VMware 2V0-621 Online Practice Questions and Exam Preparation

VMware 2V0-621 Online Questions & Answers

• Question 1:

  An administrator enables High Availability (HA) on a Virtual SAN cluster.

  There are four vmkernel port groups with the following IP addresses assigned:

  1.

  Management: 192.168.12.10

  2.

  vMotion: 192.168.13.10

  3.

  Virtual SAN: 192.168.14.10

  4.

  Fault TolerancE. 192.168.15.10

  Which IP address will HA use for traffic?

  A. 192.168.12.10
  B. 192.168.13.10
  C. 192.168.14.10
  D. 192.168.15.10
  C. 192.168.14.10

  ---

  Give the VMKernel port a label (e.g. iSCSI - if it will purley be used for iSCSI).

  Enter the VLAN ID if the pNICs connected to the vSwitch are trunk ports and you have a specific VLAN for this traffic (e.g. a dedicated storage VLAN).

  Now if the port will only be used for storage services (iSCSI and NFS).

  If the port will be used for all VMkernel services (iSCSI, NFS, vMotion and FT), tick the additional boxes to allow this port to be used also for those services, Assigned the FT (IP Address)

  Clustering is configured to give you, the administrator of an environment, a form of fault tolerance, and VMware has taken this concept to a whole other level. Although VMware does not call FT clustering, it functions the same in that FT will

  failover the primary virtual machine to a secondary virtual machine. VMware Fault Tolerance (FT) is based on vLockstep technology and provides zero downtime, zero data loss, and continuous availability for your applications.

  Next,

  ?Always assign a reasonably high relative share for the Fault Tolerance

  resource pool because FT is a very latency-sensitive traffic type.

• Question 2:

  Which file determines the location of the installation script during a scripted upgrade?

  A. boot.cfg
  B. ks.cfg
  C. script.cfg
  D. upgrade.cfg
  A. boot.cfg

  ---

  About the boot.cfg File The boot loader configuration file boot.cfg specifies the kernel, the kernel options, and the boot modules that the mboot.c32 boot loader uses in an ESXi installation. The boot.cfg file is provided in the ESXi installer. You can modify the kernelopt line of the boot.cfg file to specify the location of an installation script or to pass other boot options. The boot.cfg file has the following syntax: # boot.cfg -- mboot configuration file # # Any line preceded with '#' is a comment.

  title=STRING kernel=FILEPATH kernelopt=STRING modules=FILEPATH1 --- FILEPATH2... --- FILEPATHn

  # Any other line must remain unchanged. The commands in boot.cfg configure the boot loader.

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.upgrade.doc%2FGUID-1DE4EC58-8665-4F14-9AB4-1C62297D866B.html

• Question 3:

  Which three services can be enabled/disabled in the Security Profile for an ESXi host? (Choose three.)

  A. CIM Server
  B. Single Sign-On
  C. Direct Console UI
  D. Syslog Server
  E. vSphere Web Access
  A. CIM Server
  C. Direct Console UI
  D. Syslog Server

  ---

  

  

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-37AB1F95-DDFD-4A5D-BD49-3249386FFADE.html

• Question 4:

  When importing an existing SSL certificate into vSphere Replication Server, which file format is required?

  A. PKCS#12
  B. DER
  C. PEM
  D. PKCS#7
  A. PKCS#12

  ---

  Converting the signed certificate to PKCS#12 format After you receive the certificate (ending in .cer or .crt) from your certificate authority. It must be converted to the PKCS#12 format. To convert it requires key files you generated while generating the certificate request and the signed certificate:

  1. Copy the signed certificate file to the server where you generated the certificate signing request.

  2. Use OpenSSL to generate the PKCS#12 certificate: openssl pkcs12 -export -in protected.cer -inkey protected.key -name "vrprot" -passout pass:replication55 -out protected.p12 openssl pkcs12 -export -in recovery.cer -inkey recovery.key -name "vrdr" -passout pass:replication55 -out recovery.p12

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=2080395

• Question 5:

  An administrator has recently configured HA on a cluster. After reviewing the summary tab on one of the hosts, the warning in Exhibit 1 is displayed:

  

  The administrator proceeds to view the management network port group data shown in Exhibit 2:

  

  The administrator then views the management network vSwitch as shown in Exhibit 3:

  

  Based on the exhibits, which two steps should be taken to ensure redundancy on the management network? (Choose two.)

  A. Move vmnic1 to Standby adapters.
  B. Add an additional vmknic to the Network Adapters and move it to Active adapters.
  C. Set the advanced HA configuration parameter das.ignoreRedundantNetWarning to True.
  D. Uncheck the Override Failover Checkbox on the management network port group.
  A. Move vmnic1 to Standby adapters.
  D. Uncheck the Override Failover Checkbox on the management network port group.

  ---

  A and D

  Use Load Balancing and Failover policies to determine how network traffic is distributed between adapters and how to reroute traffic in the event of an adapter failure.

