VMware 2V0-621 Online Practice Questions and Exam Preparation

VMware 2V0-621 Online Questions & Answers

• Question 31:

  Refer to the Exhibit.

  

  The Exhibit shows the status of vmhba32 and vmhba33 as Unbound.

  What is a likely reason for this status?

  A. The host bus adapter is not associated with a vmknic.
  B. The Dynamic Target Discovery was not configured.
  C. The Static Target Discovery was not configured.
  D. The host bus adapter is not associated with a vmnic.
  A. The host bus adapter is not associated with a vmknic.

  ---

  For sharing a volume across hosts, a VMFS volume is bound to its underlying block device storage. When a low level block copy is performed to copy or move the VMFS volume, the copied volume will be unbound. When using Broadcom

  network interfaces with Hardware iSCSI Offload capabilities such as BCM5709 and BCM57711, each of the network interfaces shows up as individual storage adapters in the Configuration tab of an ESX host and each adapter also has an

  individual IQN. However, when you configure the adapter for iSCSI, you observe these symptoms:

  You are unable to add any discovery addresses.

  When observing the Dynamic or Static Discovery tabs in the iSCSI Initiator Properties window, you see the message:

  The host bus adapter is not associated with a vmknic. To configure targets the adapter should be associated with a vmknic. Refer to the VMware documentation to associate the adapter with a vmknic.

  vSphere 6.0 Documentation Center - VMware

  www.vmware.com/a/info/?id=1320

• Question 32:

  After deploying a vSphere Platform Services Controller (PSC), an administrator is unable to install vCenter Server. The error displayed is: Could not contact Lookup Service. Please check VM_ssoreg.log.

  Which two actions can be taken to correct this problem? (Choose two.)

  A. Verify that the clocks on the host machines running the PSC, vCenter Server, and the vSphere Web Client are synchronized.
  B. Configure a valid Identity Source for the Platform Services Controller in the vSphere Web Client.
  C. Ensure that there is no firewall blocking port 7444 between the PSC and vCenter Server.
  D. Uninstall and reinstall the Platform Services Controller software.
  A. Verify that the clocks on the host machines running the PSC, vCenter Server, and the vSphere Web Client are synchronized.
  C. Ensure that there is no firewall blocking port 7444 between the PSC and vCenter Server.

  ---

  1.

  Verify that the clocks on the host machines running vCenter Single Sign-On, vCenter Server, and the Web Client are synchronized.

  2.

  View the specific log file found in the error message.

  In the message, system temporary folder refers to %TEMP%.

  3.

  Within the log file, search for the following messages.

  The log file contains output from all installation attempts. Locate the last message that shows Initializing registration provider...

  

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-B8D60389-AF95-4368-8AB2-D282CBE0C4A9.html

• Question 33:

  Which three statements are true when restoring a Resource Pool Tree? (Choose three.)

  A. Distributed Resource Scheduler must be set to manual.
  B. Restoring a snapshot can only be done on the same cluster from which it was taken.
  C. No other resource pools can be present in the cluster.
  D. Restoring a resource pool tree must be done in the vSphere Web Client.
  E. Enabling Enhanced vMotion Compatibility on the cluster is required.
  B. Restoring a snapshot can only be done on the same cluster from which it was taken.
  C. No other resource pools can be present in the cluster.
  D. Restoring a resource pool tree must be done in the vSphere Web Client.

  ---

  Restore a Resource Pool Tree in the vSphere Web Client You can restore a previously saved resource pool tree snapshot. Prerequisites

  1.

  vSphere DRS must be turned ON.

  2.

  You can restore a snapshot only on the same cluster that it was taken.

  3.

  No other resource pools are present in the cluster.

  Reference: https://pubs.vmware.com/vsphere51/index.jsp?topic=%2Fcom.vmware.vsphere.resmgmt.doc%2FGUID-43B3A1EF-B7FF-421C-96FA-33FA230688BB.html

• Question 34:

  An administrator wants to configure an ESXi 6.x host to use Active Directory (AD) to manage users and groups. The AD domain group ESX Admins was previously created.

  Which two conditions should be considered when planning this configuration? (Choose two.)

  A. If administrative access for ESX Admins is not desired, an alternate AD group must be used.
  B. The users in ESX Admins are granted administrative privileges in vCenter Server.
  C. The users in ESX Admins are not restricted by Lockdown Mode.
  D. An ESXi host provisioned with Auto Deploy cannot store AD credentials.
  A. If administrative access for ESX Admins is not desired, an alternate AD group must be used.
  D. An ESXi host provisioned with Auto Deploy cannot store AD credentials.

  ---

  By default, an ESX/ESXi 4.1 and ESXi 5.x/6.x host joined to an AD domain queries the domain for the ESX Admins group and this behavior is not configurable. If the group exists in AD, it is granted the Administrator role on the host and any user accounts in that group gets full administrative privileges on the host and can log in to the host through SSH. Reference https://kb.vmware.com/s/article/1025569

• Question 35:

  Which three components should an administrator select when configuring vSphere permissions? (Choose three.)

