Courseiva

CCNA IT Architectures Technologies Standards Questions

75 of 93 questions · Page 1/2 · IT Architectures Technologies Standards · Answers revealed

Practice these questionsDomain overviewAll questions
1
MCQmedium

An enterprise architect is designing a backup and recovery standard for a vSphere Foundation 9.0 environment. Which technology should be integrated with vCenter Server to enable efficient, crash-consistent or application-consistent virtual machine snapshots without placing heavy processing loads on the ESXi host CPU?

A.Network I/O Control bandwidth throttling shares.
B.Fault Tolerance continuous replication logs.
C.Storage DRS inter-datastore cloning.
D.vSphere APIs for Data Protection (VADP) utilizing Changed Block Tracking (CBT).
AnswerD

Correct. VADP and CBT enable efficient external backup operations by tracking changed disk blocks.

Why this answer

vSphere APIs for Data Protection (VADP) allow backup vendors to offload snapshot creation and data transport using Changed Block Tracking (CBT).

Practice this question →
2
MCQmedium

An administrator is planning the storage architecture for a vSphere Foundation 9.0 cluster utilizing external NFS version 4.1 datastores. What is a key architectural advantage of NFS 4.1 compared to NFSv3 in vSphere?

A.Mandatory integration with Fibre Channel zoning tables.
B.Native multipathing support built into the NFS 4.1 client for load balancing and path failover.
C.Automatic conversion of file shares into block-level VMFS datastores at the hypervisor layer.
D.Elimination of IP address requirements by using MAC-layer bridging.
AnswerB

Correct. NFS 4.1 supports native session multipathing, improving resilience and throughput compared to NFSv3.

Why this answer

NFS 4.1 adds native multipathing support (SESSION trunking/multipathing) directly within the ESXi client, whereas NFSv3 relied on multiple mount points or third-party workarounds for multipathing.

Practice this question →
3
MCQeasy

An administrator is designing a vSphere Foundation 9.0 environment with high availability. Which component acts as the primary orchestrator for cluster-wide high availability (HA) failover actions if an ESXi host suffers a sudden power failure?

A.The elected HA Master ESXi host in the cluster.
B.The vSAN Witness Appliance residing at the secondary site.
C.The Platform Services Controller embedded in vCenter Server.
D.The external hardware load balancer connected to the vCenter Appliance.
AnswerA

Correct. The Master ESXi host detects failures and coordinates VM restarts across remaining healthy hosts.

Why this answer

In a vSphere HA cluster, one host is elected as the Master host, while the remaining hosts act as Slaves. The Master monitors the cluster state and orchestrates failovers.

Practice this question →
4
Multi-Selecthard

An infrastructure architect is designing a multi-site vSphere Foundation 9.0 environment with stretched clusters. Which THREE challenges or requirements must be accounted for in a stretched cluster design? (Choose three.)

Select 3 answers
A.Redundant, high-bandwidth inter-site ISL (Inter-Switch Links) for vMotion and storage traffic.
B.Complete elimination of all network gateways across the entire enterprise.
C.Placement of the vSAN Witness node in a third independent failure domain or site.
D.Strict round-trip time (RTT) latency limitations between the primary data centers (typically <= 5ms for vSAN).
E.Converting all virtual machine disks into read-only ISO files.
AnswersA, C, D

Correct. High bandwidth is mandatory to handle continuous cross-site replication and migrations.

Why this answer

Stretched clusters require strict RTT latency limits for storage, reliable witness placement, and redundant high-bandwidth inter-site networking.

Practice this question →
5
MCQmedium

An IT architect is planning network security for a vSphere Foundation 9.0 environment. They want to ensure that inter-VM traffic within the same virtual network is inspected and filtered by distributed firewall rules without having to hairpin traffic out to a physical firewall appliance. Which architectural feature should be deployed?

A.Physical top-of-rack access control lists (ACLs).
B.Storage I/O Control traffic shaping rules.
C.NSX Distributed Firewall (DFW)
D.vCenter Server Appliance software firewall.
AnswerC

Correct. The DFW operates inside the hypervisor kernel, providing stateful micro-segmentation for VM-to-VM traffic.

Why this answer

VMware NSX Distributed Firewall (DFW) inspects traffic directly at the vnic level of each virtual machine within the ESXi kernel, enforcing micro-segmentation without physical hairpinning.

Practice this question →
6
MCQeasy

An administrator is deploying a new vSphere Foundation 9.0 cluster. Which component provides centralized lifecycle management, image-based cluster updates, and compliance monitoring for ESXi hosts?

A.vRealize Operations / Aria Operations.
B.vSphere Lifecycle Manager (vLCM)
C.vCenter Server Update Planner.
D.VMware Host Client.
AnswerB

Correct. vLCM is the centralized tool for managing ESXi software and hardware firmware images.

Why this answer

vSphere Lifecycle Manager (vLCM) provides image-based and baseline-based lifecycle management for ESXi clusters, including firmware and driver validation.

Practice this question →
7
MCQeasy

An administrator is designing a new vSphere Foundation 9.0 cluster using 32-core AMD EPYC processors. Which hardware design standard must be verified to ensure maximum VM density and NUMA efficiency without cross-socket memory latency penalties?

A.Size virtual machine vCPUs to fit within the core and cache boundaries of a single physical NUMA node.
B.Configure the hypervisor to span all vCPUs evenly across all sockets regardless of core counts.
C.Enable Fault Tolerance for every virtual machine to force physical socket load-balancing.
D.Disable hyperthreading globally across all hosts in the vCenter Server cluster settings.
AnswerA

Correct. Keeping vCPUs within a single NUMA node optimizes memory access and reduces remote memory latency.

Why this answer

Ensuring the VM vCPU count fits neatly within a single physical NUMA node prevents cross-socket memory access, maintaining low latency.

Practice this question →
8
MCQmedium

An architect is planning a vSphere Foundation 9.0 deployment for a remote office/branch office (ROBO) location with limited physical security. Which feature should be implemented to protect virtual machine data at rest against physical server theft?

A.RAID 6 parity disk grouping on local RAID controllers.
B.vSphere VM Encryption managed via a trusted KMIP-compliant key management server.
C.Software iSCSI multipathing over encrypted IPsec tunnels.
D.Storage DRS auto-evacuation rules triggered by ambient temperature sensors.
AnswerB

Correct. VM Encryption encrypts disks at rest, rendering stolen physical drives unreadable without the keys.

Why this answer

vSphere VM Encryption protects virtual machine disk files (VMDKs) and configuration files at rest without requiring specific storage array capabilities.

Practice this question →
9
MCQhard

An enterprise storage architect is designing a VMware vSAN datastore within a vSphere Foundation 9.0 cluster using a 2-node direct-connect topology at a remote site. Which architectural component is mandatory to provide a tie-breaker vote and prevent split-brain scenarios?

A.An active-active dual-controller hardware Fibre Channel bridge.
B.An external physical quorum disk connected via USB to both ESXi hosts.
C.A remote vSAN Witness Node deployed at a separate third failure domain.
D.A secondary vCenter Server Appliance running in linked mode.
AnswerC

Correct. 2-node clusters use a witness node to provide the third vote required for quorum.

Why this answer

A 2-node vSAN cluster requires a vSAN Witness node (usually deployed as a lightweight virtual appliance at a third site or primary data center) to maintain quorum.

Practice this question →
10
MCQeasy

An administrator is designing the management network for a vSphere Foundation 9.0 cluster. Which protocol is standard for secure command-line administration and troubleshooting access to ESXi hosts?

