VMware 2V0-621 Online Practice Questions and Exam Preparation

VMware 2V0-621 Online Questions & Answers

• Question 81:

  To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)

  A. ideX:Y.present
  B. serial.present
  C. vmnicX:Y.present
  D. keyboard.present
  A. ideX:Y.present
  B. serial.present

• Question 82:

  When attempting to connect to a vCenter Server, an administrator observes the following at the top of the vSphere Web Client:

  Could not connect to one or more vCenter Server Systems:https://vCenter.corp.com:443/sdk

  What three reasons could be preventing the vSphere Web Client from communicating with this vCenter Server? (Choose three.)

  A. The vCenter Server machine is not responding via the network.
  B. An incorrect entry for this vCenter Server exists in the Single Sign-On service.
  C. The SSL certificates do not match the FQDN address for the server.
  D. The Platform Services Controller is external to this vCenter Server.
  E. The DNS entry for the vCenter Server is incorrect.
  A. The vCenter Server machine is not responding via the network.
  B. An incorrect entry for this vCenter Server exists in the Single Sign-On service.
  C. The SSL certificates do not match the FQDN address for the server.

  ---

  This issue occurs in these situations:

  1.

  During the re-installation of vCenter Server, it is possible to have the same vCenter Server registered more than once to Single Sign-On (SSO).

  2.

  With a previous install of vCenter Server, SSL certificates are not overwritten or removed properly during an upgrade or re-installation.

  Note: If there are previous issues with the certificates, they may not be exposed until the installation and use of the 5.1 Web Client.

  Before proceeding with the steps in the Resolution section, ensure that you are not experiencing the issue identified in vSphere Web Client 5.1 reports this SSL warning after an installation or upgrade: Failed to verify the SSL certificate for

  one or more vCenter Server Systems (2036505).

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=2050273

• Question 83:

  Which two advanced features should be disabled for virtual machines that are only hosted on a vSphere system? (Choose two.)

  A. isolation.tools.unity.push.update.disable
  B. isolation.tools.ghi.launchmenu.change
  C. isolation.tools.bbs.disable
  D. isolation.tools.hgfsServerSet.enable
  A. isolation.tools.unity.push.update.disable
  B. isolation.tools.ghi.launchmenu.change

  ---

  Disable Unexposed Features VMware virtual machines are designed to work on both vSphere systems and hosted virtualization platforms such as Workstation and Fusion. Certain VMX parameters do not need to be enabled when you run a virtual machine on a vSphere system. Disable these parameters to reduce the potential for vulnerabilities. Prerequisites Turn off the virtual machine. Procedure

  

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-60E83710-8295-41A2-9C9D-83DEBB6872C2.html

• Question 84:

  Refer to the Exhibit.

  

  An administrator wants to increase the capacity of a VMFS5 datastore; but the Increase Size by slider is not available, as shown in the Exhibit.

  How should the administrator resolve this problem?

  A. Select a valid partition configuration from the drop-down menu.
  B. Use fdisk utility to manually resize the partition.
  C. Use the mouse to resize the partition indicated in the Partition Layout.
  D. Clicking Next will prompt for available usable space.
  A. Select a valid partition configuration from the drop-down menu.

  ---

  Procedure

  1.Select the datastore to grow and click the Increase Datastore Capacity icon.

  2.Select a device from the list of storage devices.

  Your selection depends on whether an expandable storage device is available.

  Choose the options from Drop down menu list:

  Check the link:

  https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.storage.doc%2FGUID-D57FEF5D-75F1-433D-B337-E760732282FC.html

• Question 85:

  Strict Lockdown Mode has been enabled on an ESXi host.

  Which action should an administrator perform to allow ESXi Shell or SSH access for users with administrator privileges?

  A. Grant the users the administrator role and enable the service.
  B. Add the users to Exception Users and enable the service.
  C. No action can be taken, Strict Lockdown Mode prevents direct access.
  D. Add the users to vsphere.local and enable the service.
  B. Add the users to Exception Users and enable the service.

  ---

  Strict Lockdown mode:

  In strict lockdown mode the DCUI service is stopped. If the connection to vCenter Server is lost and the vSphere Web Client is no longer available, the ESXi host becomes unavailable unless the ESXi Shell and SSH services are enabled and Exception Users are defined. If you cannot restore the connection to the vCenter Server system, you have to reinstall the host.

  Reference: https://kb.vmware.com/selfservice/microsites/search.do?language=en_USandcmd=displayKCandexternalId=1008077

• Question 86:

  What three supported methods can be used to upgrade a host from ESXi 5.x to ESXi 6.x? (Choose three.)

  A. vSphere Update Manager
  B. vihostupdate
  C. esxcli
  D. vSphere Auto Deploy
  E. esxupdate
  A. vSphere Update Manager
  C. esxcli
  D. vSphere Auto Deploy

  ---

  Upgrade Options for ESXi 6.0

  VMware provides several ways to upgrade ESXi 5.x hosts to ESXi 6.0 hosts.

