vmware passguide vcp-410 exam bundle€¦ · 09/01/2014 · planning, installing, and upgrading...

Vmware Passguide VCP-410 Exam Bundle

Number: VCP-410Passing Score: 800Time Limit: 120 minFile Version: 24.7

http://www.gratisexam.com/

Vmware VCP-410 Exam Bundle

Exam Name: Vmware VMware Certified Professional on VI4

For Full Set of Questions please visit: http://www.passguide.com/VCP-410.html

Sections1. 1. Planning, Installing, and Upgrading VMware ESX/ESXi2. 2. Configuring ESX/ESXi Networking3. 3. Configuring ESX/ESXi Storage4. 4. Installing and Configuring vCenter Server5. 5. Deploying and Managing Virtual Machines and vApps6. 6. Managing Compliance7. 7. Migrating, Backing Up, and Restoring Virtual Machines8. 8. Managing and Creating VMware Clusters9. 9. Alarm Management10.10. Performing Basic Troubleshooting

Exam A

QUESTION 1Which of the following are unique features of ESX (as opposed to ESXi)? (Choose two.)

A. ESX is an embedded architecture.B. The root account can be locked down.C. ESX has a smaller security footprint compared with ESXi.D. ESX supports the installation of third-party management and backup agents.E. ESX is managed with the Service Console, running Red Hat Enterprise Linux 5.2.

Correct Answer: DESection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:ESXi has the embedded architecture and supports the locked-down root account (notESX). ESXi also has a smaller security footprint as it does not include the Service Consolemanagement interface as ESX does.

QUESTION 2Which of the following cannot be done using the ESXi direct serial console interface? (Choose two.)

A. Creating virtual machinesB. Setting the root passwordC. Configuring lockdown modeD. Configuring the management networkE. Configuring VM virtual switches

Correct Answer: AESection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:The ESXi direct serial console has limited configuration functionality and, in general,does not include configuring any VM-related features.

QUESTION 3Which of the following should you back up on an ESX 3.5 server before performing anupgrade to ESX 4.0? (Choose two.)

A. VMFS SAN LUNsB. vCenter custom alarm scriptsC. Locally stored virtual machine filesD. System configuration files in the /etc directoryE. System configuration files in the /config directory

Correct Answer: CDSection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:Backing up an ESX server includes local system configuration files in the /etc directory,custom scripts stored on the ESX server, and locally stored VMFS file systems (includingvirtual machine files, templates, and ISO images). vCenter scripts would be backed up

as part of vCenter upgrading, not ESX upgrading, and the contents of SAN LUNs would bebacked up as a matter of course by the SAN administration team.

QUESTION 4Which of the following are not strategies employed by default in the ESX 4.0 ServiceConsole? (Choose two.)

A. setuid and setgid applications are kept to a minimum.B. Tripwire helps detect if the system has been compromised.C. The Service Console has the minimal required open network ports.D. All communications between ESX and any of its clients are encrypted.E. The installed Telnet and FTP services are disabled by default and must be manually

enabled.

Correct Answer: BESection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:Tripwire is not installed on an ESX server and its use is not supported by VMware.Telnet and FTP are not installed and, in fact, are not even present on the installation media.

QUESTION 5Which of the following describe valid options when setting up licensing on an ESX/ESXi 4.0 server? (Choose two.)


A. You must specify a license server.B. You can enter a 25-character license code.C. You can use a 30-day evaluation license.D. You can use a 60-day evaluation license.E. ESXi is not a licensed product and so there are no licensing options for ESXi.

Correct Answer: BDSection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:ESX/ESXi 4.0 now use a 25-character license code. Although a license server maybe specified for backward compatibility with ESX 3.x/VC 2.x, the license server is notrequired for 4.0 only environments. Finally, a 60-day evaluation license is available.

QUESTION 6After a standard installation, how can you access an ESX Service Console remotely?(Choose three.)

A. Using TelnetB. Via an SSH ClientC. Via a web browser

D. Using the vSphere (GUI) ClientE. Using Microsoft Remote Desktop

Correct Answer: BCDSection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:Remote access to the Service Console is fairly limited and only secure access isenabled by default. The use of Telnet is not supported (in fact, Telnet is not even included inthe installation CD/DVD), and there is no GUI desktop to connect to with Microsoft RDP.

QUESTION 7When you’re booting an ESX/ESXi server from a SAN, which of the following apply?(Choose two.)

A. Both ESX and ESXi support booting from an iSCSI SAN.B. An HBA that is supported for boot from SAN is required.C. The HBA BIOS must be properly configured to support boot from SAN.D. You must check the installation manual as installing a boot-from-SAN ESX server is

substantially different from installing to a local disk.E. The LUN must be masked so as to be presented to all ESX servers in the DRS/HA

cluster as ESX requires shared storage.

Correct Answer: BCSection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:Boot from SAN specifically requires supported HBA cards capable of booting from aSAN LUN, and the HBA card must be properly configured before installing ESX. ESXi doesnot support booting from iSCSI as of this writing. The installation of ESX is substantiallythe same whether booting from local disk or from a SAN LUN. Finally, the LUN should bemasked so that only the booting ESX server has access to it.

QUESTION 8Why would you create a nonroot account on an ESX server? (Choose two.)

A. Login to the root account is disabled by default.B. Logging in as root does not provide adequate auditing of who logged in.C. A nonroot account can be used to limit root access.D. Management of ESX requires a nonroot account be set up.E. A nonroot account is required to log in via the vSphere GUI Client.

Correct Answer: BCSection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:When a user logs in as root, there is no way to tell who logged in, making trackingchanges difficult. By limiting access to the su and sudo commands, you can limit root accessby making users log in as a nonroot account.

QUESTION 9Which of the following are not supported boot devices for a vSphere 4.0 ESX server?(Choose two.)

A. A SAN LUN on a supported SANB. An iSCSI LUN when using a software initiatorC. An iSCSI LUN when using a supported hardware initiatorD. A supported internal disk on the ESX serverE. A boot directory shared via NFS

Correct Answer: BESection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:An ESX server may be booted from a SAN LUN, an iSCSI LUN (when using a hardwareinitiator), and an internal disk on the ESX server itself. Both iSCSI software initiator and NFSshare points are not supported boot configurations on an ESX server.

QUESTION 10Which of the following describe techniques or VMkernel engineering design used to hardena vSphere 4.0 environment? (Choose three.)

A. VMkernel memory hardeningB. VMs share the same memory silos or worldsC. VMs are granted direct access to physical hardwareD. VMkernel module integrity via digital signaturesE. Resource limits and reservations as prevention against DoS attacks

Correct Answer: ADESection: 1. Planning, Installing, and Upgrading VMware ESX/ESXiExplanation

Explanation/Reference:VMkernel memory hardening is accomplished via randomization of memoryaddresses for driver modules as they are loaded (ASLR). In addition, VMkernel modulesare digitally signed and VM limits and reservations can serve as a cap on physical resourceconsumption. VMs do not share memory silos/worlds and are not granted direct access tothe server’s physical hardware.

Exam B

QUESTION 1Which distributed vSwitch port binding policy essentially mimics the dynamic binding of astandard vSwitch?

A. PrimaryB. StaticC. DynamicD. Ephemeral

Correct Answer: DSection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:Ephemeral binding on a distributed vSwitch is the same as the dynamic binding used onstandard vSwitches.

QUESTION 2What is the maximum number of ports you can have defined on a vNetwork standard switch?

A. 56B. 1016C. 1024D. 4088E. 4096


Explanation/Reference:Standard vSwitches allow for a maximum of 4088 ports (4096 – 8, with eight portsreserved for the VMkernel’s internal switch management use). Note the maximum fordistributed vSwitches is 4096.

QUESTION 3Which of the following is not a physical NIC mode when you are manually configuringfailover for a teamed vSwitch?

