VMware 2V0-621 Online Practice Questions and Exam Preparation

VMware 2V0-621 Online Questions & Answers

• Question 171:

  Lockdown Mode has been enabled on an ESXi 6.x host and users are restricted from logging into the Direct Console User Interface (DCUI).

  Which two statements are true given this configuration? (Choose two.)

  A. A user granted administrative privileges in the Exception User list can login.
  B. A user defined in the DCUI.Access without administrative privileges can login.
  C. A user defined in the ESXi Admins domain group can login.
  D. A user set to the vCenter Administrator role can login.
  A. A user granted administrative privileges in the Exception User list can login.
  B. A user defined in the DCUI.Access without administrative privileges can login.

  ---

  In normal lockdown mode the DCUI service is not stopped. If the connection to the vCenter Server is lost and access through the vSphere Web Client is no longer available, privileged accounts can log in to the ESXi host's Direct Console Interface and exit lockdown mode. Only these accounts can access the Direct Console User Interface:

  1.

  Accounts in the Exception User list for lockdown mode who have administrative privileges on the host. The Exception Users list is meant for service accounts that perform very specific tasks. Adding ESXi administrators to this list defeats the purpose of lockdown mode.

  2.

  Users defined in the DCUI.Access advanced option for the host. This option is for emergency access to the Direct Console Interface in case the connection to vCenter Server is lost. These users do not require administrative privileges on the host.

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=1008077

• Question 172:

  An administrator is upgrading an ESXi host from 5.5 to 6.0 and runs the following command:

  esxcli software vib list --rebooting-image

  What does this command show?

  A. VIBs active after a reboot.
  B. VIBs that require a reboot.
  C. VIBs that are in the boot image.
  D. VIBs that are third-party.
  A. VIBs active after a reboot.

  ---

  Install vCLI or deploy the vSphere Management Assistant (vMA) virtual machine. See Getting Started with vSphere Command-Line Interfaces. For troubleshooting , run esxcli commands in the ESXi Shell. Procedure

  

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.upgrade.doc%2FGUID-F0FE86AB-70B1-4E7E-A209-E5C5E0A4E57A.html

• Question 173:

  Refer to the Exhibit.

  

  An administrator recently created a Virtual SAN but no Storage Policies were defined. A few virtual machines were deployed to this cluster. The administrator analyzes the default Virtual SAN policy as shown in the Exhibit.

  Based on the exhibit, which two statements are true? (Choose two.)

  A. Losing one cluster node will not affect data availability.
  B. Losing one Hard Disk in a cluster node will not affect data availability.
  C. Creating a virtual machine Swap file will fail if it violates default storage policy.
  D. Creating a virtual machine will succeed even if it violates default storage policy.
  A. Losing one cluster node will not affect data availability.
  B. Losing one Hard Disk in a cluster node will not affect data availability.

  ---

  Policies Rules: Defines the number of host, disk, or network failures a virtual machine object can tolerate. For n failures tolerated, n+1 copies of the virtual machine object are created and 2n+1 hosts with storage are required.

  Default value is 1. Maximum value is 3.

  To understand more check the link:

  https://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.storage.doc%2FGUID-C8E919D0-9D80-4AE1-826B-D180632775F3.html

• Question 174:

  Which two are valid Identity Sources when configuring vCenter Single Sign-On? (Choose two.)

  A. Radius
  B. NIS
  C. OpenLDAP
  D. LocalOS
  C. OpenLDAP
  D. LocalOS

  ---

  

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-B23B1360-8838-4FF2-B074-71643C4CB040.html

• Question 175:

  An administrator has recently audited the environment and found numerous virtual machines with sensitive data written to the configuration files. To prevent this in the future, which advanced parameter should be applied to the virtual machines?