A.Secure Shell (SSH)
B.Telnet
C.Trivial File Transfer Protocol (TFTP)
D.Remote Desktop Protocol (RDP)
AnswerA

Correct. SSH provides encrypted terminal access for ESXi administration.

Why this answer

SSH (Secure Shell) is the standard encrypted protocol used for secure command-line management and troubleshooting access to ESXi hosts.

Practice this question →
11
MCQmedium

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that virtual machines are automatically balanced across hosts based on active memory and CPU utilization rather than just static allocation. Which DRS metric setting should be emphasized?

A.Storage DRS space utilization thresholds.
B.Host hardware fan speed and ambient thermal telemetry.
C.Default DRS load balancing utilizing active memory and CPU metrics.
D.Fault Tolerance secondary heartbeat intervals.
AnswerC

Correct. DRS evaluates active resource usage to determine when to trigger migrations for optimal load balancing.

Why this answer

VMware DRS uses active metric data to evaluate real-time workload demand and perform load-balancing migrations when inequality thresholds are crossed.

Practice this question →
12
MCQmedium

An enterprise is designing a multi-site vSphere Foundation 9.0 architecture leveraging stretched clustering. What is the maximum supported Round Trip Time (RTT) network latency for synchronous vSAN storage replication between primary and secondary data centers?

A.500 milliseconds or less
B.100 milliseconds or less
C.5 milliseconds or less
D.25 milliseconds or less
AnswerC

Correct. Synchronous vSAN replication requires strict low-latency links capped at 5ms RTT.

Why this answer

VMware vSAN stretched cluster deployments require a maximum RTT of 5 milliseconds or less between the data centers and the witness site requirements depend on deployment type.

Practice this question →
13
MCQhard

An administrator is designing a multi-cluster vSphere Foundation 9.0 architecture and wants to implement Enhanced vMotion Compatibility (EVC) across clusters containing both Intel Xeon Scalable (Ice Lake) and AMD EPYC (Milan) processors. What is the design limitation regarding EVC in this scenario?

A.Cross-vendor EVC between Intel and AMD physical processors is architecturally unsupported.
B.Cross-vendor EVC requires vCenter Server to be deployed on a physical Windows Server with hardware virtualization enabled.
C.EVC automatically emulates AMD instruction sets on Intel hosts using binary translation vCPUs.
D.Cross-vendor EVC is supported as long as the lowest common denominator SSE4 instruction set is enabled in the BIOS.
AnswerA

Correct. EVC baselines can only normalize feature sets between processors from the same hardware vendor (Intel-to-Intel or AMD-to-AMD).

Why this answer

EVC spans across processors within the same manufacturer family (e.g., Intel to Intel, AMD to AMD). Cross-vendor EVC between Intel and AMD physical CPUs is not supported.

Practice this question →
14
MCQhard

A systems architect is evaluating storage policy designs for a vSAN datastore in a vSphere Foundation 9.0 cluster. When configuring the Failures to Resist (FTT) policy using Erasure Coding (RAID-5/6), what is the minimum number of host fault domains required for a RAID-5 storage policy?

A.At least 3 fault domains (hosts)
B.At least 6 fault domains (hosts)
C.At least 2 fault domains (hosts)
D.At least 4 fault domains (hosts)
AnswerD

Correct. RAID-5 requires 4 hosts minimum (3 data / 1 parity).

Why this answer

RAID-5 Erasure Coding in vSAN requires a minimum of 4 fault domains (hosts) to distribute data and parity blocks effectively.

Practice this question →
15
Multi-Selecthard

An infrastructure architect is evaluating storage protocols and features for a vSphere Foundation 9.0 environment. Which THREE advanced vSphere storage features rely on VAAI (vStorage APIs for Array Integration)? (Choose three.)

Select 3 answers
A.Block Zero / Full Copy (accelerated cloning and zeroing operations)
B.Thin Provisioning Space Reclamation (UNMAP)
C.Hardware-Accelerated Locking (Atomic Test and Set - ATS)
D.Software iSCSI software-based software checksum calculation
E.Guest operating system registry file defragmentation
AnswersA, B, C

Correct. Block Zero offloads disk zeroing and cloning tasks directly to the storage array.

Why this answer

VAAI offloads storage operations to hardware arrays, supporting features like Hardware Accelerated Locking (ATS), Block Zero (Full Copy/Zeroing), and Thin Provisioning reclaim.

Practice this question →
16
MCQhard

An administrator is reviewing host power management policies in a vSphere Foundation 9.0 cluster. To ensure compliance with strict application performance SLAs while achieving energy efficiency, which DPM (Distributed Power Management) and CPU power management standard should be implemented?

A.Enable aggressive DPM with automated host power-off triggered every 5 minutes.
B.Configure ESXi power management policy to 'High Performance' and tune BIOS to OS-controlled or static maximum frequency.
C.Disable Intel SpeedStep or AMD Cool'n'Quiet without specifying an ESXi power policy.
D.Set CPU power efficiency policy to maximum energy savings across all database nodes.
AnswerB

Correct. High performance policies prevent processor throttling and latency spikes caused by frequency scaling.

Why this answer

Setting the host BIOS and ESXi power management policy to 'High Performance' or 'Static' prevents CPU P-state/C-state latency overheads that could impact sensitive latency-critical applications.

Practice this question →
17
Multi-Selecthard

An IT architect is evaluating storage policy options for a vSAN datastore in a vSphere Foundation 9.0 cluster. Which THREE storage policy rules can be enforced via vSAN storage policies? (Choose three.)

Select 3 answers
A.Failures to Resist (FTT / RAID level configuration)
B.Automatic physical switch port VLAN reconfiguration
C.Flash Read Cache Reservation
D.Active Directory domain controller password complexity rules
E.Disk Stripe Width
AnswersA, C, E

Correct. FTT defines how many simultaneous host or disk failures a VM object can withstand.

Why this answer

vSAN storage policies allow administrators to configure rules such as Failures to Resist (FTT), stripe width, and object space reservation.

Practice this question →
18
MCQeasy

An administrator is planning the IP addressing architecture for a vSphere Foundation 9.0 deployment. Which network segment requires routable IP addresses across the enterprise network?

A.The ESXi management and vCenter Server network.
B.Fault Tolerance logging traffic between isolated secondary virtual machines.
C.Internal private back-end isolated vSAN traffic within a single rack.
D.Local scratch log partition loops.
AnswerA

Correct. Management networks must be accessible across the network to allow administrators and vCenter to reach ESXi hosts.

Why this answer

vCenter Server and ESXi management networks must be routable across the enterprise to enable centralized management, monitoring, and administration.

Practice this question →
19
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and configuring VMkernel networking. Which TWO system traffic types can be enabled with a dedicated VMkernel network service checkbox? (Choose two.)

Select 2 answers
A.vSAN
B.Microsoft Active Directory Domain Controller replication
C.Linux kernel makefile compilation
D.Apple AirPlay media streaming
E.vMotion
AnswersA, E

Correct. vSAN has a dedicated VMkernel service checkbox.

Why this answer

VMkernel adapters support dedicated checkboxes for system traffic types including vMotion, vSAN, Provisioning, and Fault Tolerance logging.

Practice this question →
20
MCQhard

An infrastructure architect is configuring network security standards for a vSphere Foundation 9.0 environment. They want to ensure that all virtual machine traffic traversing a vSphere Distributed Switch cannot be sniffed by compromised guest operating systems using promiscuous mode. Which configuration setting must be enforced?