  The details and level of support for an upgrade to ESXi 6.0 depend on the host to be upgraded and the upgrade method that you use. Verify support for the upgrade path from your current version of ESXi to the version to which you are

  upgrading. See VMware Product Interoperability Matrixes athttp://www.vmware.com/resources/compatibility/sim/interop_matrix.php. You can upgrade a ESXi 5.x host, asynchronously released driver or other third-party customizations,

  interactive upgrade from CD or DVD, scripted upgrade, or upgrade with vSphere Update Manager. When you upgrade an ESXi 5.x host that has custom VIBs to version 6.0, the custom VIBs are migrated. See Upgrading Hosts That Have

  Third-Party Custom VIBs.

  Methods supported for direct upgrade to ESXi 6.0 are:

  vSphere Update Manager.

  Interactive upgrade from CD, DVD, or USB drive.

  Scripted upgrade.

  vSphere Auto Deploy. If the ESXi 5.x host was deployed by using vSphere Auto Deploy, you can use vSphere Auto Deployto reprovision the host with an ESXi 6.0 image.

  The esxcli command.

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.upgrade.doc%2FGUID-FE668788-1F32-4CB2-845C-5547DD59EB48.html

• Question 87:

  To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)

  A. keyboard.present
  B. vmnicX:Y.present
  C. ideX:Y.present
  D. serial.present
  C. ideX:Y.present
  D. serial.present

  ---

  Removing Unnecessary Hardware Devices

  Any enabled or connected device represents a potential attack channel. Users and processes without privileges on a virtual machine can connect or disconnect hardware devices, such as network adapters and CD-ROM drives. Attackers can

  use this capability to breach virtual machine security. Removing unnecessary hardware devices can help prevent attacks.

  Use the following guidelines to increase virtual machine security.

  1.

  Ensure that unauthorized devices are not connected and remove any unneeded or unused hardware devices.

  2.

  Disable unnecessary virtual devices from within a virtual machine. An attacker with access to a virtual machine can connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive, or disconnect a network adapter to isolate the virtual machine from its network, resulting in a denial of service.

  3.

  Ensure that no device is connected to a virtual machine if it is not required. Serial and parallel ports are rarely used for virtual machines in a datacenter environment, and CD/DVD drives are usually connected only temporarily during software installation.

  4.

  For less commonly used devices that are not required, either the parameter should not be present or its value must be false. Ensure that the following parameters are either not present or set to false unless the device is required.

  

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-822B2ED3-D8D2-4F57-8335-CA46E915A729.html

• Question 88:

  What is the compression algorithm used by vSphere Replication to compress data at the source?

  A. FastLZ
  B. Lz4
  C. Lzr
  D. Lzx
  A. FastLZ

  ---

  vSphere Replication 6.0 utilizes the FastLZ compression library. This provides a nice balance of speed, minimal CPU overhead, and compression efficiency. When using vSphere 6.0 and vSphere Replication 6.0 at both the source and target locations, updates are compressed at the source and stay compressed until they are written to storage at the target. In cases where there is a mixed configuration, packets may be decompressed at some point in the replication path. For example, if a vSphere 6.0 host is connecting to a vSphere Replication 5.8 virtual appliance, packets will not be compressed over the network. Another example: vSphere 6.0 replicating to a vSphere Replication 6.0 virtual appliance, which is writing to vSphere 5.5 host storage ?packets are compressed from the source to the vSphere Replication 6.0 virtual appliance, but are decompressed in the appliance before being written to the vSphere 5.5 storage at the target. Performing this decompression in the vSphere Replication virtual appliance will cause higher vCPU utilization in the appliance. As you can imagine, the most benefit from compression will be realized when running vSphere 6.0 and vSphere Replication

  6.0 at both the source and target locations.

  Reference: https://blogs.vmware.com/vsphere/2015/03/vr-60-compression.html

• Question 89:

  Refer to the Exhibit.

  

  An administrator is configuring a storage device as shown in the Exhibit. What is the expected effect on the stated device after running the command?

  A. I/O will rotate on all storage targets regardless of port group state.
  B. I/O will rotate on all storage targets that are Active Optimized state only.
  C. I/O will rotate on all storage targets that are Active Unoptimized state only.
  D. I/O will rotate on all storage targets that are on Available Nodes only.
  B. I/O will rotate on all storage targets that are Active Optimized state only.

  ---

  

  Reference: https://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vcli.ref.doc_50%2Fesxcli_storage.html

• Question 90:

  An administrator tries to connect the vSphere 5.5 Client to an ESXi 6.x host. What will happen when this takes place?

  A. The operation will fail, since the vSphere Client is deprecated in vSphere 6.x.
  B. The operation will fail and the administrator will need to delete the client and install the 6.x version.
  C. The operation will prompt the administrator to run a script to upgrade the vSphere Client.
  D. The operation will update the vSphere Client silently in the background, then connect.
  C. The operation will prompt the administrator to run a script to upgrade the vSphere Client.

  ---

  Whenever a user tries to connect to a higher version of the ESXI host, the user will be prompted to upgrade to the higher version to escape the compatibility issues.