VMware VMware Certifications 2V0-621 Questions & Answers

• Question 81:

  An administrator is creating a new Content Library. It will subscribe to another remote Content Library without authentication enabled.

  What information from the published library will they need in order to complete the subscription?

  A. Subscription URL

  B. A security password from the publishing Content Library

  C. Publisher's Items.json file

  D. Username from the publishing Content Library

  Correct Answer: A

  Subscribed content library Creates a content library, which is subscribed to a published content library. You can only sync the subscribed library with the published library to see up-to-date content, but you cannot add or remove content from the subscribed library. Only an administrator of the published library can add, modify, and remove contents from the published library.

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.vm_admin.doc%2FGUID2A0F1C13-7336-45CE-B211-610D39A6E1F4.html

• Question 82:

  Which two features are available for virtual machines configured with DirectPath I/O? (Choose two.)

  A. Fault Tolerance

  B. Suspend and Resume

  C. Virtual Symmetric Multi-Processing (vSMP)

  D. Virtual Non-Uniform Memory Access (vNUMA)

  Correct Answer: CD

  DirectPath I/O

  DirectPath I/O allows virtual machine access to physical PCI functions on platforms with an I/O Memory

  Management Unit.

  The following features are unavailable for virtual machines configured with DirectPath:

  Hot adding and removing of virtual devices

  Suspend and resume

  Record and replay

  Fault tolerance

  High availability

  DRS (limited availability. The virtual machine can be part of a cluster, but cannot migrate across hosts)

  Snapshots

  Reference:

  https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.networking.doc%

  2FGUID-BF2770C3-39ED-4BC5-A8EF-77D55EFE924C.html

• Question 83:

  An administrator is building a large virtual machine that will require as many vCPUs as the host can support. An ESXi 6.x host has these specifications:

  1.

  Six 32-core Intel Xeon Processors

  2.

  256 GB of Memory

  3.

  512 GB Local disk space using VMFS5

  What is the maximum number of virtual CPUs that the virtual machine can be allocated?

  A. 64

  B. 128

  C. 192

  D. 256

  Correct Answer: B

  

  Reference:

  https://www.vmware.com/pdf/vsphere6/r60/vsphere-60-configuration-maximums.pdf

• Question 84:

  An administrator wants to reduce the memory overhead for a 3D graphics enabled virtual machine (VM).

  What advanced feature can be added to the VM configuration file to reduce memory overhead?

  A. vga.vgaOnly=TRUE

  B. vga.svgaEnable=FALSE

  C. svgaEnabled=FALSE

  D. svgaDisable=TRUE

  Correct Answer: A

  Reduce Memory Overhead for Virtual machines with 3D graphics Option

  Virtual machines with the 3D graphics option enabled can have higher memory consumption than other

  virtual machines. You can reduce the memory overhead by editing the configuration file (.vmx file) of your

  virtual machines and disabling certain memory related settings. Reducing the memory overhead of virtual

  machines can help you increase the number of virtual machines per host.

  Prerequisites

  Verify that your virtual machines are using hardware version 10 or later.

  Procedure

  1 Shut down the virtual machine on which the 3D graphics option is enabled.

  2 Disable the Accelerate 3D Graphics option.

  3 Upgrade your ESXi host to use the features available in hardware version 10 or later.

  4 Set the maximum size of your display to the size you need.

  5 Locate the configuration file (.vmx) of your virtual machine.

  6 Open the virtual machine configuration file in a text editor and add the line, vga.vgaOnly=TRUE.

  This option removes all graphics and SVGA functionality from your SVGA device, but does not remove the

  settings that allow BIOS to enter VGA mode.

  7 Save the changes and exit the text editor.

  8 Power on your virtual machine and check the display console.

  9 Verify the memory reservation settings in the vmware.log file.

  Reference:

  https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.vm_admin.doc%2FGUIDFAB0E2C3-3474-461D-99BC-549F7E21FE85.html

• Question 85:

  An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA).

  Which two actions will accomplish this? (Choose two.)