A.Set Promiscuous Mode, MAC Address Changes, and Forged Transmits to 'Reject' at the distributed port group security policy level.
B.Configure IP Source Guard on the physical switch access ports.
C.Deploy an external hardware tap appliance inline with the physical uplinks.
D.Enable BPDU Guard on all physical uplink switch ports connected to the ESXi host NICs.
AnswerA

Correct. Rejecting these settings prevents unauthorized packet capture and traffic spoofing at the virtual switch port level.

Why this answer

Port group security policies on the vSphere Distributed Switch include Promiscuous Mode, MAC Address Changes, and Forged Transmits, which should be set to 'Reject' to prevent sniffing and spoofing.

Practice this question →
21
MCQhard

An enterprise architect is designing a multi-site vSphere Foundation 9.0 environment with stretched clusters. When configuring vSAN stretched cluster witness traffic, what is the architectural recommendation regarding the witness network connection?

A.Ensure the witness network link meets minimum bandwidth requirements and maintains an RTT latency of 100 milliseconds or less.
B.Configure the witness node to run on the exact same physical ESXi host as the primary storage controller.
C.Route witness traffic exclusively through unencrypted public dial-up modems.
D.Disable all IP keepalive heartbeats on the witness vmkernel adapter.
AnswerA

Correct. Witness traffic requires low latency (<100ms RTT) and adequate bandwidth depending on component counts.

Why this answer

The vSAN witness traffic must traverse a reliable, lower-latency IP network connection to the primary cluster nodes, with specific minimum bandwidth and latency thresholds (typically < 100ms RTT for witness traffic, < 5ms for data sites).

Practice this question →
22
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure networking redundancy. Which TWO teaming and failover methods are supported on vSphere Distributed Switches? (Choose two.)

Select 2 answers
A.Route Based on Originating Virtual Port
B.Border Gateway Protocol Autonomous System Path Prepending
C.Spanning Tree Protocol Root Bridge Selection
D.Route Based on IP Hash
E.Point-to-Point Serial Line Framing
AnswersA, D

Correct. Port-based routing assigns virtual ports to specific physical uplinks.

Why this answer

VDS support multiple teaming policies including Route Based on Originating Virtual Port and Route Based on IP Hash.

Practice this question →
23
MCQhard

An administrator is designing a stretched vSphere Foundation 9.0 cluster across two data centers separated by 30km. According to vSphere clustering design best practices, where should the vCenter Server Appliance be placed?

A.Hosted in one of the primary data centers with vCenter High Availability (VCHA) configured across the sites, ensuring the active, passive, and witness nodes are appropriately distributed.
B.Installed directly onto a physical laptop kept at the administrator's desk.
C.Split evenly across both data centers running active-active clustering simultaneously on the same IP address.
D.Running exclusively inside a public cloud AWS region with no local network connectivity to the ESXi hosts.
AnswerA

Correct. VCHA protects the vCenter management plane across sites when deployed with proper node separation.

Why this answer

Placing vCenter Server on one of the preferred data centers or running it with high availability (such as vCenter HA) inside the primary site while ensuring database consistency is standard architecture, avoiding split-brain across sites without proper witness support.

Practice this question →
24
Multi-Selectmedium

An enterprise architect is planning the deployment of vSphere Fault Tolerance (FT) in a vSphere Foundation 9.0 cluster. Which THREE requirements or limitations apply to virtual machines configured with vSphere FT? (Choose three.)

Select 3 answers
A.Compliance with maximum vCPU limits supported by the specific vSphere FT release
B.Dedicated FT logging VMkernel adapters configured on participating ESXi hosts
C.Disabling all network redundancy across the cluster uplinks
D.Hosting the primary VM exclusively on a local unshared USB drive
E.Shared storage accessible simultaneously by both primary and secondary host nodes
AnswersA, B, E

Correct. FT has strict vCPU count limitations per virtual machine to maintain deterministic instruction synchronization.

Why this answer

vSphere FT requires specific vCPU limits depending on the version, dedicated FT logging network adapters, and shared storage accessible by both hosts.

Practice this question →
25
MCQeasy

An IT planner is reviewing network topologies for a vSphere Foundation 9.0 environment. Which standard defines the encapsulation method used by Geneve tunnels when deployed with NSX in a modern data center design?

A.VLAN tagging (IEEE 802.1Q)
B.Point-to-Point Tunneling Protocol (PPTP)
C.Fibre Channel over Ethernet (FCoE)
D.Geneve (Generic Network Virtualization Encapsulation)
AnswerD

Correct. Geneve is the standard encapsulation protocol used by modern VMware networking architectures to support extensible metadata.

Why this answer

NSX utilizes Geneve (Generic Network Virtualization Encapsulation) as its standard tunneling protocol to encapsulate tenant packets over an IP fabric.

Practice this question →
26
Multi-Selecthard

An infrastructure architect is planning disaster recovery and migration strategies in a vSphere Foundation 9.0 environment. Which THREE migration methods are natively supported by vCenter Server for moving running virtual machines? (Choose three.)

Select 3 answers
A.Physical unzipping of VMDK files via manual FTP client uploads
B.Physical courier shipping of hard drives via postal mail services
C.Storage vMotion (migrating virtual disk files between datastores without downtime)
D.Enhanced vMotion (migrating both compute host and storage datastore simultaneously)
E.vMotion (migrating compute execution across hosts without downtime)
AnswersC, D, E

Correct. Storage vMotion migrates VMDK storage files across datastores while powered on.

Why this answer

vCenter Server natively supports vMotion (compute only), Storage vMotion (storage only), and Enhanced vMotion (both compute and storage simultaneously across clusters or vCenters).

Practice this question →
27
Multi-Selectmedium

An enterprise architect is designing a vSphere Foundation 9.0 cluster and configuring vSphere DRS (Distributed Resource Scheduler). Which THREE migration triggers or automation levels can be configured in DRS? (Choose three.)

Select 3 answers
A.Manual (DRS generates recommendations but does not execute migrations automatically)
B.Randomized Chaos Mode (DRS migrates every VM every 30 seconds regardless of load)
C.Partially Automated (DRS automatically migrates VMs at power-on, but recommends load-balancing migrations)
D.Fully Automated (DRS automatically migrates VMs for initial placement and ongoing load balancing)
E.External Cloud Lock Mode (DRS locks all hosts and prevents any migrations)
AnswersA, C, D

Correct. Manual mode prompts the administrator with migration suggestions without applying them automatically.

Why this answer

DRS supports automation levels including Manual, Partially Automated, and Fully Automated, as well as proactive and load-balancing triggers.

Practice this question →
28
MCQmedium

An enterprise administrator is configuring vSphere Proactive HA in a vSphere Foundation 9.0 cluster. How does Proactive HA interact with hardware health monitoring systems from vendors like Dell, HPE, or Cisco?

A.By receiving hardware vendor provider alerts (such as memory or fan degradation) and automatically placing degraded hosts into maintenance or quarantine mode.
B.By adjusting physical server CPU voltage regulators to save electricity.
C.By executing firmware flashing routines on physical RAID controllers during peak business hours.
D.By rebooting the top-of-rack physical network switches when BGP convergence fails.
AnswerA

Correct. Proactive HA acts on vendor hardware warnings to migrate workloads off failing hardware before a crash occurs.

Why this answer

Proactive HA receives provider-generated health events via vCenter hardware integrations and takes automated mitigation actions (such as evacuating hosts) before hardware failures lead to full outages.

Practice this question →
29
MCQeasy

An administrator is planning an upgrade of ESXi hosts in a vSphere Foundation 9.0 cluster using vSphere Lifecycle Manager. What is the role of a hardware support manager (HSM) or vendor add-on in vLCM?

