VMware VMware Certifications 2V0-621 Questions & Answers

• Question 71:

  What are two limitations of Link Aggregation Control Protocol (LACP) on a vSphere Distributed Switch? (Choose two.)

  A. IP Hash load balancing is not a supported Teaming Policy.

  B. Software iSCSI multipathing is not compatible.

  C. Link Status Network failover detection must be disabled.

  D. It does not support configuration through Host Profiles.

  Correct Answer: BD

  LACP Limitations on a vSphere Distributed Switch Link Aggregation Control Protocol (LACP) on a vSphere distributed switch allows network devices to negotiate automatic bundling of links by sending LACP packets to a peer. However, there are some limitations when using LACP with a vSphere distributed switch.

  1.

  LACP only works with IP Hash load balancing and Link Status Network failover detection.

  2.

  LACP is not compatible with iSCSI software multipathing.

  3.

  vSphere only supports one LACP group per distributed switch, and only one LACP group per host.

  4.

  LACP settings do not exist in host profiles.

  5.

  LACP between two nested ESXi hosts is not possible.

  6.

  LACP does not work with port mirroring.

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.networking.doc% 2FGUID-3FDE1E96-9217-4FE6-8B76-6E3A64766828.html

• Question 72:

  Which three traffic types can be configured for dedicated VMkernel adapters? (Choose three.)

  A. Discovery traffic

  B. vMotion traffic

  C. vSphere Replication NFC traffic

  D. Provisioning traffic

  E. vSphere Custom traffic

  Correct Answer: BCD

  Securing System Traffic

  Take appropriate security measures to prevent unauthorized access to the management and system traffic

  in your vSphere environment. For example, isolate the vMotion traffic in a separate network that includes

  only the ESXi hosts that participate in the migration. Isolate the management traffic in a network that only

  network and security administrators are able to access. For more information, see vSphere Security and

  vSphere Installation and Setup.

  System Traffic Types

  You should dedicate a separate VMkernel adapter for every traffic type. For distributed switches, dedicate

  a separate distributed port group for each VMkernel adapter.

  Management traffic

  Carries the configuration and management communication for ESXi hosts, vCenter Server, and host-tohost High Availability traffic. By default, when you install the ESXi software, a vSphere Standard switch is

  created on the host together with a VMkernel adapter for management traffic. To provide redundancy, you

  can connect two or more physical NICs to a VMkernel adapter for management traffic.

  vMotion traffic

  Accommodates vMotion. A VMkernel adapter for vMotion is required both on the source and the target

  hosts. The VMkernel adapters for vMotion should handle only the vMotion traffic. For better performance,

  you can configure multiple NIC vMotion. To have multi NIC vMotion, you can dedicate two or more port

  groups to the vMotion traffic, respectively every port group must have a vMotion VMkernel adapter

  associated with it. Then you can connect one or more physical NICs to every port group. In this way,

  multiple physical NICs are used for vMotion, which results in greater bandwidth.

  Note

  vMotion network traffic is not encrypted. You should provision secure private networks for use by vMotion

  only.

  Provisioning traffic

  Handles the data that is transferred for virtual machine cold migration, cloning, and snapshot creation.

  IP storage traffic and discovery

  Handles the connection for storage types that use standard TCP/IP networks and depend on the VMkernel

  networking. Such storage types are software iSCSI, depended hardware iSCSI, and NFS. If you have two

  or more physical NICs for iSCSI, you can configure iSCSI multipathing.ESXi hosts support only NFS

  version 3 over TCP/IP. To configure a software FCoE (Fibre Channel over Ethernet) adapter, you must

  have a dedicated VMkernel adapter. Software FCoE passes configuration information though the Data

  Center Bridging Exchange (DCBX) protocol by using the Cisco Discovery Protocol (CDP )VMkernel

  module.

  Fault Tolerance traffic

  Handles the data that the primary fault tolerant virtual machine sends to the secondary fault tolerant virtual

  machine over the VMkernel networking layer. A separate VMkernel adapter for Fault Tolerance logging is

  required on every host that is part of a vSphere HA cluster.

  vSphere Replication traffic

  Handles the outgoing replication data that the source ESXi host transfers to the vSphere Replication

  server. Dedicate a VMkernel adapter on the source site to isolate the outgoing replication traffic.

  vSphere Replication NFC traffic

  Handles the incoming replication data on the target replication site.

  Virtual SAN traffic

  Every host that participates in a Virtual SAN cluster must have a VMkernel adapter to handle the Virtual

  SAN traffic.

  Reference:

  https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.networking.doc%

  2FGUID-D4191320-209E-4CB5-A709-C8741E713348.html

• Question 73:

  Which secondary Private VLAN (PVLAN) type can communicate and send packets to an Isolated PVLAN?

  A. Community

  B. Isolated

  C. Promiscuous

  D. Primary

  Correct Answer: C

  Private VLANs Private VLANs are used to solve VLAN ID limitations and waste of IP addresses for certain network setups.

  A private VLAN is identified by its primary VLAN ID. A primary VLAN ID can have multiple secondary VLAN IDs associated with it. Primary VLANs are Promiscuous, so that ports on a private VLAN can communicate with ports configured as the primary VLAN. Ports on a secondary VLAN can be either Isolated, communicating only with promiscuous ports, or Community, communicating with both promiscuous ports and other ports on the same secondary VLAN.