  A. Use a Service Principal Name (SPN) to configure the Identity Source.

  B. Use a Domain administrator to configure the Identity Source.

  C. Join the VCSA to Active Directory and configure the Identity Source with a Machine Account.

  D. Create a computer account in Active Directory for the VCSA and configure the Identity Source.

  Correct Answer: AC

  A-) Configuring Active Directory as Identity Source for use with SSO 6.0 can be done in 2 ways

  a.

  Use the Machine Account(Any AD Account) b. Use with Service Principal Name

  b.

  Prerequisites :1. A domain account with domain administrator privileges is required when assigning a SPN to an account. 2. A domain account with domain user privileges is a minimum requirement for the account to be used as the SPN account.

  c.

  https://pubs.vmware.com/vsphere-60/index.jsp#com.vmware.vsphere.security.doc/GUID-4D24C6E863F5-4E35-862E-B59A03703254.html?resultof=%2522%2573%2570%256e%2522%2520

  C-) VCSA- If you want to configure permissions for users and groups from an Active Directory domain to access the vCenter Server components, you must join its associated embedded or external Platform Services Controller instance to the Active Directory domain. https://pubs.vmware.com/vsphere60/index.jsp?topic=%2Fcom.vmware.vsphere.vcsa.doc%2FGUID08EA2F92-78A7-4EFF-880E-2B63ACC962F3.html

• Question 86:

  Which two are valid Identity Sources when configuring vCenter Single Sign-On? (Choose two.)

  A. Radius

  B. NIS

  C. OpenLDAP

  D. LocalOS

  Correct Answer: CD

  

  Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUIDB23B1360-8838-4FF2-B074-71643C4CB040.html

• Question 87:

  Which VMware Single Sign-On component issues Security Assertion Markup Language (SAML) tokens?

  A. VMware Security Token Service

  B. Administration Server

  C. VMware Directory Service

  D. Identity Management Service

  Correct Answer: A

  The STS service issues Security Assertion Markup Language (SAML) tokens. These security tokens represent the identity of a user in one of the identity source types supported byvCenter Single Sign-On. The SAML tokens allow both human users and solution users who authenticate successfully to vCenter Single Sign-On to use any vCenter service that vCenter Single Sign-On supports without authenticating again to each service.

  Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc%2FGUID90C1E3DC-4397-4BF0-808E-DF3802E56BC6.html

• Question 88:

  An administrator is configuring the clock tolerance for the Single Sign-On token configuration policy and wants to define the time skew tolerance between a client and the domain controller clock.

  Which time measurement is used for the value?

  A. Milliseconds

  B. Seconds

  C. Minutes

  D. Hours

  Correct Answer: A

  Time difference, in milliseconds, that vCenter Single Sign-On tolerates between a client clock and the domain controller clock. If the time difference is greater than the specified value, vCenter Single Sign-On declares the token invalid.

  Reference: https://pubs.vmware.com/vsphere-55/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID50F2D815-4F67-4267-A005-B8158DADCBC9.html

• Question 89:

  Which Platform Service Controller Password Policy determines the number of days a password can exist before the user must change it?

  A. Maximum Lifetime

  B. Password Age

  C. Maximum Days

  D. Password Lifetime

  Correct Answer: A

  Configure SSO policies

  Password Policy: You can configure the following parameters:

  -Description ?Password policy description. Required.

  -

  Maximum lifetime ?Maximum number of days that a password can exist before it has to be changed.

  -

  Restrict re-use ?Number of the user's previous passwords that cannot be set again.

  -

  Maximum length ?Maximum number of characters that are allowed in the password.

  -

  Minimum length ?Minimum number of characters required in the password.

  -

  Character requirements ?Minimum number of different character types required in the password.

  -

  Identical adjacent characters ?Maximum number of identical adjacent characters allowed in the password.

  Reference: http://davidstamen.com/certification/section-1-configure-and-administer-vsphere-6x-security/

• Question 90:

  Which group in the vsphere.local domain will have administrator privileges for the VMware Certificate Authority (VMCA)?

  A. SolutionUsers

  B. CAAdmins

  C. DCAAdmins

  D. SystemConfiguration.Administrators

  Correct Answer: B

  Members of the CAAdmins group have administrator privileges for VMCA. Adding members to these groups is not usually recommended. Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID87DA2F34-DCC9-4DAB-8900-1BA35837D07E.html