A.To manage physical switch port VLAN assignments via SNMP traps.
B.To act as an external license server for Microsoft Windows guest operating systems.
C.To provide vendor-validated firmware and driver packages that integrate into the unified ESXi cluster software image.
D.To provide active directory domain controller replication services.
AnswerC

Correct. Vendor add-ons supply hardware-specific drivers and firmware so vLCM can patch both hypervisor and hardware simultaneously.

Why this answer

Vendor add-ons supplied by hardware partners (like Dell, HPE, Lenovo) provide validated firmware and driver bundles that integrate into vLCM image management.

Practice this question →
30
MCQeasy

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that when an ESXi host loses its connection to all storage devices (All Paths Down - APD), affected virtual machines are handled appropriately. Which vSphere HA setting configures this behavior?

A.Storage DRS placement aggregation rules.
B.VM Component Protection (VMCP)
C.Network I/O Control bandwidth reservations.
D.Enhanced vMotion Compatibility baselines.
AnswerB

Correct. VMCP detects APD and PDL storage events and executes predefined restart or failover actions for affected VMs.

Why this answer

VM Component Protection (VMCP) in vSphere HA manages storage failure conditions such as All Paths Down (APD) and Permanent Device Loss (PDL), allowing automated restart policies for affected VMs.

Practice this question →
31
MCQhard

An infrastructure designer is evaluating storage protocols for a high-performance vSphere Foundation 9.0 database cluster. Which architectural characteristic distinguishes NVMe-oF over RDMA (RoCEv2) from traditional NVMe-oF TCP?

A.RDMA restricts maximum block transfer sizes to 4KB, whereas TCP supports unlimited block sizes.
B.TCP encrypts all storage payloads by default, whereas RDMA requires an external IPsec gateway.
C.RDMA utilizes direct memory-to-memory transfers between storage and host memory, bypassing the CPU network stack for lower latency.
D.NVMe-oF TCP requires dedicated Fibre Channel switches, whereas RDMA runs on standard unmanaged Ethernet switches.
AnswerC

Correct. RDMA avoids CPU stack processing overhead, resulting in ultra-low latency.

Why this answer

RoCEv2 (RDMA over Converged Ethernet) bypasses the host operating system network stack entirely using hardware offload, whereas NVMe-oF TCP processes packets through the standard TCP/IP stack.

Practice this question →
32
MCQeasy

An administrator is designing a vSphere Foundation 9.0 cluster. When configuring high availability (HA) admission control, which admission control policy is recommended to ensure sufficient resources are reserved for failover without over-complicating capacity math?

A.Percentage of Cluster Resources reserved for CPU and Memory.
B.Static manual reservation of 32 physical CPU cores per virtual machine.
C.Routing failover requests through an external public cloud broker.
D.Disabling admission control entirely to allow 100% resource overcommit.
AnswerA

Correct. The percentage policy dynamically adjusts as hosts are added or removed, making it flexible and reliable.

Why this answer

Host failures to tolerate (FTT) or Percentage of Cluster Resources are standard, modern HA admission control policies that automatically scale as cluster size changes.

Practice this question →
33
Multi-Selecthard

An infrastructure architect is designing a high-performance vSphere Foundation 9.0 environment. Which THREE architectural configurations optimize virtual machine memory performance and reduce latency? (Choose three.)

Select 3 answers
A.Reserving 100% of guest virtual machine memory to prevent swapping and ballooning overhead
B.Enabling Large Pages (Transparent Huge Pages / 2MB pages) to reduce TLB miss overhead
C.Configuring aggressive memory overcommitment exceeding 300% on database nodes
D.Sizing virtual machine memory to fit within physical NUMA node boundaries
E.Disabling physical server RAM interleaving in the BIOS
AnswersA, B, D

Correct. 100% memory reservation guarantees physical RAM allocation and eliminates hypervisor memory reclamation overhead.

Why this answer

Memory performance is optimized by avoiding memory overcommit (reserving 100%), keeping vCPUs and memory within single NUMA nodes, and configuring large memory pages (Huge Pages).

Practice this question →
34
MCQmedium

An IT architect is configuring an enterprise vSphere Foundation 9.0 environment with external identity providers. Which standard protocol does vCenter Server support for federated identity management with providers such as Okta or Microsoft Entra ID?

A.NetBIOS name broadcasting over UDP port 137.
B.RADIUS token authentication via serial modem lines.
C.OIDC (OpenID Connect) and SAML 2.0 federation protocols.
D.Plain text LDAP binding without SSL certificates.
AnswerC

Correct. Modern vCenter versions support OIDC and SAML for enterprise identity federation.

Why this answer

vCenter Server supports OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) 2.0 for federated identity provider integration.

Practice this question →
35
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere DRS affinity rules. Which TWO types of DRS affinity/anti-affinity rules can be established? (Choose two.)

Select 2 answers
A.Datastore-Datacenter Geolocation rules
B.User-Group Active Directory Password rules
C.VM-Host Affinity / Anti-Affinity rules
D.VM-VM Affinity / Anti-Affinity rules
E.Switch-Port MAC Binding rules
AnswersC, D

Correct. VM-Host rules dictate which specific hosts a virtual machine must or must not run on.

Why this answer

DRS supports VM-VM affinity/anti-affinity rules and VM-Host affinity/anti-affinity rules.

Practice this question →
36
Multi-Selecthard

An infrastructure architect is designing a high-security vSphere Foundation 9.0 environment. Which THREE architectural features contribute directly to hardening ESXi hosts and virtual machines against attacks? (Choose three.)

Select 3 answers
A.Unencrypted Telnet management daemons running on port 23.
B.Trusted Platform Module (TPM) 2.0 chips providing hardware-root-of-trust measurements.
C.Permitting root access via unauthenticated anonymous FTP sessions.
D.Unified Extensible Firmware Interface (UEFI) Secure Boot enabled on physical servers.
E.vSphere VM Encryption protecting virtual disk files at rest.
AnswersB, D, E

Correct. TPM 2.0 stores and verifies platform measurements for ESXi integrity.

Why this answer

ESXi hardening involves features like TPM 2.0 for boot integrity, vSphere VM Encryption for data at rest, and Secure Boot enabled in UEFI firmware.

Practice this question →
37
MCQmedium

A data center architect is planning a vSphere Foundation 9.0 deployment utilizing NVMe-oF (NVMe over Fabrics) with TCP. Which architectural requirement is mandatory for the underlying physical network infrastructure?

A.Configure spanning tree protocol (STP) with PortFast disabled on all access ports.
B.Enforce a maximum transmission unit (MTU) of 9000 bytes across all physical switch ports and VMkernel adapters handling NVMe-oF traffic.
C.Implement static routing tables between every ESXi VMkernel port and storage controller.
D.Deploy Fibre Channel over Ethernet (FCoE) gateways on all top-of-rack switches.
AnswerB

Correct. Jumbo frames minimize CPU utilization and maximize throughput for high-performance block storage protocols.

Why this answer

NVMe over Fabrics relies heavily on lossless or near-lossless low-latency packet delivery, making Jumbo Frames (MTU 9000) a standard architectural recommendation to reduce CPU overhead and fragmentation.

Practice this question →
38
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere HA response actions. Which TWO configurable actions can vSphere HA take when a host isolation event is detected (Host Isolation Response)? (Choose two.)

Select 2 answers
A.Leave virtual machines powered on
B.Power off virtual machines
C.Reformat all attached datastores with VMFS-6
D.Permanently decommission the ESXi motherboard
E.Instantly migrate all VMs to public cloud AWS EC2 instances
AnswersA, B

Correct. Leaving VMs powered on ensures continuous local execution if isolation is temporary.