A. ActiveB. PassiveC. StandbyD. Unused

Correct Answer: BSection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:When manually configuring failover for a vSwitch, each physical NIC can be put intoone of three modes: Active (this physical NIC will be used for network communication),Standby (this NIC will be available for failover), and Unused (this NIC will not be used).Unused, in particular, is helpful when defined at the per-port group level.

QUESTION 4After converting a physical machine to a virtual machine, you are interested in using the oldphysical machine’s MAC address in the VM (say to ease the implementation of applicationlicensing). Which of the following security policies would you need to set?

A. Forged TransmitsB. MAC Address ChangesC. PromiscuousD. Allow Any MAC

Correct Answer: ASection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:Setting Forged Transmits to Allow is the only way to set a MAC address within a VMto any arbitrary MAC address (including reusing an old physical server’s MAC address).Mac Address Changes only allows changing the VM’s MAC address via its VMX fileand then with the restriction of only using the VMware approved MAC address range:0:50:56:00–3f:xx:yy (where the fourth octet must be in the range 00–3f, and xx and yycan be any hexadecimal numbers you choose).

QUESTION 5When would you choose Virtual Port ID-based load balancing on a teamed virtual switch?

A. You need to guarantee all virtual machines can individually have access to the combinedbandwidth on the teamed switch.

B. You don’t have any particular per-virtual machine bandwidth requirements and youwant to use the lowest-cost load-balancing policy.

C. You want to ensure virtual machines have the maximum opportunity to failover toredundant physical NICs.

D. You need to maximize the security of the virtual switch.

Correct Answer: BADBADADBAACDDAAACASection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:have a single virtual NIC) will only have access to a single physical NIC’s bandwidth at anymoment in time. To simultaneously utilize the bandwidth of multiple physical NICs, youwould have to use the IP-based load-balancing policy. The Virtual Port ID load-balancingpolicy also has the benefit of being the default and, generally, the lowest “cost” in terms ofVMkernel management effort.

QUESTION 6How would you successfully add a second, redundant management interface to anESXi 4.0 server?

A. Add a second physical NIC to the existing management interface.B. Create a new VMkernel port on a different vSwitch and configure it for management.C. Create a new Service Console virtual switch and configure it for management.D. Add a second VMkernel port group to the existing management virtual switch.

Correct Answer: ABSection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:For true redundancy, you would need to use a second physical NIC connected to a secondVMkernel virtual port group. Remember, ESXi servers do not use Service Console ports asESXi does not have a Service Console. Creating a second VMkernel port on a different vSwitchwould offer more redundancy than merely adding a second NIC to an existing virtual switch. asyou could configure a completely isolated redundant path, including a separate default gateway.

QUESTION 7You are interested in a virtual machine (hosting a web server, for instance) so you cantake advantage of the combined bandwidth of two 1 GB physical NICs connected to aproduction vSwitch. If this virtual machine has a single virtual NIC, which of the followingload-balancing policies should you set on the production vSwitch?

A. Virtual ID port basedB. Source MAC basedC. IP basedD. Round RobinE. FixedF. Most Recently Used

Correct Answer: CSection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:Of the three load-balancing vSwitch teaming policies (Virtual ID port based, sourceMAC based, and IP based), only IP based allows for using multiple physical NICs in a virtualmachine containing a single virtual NIC. Remember, the use of the IP-based load-balancingpolicy requires that proper trunking be configured on the physical switch as well.

QUESTION 8Which of the following is required to configure VMotion on a virtual switch?

A. Create a Service Console port group, assign a unique IP address and subnet number,and select the Use This Port Group For VMotion check box.

B. Create a VMkernel port group on the Service Console (network management) virtualswitch, and assign a unique IP address and subnet number.

C. Create a VMkernel port group on the virtual machine network, and assign a uniqueIP address and subnet number.

D. Create a VMkernel port group, assign a unique IP address and subnet number, andcheck the Use This Port Group For VMotion check box.


Explanation/Reference:VMotion requires a VMkernel port group with the IP address and subnet defined. Inaddition, the Use This Port Group For VMotion check box must be selected; otherwise, theVMkernel will not use it for VMotion purposes.

QUESTION 9How could you have a virtual machine utilize the bandwidth of two or more physical NICson a vSwitch?

A. Add additional virtual NICs to the virtual machine.

B. Use IP-based load balancing on the teamed virtual switch.C. Use virtual port–based load balancing on the teamed virtual switch.D. Use Source MAC–based load balancing on the teamed virtual switch.

Correct Answer: ABSection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:Adding a second virtual NIC to a virtual machine allows, with any of the load-balancingpolicies on a teamed switch, the virtual machine to utilize multiple physical NICs up to thenumber of virtual NICs you have added to the virtual machine. Using the IP-based load balancingallows for virtual machines with a single virtual NIC to use multiple physical NICS.

QUESTION 10Which of the following would not trigger the VMkernel to send out a Notify SwitchesRARP packet to a physical switch?

A. Powering on a VMB. Cold migration of a VMC. Hot migration of a VMD. Change in uplink status of a physical NIC

Correct Answer: BSection: 2. Configuring ESX/ESXi NetworkingExplanation

Explanation/Reference:If you have Notify Switches set (the default), the VMkernel will send anRARP packet to notify a physical switch whenever there is a need for the physical switchto update its internal MAC table. VMotion, powering on a VM, and physical NIC uplinkstatus changes can all result in this RARP notification being sent. With cold migration,the VM isn’t powered on; no packets will be sent from the VM until it is powered on, andso there is no need to notify the physical switch.

Exam C

QUESTION 1In which of the following cases can you get away with specifying (checking the box for)Read-Only when creating an NFS datastore on an ESX server? (Choose two.)

A. The NFS datastore will contain running VMs.B. The NFS datastore will contain Installer ISO images.C. The NFS datastore will be a secondary location for a VM’s VSWP file.D. The NFS datastore will contain templates (which are periodically updated).E. The NFS datastore will contain templates (which are not updated).

Correct Answer: BESection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:Any time you need to modify data on the NFS datastore, you should not check theRead-Only box. Further, if the NFS server is serving the datastore as read only (export fileproperties, for example), you should check the Read-Only box.

QUESTION 2Which of the following are techniques for masking LUNs in a Sphere 4.0 ESX environment?(Choose two.)

A. Setting a mask (permission list/ACL) on the fiber switchB. Setting a mask (permission list/ACL) on the SAN arrayC. Setting a mask (vCLI) on the ESX server via the vMA applianceD. Setting a mask (permission list/ACL) on the ESX server using the vSphere Client

Correct Answer: BCSection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:Setting a mask on the SAN and setting a mask on an ESX server via the vCLI areboth techniques for masking SAN LUNs in a vSphere 4.0 ESX environment.

QUESTION 3You have a single LUN on an iSCSI array. You have configured a virtual switch to supportmultipathing of VMkernel ports for use in a software-initiated iSCSI environment by havingthe virtual switch bound to two physical network adapters. Each VMkernel port is configuredto use a single physical adapter only, with a second adapter configured as Unused. Further,each VMkernel port uses a different adapter as its primary adapter. Which of the followingwould represent the VMkernel ports used in this switch?

A. vmhba32:C0:T0:L19 and vmhba33:C0:T0:L19B. vmhba32:C0:T0:L19 and vmhba32:C1:T0:L19C. vmhba32:C0:T0:L19 and vmhba32:C0:T1:L19D. vmhba32:C0:T0:L19 and vmhba32:C0:T0:L20

Review Questions 169

Correct Answer: BSection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:Binding individual physical outbound adapters to respective VMkernel ports in the samevirtual switch may result in different C values in the vmhba VMkernel port names. A singlevirtual switch will use a single vmhba instance (vmhba32, for example). Here, the multipathingis being configured on the virtual switch on the ESX server; the T (iSCSI target) isnot part of the answer. As the path is being set up for a single LUN, the L (LUN) numberwill be the same.