  The Failover and Load Balancing policies include the following parameters:

  Load Balancing policy: The Load Balancing policy determines how outgoing traffic is distributed among the network adapters assigned to a standard switch. Incoming traffic is controlled by the Load Balancing policy on the physical switch.

  Failover Detection: Link Status/Beacon Probing

  Network Adapter Order (Active/Standby)

  In some cases, you might lose standard switch connectivity when a failover or failback event occurs. This causes the MAC addresses used by virtual machines associated with that standard switch to appear on a different switch port than they

  previously did. To avoid this problem, put your physical switch in portfast or portfast trunk mode.

  Link:

  https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.networking.doc%2FGUID-D5EA6315-5DCD-463E-A701-B3D8D9250FB5.html

• Question 6:

  Which three options are available for ESXi Certificate Replacement? (Choose three.)

  A. VMware Certificate Authority mode
  B. Custom Certificate Authority mode
  C. Thumbprint mode
  D. Hybrid Deployment
  E. VMware Certificate Endpoint Authority Mode
  A. VMware Certificate Authority mode
  B. Custom Certificate Authority mode
  C. Thumbprint mode

  ---

  ESXi Certificate Replacement

  For ESXi hosts, you can change certificate provisioning behavior from the vSphere Web Client.

  

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%2FGUID-4469A6D3-048A-471C-9CB4-518A15EA2AC0.html

• Question 7:

  An administrator wants to configure a High Availability cluster to allow virtual machines a 10 minute window to shut down in the event of a Host Isolation incident.

  What two configuration settings would satisfy this requirement? (Choose two.)

  A. Set the advanced option das.isolationshutdowntimeout = 10.
  B. Set the advanced option das.isolationshutdowntimeout = 600.
  C. Configure Host Isolation Response to Shut Down and Restart VMs.
  D. Configure Host Isolation Response to Power Off and Restart VMs.
  B. Set the advanced option das.isolationshutdowntimeout = 600.
  C. Configure Host Isolation Response to Shut Down and Restart VMs.

  ---

  das.isolationShutdownTimeout

  The number of seconds an FDM waits for a virtual machine to power off after initiating a guest shutdown before the FDM issues a power off. If the option is unset, 300s is used.

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=2033250

• Question 8:

  When attempting to remove a host from a vSphere Distributed Switch (vDS), an administrator observes the error message:

  The resource '16' is in use

  What are two reasons why this error would be displayed? (Choose two.)

  A. VMkernel network adapters on the vDS are in use.
  B. Virtual machine network adapters are connected to the vDS.
  C. Network I/O Control has been configured on the vDS.
  D. There is active network traffic on the vDS.
  A. VMkernel network adapters on the vDS are in use.
  B. Virtual machine network adapters are connected to the vDS.

  ---

  Cause

  You cannot remove the host from the distributed switch or delete the host proxy switch because of the following reasons.

  1.

  There are VMkernel adapters on the switch that are in use.

  2.

  There are virtual machine network adapters connected to the switch.

  Reference: https://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.troubleshooting.doc%2FGUID-038AC93F-D710-48ED-8E3B-258A23FB2930.html

• Question 9:

  Which three options are available for replacing vCenter Server Security Certificates? (Choose three.)

  A. Replace with Certificates signed by the VMware Certificate Authority.
  B. Make VMware Certificate Authority an Intermediate Certificate Authority.
  C. Do not use VMware Certificate Authority, provision your own Certificates.
  D. Use SSL Thumbprint mode.
  E. Replace all VMware Certificate Authority issued Certificates with self-signed Certificates.
  A. Replace with Certificates signed by the VMware Certificate Authority.
  B. Make VMware Certificate Authority an Intermediate Certificate Authority.
  D. Use SSL Thumbprint mode.

  ---

  ESXi Certificate Replacement

  For ESXi hosts, you can change certificate provisioning behavior from the vSphere Web Client.

  VMware Certificate Authority mode (default)

  When you renew certificates from the vSphere Web Client, VMCA issues the certificates for the hosts. If you changed the VMCA root certificate to include a certificate chain, the host certificates include the full chain.

  Custom Certificate Authority mode

  Allows you to manually update and use certificates that are not signed or issued by VMCA.

  Thumbprint mode

  Can be used to retain 5.5 certificates during refresh. Use this mode only temporarily in debugging situations.

  Referance:

  https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%2FGUID-4469A6D3-048A-471C-9CB4-518A15EA2AC0.html

• Question 10:

  What command line utility can be used to upgrade an ESXi host?

  A. esxcli
  B. esxupdate
  C. vihostupdate
  D. esxcfg
  A. esxcli

  ---

  ESXi Command-line interface - esxcli

  Using the vSphere Command Line Interface (CLI), you can upgrade ESXi 5.x hosts to version 6.0.

  For more information about upgrading ESXi 5.x hosts using esxcli commands, see the Upgrading Hosts by Using esxcli Commands

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=2109711