Why this answer

When an ESXi host becomes isolated from the rest of the HA cluster network, it can be configured to Power off VMs, Shut down guest OS, or Leave VMs powered on.

Practice this question →
39
MCQeasy

An architect is planning the port requirements for a vSphere Foundation 9.0 environment. Which standard TCP port must be open on firewalls between ESXi hosts and vCenter Server for primary agent communication (vpxa)?

A.TCP port 1433
B.TCP port 3389
C.TCP port 902
D.TCP port 80
AnswerC

Correct. Port 902 UDP/TCP is required for heartbeats and agent communication between vCenter and ESXi.

Why this answer

TCP port 902 is used by vCenter Server to communicate with the heartbeat agent (vpxa) on ESXi hosts.

Practice this question →
40
MCQeasy

An administrator is designing a vSphere Foundation 9.0 cluster and wants to ensure that ESXi host configuration drift is prevented across all nodes in the cluster. Which feature should be implemented?

A.Storage I/O Control latency metrics.
B.vSphere Distributed Switch health check.
C.vSphere Host Profiles
D.Fault Tolerance auto-restart policies.
AnswerC

Correct. Host Profiles establish a golden configuration standard and alert administrators to any compliance drift.

Why this answer

ESXi Host Profiles capture a reference host configuration and apply it to other hosts in the cluster, automatically checking and remediating any configuration drift.

Practice this question →
41
Multi-Selectmedium

An enterprise architect is planning vCenter Server 9.0 High Availability (VCHA) in a vSphere Foundation environment. Which THREE nodes comprise a fully configured VCHA deployment? (Choose three.)

Select 3 answers
A.Active Node
B.Passive Node
C.Database Replica Node
D.Witness Node
E.Proxy Controller Node
AnswersA, B, D

Correct. The Active node runs the active vCenter Server instance and services.

Why this answer

vCenter High Availability consists of three nodes: Active, Passive, and Witness, which provide automated failover protection for the management plane.

Practice this question →
42
Multi-Selectmedium

An enterprise architect is planning a vSphere Foundation 9.0 upgrade using vSphere Lifecycle Manager (vLCM). Which THREE components can be managed and validated as part of a vLCM single cluster image? (Choose three.)

Select 3 answers
A.ESXi base image version
B.Top-of-rack physical switch firmware images
C.Vendor Add-on (hardware-specific driver and firmware bundle)
D.Firmware and Driver Add-ons (additional component-level updates)
E.Microsoft Windows Server guest operating system patches
AnswersA, C, D

Correct. The ESXi base image defines the hypervisor major/minor version and patch level.

Why this answer

vLCM cluster images manage ESXi base ISO/version, vendor add-on firmware/drivers, and optional component firmware updates.

Practice this question →
43
MCQmedium

An administrator is designing a multi-tenant vSphere Foundation 9.0 environment and needs to enforce strict isolation of management traffic, vMotion, and tenant workloads at Layer 2. Which feature should be used on a Distributed Switch to enforce this requirement?

A.Network I/O Control (NIOC) shares and reservation limits.
B.ESXi firewall rule adjustments via the Host Client.
C.Cross-vCenter vMotion encrypted transport tunnels.
D.Private VLANs (PVLANs) configured with isolated and community secondary VLAN IDs.
AnswerD

Correct. PVLANs allow ports on the same primary VLAN to be isolated from each other at Layer 2.

Why this answer

VLAN trunking and Private VLANs (PVLANs) on vSphere Distributed Switches provide secure Layer 2 isolation between different port groups.

Practice this question →
44
Multi-Selectmedium

An enterprise architect is designing a backup and recovery architecture for vSphere Foundation 9.0 virtual machines. Which THREE data transport modes are supported by modern backup software leveraging VADP (vSphere APIs for Data Protection)? (Choose three.)

Select 3 answers
A.Analog modem dial-up SLIP protocol
B.HotAdd mode (attaching virtual disks to a backup proxy virtual machine)
C.SAN mode (direct block access to storage via Fibre Channel or iSCSI HBAs)
D.NBD / NBDSSL mode (Network Block Device streaming over TCP/IP)
E.Bluetooth wireless PAN streaming
AnswersB, C, D

Correct. HotAdd mode mounts backup target disks directly to a proxy VM for fast reads.

Why this answer

VADP supports multiple backup transport modes including HotAdd, SAN (Direct SAN access), and NBD/NBDSSL (Network Block Device).

Practice this question →
45
MCQeasy

When designing a vSphere Foundation 9.0 standard virtual switch (vSwitch) topology for a dual-port 25GbE network adapter configuration, what is the best practice for redundancy and bandwidth utilization?

A.Connect each uplink to a completely different vCenter Server instance to achieve high availability.
B.Disable spanning tree on the ESXi vSwitch properties panel.
C.Designate one uplink as Active and the second uplink strictly as Standby to prevent packet duplication.
D.Configure both uplinks as active and assign them to an appropriate load-balancing algorithm such as Route Based on Physical NIC Load.
AnswerD

Correct. Active/active configurations with modern load balancing maximize available aggregate bandwidth.

Why this answer

Using Route Based on Physical NIC Load (or active/active with IP hash/LB mechanisms) provides resilient load distribution across multiple uplinks.

Practice this question →
46
MCQmedium

A network architect is designing a multi-node vSphere Foundation 9.0 cluster where vMotion traffic must cross multiple routed IP subnets (Layer 3 vMotion). What configuration is required on the VMkernel adapters to support this design?

A.Configure the vMotion TCP/IP stack with static MAC address spoofing enabled.
B.Establish BGP peering sessions directly between the ESXi VMkernel ports and the top-of-rack routers.
C.Configure each vMotion VMkernel adapter with an appropriate IP address, subnet mask, and a reachable default gateway.
D.Enable Proxy ARP across all physical switch interfaces connecting to the ESXi hosts.
AnswerC

Correct. Routing vMotion across subnets requires valid gateway configurations on the participating VMkernel ports.

Why this answer

Layer 3 vMotion requires that the VMkernel adapters participating in vMotion have correct default gateway settings configured on each host to route traffic across subnets.

Practice this question →
47
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 cluster and configuring vSphere Distributed Switch (VDS) port groups. Which TWO traffic types are commonly assigned to distinct VLAN-backed port groups on a VDS? (Choose two.)

Select 2 answers
A.Local motherboard CMOS clock pulses
B.Physical server power supply AC voltage feeds
C.BIOS POST diagnostic code streams
D.VMkernel Management traffic
E.vMotion migration traffic
AnswersD, E

Correct. Management traffic is assigned to a dedicated VLAN-backed port group.

Why this answer

VLAN-backed port groups on a VDS commonly separate management traffic, vMotion traffic, storage traffic, and VM workloads.

Practice this question →
48
MCQhard

An enterprise architect is integrating vSphere Foundation 9.0 with an external hardware security module (HSM) cluster using KMIP. Which architectural standard ensures that vCenter Server securely establishes keys for VM encryption without exposing cleartext credentials?

A.Mutual TLS (mTLS) certificate authentication combined with KMIP-compliant key exchange.
B.IPsec transport mode tunnels terminated on the ESXi management vmkernel interface.
C.OAuth 2.0 token exchange via the vCenter Lookup Service.
D.LDAP over SSL (LDAPS) binding using shared secret service accounts.
AnswerA

Correct. vCenter uses certificates for mutual authentication over KMIP to securely retrieve and manage keys.

Why this answer

KMIP (Key Management Interoperability Protocol) version 1.1 or higher establishes secure mutual TLS authentication and cryptographic operations between vCenter and the HSM.