QUESTION 4What are the primary factors used to determine whether to use a software or a hardwareinitiator when setting up an iSCSI array on an ESX 4.0 server? (Choose two.)

A. The number of PCI slots you have in your physical serversB. The cost savings when using software initiatorsC. Whether you have 1 GB or 10 GB Ethernet NICs in your ESX serversD. The added performance of using hardware initiatorsE. The number of LUNs you are using

Correct Answer: BDSection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:The decision to go with a software or a hardware initiator is primarily one of costversus performance. Software initiators, especially in large deployments, can result in significantcost savings. Hardware initiators may result in increased data throughput to theSAN and reduced CPU load on the ESX servers as the hardware HBA offloads much of theiSCSI data packet processing.

QUESTION 5Which of the following SAN multipathing policies is typically preferred with the NativeMultipathing Plug-in (NMP) when using an active-passive SAN?

A. FixedB. IP AddressC. Round RobinD. Virtual PortE. Source MAC AddressF. Most Recently Used (MRU)

Correct Answer: FSection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:Most Recently Used is the policy typically used for active-passive arrays. Active-activearrays typically use Fixed or Round Robin as the multipathing policy of choice. Virtual Port,Source MAC Address, and IP Address are policies used on a virtual switch, not a SAN.

QUESTION 6In which of the following scenarios would resignaturing of a VMFS datastore be required?

A. An ESX server dies and needs to be replaced with a new server.B. The VMFS datastore is copied to a DR site; neither site will see the other site’s datastores.C. A VMFS is a snapshot of an existing volume, and both the original and the snapshot

will be visible to the same ESX server simultaneously.

D. A VMFS is a snapshot of an existing volume, and the original and snapshot will neverbe visible to the same ESX server simultaneously.170 Chapter 3 n Configuring ESX/ESXi Storage

Correct Answer: CSection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:In general, resignaturing is required when a volume is duplicated and both the originaland copy are presented to the same server at the same time. In this case—presuming thecopy is identical and using the same SCSI and VMFS internal identifiers—resignaturingkeeps the server from confusing the original with the copy.

QUESTION 7Which of the following is a valid IQN name for an ESX server?

A. iSCSI.1998-01.com.vmware.esx29-7c79e548B. iqn.1998-01.com.vmware:esx29-7c79e548C. iSCSI-iqn.com.vmware.1998-01:esx29-7c79e548D. iqn.1998-01.vmware.com:esx29-7c79e548E. iSCSI.vmware.com.1998-01.esx29-7c79e548


Explanation/Reference:Valid IQN names are of the form iqn.yyyy-mm.naming-authority:unique-name. Thenaming authority is in reverse DNS domain name notation. The unique name, by default,contains a unique hex string at the end.

QUESTION 8Which of the following SAN multipathing policies is typically preferred with the NativeMultipathing Plug-in (NMP) when using an active-active SAN? (Choose two.)

A. FixedB. IP AddressC. Round RobinD. Virtual PortE. Source MAC AddressF. Most Recently Used (MRU)

Correct Answer: ACSection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:Active-active arrays typically use Fixed or Round Robin as the multipathingpolicyof choice. Virtual Port, Source MAC Address, and IP Address are policies used on avirtual switch, not a SAN. Most Recently Used is the policy typically used for activepassivearrays.

QUESTION 9Which of the following are not supported features when using NFS datastores on an

ESX 4.0 server? (Choose two.)

A. 10 GB Ethernet NIC cardsB. TCP Offload Engine (TOE)C. Jumbo framesD. Linux NFS servers (you must use an NFS NAS appliance)E. Teamed virtual NICs


Explanation/Reference:The presence of TOE on a NIC, although it won’t break an NFS datastore implementation,is not necessary and TOE will not be used.

QUESTION 10Which of the following are true about CHAP authentication of an iSCSI array on anESX 4.0 server? (Choose two.)

A. Only one-way CHAP authentication is supported.B. Unique per-target CHAP passwords are supported.C. Even if not used, iSCSI arrays must support CHAP authentication.D. The ESX administrator can select from four different CHAP security levels.E. CHAP passwords can be passed to and from the array on a completely open/unencrypted

network.

Correct Answer: BDSection: 3. Configuring ESX/ESXi StorageExplanation

Explanation/Reference:Two-way CHAP authentication is now supported in ESX 4.0. iSCSI arrays are onlyrequired to support CHAP authentication if the administrator chooses the Use CHAP securitylevel. Finally, once a CHAP password has been selected on either the array or ESX side,it will need to be copied to the other side in some manually secure way like a phone call,walking it down the hall, and so forth. CHAP provides no mechanism for transmitting thepassword over an open network securely.

Exam D

QUESTION 1If you want to remove the Getting Started tabs from the display shown here, what wouldyou do?

Exhibit:

A. Change a vCenter server preference.B. Change an ESX server preference.C. Nothing; the Getting Started tabs only display when you are in evaluation licensing

mode and automatically disappear when you properly license vCenter.

D. Change a vSphere Client preference.E. Nothing; the Getting Started tabs cannot be removed.

Correct Answer: DSection: 4. Installing and Configuring vCenter ServerExplanation

Explanation/Reference:The display of the Getting Started tabs is a preference set in the vSphere Client GUI.Each client user, therefore, can show or hide these tabs.

QUESTION 2Which of the following solutions will not provide high availability or failover in the event ofa vCenter server crash?

A. vCenter Server HeartbeatB. VMware FTC. VMware HAD. MSCSE. Cold cloning the vCenter server

Correct Answer: BSection: 4. Installing and Configuring vCenter ServerExplanation

Explanation/Reference:VMware FT, as of this writing, only supports single vCPU VMs and does not supportphysical servers at all. So, even assuming vCenter is running on a VM, FT won’t workbecause vCenter requires a minimum of two CPUs.

QUESTION 3Which of the following is supported across multiple datacenter objects in the vCenterinventory?

A. VMotionB. HAC. Delegation of controlD. Deploying VMs via templatesE. FTF. Distributed virtual switches


Explanation/Reference:Deploying a VM using templates is the only option supported across multiple datacenters.Datacenters and their restrictions are important in the design of your vCenter inventory.

QUESTION 4Which of the following are two reasons to join two vCenter servers via Linked Mode?

A. You want to be able to view inventory information across vCenter instances.B. You want to use HA to fail over to an ESX host in another vCenter.C. You want to manage vCenter 2.0 from a vCenter 4.0 server.

D. You want to exceed the maximum number of ESX hosts manageable by a singlevCenter instance.

E. You need to connect 20 vCenter instances together.

Correct Answer: ADSection: 4. Installing and Configuring vCenter ServerExplanation

Explanation/Reference:VMware HA is not supported across multiple vCenter instances via Linked Mode.Linked Mode requires vCenter 4.0 or better and supports a maximum of 10 linkedvCenter instances.

QUESTION 5A user has the No Access role assigned to the root object in the vCenter inventory. Furtherdown in the inventory, this same user has the Administrator role assigned to a datacentercalled QA. Assuming these are the only two permissions related to this user, when this userlogs into vCenter, what level of access will he have in the QA datacenter?

A. None, because of the No Access permissionB. Administrator-level access, because of the Administrator roleC. He will not be able to log in because No Access at the root object prevents login access.D. He will have Administrator access on the entire inventory as Administrator permission

takes precedence over No Access permission.E. vCenter will not allow you to define these sorts of conflicting permissions.



Explanation/Reference:With conflicting user permissions defined at different levels in the inventory hierarchy,the lower-level permission overrides any higher-level permission. This is the case whether thelower-level permission grants more or less access than the upper-level permission. Grant conflictingpermissions with care!

QUESTION 6UserA is a member of two groups, GroupA and GroupB. UserA has no user-level permissionsassigned in the vCenter inventory. Both GroupA and GroupB have permissions assigned tothe same vCenter inventory object; GroupA is assigned the VM Power User role and GroupBthe Read Only role. Which of the following describes what UserA will be able to do with theinventory object these group permissions have been assigned to?