  A. isolation.tools.setinfo.disable = true
  B. isolation.tools.setinfo.enable = true
  C. isolation.tools.setinfo.disable = false
  D. isolation.tools.setinfo.enable = false
  A. isolation.tools.setinfo.disable = true

  ---

  Litmit SETINFO Messages Now if you read through the hardening guide, you'll come cross a section that covers informational messages, otherwise known as SETINFO messages. Now my understanding is that currently there is no limitation on the amount of data that can be sent from VMware tools to the host, so you can imagine it wouldn't be hard to write some code to continuously send huge amounts of data. So lets looks at how to limit this to something more acceptable as per the hardening guide.

  tools.setInfo.sizeLimit = "1048576"

  Now you can actually totally disable this using the following

  isolation.tools.setInfo.disable = "true"

  But this stops the Virtual Center client from displaying any information about the Virtual Machine, e.g. IP Address, DNS information. So for a production environment I would recommend setting a limit rather then totally disabling.

  Reference: https://goingvirtual.wordpress.com/2009/07/11/locking-down-vmware-tools/

• Question 176:

  An administrator created a six node Virtual SAN cluster, created a fault domain, and moved three of the six nodes into that domain.

  A node that is a member of the fault domain fails.

  What is the expected result?

  A. The remaining two fault domain members are treated as failed.
  B. The remaining two fault domain members stay protected by the domain.
  C. One of the non-member nodes will be automatically added to the fault domain.
  D. VMware High Availability will restart virtual machines on remaining nodes in the domain.
  A. The remaining two fault domain members are treated as failed.

  ---

  Defines the number of host and device failures a virtual machine object can tolerate. For n failures tolerated, n+1 copies of the virtual machine object are created and 2*n+1 hosts contributing storage are required. When provisioning a virtual machine, if you do not choose a storage policy, Virtual SAN assigns this policy as the default virtual machine storage policy. Default value is 1. Maximum value is 3. If fault domains are configured, 2n+1 fault domains with hosts contributing capacity are required. A host, which is not part of any fault domain is considered as its own single host fault domain. Default value is 1. Maximum value is 3. NOTE If you do not want Virtual SAN to protect a single mirror copy of virtual machine objects, you can specify the Number of failures to tolerate=0. However, the host might experience unusual delays when entering maintenance mode. The delay occurs because Virtual SAN has to evacuate the object from the host for the maintenance operation to complete successfully. Setting the Number of failures to tolerate=0 means that your data is unprotected, and you might lose data when the Virtual SAN cluster encounters a device failure. NOTE When creating a new storage policy, if you do not specify any value for Number of failures to tolerate, by default, Virtual SAN creates a single mirror copy of the virtual machine objects and tolerates only one failure. However, in the event of a multiple component failures your data might be at risk. link: https://pubs.vmware.com/vsphere-60/topic/com.vmware.ICbase/PDF/virtual-san-60-administration-guide.pdf

• Question 177:

  Which three traffic types can be configured for dedicated VMkernel adapters? (Choose three.)

  A. Discovery traffic
  B. vMotion traffic
  C. vSphere Replication NFC traffic
  D. Provisioning traffic
  E. vSphere Custom traffic
  B. vMotion traffic
  C. vSphere Replication NFC traffic
  D. Provisioning traffic

  ---

  Securing System Traffic

  Take appropriate security measures to prevent unauthorized access to the management and system traffic in your vSphere environment. For example, isolate the vMotion traffic in a separate network that includes only the ESXi hosts that

  participate in the migration. Isolate the management traffic in a network that only network and security administrators are able to access. For more information, see vSphere Security and vSphere Installation and Setup.

  System Traffic Types

  You should dedicate a separate VMkernel adapter for every traffic type. For distributed switches, dedicate a separate distributed port group for each VMkernel adapter.

  Management traffic

  Carries the configuration and management communication for ESXi hosts, vCenter Server, and host-to-host High Availability traffic. By default, when you install the ESXi software, a vSphere Standard switch is created on the host together

  with a VMkernel adapter for management traffic. To provide redundancy, you can connect two or more physical NICs to a VMkernel adapter for management traffic.

  vMotion traffic

  Accommodates vMotion. A VMkernel adapter for vMotion is required both on the source and the target hosts. The VMkernel adapters for vMotion should handle only the vMotion traffic. For better performance, you can configure multiple NIC

  vMotion. To have multi NIC vMotion, you can dedicate two or more port groups to the vMotion traffic, respectively every port group must have a vMotion VMkernel adapter associated with it. Then you can connect one or more physical NICs to

  every port group. In this way, multiple physical NICs are used for vMotion, which results in greater bandwidth.

