role
C.Input the Discovery Endpoint URL
D.Configure the Client Secret
E.Register the vCenter as an OIDC client
AnswersC, D, E

Needed to fetch configuration metadata.

Why this answer

Configuring OIDC requires client ID, secret, and discovery endpoints.

127
Multi-Selectmedium

Which THREE components are part of the VVF licensing scope?

Select 3 answers
A.VMware Cloud Foundation (full stack orchestration)
B.vSphere Enterprise Plus
C.VMware Aria Operations
D.vSAN Enterprise
E.NSX Advanced Load Balancer
AnswersB, C, D

VVF bundles vSphere at the Ent+ level.

Why this answer

VVF includes vSphere, vSAN, and Aria Operations.

128
MCQmedium

An administrator is deploying a Kubernetes cluster using the Supervisor in a vSphere Foundation 9.0 environment. During namespace creation, the administrator needs to grant developer access to a specific Active Directory group. Which step must be performed to associate the AD group with the Supervisor Namespace?

A.Log in to the NSX Manager UI and map the AD group to the Tier-1 router logical switch.
B.Select the Namespace in the vSphere Client, navigate to Configure > Permissions, click Add Permission, and select the AD group with an appropriate developer role.
C.Add the AD group to the vCenter Server Global Permissions list with Administrator privileges.
D.Modify the `kubectl-rbac.yaml` manifest file and apply it using the `kubectl apply` command against the ESXi management IP.
AnswerB

Namespace permissions are managed directly under the Namespace's configuration pane in the vSphere Client.

Why this answer

Supervisor namespaces allow assigning access to users and groups defined in vCenter SSO. The administrator selects the namespace, clicks Permissions, and adds the AD identity.

129
Multi-Selectmedium

An administrator is configuring vRealize Log Insight / VMware Aria Operations for Logs in a vSphere Foundation environment. Which TWO features help manage high log volume and reduce storage consumption? (Choose two)

Select 2 answers
A.Manually deleting ESXi host kernel binary files from the datastore
B.Converting all syslog streams to uncompressed bitmap images
C.Log filtering and dropping rules to discard unneeded verbose events
D.Configuring data retention policies to automatically purge old log buckets
E.Disabling all vCenter auditing globally
AnswersC, D

Filtering rules allow administrators to drop noisy or unneeded log entries before storage.

Why this answer

Log management tools use features like log partitioning, retention policies, filtering, and dropping noisy events to manage storage volume.

130
MCQhard

An administrator is configuring log forwarding from vSphere Foundation 9.0 ESXi hosts to a centralized SIEM system. The requirement is to ensure all security audit logs and authentication events are securely transmitted over TLS. Which configuration utility and protocol setting must be applied?

A.Configure SNMPv3 trap destinations in vCenter Server inventory under the host's Alert Definitions.
B.Configure the `Syslog.global.logHost` advanced setting on each ESXi host to specify the remote collector address using the `tls://<collector-ip>:<port>` syntax.
C.Deploy an external Log Insight agent virtual appliance and map it using Host Profiles security policies.
D.Modify the `/etc/rsyslog.conf` file directly on the ESXi host filesystem and restart the syslog daemon.
AnswerB

ESXi syslog configuration supports secure TLS forwarding when the `tls://` prefix is specified in the global logHost setting.

Why this answer

ESXi logging is configured via advanced system settings. To forward logs securely over TLS, Syslog.global.logHost must be configured with the appropriate TLS protocol string.

131
MCQeasy

An administrator is preparing to deploy VMware vSphere Foundation 9.0 and needs to understand the foundational component that provides centralized lifecycle management, automation, and operations across the private cloud infrastructure. Which component fulfills this requirement in a standard VVF architecture?

A.VMware Host Client
B.vSphere Lifecycle Manager (vLCM)
C.vCenter Server Appliance Management Interface (VAMI)
D.VMware Aria Suite Lifecycle
AnswerD

VMware Aria Suite Lifecycle is used to deploy and manage the lifecycle of VVF management components.

Why this answer

VMware Aria Suite Lifecycle, integrated into VVF, provides deployment, configuration, upgrade, and lifecycle management for the suite components.

132
Multi-Selectmedium

An administrator is configuring log forwarding and syslog collection in a VVF environment. Which TWO methods or locations can be used to configure remote syslog servers for ESXi hosts? (Choose two.)

Select 2 answers
A.Configure syslog routing in the NSX Edge appliance routing table.
B.Enforce syslog configuration across the cluster using vSphere Host Profiles.
C.Configure syslog forwarding directly in the ESXi BIOS / UEFI firmware configuration screen.
D.Set the syslog collector IP address in the vSphere Lifecycle Manager cluster image repository settings.
E.Configure the 'Syslog.global.logHost' advanced system setting on each ESXi host.
AnswersB, E

Host Profiles allow administrators to enforce standardized syslog settings across all hosts in a cluster.