A. UserA will get the least permissions: GroupB, Read Only.B. UserA will get the most permissions: GroupA, VM Power User.C. UserA will get the logical sum of the permissions of both GroupA and GroupB.D. You cannot apply two different group permissions on the same vCenter inventory object.E. UserA will not be able to log in as conflicting permissions are resolved by locking out a

user’s access.

Correct Answer: CSection: 4. Installing and Configuring vCenter ServerExplanation

Explanation/Reference:

When you have two groups, each with different permissions applied to the same vCenterinventory object, the permissions are logically added.

QUESTION 7Which of the following represents the maximum number of registered VMs supported byvCenter 4.0? (Choose two.)

A. 200 when using a 32-bit OSB. 300 when using a 64-bit OSC. 2,000 when using a 32-bit OSD. 3,000 when using a 64-bit OSE. 3,000 when using a 32-bit OSF. 4,500 when using a 64-bit OS


Correct Answer: EFSection: 4. Installing and Configuring vCenter ServerExplanation

Explanation/Reference:vCenter 4.0 supports 3,000 registered VMs when vCenter is running in a 32-bit versionof Windows and 4,500 registered VMs when running in a 64-bit version of Windows. The 200and 300 numbers represent the maximum number of ESX hosts supported by vCenter 4.0, andthe other large numbers represent the maximum number of powered-on VMs supported byvCenter 4.0.

QUESTION 8Which of the following are not tasks that can be scheduled in vCenter?

A. Implementing VMotionB. Putting an ESX server into maintenance modeC. Changing resource pool settingsD. Changing the power state of a VME. Scanning VUM


Explanation/Reference:vCenter Server allows you to schedule changing a VM’s power state, cloning a VM,deploying a VM, migrating a VM (using VMotion), creating a VM, making a snapshot ofa VM, adding an ESX server to the inventory, changing a VM or resource pool’s settings,and checking ESX host profile compliance.

QUESTION 9Which of the following represents the maximum number of ESX hosts that can be managedby vCenter 4.0? (Choose two.)

A. 200 when using a 32-bit OSB. 300 when using a 32-bit OSC. 200 when using a 64-bit OSD. 300 when using a 64-bit OSE. 2,000 when using a 32-bit OSF. 3,000 when using a 64-bit OS

Correct Answer: ADSection: 4. Installing and Configuring vCenter ServerExplanation

Explanation/Reference:vCenter 4.0 can manage 200 ESX hosts when vCenter is running in a 32-bit version ofWindows and 300 ESX hosts when it is running in a 64-bit version of Windows. The 2,000and 3,000 figures represent the maximum number of powered-on VMs that vCenter supports.

QUESTION 10How is the downloading and installation of vCenter Server plug-ins controlled?

A. You define a custom role in vCenter with permissions to download and install vCenterServer plug-ins.

B. You must be a member of the VMAdministrators group.C. Permissions are set in the Plug-in Manager GUI.D. You need Administrator rights to the local machine where the vSphere Client is running.E. You must log into the vCenter server as Administrator.F. You must be a domain administrator.


Explanation/Reference:There is no mechanism at this time for restricting who can install plug-ins. Localadministrators on the system running the vSphere Client GUI are allowed to install andmanage plug-ins. Although being a domain administrator gives you the ability to manageplug-ins, it is not a requirement as long as you have local administrator privileges.

Exam E

QUESTION 1Which of the following can be dynamically removed from a running VM?

A. CD-ROM devicesB. Floppy devicesC. Virtual NIC adapter connectionsD. Virtual disksE. Serial and parallel port connections

Correct Answer: CSection: 5. Deploying and Managing Virtual Machines and vAppsExplanation

Explanation/Reference:Although vSphere has added support for hot-adding many new devices (RAM, CPU,disk), there is, in general, no support for hot removal of devices, with the notable exceptionof the connections used by virtual NICs.

QUESTION 2How often does Guided Consolidation check for new or missed domains?

A. Every 5 minutesB. Once an hourC. Once every 12 hoursD. Once every 24 hoursE. Once a weekF. Never

Correct Answer: DSection: 5. Deploying and Managing Virtual Machines and vAppsExplanation

Explanation/Reference:Guided Consolidation checks for new domains every 24 hours and rescans for new ormissing hosts every 30 minutes.

QUESTION 3Which of the following is the main configuration file for a VM named Test VM?

A. Test VM.configB. Test VM.vmdkC. Test VM.confD. Test VM.iniE. Test VM.vmxF. Test VM.log

Correct Answer: ESection: 5. Deploying and Managing Virtual Machines and vAppsExplanation

Explanation/Reference:The VMX file is the main configuration file for a VM containing the VM’s “parts list,”guest OS–specific configuration parameters, performance parameters, and so forth.

QUESTION 4What is the maximum number of direct path devices that can be added to a vSphere 4 VM?

A. 1B. 2C. 4D. 8E. 10F. 16


Correct Answer: BSection: 5. Deploying and Managing Virtual Machines and vAppsExplanation

Explanation/Reference:This maximum of two direct path devices includes any combination of NIC and/orstorage adapters.

QUESTION 5Which of the following are not features of thin-provisioned virtual disks?

A. Disks are dynamically shrunk when possible.B. Physical disk space is consumed as needed.C. Thin provisioning is transparent to the VM.D. Thin disks are dynamically defragmented as they grow.E. Thin disks allow for physical disk overcommitment.

298 Chapter 5 n Deploying and Managing Virtual Machines and vApps

Correct Answer: ADSection: 5. Deploying and Managing Virtual Machines and vAppsExplanation

Explanation/Reference:Thin provisioning supports dynamic growing of the underlying physical file ondemand but not dynamic shrinking. In this case, Storage VMotion could be leveraged toeffectively squeeze out unused space on a thin-provisioned virtual disk. VMware providesno fragmentation features in either thick- or thin-provisioned virtual disks.

QUESTION 6You are trying to clone a VM and the clone operation is failing. Which of the following is apossible reason for the failure?

A. You cannot clone Linux VMs.B. The VM has an open task in vCenter.C. The VM is at version 4 hardware.D. You have not installed the necessary Sysprep files onto the vCenter server.E. You need administrator privileges on the VM being cloned.

Correct Answer: BSection: 5. Deploying and Managing Virtual Machines and vAppsExplanation


Cloning will not work with a VM that has an existing snapshot. In general, snapshotsare best removed as soon as they are no longer required.

QUESTION 7Which of the following statements about templates are not true?

A. With vSphere 4, you can now convert a running VM to a template.B. Templates are not recognized by standalone ESX/ESXi servers as they are a vCenter

feature.C. A template’s virtual disks can be in “thick” or “thin” (compact) format.D. A template can be recognized at the file level as its configuration filename ends in

.vmtx (instead of .vmx as for a VM).E. A template must have VMware Tools installed.


Correct Answer: AESection: 5. Deploying and Managing Virtual Machines and vAppsExplanation

Explanation/Reference:There is no support for (nor will the GUI interface even let you try to) convert a runningVM to a template. You can convert a VM to a template without installing VMware Tools intothe VM.

Exam F

QUESTION 1What is the correct order of operations when using host profiles?

A. Create reference profile, edit profile, attach profile, apply profile, check for complianceB. Check for compliance, create reference profile, attach profile, apply profileC. Install reference host, create reference profile, attach profile, check for compliance,

apply profileD. Import profile, create reference host, apply profile, attach profile, check for complianceE. Install reference host, create reference profile, attach profile, apply profile, check for

compliance

Correct Answer: CSection: 6. Managing ComplianceExplanation

Explanation/Reference:You must have an installed ESX server (the reference host) to start the process. From thisserver a reference profile is generated and attached to a vCenter inventory object (an ESXserver or a cluster). The ESX server(s) is scanned for compliance, and if desired, you canthen apply the profile to the ESX server(s).