  A. Inventory Object
  B. Role
  C. User/Group
  D. Privilege
  E. Password
  B. Role
  C. User/Group
  D. Privilege

  ---

  To manage permissions from the vSphere Web Client, you need to understand the following concepts: Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-3B78EEB3-23E2-4CEB-9FBD-E432B606011A.html

  

• Question 36:

  An administrator would like to use a passphrase for their ESXi 6.x hosts which has these characteristics:

  1.

  Minimum of 21 characters

  2.

  Minimum of 2 words

  Which advanced options must be set to allow this passphrase configuration to be used?

  A. retry=3 min=disabled, disabled, 7, 21, 7 passphrase=2
  B. retry=3 min=disabled, disabled, 21, 7, 7 passphrase=2
  C. retry=3 min=disabled, disabled, 2, 21, 7
  D. retry=3 min=disabled, disabled, 21, 21, 2
  B. retry=3 min=disabled, disabled, 21, 7, 7 passphrase=2

  ---

  B-) ESXi Passwords and Account Lockout For ESXi hosts, you have to use a password with predefined requirements. You can change the required length and character class requirement or allow pass phrases using the Security.PasswordQualityControl advanced option.ESXi uses the Linux PAM module pam_passwdqc for password management and control. See the manpages for pam_passwdqc for detailed information. ESXi Passwords: ESXi enforces password requirements for direct access from the Direct Console User Interface, the ESXi Shell, SSH, or the vSphere Client. When you create a password, include a mix of characters from four character classes: lowercase letters, uppercase letters, numbers, and special characters such as underscore or dash.(link : https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-DC96FFDB-F5F2- 43EC-8C73-05ACDAE6BE43.html)

• Question 37:

  Which two are valid compliance results that indicate the need to apply a Host Profile? (Choose two.)

  A. Non-compliant
  B. Inconsistent
  C. Unknown
  D. Disconnected
  A. Non-compliant
  C. Unknown

  ---

  Check Compliance You can confirm the compliance of a host or cluster to its attached Host Profile and determine which, if any, configuration parameters on a host are different from those specified in the Host Profile. Procedure

  1.

  Navigate to a Host Profile. The Objects tab lists all Host Profies, the number or hosts attached to that Host Profile, and summarized results of the last compliance check.

  2.

  Click the Check Host Profile Compliance icon ( ).

  In the Objects tab, the compliance status is updated as Compliant, Unknown, or Non-compliant. A non-compliant status indicates a discovered and specific inconsistency between the profile and the host. To resolve this, you should remediate

  the host. And unknown status indicates that the compliance of the host could not be verified; to resolve the issue, remediate the host through the Host Profile.

  Reference: https://pubs.vmware.com/vsphere-60/topic/com.vmware.ICbase/PDF/vsphere-esxi-vcenter-server-60-host-profiles-guide.pdf

• Question 38:

  An administrator is building a large virtual machine that will require as many vCPUs as the host can support. An ESXi 6.x host has these specifications:

  1.

  Four 24-core Intel Xeon Processors

  2.

  256 GB of Memory

  3.

  512 GB Local disk space using VMFS5

  What is the maximum number of virtual CPUs that the virtual machine can be allocated?

  A. 64
  B. 96
  C. 128
  D. 192
  C. 128

  ---

  Reference: https://www.vmware.com/pdf/vsphere6/r60/vsphere-60-configuration-maximums.pdf page 9

• Question 39:

  An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments.

  Which statement best describes how the administrator would accomplish this?

  A. Assign a Global Permission to the user.
  B. Assign a vCenter Permission to the user.
  C. Assign vsphere.local membership to the user.
  D. Assign an ESXi Permission to the user.
  A. Assign a Global Permission to the user.

  ---

  Global Permissions Global permissions are applied to a global root object that spans solutions, for example, both vCenter Server and vCenter Orchestrator. Use global permissions to give a user or group privileges for all objects in all object hierarchies. Each solution has a root object in its own object hierarchy. The global root object acts as a parent object to each solution object. You can assign global permissions to users or groups, and decide on the role for each user or group. The role determines the set of privileges. You can assign a predefined role or create custom roles. See Using Roles to Assign Privileges. It is important to distinguish between vCenter Server permissions and global permissions.

  

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-C7702E31-1623-4189-89CB-E1136AA27972.html

• Question 40:

  An administrator wants to provide users restricted access. The users should only be able to perform the following tasks:

  1.

  Create and consolidate virtual machine snapshots

  2.

  Add/Remove virtual disks

  3.

  Snapshot Management

  Which default role in vCenter Server would meet the administrator's requirements for the users?

  A. Virtual machine user
  B. Virtual machine power user
  C. Virtual Datacenter administrator
  D. VMware Consolidated Backup user
  B. Virtual machine power user

  ---

  Virtual Machine Power User: A sample role that grants a user access rights only to virtual machines; can alter the virtual hardware or create snapshots of the VM Reference: https://communities.vmware.com/thread/480179?start=0andtstart=0

  https://www.pluralsight.com/blog/tutorials/vmware-access-control-101-roles-and-permissions