VMware VCP6-DCV 2V0-621D Questions & Answers

• Question 221:

  Refer to the Exhibit.

  

  An administrator is adding an Active Directory over LDAP Identity Source for vCenter Single Sign-On, as indicated in the Exhibit. What is the correct value to configure for the Domain alias?

  A. The domain's NetBIOS name.

  B. The fully qualified domain name.

  C. vsphere.local

  D. A user defined label.

  Correct Answer: A

  The domain alias is usually NetBIOS name, for example, acme.lab.

  Reference: https://www.virten.net/2015/02/how-to-add-ad-authentication-in-vcenter-6-0- platform-service-controller/

• Question 222:

  An administrator is assigning a user the Content Library administrator role. The user will only be creating the library for a single vCenter Server. What is the lowest level of the permission heirarchy that this role can be granted to the user and still allow them to create a Content Library?

  A. Global

  B. Datacenter Folder

  C. Virtual Center

  D. Datacenter

  Correct Answer: A

  To let a user manage a content library and its items, an Administrator can assign the Content Library Administrator role to that user as a global permission. The Content Library Administrator role is a sample role in the vSphere Web Client. Users who are Administrators can also manage libraries and their contents. If a user is an Administrator at a vCenter Server level, they have sufficient privileges to manage the libraries that belong to this vCenter Server instance, but cannot see the libraries unless they have a Read-Only role as a global permission.

  Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.vm_admin.doc%2FGUID-18F4B892-D685- 4473-AC25-3195D68DFD90.html

• Question 223:

  An administrator wants to configure an ESXi 6.x host to use Active Directory (AD) to manage users and groups. The AD domain group ESX Admins is planned for administrative access to the host. Which two conditions should be considered when planning this configuration? (Choose two.)

  A. If administrative access for ESX Admins is not required, this setting can be altered.

  B. The users in ESX Admins are not restricted by Lockdown Mode.

  C. An ESXi host provisioned with Auto Deploy cannot store AD credentials.

  D. The users in ESX Admins are granted administrative privileges in vCenter Server.

  Correct Answer: AC

  The setting can be altered if administrative access for ESX admins is not required. The second rule is that the ESX admins users should not be restricted by Lockdown mode.

• Question 224:

  Which three connection types are supported between a remote site and vCloud Air? (Choose three.)

  A. Secure Internet Connectivity

  B. Private Connect

  C. Direct Connect

  D. Internet Connectivity

  E. Secure VPN

  Correct Answer: ACE

  The connection types supported between a remote site and vcloud Air is secure VPN, direct connect and Secure Internet Connectivity.

• Question 225:

  An administrator wants to clone a virtual machine using the vSphere Client. Which explains why the Clone option is missing?

  A. The vSphere Client is directly connected to the ESXi host.

  B. The virtual machine is configured with a thin-provisioned virtual disk.

  C. The virtual machine is configured with outdated Virtual Hardware.

  D. Cloning can only be performed with vRealize Orchestrator.

  Correct Answer: A

  The Clone option is missing because vSphere client is directly connected to the ESXi host. To enable the option, you have to connect it through vcenter server because cloning is a vCenter Server feature. You need install vCenter server on one of the Windows Server and connect vCenter Server via vSphere client and create cluster, add host after that you will see cloning and template option and much more

• Question 226:

  An administrator has recently audited the environment and found numerous virtual machines with sensitive data written to the configuration files. To prevent this in the future, which advanced parameter should be applied to the virtual machines?

  A. isolation.tools.setinfo.disable = true

  B. isolation.tools.setinfo.enable = true

  C. isolation.tools.setinfo.disable = false

  D. isolation.tools.setinfo.enable = false

  Correct Answer: A

  It is configured on a per-VM basis. You can increase the guest operating system variable memory limit if large amounts of custom information are being stored in the configuration file. You can also prevent guests from writing any name-value pairs to the configuration file. To do so, use the following setting, and set it to `true':

• Question 227:

  An administrator is able to manage an ESXi 6.x host connected to vCenter Server using the vSphere Web Client but is unable to connect to the host directly. Which action should the administrator take to correct this behavior?

  A. Restart management agents on the ESXi host.

  B. Disable Lockdown Mode on the ESXi host through vCenter Server.

  C. Disable the ESXi firewall with the command esxcli network firewall unload.

  D. Reboot the ESXi host.

  Correct Answer: B

  Disable lockdown mode through the DCUI and then enable it through the vCenter Server instead. The vCenter Server does not keep track of lockdown mode state changes that initiated outside of the vCenter Server itself. Reference: http://kb.vmware.com/selfservice/microsites/search.do? language=en_USandcmd=displayKC andexternalId=2040768

• Question 228:

  An administrator creates a custom ESXi firewall rule using an XML file, however the rules do not appear in the vSphere Web Client. Which action should the administrator take to correct the problem?

  A. Load the new rules using esxcli network firewall reload.

  B. Load the new rules using esxcli network firewall refresh.

  C. Verify the entries in the XML file and then reboot the ESXi host.

  D. Remove the ESXi host from the inventory and add it back.

  Correct Answer: B

  Refresh the firewall configuration by reading the rule set files if the firewall module is loaded.

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-7A8BEFC8-BF86- 49B5-AE2D-E400AAD81BA3.html

• Question 229:

  Which VMware Single Sign-On component issues Security Assertion Markup Language (SAML) tokens?

  A. VMware Security Token Service

  B. Administration Server

  C. VMware Directory Service

  D. Identity Management Service

  Correct Answer: A

  The security token service issues Security Assertion Markup Language (SAML) tokens. These security tokens pass information about a system user between an identity provider and a web service. This service enables a user who has logged on through vCenter Single Sign-On to use multiple web-service delivered applications without authenticating to each one.

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic= %2Fcom.vmware.vsphere.upgrade.doc%2FGUID-90C1E3DC-4397-4BF0-808E- DF3802E56BC6.html

• Question 230:

  Which three options are available for ESXi Certificate Replacement? (Choose three.)

  A. VMware Certificate Authority mode

  B. Custom Certificate Authority mode

  C. Thumbprint mode

  D. Hybrid Deployment

  E. VMware Certificate Endpoint Authority Mode

  Correct Answer: ABC

  You can perform different types of certificate replacement depending on company policy and requirements for the system that you are configuring. You can perform each replacement with the vSphere Certificate Manager utility or manually by

  using the CLIs included with your installation.

  VMCA is included in each Platform Services Controller and in each embedded deployment. VMCA provisions each node, each vCenter Server solution user, and each ESXi host with a certificate that is signed by VMCA as the certificate

  authority. vCenter Server solution users are groups of vCenter Server services. See vSphere Security for a list of solution users.

  You can replace the default certificates. For vCenter Server components, you can use a set of command-line tools included in your installation. You have several options. Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%2FGUID-4469A6D3-048A-471C- 9CB4-518A15EA2AC0.html