QUESTION 2Which of the following is not a valid VUM setting?

A. Take a snapshot of a VM before patching and keep it indefinitelyB. Take a snapshot of a VM before patching and keep for a fixed period of timeC. Power off VMs on an ESX server if the ESX server fails to go into Maintenance modeD. Automatically rollback a snapshot after a fixed period of timeE. Suspend VMs on an ESX server if the ESX server fails to go into Maintenance mode

Correct Answer: DSection: 6. Managing ComplianceExplanation

Explanation/Reference:VUM can take snapshots before patching VMs and keep them indefinitely or for a fixedperiod of time. VUM can either power off or suspend VMs on ESX servers that fail to gointo Maintenance mode (typically because one or more VMs fail to properly move, usingVMotion, to another ESX server). Although you can manually roll back a VUM snapshot,VUM will not automatically do so.

QUESTION 3Which of the following describes how VUM handles ESXi updates?

A. VUM does not update ESXi. You should manually save the ESXi settings, install froman updated ISO installer, and restore the saved settings.

B. ESXi updates are installed by merging patches from an update boot image with theESXi active boot image. The old pre-patch boot image becomes the standby bootimage.

C. VUM places the ESXi server in snapshot mode, applies the updates, and performs anauto-rollback if the update fails.

D. The ESXi server is removed from the DRS/HA cluster during patching and readdedonly if the patch was successfully applied.

E. VUM mounts the ESXi system disk as an image file, applies the patch to the mounted

image file, tests the patch, and reboots the ESXi server only if the patch is successful.

Correct Answer: BSection: 6. Managing ComplianceExplanation

Explanation/Reference:ESXi servers maintain an active (for the current boot) and standby (for rollback) systemboot image. VUM merges patches with (older) standby image, creating a new active bootimage. If anything goes wrong, this provides you the opportunity to boot the old standbyimage and have a working system.

QUESTION 4Which of the following statements about VUM baselines is true?

A. You should craft baselines carefully as you can only attach one to any given vCenterinventory object.

B. You can attach baselines to just about any inventory object in either the Hosts AndClusters or VMs And Templates views.

C. Baselines operate more efficiently when you combine VM and ESX patches in a singlebaseline.

D. Any given baseline can only be attached to a single vCenter inventory object.E. The default built-in baselines are not functional but only serve as templates for creating

your own baselines.

Correct Answer: BSection: 6. Managing ComplianceExplanation

Explanation/Reference:Multiple baselines can be attached to any appropriate vCenter inventory object. Baselinescan be attached to most objects in the vCenter inventory, including individual VMs, individualESX hosts, folders, clusters, resource pools, data centers, and so forth. Individual baselinesconsist of VM or ESX patches but not both. Baselines can be attached to as many vCenterinventory objects as you need, and the default, built-in baselines are entirely functional.

QUESTION 5Which of the following functions cannot be performed by VUM? (Choose two.)

A. Check a VM’s hardware versionB. Install VMware ToolsC. Put an ESX server into Maintenance modeD. Apply new virtual switch definitionsE. Change ESX firewall port settings

Correct Answer: DESection: 6. Managing ComplianceExplanation

Explanation/Reference:VUM can check VMs to see if they are at the latest VM hardware version (7.0), caninstall the latest version of VMware Tools, and will put an ESX server into Maintenancemode (so as to evacuate all VMs off the ESX server) when patching an ESX server. The lasttwo answers are functions of host profiles, not VUM.

QUESTION 6

Which of the following are not required for proper VUM operation?

A. vCenterB. VUM databaseC. Download serverD. VUM server access to the InternetE. VUM plug-in


Explanation/Reference:The VUM server does not require access to the Internet, but the download server does.Even if the download server happens to be the same as the VUM server, it is still technicallythe download server, which needs Internet access (for accessing the patch download serversat VMware and Shavlik).

QUESTION 7Staging VUM patches for ESX servers requires which of the following?

A. ESX 2.5 Update 2 or betterB. ESX 3.0 or betterC. ESX 3.5 Update 4 or betterD. ESX 4.0 or betterE. ESX 5.0 or better


Explanation/Reference:Patch staging was introduced with ESX 4.0.

QUESTION 8Which databases are supported for a VUM server? (Choose three.)

A. MySQLB. SQLC. SybaseD. OracleE. SQL Server Express

Correct Answer: BDESection: 6. Managing ComplianceExplanation

Explanation/Reference:VUM is only supported with Oracle, SQL, or SQL Server Express (with the correctand supported versions, of course). The VCP test notwithstanding, you should always checkthe manual to make sure you are looking at the list of currently supported databases.

QUESTION 9Which of the following describe features of staging patches for ESX/ESXi hosts?(Choose three.)

A. Patches must be staged for security reasons.B. Staging patches can speed up remediation.C. Staging patches can be done during normal ESX/ESXi operations.D. Staging patches reduces the amount of disk space required to store patches on the

download patch server.E. Maintenance mode downtime is reduced when staging patches.F. Staging patches eliminates the need for the download server to have an Internet

connection.

Correct Answer: BCESection: 6. Managing ComplianceExplanation

Explanation/Reference:Staging (copying patches from the download server to an ESX/ESXi server) duringnormal ESX/ESXi operations time speeds up remediation and reduces Maintenance modedowntime. There is no security requirement or benefit in staging patches. During the stagingprocess, disk storage for the patches is temporarily increased as the patch resides on both thedownload server and the ESX server being patched. As the stages patches come immediatelyfrom the download server, the download server still must be able to contact the patch serverson the Internet.

QUESTION 10Which of the following is vSphere 4.0’s VUM not capable of doing? (Choose two.)

A. Patching ESXi hostsB. Patching ESX 2.5 hostsC. Patching ESX 3.5 hostsD. Patching ESX 4.0 hostsE. Upgrading an ESX 2.5 host to ESX 4.0F. Upgrading an ESX 3.5 host to ESX 4.0

Correct Answer: BESection: 6. Managing ComplianceExplanation

Explanation/Reference:VUM will do all of these except patching ESX versions earlier than 3.5 and so, byimplication, will not upgrade an ESX 2.5 host to ESX 4.0. If you manually upgrade anESX 2.5 host to ESX 3.5, then VUM can upgrade that host to ESX 4.0

QUESTION 11When remediating ESX hosts where you have multiple patches to install and there is a conflictof some sort, which of the following applies? (Choose two.)

A. If a patch in the baseline depends on another patch not in the baseline, you will beasked to install the other, required patch, first.

B. If two patches conflict, the oldest patch is installed first and the newer patch isinstalled last, guaranteeing the newer patch contents override the older patch contents.

C. If there are several versions of the same patch, VUM will install only the most recent(i.e., latest) version.

D. If a patch is marked as “obsolete,” the baseline will remove the patch.E. If multiple patches conflict but another patch resolves the conflict, VUM will install

the patches in the correct sequence to resolve the conflict.

Correct Answer: CESection: 6. Managing ComplianceExplanation

Explanation/Reference:If a patch depends on another patch, VUM will automatically install the other requiredpatch as well. If two patches conflict (and there is not another patch that resolves the conflict),neither of them is installed. VUM is intelligent enough to install only the most recent versionwhen multiple versions of the same patch are present.

Exam G

QUESTION 1Which of the following vCenter inventory items cannot be set as a backup object with theVDR appliance?

A. Individual VMsB. FoldersC. Resource poolsD. DRS/HA clustersE. Datacenters

Correct Answer: DSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:The VDR appliance can be set to back up VMs in a variety of vCenter inventory objects,but DRS/HA clusters are not included in the vCenter inventory objects the VDR appliancewill back up.

QUESTION 2Which of the following would prevent a successful Storage VMotion?

A. You are attempting to move the VM’s files from a fiber SAN to the ESX server’s localstorage.

B. The VM is running Linux as its guest OS.C. The ESX server is in the 60-day evaluation licensing mode.D. VMware Tools are being installed on the VM.

