2V0-21.23 practice questions 21–30

1. Question 21 · 110 in bank

   An administrator is tasked with configuring an appropriate Single Sign-On (SSO) solution for VMware vCenter based on the following criteria: The solution should support the creation of Enhanced Link Mode groups. All user accounts are stored within a single Active Directory domain and the solution must support only this Active Directory domain as the identity source. All user account password and account lockout policies must be managed within the Active Directory domain. The solution should support token-based authentication. Which SSO solution should the administrator choose based on the criteria?

   • AvCenter Identity Provider Federation with Active Directory Federation Services as the identity provider
   • BvCenter Single Sign-On with Active Directory over LDAP as the identity source
   • CvCenter Single Sign-On with Active Directory (Windows Integrated Authentication) as the identity source
   • DvCenter Identity Provider Federation with Active Directory over LDAP as the identity provider

   Show answer

   Answer: A

   Explanation

   „ In vCenter Server Identity Provider Federation, vCenter Server uses the OpenID Connect (OIDC) protocol to receive an identity token that authenticates the user with vCenter Server.“ Integrated Windows Authentication is deprecated since vSphere 7.0 https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.authentication.doc/GUID-157188E3-531C-4CC2-BDD4-8BF01EA26BDC.html

   Source: Adapted from community discussion — ktsky

   References

   • docs.vmware.com documentation
   • docs.vmware.com documentation
   • docs.vmware.com documentation
   • docs.vmware.com documentation

   Next question

2. Question 22 · 110 in bank

   An administrator is tasked with looking into the disaster recovery options for protecting a database server using VMware vSphere Replication. The following requirements must be met: The virtual machine must remain online during the protection. The virtual machine's snapshots must be used as part of the replication process. Which step must the administrator complete to accomplish this task?

   • AConfigure the virtual machine storage policy.
   • BEnable guest OS VSS quiescing for this virtual machine.
   • CPerform a full initial synchronization of the source virtual machine to the target location.
   • DConfigure network traffic isolation for vSphere Replication.

   Show answer

   Answer: B

   Explanation

   Guest OS VSS (Volume Shadow Copy Service) quiescing is essential for ensuring application-consistent backups of the virtual machine, especially when dealing with databases and other applications that rely on consistent disk states. When VSS quiescing is enabled, vSphere Replication coordinates with the guest operating system to create application-consistent snapshots, which are then used as part of the replication process. Enabling VSS quiescing helps ensure that the virtual machine remains online during the replication process and that the snapshots used for replication are consistent, minimizing the risk of data corruption and ensuring a more reliable disaster recovery solution. Options A, C, and D are not directly related to the specific requirements mentioned and do not address the need to maintain the virtual machine online during replication or utilize snapshots for the process.

   Source: Adapted from community discussion — DesolateMarauder

   References

   • docs.vmware.com documentation

   Next question

3. Question 23 · 110 in bank

   Select 3

   An administrator is working with VMware Support and is asked to provide log bundles for the ESXi hosts in an environment. Which three options does the administrator have? (Choose three.)

   • AGenerate a combined log bundle for all ESXi hosts using the vCenter Management Interface.
   • BGenerate a separate log bundle for each ESXi host using the vSphere Host Client.
   • CGenerate a combined log bundle for all ESXi hosts using the vSphere Client.
   • DGenerate a separate log bundle for each ESXi host using the vSphere Client.
   • EGenerate a separate log bundle for each ESXi host using the vCenter Management Interface.
   • FGenerate a combined log bundle for all ESXi hosts using the vSphere Host Client.

   Show answer

   Answer: BCD

   Explanation

   A. Incorrect: The vCenter Management Interface does not have an option to generate a combined log bundle for all ESXi hosts. B. Correct: The vSphere Host Client allows administrators to generate separate log bundles for each ESXi host individually, making it easier to troubleshoot specific issues on individual hosts. C. Correct: The vSphere Client allows administrators to generate a combined log bundle that includes logs from all ESXi hosts in the environment. This option is useful when VMware Support needs to analyze the logs from multiple hosts together. D. Correct: The vSphere Client also allows administrators to generate separate log bundles for each ESXi host. This option is useful when VMware Support requires logs from specific hosts. E. Incorrect: As mentioned earlier, the vCenter Management Interface does not have an option to generate log bundles for all ESXi hosts. F. Incorrect: Similarly, the vSphere Host Client does not have an option to generate a combined log bundle for all ESXi hosts.

   Source: Adapted from community discussion — DesolateMarauder

   Next question

4. Question 24 · 110 in bank

   An administrator must gracefully restart a virtual machine (VM) through the vSphere Client but the option is greyed out. The administrator has full administrative access on VMware vCenter and all the objects available in vCenter, but has no access to log onto the operating system. Which action should the administrator take to meet the objective?

   • AUpgrade the virtual hardware
   • BMigrate the VM to another host
   • CInstall VMware Tools
   • DRestart vCenter

   Show answer

   Answer: C

   Explanation

   D. Migrating to another host seems like the sensible option, but this KB suggests Restarting the vCenter might be the answer. https://kb.vmware.com/s/article/82562 I'm guessing that if the issue is communication between the vCenter and the Host, a vMotion could become stuck if you're unlucky. As for installing the tools, you need to have access to the OS to do so.

   Source: Adapted from community discussion — mkhlszf

   Next question

5. Question 25 · 110 in bank

   Select 2

   An administrator is tasked with installing VMware vCenter. The vCenter Server Appliance must support an environment of: 400 hosts 4000 virtual machines Which two resources must be allocated, at a minimum, to meet the requirements? (Choose two.)