Practice this question →
49
Multi-Selecthard

An infrastructure architect is designing a vSphere Foundation 9.0 environment with strict compliance standards. Which THREE capabilities are provided by vSphere Trust Authority (vTA)? (Choose three.)

Select 3 answers
A.Isolation of Key Management Server (KMS) access from general administrative networks
B.Protection of encrypted workloads by ensuring keys are never loaded onto unverified hosts
C.Real-time transcoding of 4K video files for virtual desktop sessions
D.Remote attestation of ESXi worker hosts to verify platform integrity before releasing keys
E.Automated provisioning of public cloud AWS S3 storage buckets
AnswersA, B, D

Correct. vTA shields KMS access so that only validated attestation services can communicate with it.

Why this answer

vSphere Trust Authority separates key management duties by establishing trusted attestation clusters, protecting KMS servers, and releasing keys only to verified ESXi hosts.

Practice this question →
50
MCQeasy

An administrator is setting up a new vSphere Foundation 9.0 cluster and needs to configure shared storage access using IP networks. Which VMkernel adapter service must be enabled to support software iSCSI storage traffic?

A.The 'Fault Tolerance Logging' VMkernel service checkbox.
B.Software iSCSI traffic does not require a dedicated VMkernel service checkbox, but requires proper port binding to the iSCSI software adapter.
C.The 'Management' VMkernel service checkbox.
D.The 'vSphere Provisioning' VMkernel service checkbox.
AnswerB

Correct. Unlike vMotion or vSAN, software iSCSI uses standard IP routing via bound VMkernel ports without a distinct toggle switch in the VMkernel service list.

Why this answer

To use software iSCSI in ESXi, an administrator must enable the iSCSI service or bind a VMkernel port configured for iSCSI traffic.

Practice this question →
51
MCQeasy

An architect is planning the deployment of ESXi hosts in a secure data center. Which technology provides hardware-root-of-trust verification of the ESXi bootloader and kernel during server startup?

A.Active Directory Certificate Services (AD CS).
B.Trusted Platform Module (TPM) 2.0 chip installed on the server motherboard.
C.Hardware RAID controllers with battery backup units.
D.Software-based IPsec tunnel endpoints.
AnswerB

Correct. TPM 2.0 measures boot components to ensure the hypervisor has not been tampered with.

Why this answer

TPM (Trusted Platform Module) 2.0 provides a hardware root of trust to measure and verify the integrity of the ESXi boot components.

Practice this question →
52
MCQhard

An enterprise storage architect is evaluating the use of NVMe over Fabrics (NVMe-oF) with Fibre Channel (FC-NVMe) in a vSphere Foundation 9.0 architecture. What is the primary architectural advantage of FC-NVMe over traditional FCP (Fibre Channel Protocol SCSI)?

A.Mandatory integration with public cloud AWS S3 object storage buckets.
B.Automatic conversion of block storage LUNs into NFS v4.1 file shares at the host bus adapter.
C.Support for a vastly increased number of parallel queues and command depths, matching the parallelism of NVMe storage devices.
D.Elimination of all physical cabling requirements by utilizing wireless optical lasers.
AnswerC

Correct. FC-NVMe eliminates SCSI queue bottlenecks by supporting deep parallelism and queues.

Why this answer

FC-NVMe supports massive parallelism (up to 64k queues with 64k commands per queue) compared to traditional SCSI queues, reducing command latency and fully utilizing modern multi-queue NVMe storage controllers.

Practice this question →
53
MCQhard

A systems architect is reviewing the hardware compatibility list (HCL) for a vSphere Foundation 9.0 cluster upgrade. The target servers utilize a modern SmartNIC (DPU) architecture. Which architectural benefit does offloading network and storage virtualization tasks to the DPU provide?

A.Eliminating the requirement for shared external storage arrays by converting the DPU into a vSAN witness node.
B.Enabling zero-latency synchronous replication across unlimited geographic distances.
C.Reclaiming host CPU cycles by offloading infrastructure tasks such as distributed firewalling, encapsulation, and crypto processing to the DPU hardware.
D.Automating the physical switch firmware deployment via LLDP integration.
AnswerC

Correct. DPU offload frees up host CPU capacity for revenue-generating workloads.

Why this answer

DPUs (Data Processing Units) offload CPU-intensive infrastructure tasks like NSX packet processing, firewalling, and storage crypto from host x86 CPU cores to dedicated onboard processors.

Practice this question →
54
Multi-Selecthard

An infrastructure architect is designing a vSphere Foundation 9.0 environment and needs to configure advanced network security. Which THREE features are provided by VMware NSX when integrated with vSphere? (Choose three.)

Select 3 answers
A.Automatic physical power outlet rebooting via SNMP
B.Hardware RAID controller battery replacement scheduling
C.Distributed Firewall (DFW) for micro-segmentation
D.Overlay networking using Geneve tunneling encapsulation
E.Distributed Routing for east-west inter-subnet routing inside the hypervisor
AnswersC, D, E

Correct. NSX DFW provides stateful inspection at the VM vNIC level.

Why this answer

VMware NSX provides distributed firewalling, overlay networking (Geneve), and advanced layer 4-7 load balancing/routing services.

Practice this question →
55
MCQhard

An infrastructure architect is designing a high-security vSphere Foundation 9.0 environment where virtual machines must be protected against malicious inspection of memory while running. Which hypervisor security feature satisfies this requirement?

A.NIC-level MACsec encapsulation.
B.vSphere Confidential VMs utilizing hardware-based CPU memory encryption (such as AMD SEV-SNP or Intel TDX).
C.Software-based memory overcommit compression algorithms.
D.Guest OS pagefile encryption using BitLocker.
AnswerB

Correct. Confidential VMs encrypt memory in hardware, preventing even hypervisor administrators from reading guest memory.

Why this answer

vSphere Confidential VMs leverage hardware-based Trusted Execution Environments (like AMD SEV-SNP or Intel TDX) to encrypt VM memory and CPU state.

Practice this question →
56
Multi-Selectmedium

An enterprise architect is planning virtual machine resource controls in a vSphere Foundation 9.0 cluster. Which THREE parameters can be configured on a virtual machine's CPU or memory settings? (Choose three.)

Select 3 answers
A.Physical Socket Count Multiplexing
B.Shares
C.Limit
D.Reservation
E.BIOS Voltage Scaling Factor
AnswersB, C, D

Correct. Shares determine relative priority when resource contention occurs.

Why this answer

Virtual machine resource settings include Shares, Reservations, and Limits for both CPU and memory allocations.

Practice this question →
57
MCQmedium

An IT architect is configuring a vSphere Foundation 9.0 cluster and wants to ensure that specific virtual machines are always restarted on preferred hosts during a vSphere HA failover event. Which vSphere HA feature satisfies this design goal?

A.Distributed Power Management (DPM) sleep state intervals.
B.Storage DRS placement migration schedules.
C.VM-Host affinity and anti-affinity rules.
D.Enhanced vMotion Compatibility (EVC) baselines.
AnswerC

Correct. Affinity rules dictate host placement preferences for HA restart operations.

Why this answer

VM-Host Affinity rules in vSphere HA allow administrators to define which hosts a virtual machine should or must run on during normal operations and failover events.

Practice this question →
58
Multi-Selecteasy

An administrator is planning storage design for a vSphere Foundation 9.0 cluster. Which TWO file-level storage protocols are supported by ESXi for mounting external shared file datastores? (Choose two.)