Correct Answer: DSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:Storage VMotion is not supported when VMware Tools are being installed into a VM.Storage VMotion works, in general, with any supported guest OS, with any supportedstorage, and with the 60-day evaluation license.

QUESTION 3You would like to create a backup of the important configuration changes made on an ESXiserver. Which of the following would best help accomplish this?

A. Install a supported backup agent in a VM.B. Install a supported backup agent in the Service Console.C. Use the vMA appliance to back up the ESXi configuration.D. Use VMware Consolidated Backup.E. Use the VMware Data Recovery Manager plug-in.F. Create a vCenter template.

Correct Answer: CSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation


The vMA appliance vicfg-cfgbackup command can both create a backup of an ESXiserver’s configuration and restore the configuration. ESXi does not support installedbackup agents as it has no Service Console interface. VMware Consolidated Backup andData Recovery are used to back up and restore VMs, not ESX servers. Finally, templates areVM-only features and so would not work for backing up ESX/ESXi servers.

QUESTION 4You have just purchased a new SAN to replace your old, aging SAN. Which of the followingwould be the most efficient way to move running VMs from the old SAN to the new SAN?

A. Storage VMotionB. Cold migrationC. VMotionD. SAN LUN replicationE. Manually copying the VM’s files to the new SAN LUN

Correct Answer: ASection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:Storage VMotion can move a running VM’s files from the old SAN to the new SANwith minimal (essentially zero) disruption to the VM. Cold migration requires the VM bepowered off, VMotion only moves the VM’s memory state (and so would not be helpful inmoving to a new SAN), SAN LUN replication would not update the VM’s vmdk and otherinfrastructure files correctly, and you would not be able to manually copy a running VM’sfiles due to vmdk file locking.

QUESTION 5Which of the following represent potential negative aspects of having a VM in snapshotmode? (Choose two.)

A. Snapshots can prevent VMotion migrations.B. Snapshots can prevent cold migrations.C. Snapshots can prevent VCB from backing up a VM.D. In time, the VM’s disk I/O performance can suffer.E. A VM with snapshots cannot be cloned.

Correct Answer: CDSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:Snapshots are not compatible with VCB because VCB needs to take its own (exclusive)snapshot. Snapshots are not done for disk performance reasons—when the snapshots getlarge, I/O performance can suffer.

QUESTION 6You have purchased the Advanced Edition vSphere license. Which of the followingmigration technologies can you use to move a VM or its files? (Choose two.)

A. VMotionB. Storage VMotionC. Cold migrationD. Template deploymentE. Storage Migration

Correct Answer: ACSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:Advanced Edition licensing supports both VMotion and cold migration. StorageVMotion requires Enterprise Edition or Enterprise Plus Edition licensing. Template deploymentis not considered a method of moving a VM or its files, and VMware has no technologyknown as “Storage Migration.”

QUESTION 7You would like to create a backup of the important configuration changes made on an ESXserver. Which of the following would best help accomplish this?

A. Install a supported backup agent in a VM.B. Install a supported backup agent in the Service Console.C. Use VMware Consolidated Backup.D. Use the VMware Data Recovery Manager plug-in.E. Create a vCenter template.

Correct Answer: BSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:As ESX servers still have a Service Console for management, a backup agent can beinstalled in the Service Console, facilitating backing up of either the entire Service Console(which includes all the ESX configuration files) or any set of important files you desire.VMware Consolidated Backup and Data Recovery are used to back up and restore VMs,not ESX servers. Finally, templates are VM-only features and so would not work for backingup ESX/ESXi servers.

QUESTION 8The VMware Data Recovery (VDR) appliance has which of the following requirements?(Choose two.)

A. The VDR is a stand-alone appliance and needs no other virtual infrastructure support.B. vCenter 4.0 and the vSphere ClientC. vCenter 2.0 or greater and the vSphere ClientD. ESX/i 4.0E. ESX/i 3.5 or greater

Correct Answer: BDSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:The VDR appliance requires vCenter 4.0 and ESX/i 4.0 or later.

QUESTION 9You are moving a VM’s files and ESX server simultaneously using cold migration. Whenyou work through the Cold Migration wizard, which of the following options are not presented?(Choose two.)

A. Selecting the destination ESX server

B. Selecting the destination datastoreC. Selecting the destination DRS/HA clusterD. Changing the VM’s disk format from thick to thinE. Changing the VM’s virtual switchF. Specifying the VM power-on after the cold migration

Correct Answer: EFSection: 7. Migrating, Backing Up, and Restoring Virtual MachinesExplanation

Explanation/Reference:When simultaneously changing ESX server and storage via cold migration, you canspecify (obviously) the destination ESX server and VM datastore. You can also specify adestination DRS/HA cluster and disk format change (from thin to thick or vice versa). Noform of migration allows you to change the VM’s virtual switch or have the VM power onafter the migration has completed.

Exam H

QUESTION 1Which resource pool setting would be most closely associated with a service levelagreement (SLA)?

A. ReservationB. LimitC. SharesD. Expandable

Correct Answer: ASection: 8. Managing and Creating VMware ClustersExplanation

Explanation/Reference:The reservation is a minimum guarantee and so most closely ties to SLAs. Since theLimit value is a best-effort delivery mechanism and shares only have meaning in the contextof a VM or resource pool contending for resources, they would not be the best mechanismfor providing an SLA guarantee. Making a resource pool expandable, although it allowsfor the “borrowing” of resources from a parent pool, is no guarantee the resources will beavailable at the time of borrowing.

QUESTION 2Which of the following VMware technologies would help you maximize VM uptime in theevent of a catastrophic ESX server hardware failure?

A. VMotionB. Distributed Resource Scheduler (DRS)C. VMware High Availability (HA)D. Storage VMotionE. Resource pools

Correct Answer: CSection: 8. Managing and Creating VMware ClustersExplanation

Explanation/Reference:VMotion, DRS, and Storage VMotion are all anticipatory technologies. You performthem ahead of an anticipated downtime/maintenance window. HA reacts to ESX serverfailures, rebooting VMs quickly. Resource pools are used to assign resources to VMs in afair manner and are not directly involved with hardware failures.

QUESTION 3Distributed Power Management (DPM), before making a decision to take a host out ofStandby mode, averages cluster resource use over what period of time?

A. 5 minutesB. 20 minutesC. 30 minutesD. 1 hourE. You have to configure the parameter value first.


Explanation/Reference:The /etc/HA_HOSTS carries the IP addresses of all ESX HA network interfaces in theHA cluster and is used by the HA hosts to implement redundant heartbeat. The presenceof this file guarantees heartbeat will work even in the event of DNS failure.

QUESTION 4Which of the following does not apply to HA VM monitoring?

A. VMware tools are not required in the VM for HA to monitor individual VMs.B. You can configure the failure interval: how long a VM must be nonresponsive before

being rebooted.C. You can configure the number of times per hour HA will attempt to reset a nonresponsive

VM.D. VMs can have their restart priority (high, medium, low, disabled) individually set.


Explanation/Reference:VMware tools are required in a VM for HA to monitor them individually.

QUESTION 5An ESX server in an HA cluster finds itself isolated from the rest of the HA cluster. What isthe default isolation response?

A. Do nothingB. VMotion VMs to other ESX serversC. RebootD. Power down all VMs

Correct Answer: DSection: 8. Managing and Creating VMware ClustersExplanation

Explanation/Reference:The default isolation response is to power down all VMs so that the remaining ESX serverscan successfully restart them. If the VMs are not powered down, other ESX servers would notbe able to restart them as the running VMs’ virtual disk files remain locked.

QUESTION 6Which of the following protocols are used by DPM to manage the cycling of hosts into andout of Standby mode?