  Note

  vMotion network traffic is not encrypted. You should provision secure private networks for use by vMotion only.

  Provisioning traffic

  Handles the data that is transferred for virtual machine cold migration, cloning, and snapshot creation.

  IP storage traffic and discovery

  Handles the connection for storage types that use standard TCP/IP networks and depend on the VMkernel networking. Such storage types are software iSCSI, depended hardware iSCSI, and NFS. If you have two or more physical NICs for

  iSCSI, you can configure iSCSI multipathing.ESXi hosts support only NFS version 3 over TCP/IP. To configure a software FCoE (Fibre Channel over Ethernet) adapter, you must have a dedicated VMkernel adapter. Software FCoE passes

  configuration information though the Data Center Bridging Exchange (DCBX) protocol by using the Cisco Discovery Protocol (CDP )VMkernel module.

  Fault Tolerance traffic

  Handles the data that the primary fault tolerant virtual machine sends to the secondary fault tolerant virtual machine over the VMkernel networking layer. A separate VMkernel adapter for Fault Tolerance logging is required on every host that

  is part of a vSphere HA cluster.

  vSphere Replication traffic

  Handles the outgoing replication data that the source ESXi host transfers to the vSphere Replication server. Dedicate a VMkernel adapter on the source site to isolate the outgoing replication traffic.

  vSphere Replication NFC traffic

  Handles the incoming replication data on the target replication site.

  Virtual SAN traffic

  Every host that participates in a Virtual SAN cluster must have a VMkernel adapter to handle the Virtual SAN traffic.

  Reference:

  https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.networking.doc%2FGUID-D4191320-209E-4CB5-A709-C8741E713348.html

• Question 178:

  An administrator wants to select a Host Power Management Policy for an ESXi 6.x host that will disable most hardware power management features. Which Host Power Management Policy should be selected to meet this requirement?

  A. High Performance
  B. Balanced
  C. Low Power
  D. Disabled
  A. High Performance

  ---

  High Performance The VMkernel detects certain power management features, but will not use them unless the BIOS requests them for power capping or thermal events

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.resmgmt.doc%2FGUID-4D1A6F4A-8C99-47C1-A8E6-EF3865603F5B.html

• Question 179:

  Refer to the Exhibit.

  

  An administrator reviews the Health of a virtual machine, as shown in the Exhibit.

  Based on the exhibit, which three metrics can be used to determine the virtual machine's Workload characteristics? (Choose three.)

  A. CPU
  B. Memory
  C. Network I/O
  D. Threads
  E. vNUMA Stats
  A. CPU
  B. Memory
  C. Network I/O

  ---

  Virtual Machine Alert Definitions The vCenter adapter provides alert definitions that are generated on the virtual machines in your environment. Health/Symptom-based These alerts have the following impact and criticality information. Check the Link for detailed info: http://pubs.vmware.com/vrealizeoperationsmanager-61/index.jsp?topic=%2Fcom.vmware.vcom.core.doc%2FGUID-746FD64E-3380-44A6-A154-0BC63B4624F0.html

• Question 180:

  An administrator has decided to create 10 ESXi 6.x hosts via Auto Deploy for a new Test/Dev cluster. The hosts are configured to obtain their networking configuration via DHCP.

  Which Direct Console User Interface option should the administrator use to renew the DHCP lease for the hosts?

  A. Restore Network Settings
  B. Test Management Network
  C. Restart Management Network
  D. Network Restore Options
  C. Restart Management Network

  ---

  Restart the Management Network Restarting the management network interface might be required to restore networking or to renew a DHCP lease. Restarting the management network will result in a brief network outage that might temporarily affect running virtual machines. If a renewed DHCP lease results in a new network identity (IP address or host name), remote management software will be disconnected. Procedure

  1.

  From the direct console, select Restart Management Network and press Enter.

  2.

  Press F11 to confirm the restart.

  Reference: https://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc_50%2FGUID-E46F9F62-D1BB-4485-815D-08DBAE320CC3.html