Why this answer

ESXi syslog destinations can be configured via Host Advanced System Settings (Syslog.global.logHost) or centrally enforced using Host Profiles.

133
MCQeasy

An administrator is deploying a new vSphere Foundation 9.0 cluster and needs to assign licenses. Where in the vSphere Client is the license inventory managed?

A.Administration > Licensing
B.Lifecycle Management > Settings > Keys
C.Networking > Settings > License Assignment
D.Host > Configure > Hardware > Licensing
AnswerA

The Administration > Licensing pane is the centralized location for adding, assigning, and managing license keys.

Why this answer

Licensing in vCenter Server is managed globally from the Administration menu under Licensing.

134
Multi-Selecthard

An administrator is configuring audit logging and log analysis in a VVF environment. Which THREE log categories or files are critical when investigating security events across vCenter, ESXi, and NSX? (Choose three.)

Select 3 answers
A.NSX Manager audit.log and node-mgmt.log for networking administrative changes and API calls.
B.vCenter Server vpxd.log and sso.log for administrative actions and authentication events.
C.vLCM software repository cache files on the local ESXi scratch partition.
D.ESXi host hostd.log and auth.log (or shell logs) for local host access and daemon events.
E.Cloud Builder deployment loudmouth.log for post-deployment VM heartbeat status.
AnswersA, B, D

NSX audit logs track all configuration and user changes made within NSX Manager.

Why this answer

vCenter vpxd/sso logs, ESXi auth/hostd logs, and NSX audit/node logs are essential for comprehensive security investigations.

135
Multi-Selectmedium

Which TWO networking requirements must be met before deploying a Supervisor cluster?

Select 2 answers
A.vSphere Distributed Switch
B.DHCP relay on all management ports
C.Static IP addressing for every VM
D.MTU set to at least 1600 on physical switches
E.Standard Switch (VSS)
AnswersA, D

vDS is required for Supervisor network operations.

Why this answer

Supervisor clusters require distributed switching and proper MTU settings for performance.

136
Multi-Selectmedium

An administrator needs to manage identity sources. Which TWO of the following identity providers are supported for vCenter Server authentication? (Choose two.)

Select 2 answers
A.Active Directory over LDAP
B.A custom SQL database source
C.FTP-based user file
D.Local Windows Workgroup users
E.OpenID Connect (OIDC) Identity Provider
AnswersA, E

LDAP is a classic supported identity source.

Why this answer

vCenter Server supports native Active Directory (via LDAP/Integrated Windows Authentication) and OIDC/SAML providers for modern identity federation.

137
MCQmedium

An administrator is auditing access control in a vSphere Foundation 9.0 environment. A specific security team member needs read-only access to all vSphere objects, but must be restricted from viewing sensitive virtual machine guest OS metrics and console data. How should the administrator accomplish this?

A.Assign the built-in Read-Only role at the vCenter root level and use advanced settings to hide guest metrics.
B.Create a custom role with specific privileges removed, and assign it to the user at the appropriate inventory object level.
C.Assign the Administrator role and rely on Active Directory group policy objects to restrict guest OS access.
D.Modify the global permissions table in the Platform Services Controller database to filter out VM console privileges.
AnswerB

Custom roles allow administrators to fine-tune privileges by removing specific capabilities like console interaction or guest operations.

Why this answer

Permissions in vCenter Server are assigned by combining an inventory object, a role containing specific privileges, and a principal (user/group). To restrict console and sensitive data, the administrator must clone the Read-Only role, remove privileges such as Virtual Machine > Interaction > Console interaction and Guest operations, and assign it to the user.

138
MCQeasy

An administrator is setting up vSphere Alarms and wants to ensure that an alarm triggers only when a virtual machine's CPU utilization exceeds 90% for a continuous duration of 15 minutes. Where is this time duration configured?

A.In the VCF Operations policy management engine.
B.Under the Alarm Definition -> Trigger panel, by adjusting the 'In metric, time interval / tolerance' setting.
C.Via esxcli system settings set --alarm-duration=15.
D.In the advanced vCenter setting 'Alarm.Tolerance.Duration'.
AnswerB

Trigger tolerance settings specify how long a condition must persist before the alarm status changes.

Why this answer

When creating or editing an alarm definition in the vSphere Client, the trigger condition allows setting a time tolerance (e.g., 'Trigger if condition exists for more than specific minutes').

139
MCQhard

You are managing VVF and need to update the vCenter Server. Before performing the update, what is the most important step to perform on the VCSA?

A.Take a snapshot of the vCenter VM
B.Delete all templates to free space
C.Restart all services
D.Perform a VCSA file-based backup
AnswerD

This is the supported and safe way to back up VCSA.