A. PowerSaveB. IPMIC. WOLD. DiPME. iLOF. ESave

Correct Answer: BCESection: 8. Managing and Creating VMware ClustersExplanation

Explanation/Reference:DPM can utilize IPMI (Intelligent Platform Management Interface), WOL(Wake-on-LAN), or iLO (Integrated Lights-Out) technologies.

QUESTION 7What is a cluster’s target utilization used by DPM?

A. 50 percentB. 63 percentC. 67 percentD. 75 percent

Correct Answer: BSection: 8. Managing and Creating VMware ClustersExplanation

Explanation/Reference:The average overall load on a cluster is targeted at 63 percent by the Distributed PowerManagement engine. If the cluster load falls significantly below this value, hosts may be putinto Standby mode; if the load rises significantly above this value, hosts may be pulled backout of Standby mode.

QUESTION 8What are the three admission control policies that can be used with an HA cluster?

A. Host Failures Cluster ToleratesB. Number Of VMs ToleratedC. Percentage of Cluster Resources Reserved As Failover Spare CapacityD. Specify A Failover Host

Correct Answer: ACDSection: 8. Managing and Creating VMware ClustersExplanation

Explanation/Reference:VMware HA currently has three Admission Control polices. Each one has a differentmethod for reserving spare capacity in case of a host failure. If using Host Failures ClusterTolerates, a slot size must be calculated based on the largest CPU or memory reservationsof a VM in general. If no reservations are being used, then the slot size is 256MHz for CPUand the highest memory overhead value for a VM in the cluster. If the administrator uses thePercentage of Cluster Resources Reserved As Failover Spare Capacity policy, then a value iscalculated by the administrator that will allow for at least one host’s capacity to be lost. If“Specify A Failover Host” is selected, then one host is set aside as a passive node in case ahost fails to provide a traditional N+1 cluster.

QUESTION 9Distributed Power Management (DPM), before making a decision to put a host intoStandby mode, averages cluster resource use over what period of time?

A. 5 minutesB. 40 minutesC. 30 minutesD. 1 hourE. You have to configure the time first.

Correct Answer: B

Section: 8. Managing and Creating VMware ClustersExplanation

Explanation/Reference:DPM takes a rolling 40-minute resource usage average before making any decisions. Theidea is to not move VMs and put hosts into Standby mode needlessly as there is a significantamount of overhead and time involved in going into and back out of Standby mode. Contrastthis with the 5-minute average interval used to pull an ESX server back out of Standby mode.

Exam I

QUESTION 1Which of the following is a network metric?

A. READ/sB. LQLENC. %RUND. %DRPTX

Correct Answer: DSection: 9. Alarm ManagementExplanation

Explanation/Reference:READ/s and LQLEN are disk metrics measuring the number of read requests (host orVM) per second and the LUN queue depth respectively. %RUN is a CPU metric measuringCPU scheduling as a percentage. %DRPTX is the percentage of transmitted packets dropped.

QUESTION 2You suspect a VM is suffering from performance issues due to the physical server havinginsufficient CPU for all of the collective VMs’ needs. Which of the following CPU metricswould best help determine which VMs are waiting on physical CPUs?

A. CPU UsageB. CPU ReadyC. CPU WaitD. CPU Usage (Host)E. CPU System

Correct Answer: BSection: 9. Alarm ManagementExplanation

Explanation/Reference:The very definition of the Ready number is a VM ready to run but waiting on a physicalprocessor to become available.

QUESTION 3The new Perfmon objects installed when you install the latest vSphere VMware Tools into aWindows VM include which of the following? (Choose two.)

A. VM DiskB. VM MemoryC. VM NetworkD. VM ProcessorE. VM USB

Correct Answer: BDSection: 9. Alarm ManagementExplanation

Explanation/Reference:The new Perfmon extensions include processor and memory virtual statistics. Thisallows you to see some of the virtual statistics from within the VM itself. Depending onwhether or not you actually want the administrator of a VM to see these sorts of virtual

statistics, this can be a good or a bad thing.

QUESTION 4Which of the following is not a disk performance metric?

A. READ/sB. LUN_LATENCY_QUEUE_DEPTH


C. AQLEND. LQLEN

Correct Answer: BSection: 9. Alarm ManagementExplanation

Explanation/Reference:READ/s is the number of read requests (host or VM) per second, AQLEN is the storageadapter queue depth, and LQLEN is the LUN queue depth. Option B is entirely made up.

QUESTION 5An ESX server suffers a host failure. You have configured the vCenter alarm Host ConnectionAnd Power State to generate an SNMP trap. You are not receiving any SNMP trapsindicating the ESX host failure. What is the likely cause of this?

A. You have not defined an SNMP trap receiver in the Administration ? vCenter ServerSettings ? SNMP properties.

B. You have not defined an SNMP trap receiver in the Administration ? Custom Attributesproperties.

C. You have not enabled the SNMP agent in the Service Console.D. You have not installed the SNMP vCenter plug-in.E. You have suffered a failure in the Service Console virtual switch.

Correct Answer: ASection: 9. Alarm ManagementExplanation

Explanation/Reference:In addition to specifying the SNMP alarm action in the Action tab of the alarm’sproperties, you need to specify the SNMP trap receiver’s IP address in the Administration? vCenter Server Settings properties.

QUESTION 6Which of the following are not valid actions for virtual machine alarms?

A. Send A Notification EmailB. Run A CommandC. Migrate VMD. Reboot Host

E. Enter Maintenance Mode

Correct Answer: DESection: 9. Alarm ManagementExplanation

Explanation/Reference:The incorrect answers apply to ESX hosts, not VMs. The valid actions for VMs areSend A Notification Email, Send A Notification Trap, Run A Command, Power On VM,Power Off VM, Suspend VM, Reset VM, Migrate VM, Reboot Guest On VM and ShutdownGuest On VM.

QUESTION 7A custom alarm you have created repeatedly triggers on the same event every minute. As thetrigger sends out an email, you would like to avoid having to deal with the extra redundantemail messages every minute. What could you do to help eliminate these redundant emailmessages? (Choose two.)

A. Uncheck the Enable This Alarm option in the alarm’s General preferences tab.B. Increase the trigger condition length in the alarm’s Triggers preferences tab.C. Increase the Repeat Triggered Alarm Every… Minutes value in the alarm’s Reporting

preferences tab.D. Increase the Repeat Triggered Alarm When Condition Exceeds This Range in the

alarm’s Reporting preferences tab.E. Change Repeat to Once in the color change box of the alarm’s Actions preferences tab.

Correct Answer: CDSection: 9. Alarm ManagementExplanation

Explanation/Reference:Alarms have two general mechanisms for preventing repeated triggering and they areboth found in the alarm’s Reporting preferences tab. For numeric alarms, option D willkeep an alarm from retriggering until the initial trigger value goes up by this amount. Also,an alarm will not retrigger within the time interval specified in the Repeat Triggered AlarmEvery box (option C).

QUESTION 8You have several VMs running on an ESX server, none of which are remotely close to 100percent CPU usage. The ESX server itself is also not remotely close to 100 percent CPUusage. Despite this, you notice all of the VMs are accumulating a lot of CPU Ready time.What might be the underlying cause of this?

A. The VMs are I/O bound.B. The VMs are network bound.C. You have masked out NX/XD for the VMs.D. The VMs have multiple virtual CPUs but are only actively using a small fraction of a

single CPU’s cycles.E. Several VMotion migrations are occurring.

Correct Answer: DSection: 9. Alarm ManagementExplanation

Explanation/Reference:When you build a VM with multiple vCPUs, all of the vCPUs must be simultaneously

scheduled onto physical CPUs regardless of whether the VM is actively using its allottedvCPUs. In this case, you would notice a lower than expected physical CPU utilization onthe ESX server due to the multiple idle vCPUs. VMs that might otherwise be able to runwill be accumulating Ready time, waiting on the physical CPUs to become available.