   • A16 vCPUs
   • B30 GB Memory
   • C4 vCPUs
   • D8 vCPUs
   • E20 GB Memory

   Show answer

   Answer: BD

   Explanation

   For the lazy: Tiny (10 hosts 100 VMs): 2 vCPUs & 14GB RAM Small (100 hosts 1000 VMs): 4 vCPUs & 21GB RAM Medium (400 hosts 4000 VMs): 8 vCPUs & 30GB RAM Large (1000 hosts 10000 VMs): 16 vCPUs & 39GB RAM X-Large (2000 hosts 35000 VMs): 24 vCPUs & 58GB RAM

   Source: Adapted from community discussion — cwilson91

   References

   • docs.vmware.com documentation
   • docs.vmware.com documentation
   • docs.vmware.com documentation

   Next question

6. Question 26 · 110 in bank

   Which VMware offering will allow an administrator to manage the lifecycle of multiple vCenter Server instances in a single software as a service (SaaS)-based solution to help drive operational efficiency?

   • AVMware vSphere with Tanzu
   • BVMware Cloud Foundation
   • CVMware vSphere+
   • DVMware Aria Suite Lifecycle

   Show answer

   Answer: C

   Explanation

   C: VCF is not SaaS, so it cannot be the answer. VCF includes the management domain and multiple workload domains. While VCF does use LCM to manage vCenter lifecycle, it is on-prem only (for now) and is not SaaS based. That only leave vSphere+. See the video in this link about upgrading remote vCenters managed by vSphere+. https://www.vmware.com/products/vsphere/vsphere-plus.html

   Source: Adapted from community discussion — michael24

   References

   • docs.vmware.com documentation
   • docs.vmware.com documentation

   Next question

7. Question 27 · 110 in bank

   Which feature would allow for the non-disruptive migration of a virtual machine between two clusters in a single VMware vCenter instance?

   • AvSphere vMotion
   • BCross vCenter Migration
   • CvSphere Storage vMotion
   • DvSphere Fault Tolerance

   Show answer

   Answer: A

   Explanation

   vSphere vMotion is a feature that enables the live migration of a running virtual machine from one host to another within a cluster or between clusters within a single vCenter instance.

   Source: Adapted from community discussion — ABCACB

   Next question

8. Question 28 · 110 in bank

   Select 4

   Which four elements can a vSphere Lifecycle Manager image contain? (Choose four.)

   • AESXi base image
   • BESXi configuration
   • CVendor agents
   • DVendor add-ons
   • EBIOS updates
   • FFirmware and drivers add-on
   • GIndependent components

   Show answer

   Answer: ADFG

   Explanation

   A vSphere Lifecycle Manager image can consist of the following four elements: ESXi base image The base image contains an image of VMware ESXi Server and additional components, such as drivers and adapters that are necessary to boot a server. The base image is the only mandatory element in a vSphere Lifecycle Manager image. All other elements are optional. Vendor add-on The vendor add-on is a collection of software components that OEMs create and distribute. The vendor add-on can contain drivers, patches, and solutions. Firmware and drivers add-on The firmware and drivers add-on is a special type of vendor add-on designed to assist in the firmware update process. The firmware and drivers add-on contains firmware for a specific server type and corresponding drivers. To add a firmware and drivers add-on to your image, you must install the hardware support manager plug-in provided by the hardware vendor for the hosts in the respective cluster. Independent components The component is the smallest discrete unit in an image. The independent components that you add to an image contain third-party software, for example drivers or adapters.

   Source: Adapted from community discussion — ABCACB

   References

   • docs.vmware.com documentation
   • docs.vmware.com documentation

   Next question

9. Question 29 · 110 in bank

   If a distributed switch uses the “Route based on physical NIC load” load balancing algorithm, what does the mean send or receive utilization of an uplink need to exceed for the flow of traffic to move to the second uplink?

   • A75 percent of the capacity over a 30 second period
   • B60 percent of the capacity over a 30 second period
   • C60 percent of the capacity over a 40 second period
   • D75 percent of the capacity over a 40 second period

   Show answer

   Answer: A

   Explanation

   The distributed switch calculates uplinks for virtual machines by taking their port ID and the number of uplinks in the NIC team. The distributed switch tests the uplinks every 30 seconds, and if their load exceeds 75 percent of usage, the port ID of the virtual machine with the highest I/O is moved to a different uplink. https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-networking/GUID-959E1CFE-2AE4-4A67-B4D4-2D2E13765715.html

   Source: Adapted from community discussion — Kiko

   References

   • docs.vmware.com documentation
   • docs.vmware.com documentation
   • docs.vmware.com documentation

   Next question

10. Question 30 · 110 in bank

    Select 4

    An administrator manually configures a reference ESXi host that meets company security standards for vSphere environments. The administrator now needs to apply all of the security standards to every identically configured host across multiple vSphere clusters within a single VMware vCenter instance. Which four steps would the administrator complete to meet this requirement? (Choose four.)

    • AExtract the host profile from the reference host.
    • BExport the host profile from vCenter.
    • CImport host customization on the reference host.
    • DAttach the host profile to each cluster that requires the secure configuration.
    • ECheck the compliance of each host against the host profile.
    • FReset host customization on the reference host.
    • GRemediate all non-compliant hosts.

    Show answer

    Answer: ADEG

    Explanation

    Correct (A)Create a Host Profile (D)Attach or Detach Hosts and Clusters to a Host Profile (E)Check Compliance (G)Remediate a Host

    Source: Adapted from community discussion — ABCACB

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

2V0-21.23 practice, question 21. 110 questions available.