Select 2 answers
A.Hypertext Transfer Protocol Secure (HTTPS)
B.Secure File Transfer Protocol (SFTP)
C.Network File System (NFS) version 4.1
D.Network File System (NFS) version 3
E.Trivial File Transfer Protocol (TFTP)
AnswersC, D

Correct. NFSv4.1 with native multipathing is a supported file-level storage protocol in ESXi.

Why this answer

ESXi supports NFS version 3 and NFS version 4.1 for external file-level datastore mounting.

Practice this question →
59
Multi-Selectmedium

An administrator is designing a vSphere Foundation 9.0 environment and needs to configure vCenter Server Single Sign-On (SSO) identity sources. Which THREE identity source types are natively supported by vCenter Server SSO? (Choose three.)

Select 3 answers
A.Anonymous guest web tokens via public web scrapers
B.Local OS users (local vpxuser / local system accounts)
C.Local Bluetooth pairing with mobile smartphones
D.Active Directory (Integrated Windows Authentication or Active Directory over LDAP)
E.OpenLDAP directory services
AnswersB, D, E

Correct. Local accounts and local OS users are supported for bootstrapping and emergency access.

Why this answer

vCenter Server SSO supports Active Directory, OpenID Connect (OIDC), Open LDAP, and Local OS as identity sources.

Practice this question →
60
Multi-Selecteasy

An administrator is designing a vSphere Foundation 9.0 standard virtual switch (vSwitch) topology and needs to configure security policies for a port group. Which TWO security settings are available by default on a vSwitch port group? (Choose two.)

Select 2 answers
A.IP Source Guard Filtering
B.MAC Address Changes
C.Dynamic ARP Inspection Guard
D.Promiscuous Mode
E.BPDU Filter Activation
AnswersB, D

Correct. MAC Address Changes is a configurable security policy setting on vSwitch port groups.

Why this answer

The three configurable security settings on vSphere standard and distributed switch port groups are Promiscuous Mode, MAC Address Changes, and Forged Transmits.

Practice this question →
61
MCQmedium

An administrator is designing a vSphere Foundation 9.0 cluster and needs to configure network adapters for maximum fault tolerance and load distribution. When configuring an IP Hash load-balancing policy on a vSphere Distributed Switch, what is mandatory on the physical switch side?

A.Disable all spanning tree protocols across every switch in the entire enterprise data center.
B.Assign a distinct IP address to every individual physical cable connecting the NICs.
C.Configure the physical switch ports as unmanaged hub ports.
D.Configure a Port Channel (EtherChannel) on the physical switch ports connected to the ESXi uplinks.
AnswerD

Correct. IP Hash requires the physical switch to bundle the connected ports into an EtherChannel/Port Channel to aggregate traffic correctly.

Why this answer

Route Based on IP Hash requires an EtherChannel (Port Channel - LACP or static) configured on the physical switch ports connecting to the ESXi host uplinks.

Practice this question →
62
MCQeasy

An administrator is designing a vSphere Foundation 9.0 environment and needs to deploy the vCenter Server Appliance. Which deployment size should be selected for a medium enterprise environment managing up to 400 hosts and 4,000 virtual machines?

A.Select the appropriate deployment size (such as Small or Medium) matching the host and VM count guidelines in the VMware Configuration Maximums documentation.
B.Utilize the unconfigured default template without assigning any CPU or memory resources.
C.Deploy vCenter as a physical Windows Server 2025 cluster with SQL Server.
D.Always select the 'Tiny' deployment size to conserve disk space regardless of host counts.
AnswerA

Correct. Selecting sizing based on official configuration maximums ensures adequate CPU and memory allocation for vCenter.

Why this answer

VMware provides predefined deployment sizes (Tiny, Small, Medium, Large, Extra Large) for vCenter Server based on host and VM counts. Small or Medium fits this specification.

Practice this question →
63
MCQhard

An infrastructure architect is designing a secure vSphere Foundation 9.0 environment and needs to enforce a strict zero-trust posture for ESXi host shells. Which standard configuration should be applied to ESXi local and remote shells?

A.Configure SSH to permit root login using unencrypted password authentication over the public internet.
B.Disable ESXi Shell (TSM) and SSH (TSM-SSH) services by default, enabling them only temporarily during active troubleshooting.
C.Replace the ESXi shell binary with an unauthenticated Telnet daemon.
D.Grant permanent shell access to all domain user accounts.
AnswerB

Correct. Keeping administrative shells disabled reduces the host attack surface until needed for troubleshooting.

Why this answer

Best practice security hardening dictates that SSH (TSM-SSH) and the ESXi Shell (TSM) should be disabled when not actively in use, and idle timeout intervals should be enforced.

Practice this question →
64
MCQhard

An administrator is planning an upgrade of a vSphere Foundation 9.0 cluster that includes hardware accelerators (GPUs). When utilizing vSphere vMotion with NVIDIA vGPU enabled virtual machines, what architectural requirement must be verified?

A.The virtual machine must be powered off, migrated via cold migration, and powered back on.
B.The vMotion network must be configured to use Fibre Channel protocol encapsulation.
C.GPU acceleration must be completely uninstalled from the guest OS before initiating vMotion.
D.The destination ESXi host must possess matching physical GPU hardware models, compatible NVIDIA driver/GRID software versions, and available vGPU profile capacity.
AnswerD

Correct. vGPU vMotion requires identical or compatible GPU hardware and software profiles on both source and destination hosts.

Why this answer

Live vMotion of VMs with assigned NVIDIA vGPU devices requires compatible physical GPU hardware profiles, matching driver versions, and sufficient framebuffer resources on the destination host.

Practice this question →
65
Multi-Selecthard

An infrastructure architect is designing a vSphere Foundation 9.0 cluster using modern NVMe-oF (NVMe over Fabrics) storage. Which THREE network architectural requirements are critical for deploying NVMe-oF with RDMA (RoCEv2)? (Choose three.)

Select 3 answers
A.Lossless Ethernet fabric configuration utilizing Priority Flow Control (PFC) and Explicit Congestion Notification (ECN)
B.Routing all storage traffic through unencrypted public dial-up analog lines
C.Data Center Bridging (DCB) QoS configuration matching storage array traffic classes
D.Disabling all physical switch uplinks to enforce air-gapped isolation
E.Jumbo Frames (MTU 9000 bytes) enabled across all physical switches and ESXi VMkernel adapters
AnswersA, C, E

Correct. RoCEv2 requires a lossless network to prevent packet drops that degrade RDMA performance.

Why this answer

RoCEv2 requires a lossless physical Ethernet fabric (Priority Flow Control and Explicit Congestion Notification), MTU 9000 Jumbo Frames, and properly configured DCB (Data Center Bridging).

Practice this question →
66
Multi-Selectmedium

An enterprise architect is planning the network architecture for a vSphere Foundation 9.0 cluster running vSAN. Which THREE network design practices are recommended for vSAN VMkernel adapters? (Choose three.)

Select 3 answers
A.Configure dedicated physical NIC uplinks or use Network I/O Control (NIOC) to prioritize vSAN bandwidth.
B.Route all vSAN storage traffic through public unencrypted internet gateways.
C.Isolate vSAN traffic on a dedicated VLAN or separate physical network segment.
D.Disable TCP checksum offloading on all ESXi host physical network adapters.
E.Configure Jumbo Frames (MTU 9000) across the physical switch path and VMkernel adapters.
AnswersA, C, E

Correct. Reserving bandwidth via NIOC or dedicated uplinks ensures vSAN traffic is not starved by other workloads.

Why this answer

vSAN network best practices include isolating vSAN traffic on dedicated VLANs, using Jumbo Frames (MTU 9000), and configuring dedicated physical uplinks or NIOC shares to prevent contention.