QUESTION 9You are setting up a virtual machine notification alarm. You want to trigger on the virtualmachine’s CPU usage. When the alarm triggers, which of the following triggers are not valid?

A. Send A Notification EmailB. Send A Notification TrapC. Suspend The VMD. Migrate The VM Using VMotionE. Change The VM’s CPU Resource Limit

Correct Answer: ESection: 9. Alarm ManagementExplanation

Explanation/Reference:Changing VM’s resource values are not part of an alarm’s allowed actions.

QUESTION 10What is the default action for a vCenter connectivity event-based alarm?

A. Send A Notification TrapB. Run A CommandC. Enter Maintenance ModeD. Enter Standby ModeE. Reboot HostF. Shutdown Host

Correct Answer: ASection: 9. Alarm ManagementExplanation

Explanation/Reference:By default, vCenter connectivity alarms are set to send an SNMP notification trap.

Exam J

QUESTION 1You are planning on using the built-in vCenter alarm, which warns of lost storage connectionproblems. After you lose connectivity to a particular iSCSI array, you notice the alarmnever sent you any indication. Why?

A. This built-in alarm is not enabled by default.B. There is no default action specified for this alarm.C. The default action (send email) requires you set up vCenter Mail settings.D. The default action (send a notification trap) requires you specify at least one SNMP

trap receiver.

Correct Answer: DSection: 10. Performing Basic TroubleshootingExplanation

Explanation/Reference:The built-in alarm (“Cannot connect to storage”) is enabled and wants to send an SNMPtrap by default. However, vCenter is not automatically configured with an SNMP trap sink,which you will need to configure for this alarm to be effective.

QUESTION 2Which of the following is not monitored by the new ESX hardware health function?

A. CPUB. FanC. BatteryD. MonitorE. Temperature

Correct Answer: DSection: 10. Performing Basic TroubleshootingExplanation

Explanation/Reference:The new hardware health monitor monitors the following: processor (CPU), memory,fan, voltage, temperature, power, network, storage, cable/interconnect, software component,watchdog, and an “other” category. No monitor monitoring is done.

QUESTION 3Where would you verify/change the network settings for the management network on anESXi server?

A. The Service Console port group on vSwitch0B. The Management Network port group on vSwitch0C. The VM Network port group on vSwitch0D. The VMkernel port group on vSwitch0

Correct Answer: BSection: 10. Performing Basic TroubleshootingExplanation

Explanation/Reference:ESXi has no Service Console and the management network is, therefore, on a VMkernelport group labeled Management Network on the initial (vSwitch0) vSwitch. Only ESX servers

have a Service Console port group proper.


QUESTION 4What is the recommended maximum number of VMs to have in FT mode on an ESX server?

A. 1–2B. 2–4C. 4–8D. 8–16

Correct Answer: CSection: 10. Performing Basic TroubleshootingExplanation

Explanation/Reference:The current, initial release of Fault Tolerance recommends you run no more than 4–8 VMswith FT on a single ESX server. If the VMs are busy, you would want to err on the low side.

QUESTION 5When you generate a log bundle using the vm-support command, what is the format of thegenerated file?

A. TARB. ZIPC. TGZD. CAB


Explanation/Reference:The vm-support command generates a compressed (gz) tar archive (t) file, hence the.tgz extension.

QUESTION 6You have a DRS cluster with three ESX servers. In the vSphere Client GUI you are lookingat the resource distribution chart in the cluster’s Summary tab. All of the ESX servershave multiple VMs running on them, all of which satisfy VMotion requirements. On twoof the ESX servers, the VM’s CPU utilization per host bars are all green, whereas on thethird ESX server all of the VMs CPU utilization bars are yellow or red. What can you doto fix this not only immediately but into the future as well?

A. You are running too many VMs; power some of them off.B. Put DRS into fully automatic mode.C. Apply DRS VMotion recommendations of three stars or more.D. Change the CPU reservations of the VMs that are showing red bars.

Correct Answer: BSection: 10. Performing Basic TroubleshootingExplanation

Explanation/Reference:That you have two ESX servers with green bars indicates they are probably not runningover capacity. If you put the DRS cluster into fully automatic mode, DRS will apply VMotionrecommendations, automatically balancing the load across all three servers (not just two asappears to be the case currently).

QUESTION 7How would you verify a VM’s IP address, subnet mask, default gateway, and DNS servers?

A. Select the VM in the vSphere Client GUI, click Edit Settings, select the Networkadapter, and view all the settings.

B. Select the VM in the vSphere Client GUI, and click the Summary tab.C. In the Windows VM, open a DOS command window and enter the ipconfig /all

command.D. Select the VM in the vSphere Client GUI, click Edit Settings, click the Options tab, and

select the Network options.


Explanation/Reference:The vSphere Client GUI has no place where you can view all of the VM’s network settings.The VM’s Summary tab shows the VM’s IP address, but for the other settings you will have togo inside the VM itself (as you would on a physical server) and use a utility of your choosing inthe guest OS.

QUESTION 8If you are unsure a physical network adapter’s (speed, duplex) settings are correct or ifyou just need to verify other physical network adapter settings (MAC address, observed IPaddress ranges, wake on LAN support), which vSphere Client GUI form would you use?

A. Click Home ? Inventory ? Networking ? Virtual Switches.B. Click Home ? Inventory ? Networking and select the appropriate dvSwitch uplink

port group.C. Click Home ? Inventory ? Hosts and Clusters, select an ESX server, click the Configuration

tab, click Networking, and click Properties next to the vSwitch you need to query.D. Click Home ? Inventory ? Networking, select a dvSwitch, and click the Ports tab.


Explanation/Reference:Uplink/physical NIC adapter’s properties are viewed via the Hosts And Clusters view.The NIC’s speed and duplex can be set here while the other parameters can be examined.

QUESTION 9Having ESX servers properly configured for DNS usage is most important with whichfeature?

A. VMotionB. DRS

C. HAD. Storage VMotion


Explanation/Reference:Although HA can be made to work without the benefit of DNS, it is more work andhaving a properly functioning DNS is something you should be doing anyway. None ofthe other features listed rely on DNS the way HA does.

QUESTION 10One of your ESX servers has lost connectivity with vCenter. You have decided to look at thelog files on the ESX server to see if you can get an indication of the source of the problem.Which of the following log files would be most likely to help you troubleshoot this problem?

A. /var/log/messagesB. /var/log/VMkernelC. /var/log/vmkwarningD. /var/log/service-consoleE. /var/log/errors

Correct Answer: ASection: 10. Performing Basic TroubleshootingExplanation

Explanation/Reference:The management network on an ESX server is handled via a Service Console networkconnection. Therefore, the file you would check first would be /var/log/messages, thegeneral Service Console error log.

QUESTION 11A VM has been disconnected from the proper vSwitch port group and so has lost its networkconnectivity. You correct the problem by reconnecting the VM to the correct vSwitch portgroup, but the VM is still unable to access the network. Other VMs on the same vSwitchport group on the same ESX server are successfully connecting to the network. What mightyou do to correct this problem? (Choose two.)

A. If the VM is using a DHCP-supplied IP address, use the command ipconfig /releasefollowed by ipconfig /renew.

B. If the VM is using a static IP address, double-check to make sure the address is for thecorrect subnet.

C. Check the vSwitch to make sure it is using the correct physical uplink NICs.D. Restart the network agents on the ESX host.E. Reboot the ESX host.

Correct Answer: ABSection: 10. Performing Basic TroubleshootingExplanation

Explanation/Reference:Anytime you have to reconnect a VM to a network, ask yourself, “How would thisbehave if it was a physical server on a physical network?” You may need to reassign or assigna new IP address to the VM’s network interface. In this particular scenario, the problem islikely not with the underlying physical NICs or the ESX network agents because other VMs

on the same ESX server are working well.


vmware passguide vcp-410 exam bundle€¦ · 09/01/2014 · planning, installing, and upgrading...

Documents