VMware VCP6-DCV 2V0-621D Questions & Answers

• Question 211:

  Which three Authorization types are valid in vSphere? (Choose three.)

  A. Group Membership in vsphere.local

  B. Global

  C. Forest

  D. vCenter Server

  E. Group Membership in system-domain

  Correct Answer: ABD

  Sphere 6.0 and later allows privileged users to give other users permissions to perform tasks in the following ways. These approaches are, for the most part, mutually exclusive; however, you can assign use global permissions to authorize certain users for all solution, and local vCenter Server permissions to authorize other users for individual vCenter Server systems. vCenter ServerPermissions The permission model for vCenter Server systems relies on assigning permissions to objects in the object hierarchy of thatvCenter Server. Each permission gives one user or group a set of privileges, that is, a role for a selected object. For example, you can select an ESXi host and assign a role to a group of users to give those users the corresponding privileges on that host. Global Permissions Global permissions are applied to a global root object that spans solutions. For example, if both vCenter Server and vCenter Orchestrator are installed, you can give permissions to all objects in both object hierarchies using global permissions. Global permissions are replicated across the vsphere.local domain. Global permissions to not provide authorization for services managed through vsphere.local groups. See Global Permissions. Group Membership in vsphere.local Groups The user [email protected] can perform tasks that are associated with services included with the Platform Services Controller. In addition, members of a vsphere.local group can perform the corresponding task. For example, you can perform license management if you are a member of the LicenseService.Administrators group. See Groups in the vsphere.local Domain.

  Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic= %2Fcom.vmware.vsphere.security.doc%2FGUID-74F53189-EF41-4AC1-A78E- D25621855800.html

• Question 212:

  Which Platform Service Controller Password Policy determines the number of days a password can exist before the user must change it?

  A. Maximum Lifetime

  B. Password Age

  C. Maximum Days

  D. Password Lifetime

  Correct Answer: A

• Question 213:

  What are two sample roles that are provided with vCenter Server by default? (Choose two.)

  A. Virtual machine User

  B. Network Administrator

  C. Content Library Administrator

  D. Storage Administrator

  Correct Answer: AB

  Reference: https://books.google.com.pk/books? id=35TE4cSycNACandpg=PA97andlpg=PA97anddq=sample +roles+that+are+provided+with +vCenter+Server+by+defaultandsource=blandots=ggd5VKGky5 andsig=-lc0JubytkvddWsrG_zHgEDTQYandhl=enandsa=Xandved=0CDcQ6AEwBWoVChMIlZH2x8WExgIVxDoU Ch2N1AC2#v=onepageandq=sample%20roles%20that%20are%20provided%20with%20vCe nter%20Server%20by%20defaultandf=false

• Question 214:

  An administrator has been instructed to secure existing virtual machines in vCenter Server.

  Which two actions should the administrator take to secure these virtual machines? (Choose two.)

  A. Disable native remote management services

  B. Restrict Remote Console access

  C. Use Independent Non-Persistent virtual disks

  D. Prevent use of Independent Non-Persistent virtual disks

  Correct Answer: BD

  Reference: http://www.vmware.com/files/pdf/techpaper/VMW-TWP-vSPHR-SECRTY- HRDNG-USLET-101-WEB-1.pdf (page 11, see the tables)

• Question 215:

  An administrator is configuring the clock tolerance for the Single Sign-On token configuration policy and wants to define the time skew tolerance between a client and the domain controller clock. Which time measurement is used for the value?

  A. Milliseconds

  B. Seconds

  C. Minutes

  D. Hours

  Correct Answer: A

  The time skew tolerance between a client and the domain controller clock is measured in milliseconds.

• Question 216:

  Which two statements are correct regarding vSphere certificates? (Choose two.)

  A. ESXi host upgrades do not preserve the SSL certificate and reissue one from the VMware Certificate Authority (VMCA).

  B. ESXi host upgrades preserve the existing SSL certificate.

  C. ESXi hosts have assigned SSL certificates from the VMware Certificate Authority (VMCA) during install.

  D. ESXi hosts have self-signed SSL certificates by default.

  Correct Answer: BC

  Of course, ESXi host upgrades preserve existing SSL certificate and it also have assigned SSL certificates from VMCA during the installation process.

• Question 217:

  An administrator decides to change the root password for an ESXi 6.x host to comply with the company's security policies.

  What are two ways that this can be accomplished? (Choose two.)

  A. Use the Direct Console User Interface to change the password.

  B. Use the passwd command in the ESXi Shell.

  C. Use the password command in the ESXi Shell.

  D. Use the vSphere client to update local users.

  Correct Answer: AB

  To prevent unauthorized access to the vCenter Server Appliance Direct Console User Interface, you can change the password of the root user. The default root password for the vCenter Server Appliance is the password you enter during deployment of the virtual appliance.

  Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic= %2Fcom.vmware.vsphere.vcsa.doc%2FGUID-48BAF973-4FD3-4FF3- B1B6-5F7286C9B59A.html

• Question 218:

  An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?

  A. Datastore.Allocate Space

  B. Virtual machine.Configuration.create snapshot

  C. Virtual machine.Configuration.manage snapshot

  D. Datastore.Browse Datastore

  Correct Answer: A

  Datastore.Allocate space allows allocating space on a datastore for a virtual machine, snapshot, clone, or virtual disk.

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic= %2Fcom.vmware.vsphere.security.doc%2FGUID-B2426ACC-D73F-4732-8BBC- DE9B1B2263D9.html

• Question 219:

  An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments. Which statement best describes how the administrator would accomplish this?

  A. Assign a Global Permission to the user.

  B. Assign a vCenter Permission to the user.

  C. Assign vsphere.local membership to the user.

  D. Assign an ESXi Permission to the user.

  Correct Answer: A

  Global permissions are applied to a global root object that spans solutions, for example, both vCenter Server and vCenter Orchestrator. Use global permissions to give a user or group privileges for all objects in all object hierarchies.

  Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic= %2Fcom.vmware.vsphere.security.doc%2FGUID-C7702E31-1623-4189-89CB- E1136AA27972.html

• Question 220:

  What is the highest object level from which a virtual machine can inherit privileges?

  A. Host Folder

  B. Data Center

  C. Data Center Folder

  D. VM Folder

  Correct Answer: C

  

  Rahail HDD:Users:iMac:Desktop:Screen Shot 2015-06-09 at 3.20.28 PM.png Reference: http://www.vmware.com/pdf/vi3_vc_roles.pdf