VMware 2V0-621 Online Practice Questions and Exam Preparation

VMware 2V0-621 Online Questions & Answers

• Question 131:

  Which two capabilities does the vSphere Replication Client Plug-in provide? (Choose two.)

  A. Configure connections between vSphere Replication Sites.
  B. Deploy and register additional vSphere Replication Servers.
  C. Reconfigure the vSphere Replication Server.
  D. Configure an external database for a vSphere Replication Site.
  A. Configure connections between vSphere Replication Sites.
  B. Deploy and register additional vSphere Replication Servers.

  ---

  vSphere Replication Client Plug-In

  The vSphere Replication appliance adds a plug-in to the vSphere Web Client.

  You use the vSphere Replication client plug-in to perform all vSphere Replication actions.

  1.

  Configure connections between vSphere Replication sites.

  2.

  View all vCenter Server instances that are registered with the same SSO and status of each vSphere Replication extension.

  3.

  Deploy and register additional vSphere Replication servers.

  4.

  Configure the replication of individual or multiple virtual machines.

  5.

  View incoming and outgoing replications.

  6.

  Monitor and manage the status of the replications.

  7.

  Recover virtual machines.

  Reference: https://pubs.vmware.com/vsphere55/index.jsp?topic=%2Fcom.vmware.vsphere.replication_admin.doc%2FGUID-DEFB63AE-C60C-4606-9F1C-E1B270CA408A.html

• Question 132:

  An administrator is configuring an identity source for Single Sign-On. The administrator will use the machine that Single Sign-on is running on, but does not want all users on the machine to be visible to SSO. Which identity Source meets this requirement?

  A. LocalOS
  B. Active Directory as an LDAP service
  C. OpenLDAP
  D. Active Directory (Integrated Windows Authentication)
  D. Active Directory (Integrated Windows Authentication)

  ---

  To restrict users on the machine visible to single sign-on, you need to employ Active directory and its authentication. If the user account is locked or disabled, authentications and group and group and user searches in the Active Directory domain will fail. The user account must have read-only access over the User and Group OU, and must be able to read user and group attributes. This is the default Active Directory domain configuration for user permissions.

• Question 133:

  Which keystore would a vSphere Replication administrator use to manually add an additional Certificate Authority certificate?

  A. hms-truststore.jks
  B. hms-keystore.jks
  C. certificates.ks
  D. cacerts.ks
  A. hms-truststore.jks

  ---

  vSphere Replication can verify remote server certificates either by verifying the validity of the certificate and the thumbprint or by verifying the thumbprint only. By default, vSphere Replication verifies the thumbprint only. If you select the Accept only SSL certificates signed by a trusted Certificate Authority option in the VAMI, this causes vSphere Replication to verify the validity of the certificate as well as the thumbprint. This means that the certificate authority that issued the certificates for vSphere Replication and vCenter Server must be trusted by vSphere Replication. By default, vSphere replication trusts all certificate authorities that the Java Virtual Machine trusts. You can import additional trusted CA certificates in /opt/vmware/hms/security/hmstruststore.Jks on the vSphere Replication appliance. To import these certificates, perform these steps:

  1. Locate the root certificate authority certificate that was used when generating the vCenter server certificates (usually Root64.cer). If you use a Microsoft certificate authority, this can be re-generated by performing the mentioned in Creating

  certificate requests and certificates for vCenter Server 5.1 components (2037432). Otherwise, you may be able to export the root certificate using the MMC on a Windows system.

  2. Copy the certificate to your replication appliance.

  For example, /home directory. A utility such as WinSCP can be used for this.

  3. Run this command to import the certificate into the HMS truststore:

  /usr/java/default/bin/keytool -import -trustcacerts -alias root -file /home/Root64.cer -keystore /opt/vmware/hms/security/hms-truststore.jks -storepass vmware

  4. Type yes at the prompt and press enter to complete the certificate import process:

  Trust this certificate? [no]: yes

  5. You see this text which confirms the import was successful:

  Certificate was added to keystore

  6. Use this command to verify the certificate is now present in the HMS truststore:

  /usr/java/default/bin/keytool -list -keystore /opt/vmware/hms/security/hms-truststore.jks -storepass vmware

• Question 134:

  An administrator has decided to create 10 ESXi 6.x hosts via Auto Deploy for a new Test/Dev cluster. The hosts are configured to obtain their networking configuration via DHCP.

  Which condition would explain why none of the hosts are able to receive a valid DHCP address?

  A. The Boot Server Host Name has been set to the TFTP server.
  B. The DHCP scope was set too small.
  C. The DHCP lease duration is set too short.
  D. The BIOS DHCP File Name was incorrectly entered on the DHCP server.
  D. The BIOS DHCP File Name was incorrectly entered on the DHCP server.