Practice this question →
67
MCQeasy

An architect is planning the vSphere Distributed Switch (VDS) architecture for a new vSphere Foundation 9.0 deployment. What is the primary benefit of migrating from standard vSwitches to a VDS?

A.In-memory deduplication of guest operating system network packets.
B.Automatic conversion of virtual machine disk formats from VMDK to raw device maps.
C.Elimination of the requirement for physical top-of-rack Ethernet switches.
D.Centralized network management and configuration consistency across all hosts associated with the switch.
AnswerD

Correct. A VDS acts as a single virtual switch across multiple ESXi hosts, simplifying management and preventing configuration drift.

Why this answer

A vSphere Distributed Switch centralizes networking administration across all member ESXi hosts, ensuring consistent network configuration and enabling advanced features like port mirroring and NetFlow.

Practice this question →
68
MCQeasy

An IT architect is designing the time synchronization architecture for a vSphere Foundation 9.0 data center. Which standard protocol and hierarchy should be established across vCenter Server and ESXi hosts?

A.Deploy Precision Time Protocol (PTP) exclusively for basic log file timestamping.
B.Rely on the local CMOS hardware clock of each server without external timekeeping.
C.Configure the ESXi hosts to synchronize time exclusively from the guest operating system of running VMs.
D.Configure all ESXi hosts and vCenter appliances to synchronize time with authoritative local NTP servers.
AnswerD

Correct. Consistent NTP synchronization across management and hypervisors prevents authentication and clustering failures.

Why this answer

Network Time Protocol (NTP) must be configured pointing to reliable internal or external stratum time sources to ensure accurate logging and authentication tokens.

Practice this question →
69
MCQmedium

An IT architect is designing a backup solution for a vSphere Foundation 9.0 vCenter Server Appliance. Which recommended standard should be established for protecting the VCSA configuration?

A.Export the vCenter database tables manually using Microsoft Access via ODBC.
B.Take guest operating system level screenshots every 10 minutes using a desktop recorder.
C.Rely solely on physical top-of-rack switch configuration backups.
D.Configure scheduled File-Based Backup (Native Backup) from the VCSA management interface (Appliance Management UI / port 5480).
AnswerD

Correct. Native file-based backup is the VMware-supported standard method for backing up VCSA state and metadata.

Why this answer

vCenter Server Appliance Native Backup (file-based backup) scheduled regularly provides a fast and reliable method to back up VCSA configurations, certificates, and database metadata.

Practice this question →
70
MCQeasy

An administrator is planning the storage architecture for ESXi boot devices in a vSphere Foundation 9.0 cluster. According to modern design standards, which boot option is recommended for enterprise reliability and supportability?

A.Mirrored M.2 NVMe or SATA SSD devices (such as Dell BOSS cards or equivalent hardware RAID 1).
B.Network booting via PXE without any local storage media on the host.
C.Single unpartitioned USB flash drives plugged directly into internal motherboard ports.
D.Unprotected mechanical 2.5-inch SAS hard disk drives.
AnswerA

Correct. Mirrored enterprise SSDs provide fast boot times, logging capability, and high reliability.

Why this answer

SD cards and USB drives have deprecated support or face reliability concerns; enterprise M.2 NVMe drives or BOSS cards (Boot Optimized Storage Solution) are the modern standard.

Practice this question →
71
MCQmedium

An enterprise architect is planning a vSphere Foundation 9.0 upgrade and needs to ensure that vCenter Server supports Enhanced Linked Mode (ELM). What is the architectural requirement for ELM across multiple vCenter instances?

A.Cross-vCenter Enhanced Linked Mode requires all hosts to run identical CPU models from different vendors.
B.The underlying ESXi hosts must be managed by a single master physical blade chassis.
C.All participating vCenter Server appliances must belong to the same Single Sign-On (SSO) domain during or after deployment.
D.All vCenter instances must share the exact same external Microsoft SQL database instance.
AnswerC

Correct. Sharing an SSO domain links the vCenter instances together into Enhanced Linked Mode.

Why this answer

Enhanced Linked Mode allows administrators to view and manage multiple vCenter servers from a single interface, requiring them to be joined to the same vCenter Single Sign-On (SSO) domain.

Practice this question →
72
MCQeasy

An administrator is reviewing the physical networking design for a vSphere Foundation 9.0 cluster. What is the recommended standard for physical switch port configurations connecting to ESXi host network adapters that carry multiple VLANs (Trunk ports)?

A.Configure the physical switch ports as VLAN trunks allowing all required VLAN IDs required by the port groups.
B.Disable all VLAN tagging on physical switches and force flat Layer 2 flooding.
C.Configure the ports as restricted access ports carrying only VLAN 1.
D.Configure the physical switch ports in static 802.3ad link aggregation mode without LACP enabled on the vSwitch.
AnswerA

Correct. ESXi uplinks carrying multiple traffic types (management, vMotion, VMs, storage) require physical switch trunk configuration.

Why this answer

Physical switch ports connecting to ESXi uplinks carrying multiple VLANs must be configured as trunks allowing the required VLAN IDs, with a native VLAN configured correctly or untagged traffic handled according to security standards.

Practice this question →
73
Multi-Selecteasy

An administrator is planning an ESXi host installation in a vSphere Foundation 9.0 environment. Which TWO installation methods are officially supported for deploying ESXi hosts at scale? (Choose two.)

Select 2 answers
A.Interactive installation using physical media or virtual media (ISO mounting via IPMI/iLO/iDRAC).
B.Extracting ESXi binaries inside a Microsoft Windows 11 desktop application.
C.Automated scripted installation (kickstart / installation script configuration).
D.Direct manual compilation of the ESXi Linux kernel source code on the target server.
E.Copying files via unencrypted floppy diskettes.
AnswersA, C

Correct. Interactive installation via mounted ISO is standard for single host deployments.

Why this answer

ESXi hosts can be deployed using interactive installations (media/ISO) or automated scripted/PXE (Auto Deploy) installations.

Practice this question →
74
Multi-Selecthard

An infrastructure architect is designing a vSphere Foundation 9.0 cluster and evaluating advanced storage policies for vSAN. Which THREE data services are native to vSAN and configurable via storage policies? (Choose three.)

Select 3 answers
A.Deduplication and Compression
B.Automated replacement of failed physical server chassis motherboards
C.Encryption (Data-at-Rest Encryption)
D.Automatic physical fibre channel cable weaving
E.Checksum (automatic integrity checking and self-healing)
AnswersA, C, E

Correct. Deduplication and compression reduce storage capacity consumption on supported vSAN tiers.

Why this answer

vSAN storage policies natively support data deduplication and compression, encryption (at rest), and checksum verification.

Practice this question →
75
Multi-Selectmedium

An enterprise architect is planning a vSphere Foundation 9.0 deployment and evaluating storage architecture choices. Which THREE storage types are fully supported as primary datastores for ESXi hosts? (Choose three.)

Select 3 answers
A.NFS (Network File System) datastores
B.VMFS (Virtual Machine File System) on Fibre Channel or iSCSI block storage
C.Audio compact disc (CD-DA) tracks
D.FAT16 formatted floppy diskettes
E.vSAN (VMware vSAN software-defined storage datastores)
AnswersA, B, E

Correct. NFS file shares are fully supported as primary ESXi datastores.

Why this answer

ESXi supports VMFS (Block), NFS (File), and vSAN (Hyperconverged Software-Defined Storage) as primary datastore types.

Practice this question →
Page 1 of 2 · 93 questions totalNext →

Ready to test yourself?

Try a timed practice session using only IT Architectures Technologies Standards questions.

Start 20-question session