VCP Risk Assessment & Management 3

Question 1

Which risk management framework is most commonly referenced in enterprise VMware environments to structure risk assessment processes?

Accepted Answer

NIST SP 800-30

Answer

NIST SP 800-30 provides a structured guide for conducting risk assessments widely adopted in enterprise IT and cloud environments including VMware deployments.

Question 2

A company uses vSphere with NSX-T. Which risk does micro-segmentation primarily mitigate?

Accepted Answer

Lateral movement of threats between workloads in the same VLAN

Answer

NSX-T micro-segmentation creates granular firewall policies between VMs, preventing an attacker who compromises one VM from freely moving laterally to others.

Question 3

When calculating Annual Loss Expectancy (ALE) for a vSphere component failure, which two values are required?

Accepted Answer

Single Loss Expectancy (SLE) and Annual Rate of Occurrence (ARO)

Answer

ALE = SLE × ARO; SLE is the financial loss per incident and ARO is the expected frequency of the incident per year.

Question 4

In a vSphere high-availability design, which failure scenario does an 'Admission Control' policy primarily protect against?

Accepted Answer

Insufficient cluster capacity to restart VMs after multiple host failures

Answer

Admission Control reserves sufficient cluster resources so that if hosts fail, vSphere HA can successfully restart all affected VMs on remaining hosts.

Question 5

Which action BEST reduces the risk of a single point of failure in an NSX-T deployment?

Accepted Answer

Configuring an NSX Manager cluster with three nodes

Answer

A three-node NSX Manager cluster provides N+1 redundancy, ensuring the management plane remains available even if one manager node fails.

VCP - VMware Certified Professional Practice Test

VCP - VMware Certified Professional Practice Test

VCP Risk Assessment & Management 3