VMware VCP6-DCV 2V0-621D Questions & Answers

• Question 191:

  To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)

  A. ideX:Y.present

  B. serial.present

  C. ideX:Y.enabled

  D. serial.enabled

  Correct Answer: AB

  Reference: http://jackiechen.org/2012/10/05/vsphere-5-0-security-hardening- recommended-vm-settings-configure-script/

• Question 192:

  Refer to the Exhibit.

  

  An administrator is changing the settings on a vSphere Distributed Switch (vDS). During this process, the ESXi Management IP address is set to an address which can no longer communicate with the vCenter Server.

  What is the most likely outcome of this action?

  A. The host will disconnect from the vCenter Server and remain disconnected.

  B. The host will automatically detect the communication issue and revert the change.

  C. The host will stay connected with the change, but show an alert.

  D. The host will disconnect and migrate the vDS portgroup to a standard switch.

  Correct Answer: B

  ESXi is a flexible environment that automatically detects communication issues and revert the changes made in mistake.

• Question 193:

  What are two limitations of Link Aggregation Control Protocol (LACP) on a vSphere Distributed Switch? (Choose two.)

  A. IP Hash load balancing is not a supported Teaming Policy.

  B. Software iSCSI multipathing is not compatible.

  C. Link Status Network failover detection must be disabled.

  D. It does not support configuration through Host Profiles.

  Correct Answer: BD

• Question 194:

  Which two advanced features should be disabled for virtual machines that are only hosted on a vSphere system? (Choose two.)

  A. isolation.tools.unity.push.update.disable

  B. isolation.tools.ghi.launchmenu.change

  C. isolation.tools.bbs.disable

  D. isolation.tools.hgfsServerSet.enable

  Correct Answer: AB

  Because VMware virtual machines run in many VMware products in addition to vSphere, some virtual machine parameters do not apply in a vSphere environment. Although these features do not appear in vSphere user interfaces, disabling them reduces the number of vectors through which a guest operating system could access a host. Use the following .vmx setting to disable these features:

  isolation.tools.unity.push.update.disable = "TRUE" isolation.tools.ghi.l"unch"enu.change = "TRUE" isolation.tools.ghi.a"tolo"on.disable = "TRUE" isolation.tools.hgfsS"rver"et.disable = "TRUE" isolation.tools.memSc"edFa"eSampleStats.disable = "TRUE" isolation.tools.getCr"ds.d"sable = "TRUE"

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic= %2Fcom.vmware.vmtools.install.doc%2FGUID-685722FA-9009-439C-9142-18A9E7C592EA.html

• Question 195:

  Which secondary Private VLAN (PVLAN) type can communicate and send packets to an Isolated PVLAN?

  A. Community

  B. Isolated

  C. Promiscuous

  D. Primary

  Correct Answer: C

  A node attached to a port in a promiscuous secondary PVLAN may send and receive packets to any node in any others secondary VLAN associated to the same primary. Routers are typically attached to promiscuous ports. Reference: https://communities.vmware.com/thread/483486

• Question 196:

  An administrator runs the command esxcli storage core device list and sees the following output:

  mpx.vmhba1:C0:T0:L0 Display Name: RAID 5 (mpx.vmhba1:C0:T0:L0) Has Settable Display Name: false SizE. 40960 Device Type: Direct-Access Multipath Plugin: NMP Devfs Path: /vmfs/devices/disks/mpx.vmhba1:C0:T0:L0 Status: off Is Local: true What can be determined by this output?

  A. The device is a being used for vFlash Read Cache.

  B. The device is in a Permanent Device Loss (PDL) state.

  C. The device is a local Solid State Device (SSD).

  D. The device is in an All Paths Down (APD) state.

  Correct Answer: B

  Reference: http://vmwaremine.com/2014/07/07/manage-psa-claimrules-satp-rules- esxcli/#sthash.i6Esax8x.dpbs

• Question 197:

  Which two groups of settings should be reviewed when attempting to increase the security of virtual machines (VMs)? (Choose two.)

  A. Disable hardware devices

  B. Disable unexposed features

  C. Disable Vmtools devices

  D. Disable VM Template features

  Correct Answer: AB

  Make sure you review hardware devices and disable the unnecessary ones. Also disable unexposed features before increasing virtual machines security.

• Question 198:

  An administrator creates a Private VLAN with a Primary VLAN ID of 2. The administrator then creates three Private VLANs as follows:

  Marketing PVLAN ID. 4 PVLAN Type. Isolated Accounting PVLAN ID. 5 PVLAN Type. Community Secretary PVLAN ID. 17 PVLAN Type. Isolated

  Users in the Accounting PVLAN are reporting problems communicating with servers in the Marketing PVLAN.

  Which two actions could the administrator take to resolve this problem? (Choose two.)

  A. Change the PVLAN type for the Accounting network to Promiscuous.

  B. Change the PVLAN ID for the Accounting network to 2.

  C. Change the PVLAN type for Marketing network to Promiscuous.

  D. Change the PVLAN ID for Accounting network to 4.

  Correct Answer: AB

  Change the PVLAN type for the accounting network to Promiscuous and the PVLAN ID to 2. This way, the servers in Marketing PVLAN will communicate effectively.

• Question 199:

  Which two statements are true regarding iSCSI adapters? (Choose two.)

  A. Software iSCSI adapters require vmkernel networking.

  B. Independent Hardware iSCSI adapters offload processing from the ESXi host.

  C. Dependent Hardware iSCSI adapters do not require vmkernel networking.

  D. Independent Hardware iSCSI adapters require vmkernel networking.

  Correct Answer: AB

  An independent hardware iSCSI adapter is a specialized third-party adapter capable of accessing iSCSI storage over TCP/IP. This iSCSI adapter handles all iSCSI and network processing and management for your ESXi system.

  Software and dependent hardware iSCSI adapters depend on VMkernel networking. If you use the software or dependent hardware iSCSI adapters, you must configure connections for the traffic between the iSCSI component and the physical network adapters. Reference: http://pubs.vmware.com/vsphere-51/index.jsp#com.vmware.vsphere.storage.doc/GUID-9BC0BA74-EAE4-4816-BD49- E5214920AB4B.html

• Question 200:

  An administrator is creating a new Content Library. It will subscribe to another remote Content Library without authentication enabled. What information from the published library will they need in order to complete the subscription?

  A. Subscription URL

  B. A security password from the publishing Content Library

  C. Publisher's Items.json file

  D. Username from the publishing Content Library

  Correct Answer: A

  Subscription URL from the published library is needed to complete the subscription.