VCP VMware Certified Professional 2V0-21.20 Certification 5 — Questions and Answers
Question 1: Which vSphere 7 security feature restricts what a VM can do if it suspects it has been compromised or modified?
- vSphere VM Encryption
- Secure Boot for VMs (Correct answer)
- vSphere Trust Authority (vTA)
- VM Component Protection (VMCP)
Correct answer: Secure Boot for VMs
Secure Boot for VMs prevents a VM from booting if its boot components have been tampered with, enforcing firmware-level integrity.
Question 2: In vSphere 7, what does the 'VM Storage Policy' define for a virtual machine?
- The backup schedule and retention for the VM
- The storage capabilities required, such as RAID level or encryption, mapped to compliant datastores (Correct answer)
- The VMDK file format and provisioning type
- The datastore cluster load balancing threshold
Correct answer: The storage capabilities required, such as RAID level or encryption, mapped to compliant datastores
VM Storage Policies declare required storage capabilities (performance, availability, encryption) and vSphere automatically places VMs on compliant datastores.
Question 3: Which vSphere 7 HA admission control policy reserves a percentage of cluster resources to ensure failover capacity?
- Host failures cluster tolerates
- Percentage of cluster resources reserved as failover spare capacity (Correct answer)
- Specify failover hosts
- Fixed slot size policy
Correct answer: Percentage of cluster resources reserved as failover spare capacity
The 'Percentage of cluster resources reserved' admission control policy holds back a defined % of CPU and memory so VMs can be restarted after host failures.
Question 4: What is the function of vSphere Network I/O Control (NIOC) in a vSphere 7 environment?
- Encrypts all VM network traffic automatically
- Prioritizes network bandwidth among different traffic types such as vMotion and VM traffic (Correct answer)
- Aggregates multiple physical NICs into a single logical uplink
- Monitors network flow between VMs for security anomalies
Correct answer: Prioritizes network bandwidth among different traffic types such as vMotion and VM traffic
NIOC allows administrators to define bandwidth shares, reservations, and limits for different traffic types on a shared physical NIC.
Question 5: In vSphere 7, which log file on an ESXi host contains the VMkernel boot and driver loading messages?
- /var/log/hostd.log
- /var/log/vmkernel.log (Correct answer)
- /var/log/vpxa.log
- /var/log/fdm.log
Correct answer: /var/log/vmkernel.log
vmkernel.log records VMkernel and driver activity, making it the primary log for hardware, storage, and network troubleshooting.
Question 6: Which vSphere 7 feature automatically patches ESXi hosts while keeping the cluster online using sequential host maintenance?
- vSphere Auto Deploy
- vSphere Lifecycle Manager (vLCM) with cluster remediation (Correct answer)
- vSphere Update Manager baseline groups
- vSphere Host Profiles with compliance remediation
Correct answer: vSphere Lifecycle Manager (vLCM) with cluster remediation
vSphere Lifecycle Manager remediates entire clusters by placing hosts into maintenance mode sequentially while DRS migrates VMs to maintain availability.
Question 7: In a vSphere 7 environment, which command-line tool is used to manage ESXi hosts when vCenter Server is unavailable?
- esxcfg-nics
- ESXCLI (Correct answer)
- vCLI
- PowerCLI
Correct answer: ESXCLI
ESXCLI is a command-line framework available directly on the ESXi host (via SSH or DCUI) that allows host management independent of vCenter.
VCP VMware Certified Professional 2V0-21.20 Certification 5
Which vSphere 7 security feature restricts what a VM can do if it suspects it has been compromised or modified?