• Question 135:

  When operating with Distributed Resource Scheduler (DRS) and Distributed Power Management (DPM), what two statements explain the impact of disabling vSphere High Availability admission control? (Choose two.)

  A. DRS will evacuate virtual machines from hosts and places in maintenance or standby modes regardless of the impact this might have on failover requirements.
  B. Vmware DPM will place hosts in standby mode even if doing so violates failover requirements.
  C. DRS does not evacuate virtual machines from a host for the purpose of placing it in maintenance or standby modes if placing the host in this state would violate failover requirements.
  D. VMware DPM does not place hosts in standby mode if doing so would violate failover requirements.
  A. DRS will evacuate virtual machines from hosts and places in maintenance or standby modes regardless of the impact this might have on failover requirements.
  B. Vmware DPM will place hosts in standby mode even if doing so violates failover requirements.

  ---

  When you disable VMware HA strict admission control, virtual machines can be powered on even if there are not sufficient resources to ensure failover capacity. When this is done, no warnings are presented, and the cluster does not turn red. When strict admission control is disabled, VMware HA failover resource constraints are not passed on to DRS and VMware DPM. Thus, the constraints are not enforced:

  1.

  DRS does evacuate virtual machines from hosts and place the hosts in maintenance mode or standby mode regardless of the impact this might have on failover requirements.

  2.

  VMware DPM does power off hosts (place them in standby mode) even if doing so violates failover requirements. Reference https://kb.vmware.com/s/article/1007006?language=en_US

• Question 136:

  Which group in the vsphere.local domain will have administrator privileges for the VMware Certificate Authority (VMCA)?

  A. SolutionUsers
  B. CAAdmins
  C. DCAAdmins
  D. SystemConfiguration.Administrators
  B. CAAdmins

  ---

  Members of the CAAdmins group have administrator privileges for VMCA. Adding members to these groups is not usually recommended.

  Reference:

  https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-87DA2F34-DCC9-4DAB-8900-1BA35837D07E.html

• Question 137:

  What is the name of the command line utility that checks for VMFS5 metadata corruption?

  A. vmkfstools --check
  B. voma
  C. vmfsanalyzer
  D. esxcli vmfs check
  B. voma

  ---

  In ESXi 5.1, VMware introduced the vSphere On-disk Metadata Analyzer (VOMA) for performing VMFS file system metadata checks. This utility scans the VMFS volume metadata and highlights any inconsistencies to which you may be required to open a support request.

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=2036767

• Question 138:

  What would prevent VMware Convertor from initiating the VMware tools install during a windows server conversion?

  

  A. Outdated virtual machine version
  B. Power on destination not selected
  C. No sysprep files available
  D. Reconfigure not selected
  B. Power on destination not selected

  ---

  When performing Windows server conversion using VMware converter, you have to select power on destination to install VMware tools on windows server. Power on destination uses VMware tools to perform minimization of downtime of important services. Power on destination is a virtual machine so it needs VMware tools.

• Question 139:

  What is the name of the High Availability agent log?

  A. fdm.log
  B. ha.log
  C. vpxa.log
  D. aam.log
  A. fdm.log

  ---

  Logs from vCenter Server Components on ESXi 5.1 and 5.5

  When an ESXi 5.1 / 5.5 host is managed by vCenter Server 5.1 and 5.5, two components are installed, each with its own logs:

  1.

  /var/log/vpxa.log: vCenter Server vpxa agent logs, including communication with vCenter Server and the Host Management hostd agent.

  2.

  /var/log/fdm.log: vSphere High Availability logs, produced by the fdm service. For more information, see the vSphere HA Security section of the vSphere Availability Guide.

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=2032076

• Question 140:

  Refer to the Exhibit.

  

  An administrator is using the esxtop command to troubleshoot storage performance issues on a virtual machine. The esxtop capture is shown in the Exhibit.

  Based on the exhibit, which two statements are true? (Choose two.)

  A. The iSCSI device is experiencing high latency.
  B. The ESXi kernel is experiencing high latency.
  C. The Guest OS is experiencing high latency and response time.
  D. The NFS device is experiencing high latency.
  A. The iSCSI device is experiencing high latency.
  C. The Guest OS is experiencing high latency and response time.

  ---

  Using esxtop to identify storage performance issues for ESX / ESXi (multiple versions) (1008205)

  Note: In ESXi 5.x and later, you may see messages indicating that performance has deteriorated. For more information, see Storage device performance deteriorated (2007236).