Why this answer

Taking a file-based backup is critical for recovery in case the update fails.

140
MCQhard

An administrator is troubleshooting an issue where vSphere Trust Authority fails to attest an ESXi host during boot. The Key Provider reports that the Trust Authority Cluster is unreachable. Which log file on the ESXi host should the administrator check to examine the attestation client communication errors?

A./var/log/vmware/vcf/sddc-manager/sddc-manager.log
B./var/log/vmware/nsx-manager/nsx-syslog.log
C./var/log/vmware/sso/sso.log
D./var/log/hostd.log and /var/log/vmkernel.log on the ESXi host.
AnswerD

hostd and vmkernel logs record host daemon and kernel interactions with Trust Authority and key providers.

Why this answer

ESXi host attestation and key provider communication logs are recorded in /var/log/vpxa.log or /var/log/vmkernel.log, with specific trust authority client logs located in /var/log/tboot.log or hostd.log depending on the exact component.

141
MCQmedium

An administrator is configuring an alert in vSphere Foundation 9.0 to notify them when an ESXi host loses its connection to primary storage (datastore heartbeat loss). Which type of default alarm in vCenter covers this condition?

A.Host power state change alarm
B.Virtual machine high availability failover event
C.Storage I/O control congestion threshold alarm
D.Datastore accessibility alarm
AnswerD

The datastore accessibility alarm triggers when an ESXi host loses communication with a datastore.

Why this answer

Datastore accessibility loss or connectivity issues trigger native vCenter storage alarms, specifically related to datastore reachability and heartbeating.

142
MCQmedium

An organization requires integration of vSphere Foundation 9.0 identity services with an external Enterprise Identity Provider (IDP) using OpenID Connect (OIDC). Where must the administrator configure the OIDC provider settings within vCenter Server 9.0?

A.Navigate to vCenter Server > Administration > Single Sign-On > Configuration > Identity Providers and add a new OIDC provider.
B.Use the vSphere Client Global Inventory Lists to import the IDP SSL certificate into the trusted root store.
C.Modify the vpxd.properties file on the vCenter appliance to include the OIDC client secret.
D.Navigate to vCenter Server > Hosts and Clusters > Configure > Access Control > Authentication Services.
AnswerA

The Identity Providers tab under SSO Configuration is the correct menu path for configuring modern OIDC and SAML identity sources.

Why this answer

In vCenter Server, identity provider configurations such as OIDC and Active Directory over LDAP are managed under Administration > Single Sign-On > Configuration > Identity Providers.

143
Multi-Selectmedium

An administrator is configuring dashboards in VCF Operations for executive reporting. Which TWO widgets are best suited for displaying high-level summary health and risk scores across multiple SDDC clusters? (Choose two.)

Select 2 answers
A.Virtual Machine Guest OS Desktop Screen Viewer.
B.Heat Map Widget displaying cluster health and risk percentages.
C.Scoreboard Widget displaying aggregate health scores.
D.Raw Log Stream Text Box Widget displaying tail -f outputs.
E.SDDC Manager Bring-up Progress Bar Widget.
AnswersB, C

Heat maps visualize relative object health and risk using color-coded blocks.

Why this answer

Health and risk scores across multiple objects are best displayed using Heat Map widgets or Scoreboard widgets in VCF Operations.

144
MCQhard

An administrator is configuring vSphere Trust Authority (vTA) in a VVF 9.0 environment to protect encrypted VMs. During the initial setup of the Trust Authority Cluster, communication fails between the Attestation Service and the Key Provider. Which network port must be open between these components to allow secure attestation communication?

A.TCP port 22 and TCP port 80.
B.TCP port 902 and UDP port 902.
C.TCP port 443 and TCP port 8443.
D.UDP port 514 and UDP port 123.
AnswerC

vSphere Trust Authority services rely on HTTPS (443) and specific management ports like 8443 for key and attestation traffic.

Why this answer

vSphere Trust Authority components communicate securely over specific ports. The Attestation Service communicates with ESXi hosts and other trust components typically over TCP port 443 (HTTPS) and port 8443 or specific vTA service ports depending on the exact architecture.

145
MCQmedium

An administrator is reviewing active alarms in the vSphere Client and notices an alarm triggered by high datastore latency. To investigate which virtual machine is generating the excessive I/O load, which chart or view in vCF Operations should the administrator inspect?

A.vSphere Client -> vLCM -> Datastore Compliance View.
B.Cloud Builder -> Monitoring -> Storage Inspector.
C.VCF Operations -> Dashboards -> Datastore Performance or Troubleshooting -> Metric view filtered by Disk IOPS/Latency.
D.NSX Manager -> Diagnostics -> Datastore Latency Test.
AnswerC

VCF Operations correlates datastore latency metrics with the contributing virtual machines generating high workload.