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.networking.doc% 2FGUID-A9287D46-FDE0-4D64-9348-3905FEAC7FAE.html

• Question 74:

  An administrator is changing the settings on a vSphere Distributed Switch (vDS). During this process, the ESXi Management IP address is set to an address which can no longer communicate with the vCenter Server.

  What is the most likely outcome of this action?

  A. The host will disconnect from the vCenter Server and remain disconnected.

  B. The host will automatically detect the communication issue and revert the change.

  C. The host will stay connected with the change, but show an alert.

  D. The host will disconnect and migrate the vDS portgroup to a standard switch.

  Correct Answer: B

  Explanation: Procedure

  1.

  Connect to the DCUI of the host.

  2.

  From the Network Restore Options menu, select Restore vDS.

  3.

  Configure the uplinks and optionally the VLAN for the management network.

  4.

  Apply the configuration.

  The DCUI creates a local ephemeral port and applies the values you provided for the VLAN and uplinks.

  The DCUI moves the VMkernel adapter for the management network to the new local port to restore

  connectivity to vCenter Server.

  Next Steps:

  After the connection of the host to vCenter Server is restored, correct the configuration of the distributed

  port group and re-add the VMkernel adapter to the group. For information about networking rollback,

  recovery, and restore, see the vSphere Networking documentation: Wait until vCenter Server applies the

  settings within the next 24 hours.

• Question 75:

  Refer to the Exhibit.

  

  An administrator is adding an Active Directory over LDAP Identity Source for vCenter Single Sign-On, as indicated in the Exhibit.

  What is the correct value to configure for the Domain alias?

  A. The domain's NetBIOS name.

  B. The fully qualified domain name.

  C. vsphere.local

  D. A user defined label.

  Correct Answer: A

  Domain alias

  (Optional) The domain's NetBIOS name.

  Reference:

  https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUIDB23B1360-8838-4FF2-B074-71643C4CB040.html

• Question 76:

  Which three connection types are supported between a remote site and vCloud Air? (Choose three.)

  A. Secure Internet Connectivity

  B. Private Connect

  C. Direct Connect

  D. Internet Connectivity

  E. Secure VPN

  Correct Answer: ACE

  

  Reference: http://pubs.vmware.com/vca/topic/com.vmware.ICbase/PDF/vcloud_air_networking_guide.pdf

• Question 77:

  An administrator subscribes to the vCloud Air Disaster Recovery service. Which replicated objects can be directly monitored and managed?

  A. Virtual machine Snapshots

  B. vApps

  C. Virtual machines

  D. ESXi Hosts

  Correct Answer: C

  VMware provides a disaster recovery service that lets you protect your workloads from a disaster or disruptive event by replicating them to the cloud. You can replicate virtual machines from your vSpherebased source site to vCloud Air, and recover and use the replicated virtual machines in the cloud if the source site is unavailable. The Disaster Recovery service is based on vSphere Replication, an extension to VMware vSphere that provides hypervisor-based virtual machine replication and recovery. You use vSphere Replication at your source site to configure your environment and replicate virtual machines to vCloud Air. You can use vSphere Replication, thevCloud Air portal, or the vCloud Air plug-in to monitor and manage the replicated virtual machines in the cloud. Reference: http://pubs.vmware.com/vchsplugin-15/index.jsp?topic=%2Fcom.vmware.vchsplugin.doc%2FGUID92B7E03C-8DDE-4F91-A64C-8E5AF7BD0F66.html

• Question 78:

  When a Content Library is deleted, what happens to the files contained on the backing storage?

  A. The files will be unchanged.

  B. The files will be deleted.

  C. The files will remain and be marked as orphaned.

  D. The containing folder will be marked as orphaned.

  Correct Answer: B

  Delete a Content Library

  When you no longer need a content library, you can invoke the delete method on either the LocalLibrary or

  the SubscribedLibraryservice depending on the library type.

  Procedure

  1Access the SubscribedLibrary or the LocalLibrary service by using the vCloud Suite Endpoint.

  2Retrieve the library ID you want to delete.

  3Call the delete function on the library service and pass the library ID as argument.

  All library items cashed on the storage backing are removed asynchronously. If this operation fails, you

  must manually remove the content of the library. https://pubs.vmware.com/vsphere-60/

  index.jsp#com.vmware.vapi.progguide.doc/GUID-C3A2DD49-BF41-43CD-9AEC-D6F28A9F3AF4.html?

  resultof=%2522%

• Question 79:

  An administrator is assigning a user the Content Library administrator role. The user will only be creating the library for a single vCenter Server.

  What is the lowest level of the permission hierarchy that this role can be granted to the user and still allow

  them to create a Content Library?

  A. Global

  B. Datacenter Folder

  C. Virtual Center

  D. Datacenter

  Correct Answer: A

• Question 80:

  A user notifies an administrator that Content Libraries are not visible.

  What is a possible solution?

  A. Assign the user the read-only role at the global permission level.

  B. Assign the user the read-only role at the vCenter Server root level.

  C. Assign the user the read-only role at the vCenter Server data center level.

  D. Assign the user the read-only role at the vCenter Server cluster level.

  Correct Answer: A

  

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.vm_admin.doc%2FGUID18F4B892-D685-4473-AC25-3195D68DFD90.html