Security, Lifecycle, and Monitoring
Free VMware Certified Professional - Data Center Virtualization (vSphere 8) practice — 6 questions on Security, Lifecycle, and Monitoring, with explanations. No sign-up. Full 12-question mixed test →
A business-critical VM configured with 8 vCPUs runs on a heavily consolidated ESXi host. Users report intermittent slowness. In esxtop's CPU view, the VM's %RDY value is consistently above 1000 (roughly 12-15% per vCPU), while %USED is low. Which action BEST resolves the root cause of this performance issue?
High %RDY with low %USED indicates the VM's vCPUs are spending time waiting for the physical CPU scheduler due to over-provisioning/overcommitment. Right-sizing the VM (reducing vCPU count) reduces co-scheduling overhead and lets the hypervisor schedule the workload more efficiently.
An organization requires that the vCenter Server Machine SSL certificate be signed by their internal corporate CA for compliance, but wants to continue using VMCA to automatically issue and manage all ESXi host certificates with minimal administrative overhead. Which approach satisfies both requirements?
vSphere Certificate Manager allows selective replacement of the Machine SSL certificate with a custom CA-signed certificate while VMCA continues issuing and managing ESXi host certificates independently — a supported hybrid configuration.
Before remediating a vLCM cluster-level image to a newer ESXi version, an administrator wants to verify that all host firmware and driver combinations reported by the vendor's Hardware Support Manager are compatible with the target image. Which vLCM feature provides this validation?
The vLCM hardware compatibility check, which integrates with a registered Hardware Support Manager, validates firmware and driver compatibility across cluster hosts against the desired image before remediation.
An administrator enables Strict Lockdown Mode on an ESXi host that is managed by vCenter Server. What is the resulting behavior regarding the Direct Console User Interface (DCUI)?
Strict Lockdown Mode stops the DCUI service entirely, removing local console management as an option; the host must be managed exclusively through vCenter Server (or via the vpxuser account).
A vSphere administrator assigns a user the 'Virtual Machine Power User' role directly on a VM folder object but leaves the 'Propagate to children' checkbox unchecked. What effect does this have on the VMs contained within that folder?
vSphere permissions apply only to the object they are assigned to unless 'Propagate to children' is enabled. Without propagation, the role granted on the folder does not extend to child objects such as the VMs it contains, leaving the user with no rights on them.
While troubleshooting slow VM disk I/O, an administrator runs esxtop and observes for a datastore device: GAVG/cmd = 45ms, DAVG/cmd = 40ms, KAVG/cmd = 5ms. What does this data indicate about where the latency is occurring?
GAVG (total guest latency) is composed of DAVG (device/array latency) plus KAVG (kernel latency). Since DAVG (40ms) accounts for nearly all of GAVG (45ms) while KAVG (5ms) is low, the bottleneck lies at the physical storage device or array, not within the ESXi kernel.
Ready for the real thing?
The full course has two full-length practice tests, video lessons for every exam domain, hands-on labs and detailed answer explanations.
Start my full course on Udemy →