Why this answer

To trace I/O bottlenecks to specific VMs, the administrator can use VCF Operations 'Troubleshooting -> Metric' view or the 'Datastore IOPS / Latency' dashboard.

146
Multi-Selecthard

An administrator is preparing to execute a major upgrade of a VVF 9.0 environment using SDDC Manager. Which THREE pre-upgrade validation checks are automatically performed by SDDC Manager before allowing the upgrade bundle to be applied? (Choose three.)

Select 3 answers
A.Automatically delete all historical performance metrics older than 365 days from VCF Operations.
B.Power off all running production virtual machines to release memory.
C.Check available disk space and partition utilization on SDDC Manager and target appliances.
D.Verify API connectivity and authentication status for vCenter Server and NSX Manager.
E.Validate software Bill of Materials (BOM) compatibility and component dependency trees.
AnswersC, D, E

Sufficient disk space is required to stage and unpack upgrade binaries.

Why this answer

SDDC Manager pre-checks validate inventory connectivity, snapshot status, disk space availability on appliances, and software compatibility (BOM validation).

147
MCQhard

An administrator is utilizing vSphere Lifecycle Manager (vLCM) in VVF 9.0 to manage ESXi host compliance and image updates across a cluster. The cluster image compliance check reports an error indicating that a vendor hardware addon is incompatible with the selected ESXi base image version. How should the administrator resolve this issue?

A.Manually edit the vpxd configuration file on vCenter to bypass hardware compatibility checks for the cluster.
B.Select a vendor add-on version that explicitly supports the target ESXi base image version from the software depot.
C.Disable vSphere High Availability (HA) on the cluster before initiating the image compliance remediation.
D.Switch the cluster back to a baseline-based update method and apply legacy patch baselines.
AnswerB

vLCM requires component compatibility; selecting a supported vendor add-on version resolves the image mismatch.

Why this answer

When using vLCM with single images, all components (base image, vendor add-on, and firmware/driver components) must be validated against the VMware Compatibility Guide (VCG). The administrator must update the vendor add-on to a version compatible with the target ESXi base image version.

148
MCQmedium

An administrator is configuring a new alert definition in VCF Operations to notify them when any virtual machine's datastore usage exceeds 85%. However, they want to exclude all virtual machines belonging to the 'Dev-Test' resource pool. How can this exclusion be achieved?

A.Configure an NSX Distributed Firewall rule blocking storage traffic to Dev-Test VMs.
B.Edit the vpxd.cfg file on vCenter to filter out Dev-Test storage metrics.
C.Add a deny rule in the vCenter Server Global Permissions list for the Dev-Test group.
D.Modify the active Policy in VCF Operations, navigate to Symptom Definitions, and disable or override the alert for the Dev-Test custom object group.
AnswerD

Policies in VCF Operations allow overriding and disabling specific alert symptoms for targeted custom groups or object hierarchies.

Why this answer

Alerts and policies in VCF Operations are managed via Policies. To exclude specific objects, the administrator must modify the policy definition, select the object or group (Dev-Test), and override or disable the specific symptom/alert definition for that group.

149
Multi-Selectmedium

An administrator wants to configure custom dashboards and alerts in VMware Aria Operations to monitor specific Key Performance Indicators (KPIs) for critical database virtual machines in a VVF environment. Which THREE actions can the administrator perform within Aria Operations to achieve this? (Choose three.)

Select 3 answers
A.Build custom alert definitions by combining symptom definitions and assigning them to policies.
B.Directly patch the physical server BIOS firmware through Aria Operations dashboard widgets.
C.Create custom dashboard widgets using metric charts, object lists, and health trees.
D.Modify the hardcoded hypervisor source code on the ESXi boot bank.
E.Define custom symptom definitions based on specific metric thresholds (e.g., CPU demand > 90%).
AnswersA, C, E

Alert definitions group symptoms together and trigger notifications based on active policies.

Why this answer

Aria Operations allows users to build custom dashboards, create symptom definitions, and configure alert definitions linked to specific policies.

150
MCQhard

An administrator is configuring certificate management for a vSphere Foundation environment. They need to replace the vCenter Server machine certificate with one signed by a Subordinate CA. Which tool should be used to automate this process?

A.vSphere Lifecycle Manager
B.Certificate-manager CLI utility
C.vCenter Server Appliance Management Interface (VAMI)
D.PowerCLI Update-Certificate cmdlet
AnswerB

The certificate-manager utility is the primary tool for replacing certificates on the Platform Services Controller/vCenter.

Why this answer

The vSphere Certificate Manager utility (certificate-manager) is the supported tool for managing vCenter Server certificates.

← PreviousPage 2 of 3 · 221 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Deploy Configure And Operate Vvf questions.