VMware VMware Certifications 2V0-21.23 Questions & Answers

• Question 141:

  An administrator is tasked with providing users access to objects within an existing VMware vCenter instance. The vCenter inventory has a single data center with one management vSphere cluster and five workload vSphere clusters.

  The following requirements must be met for assigning the users access:

  Users must only be able to view all of the inventory objects associated with the management vSphere cluster. Users must be able to edit all of the inventory objects associated with the workload vSphere clusters.

  The administrator creates a custom role to provide the permissions needed to allow users to edit inventory objects.

  Which series of steps should the administrator complete to assign the custom role and provide the required level of access to users?

  A. Apply Global permissions to assign the Read Only role to the root vCenter object. Apply vCenter permissions to assign the custom role to the workload vSphere clusters and enable propagation.

  B. Apply Global permissions to assign the Read Only role to the root vCenter object and enable propagation. Apply vCenter permissions to assign the custom role to the workload vSphere clusters and enable propagation.

  C. Apply Global permissions to assign the Read Only role to the root vCenter object. Apply vCenter permissions to assign the custom role to the workload vSphere clusters.

  D. Apply Global permissions to assign the Read Only role to the root vCenter object and enable propagation. Apply vCenter permissions to assign the custom role to the workload vSphere clusters.

  Correct Answer: D

  Explanation: Option D is correct because it allows the administrator to apply Global permissions to assign the Read Only role to the root vCenter object and enable propagation, which will apply to all of the inventory objects in vCenter, and then apply vCenter permissions to assign the custom role to the workload vSphere clusters, which will override the Global permissions and allow users to edit all of the inventory objects associated with the workload vSphere clusters. Option A is incorrect because it will not enable propagation for the Global permissions, which will limit the Read Only role to the root vCenter object only. Option B is incorrect because it will enable propagation for both the Global and vCenter permissions, which will create a conflict between the Read Only and custom roles. Option C is incorrect because it will not enable propagation for either the Global or vCenter permissions, which will limit the Read Only role to the root vCenter object only and the custom role to the workload vSphere clusters only. References: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-A2A4371A-B888-404C-B23F- C422A8C40F54.html

• Question 142:

  An administrator enables Secure Boot on an ESXi host. On booting the ESXi host, the following error message appears:

  Fatal error: 39 (Secure Boot Failed)

  A. The kernel has been tampered with.

  B. The Trusted Platform Module chip has failed.

  C. The administrator attempted to boot with a bootloader that is unsigned or has been tampered with.

  D. A package (VIB or driver) has been tampered with.

  Correct Answer: A

  Explanation: The fatal error "Secure Boot Failed" may indicate that either the kernel or a package (VIB or driver) has been tampered with, which violates the Secure Boot integrity check. References: https://docs.vmware.com/en/VMwarevSphere/7.0/com.vmware.vsphere.security.doc/GUID-F8F105EC-A6EA-4F4A-AF5E- E091B1629B27.html

• Question 143:

  Refer to the exhibit.

  

  After updating a predefined alarm on VMware vCenter, an administrator enables email notifications as shown in the attached alarm; however, notifications are NOT being sent.

  Where must the mail server settings be configured by the administrator to resolve this issue?

  A. In the ESXi host system config

  B. In the alarm rule definitions

  C. In the vCenter settings in the vSphere Client

  D. in the vCenter Management Interface

  Correct Answer: C

  Explanation: Option C is correct because it allows the administrator to configure the mail server settings in the vCenter settings in the vSphere Client, which are required for sending email notifications for alarms. Option A is incorrect because it configures the mail server settings on an ESXi host system, which are not used for sending email notifications for alarms. Option B is incorrect because it configures the alarm rule definitions, which are already enabled in the exhibit. Option D is incorrect because it configures the vCenter Management Interface, which is not used for sending email notifications for alarms. References: https://docs.vmware.com/en/VMwarevSphere/7.0/com.vmware.vsphere.monitoring.doc/GUID-A2A4371A-B888-404C-B23F- C422A8C40F54.html

• Question 144:

  An administrator wants to use tag-based placement rules on their virtual machine disks using VMware vCenter.

  Which option would allow the administrator to achieve this?

  A. Storage Policy Based Management

  B. Storage I/O Control

  C. vSphere Storage APIs for Storage Awareness (VASA)

  D. vSphere Distributed Resource Scheduler (DRS)

  Correct Answer: A

  Explanation: https://vnote42.net/2020/01/15/vcenter-tag-based-vm-placement/

• Question 145:

  The vCenter inventory contains a virtual machine (VM) template called Linux-01. The administrator wants to install a software patch into Linux-01 while allowing users to continue to access Linux-01 to deploy VMs. Which series of steps should the administrator take to accomplish this task?

  A. 1. Verify that Linux-01 is in a content library

  2.

  Clone Linux-01

  3.

  Convert the clone to a VM

  4.

  Install the software patch.

  B. 1. Convert Linux-01 to a VM 2 Install the software patch 3 Convert the VM back to a VM template 4 Add Linux-01 to the content library.

  C. 1. Verify that Linux-01 is in a content library

  2.

  Checkout Linux-01

  3.

  Install the software patch

  4.Check in Linux-01

  D. 1. Clone Linux-01.

  2.

  Convert the clone to a VM

  3.

  Install the software patch.

  4.

  Convert the VM back to a template.

  Correct Answer: C

  Explanation: The administrator should clone Linux-01, which creates a copy of the virtual machine template. The administrator should then convert the clone to a VM, which allows the administrator to power on and modify the virtual machine. The administrator should then install the software patch on the VM, which updates the application. The administrator should then convert the VM back to a template, which preserves the changes made to the VM and allows users to deploy VMs from it. References: https://docs.vmware.com/en/VMwarevSphere/8.0/com.vmware.vsphere.vm_admin.doc/GUID-E8E854DD-AA97-4E0C-8419- CE84F93C4058.html

• Question 146:

  An administrator is required to configure several Microsoft Windows virtual machines (VMs) to support Secure Boot for a critical secure application.

  The following information is provided:

  The corporate security policy states that all forms of data encryption must utilize a key provider.

  The firmware of each VM is currently set to use Unified Extensible Firmware Interface (UEFI).

  Due to the nature of the application running within the VMs, the guest operating system for each VM is currently a minimum of Windows Server 2008 and Windows 7.

  Which security feature should the administrator implement to meet these requirements?

  A. vSphere Virtual Machine Encryption

  B. vSphere Visualization-Based Security

  C. Virtual Intel Software Guard Extensions (vSGX)

  D. Virtual Trusted Platform Module (vTPM)

  Correct Answer: D

  Explanation: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID- 6F811A7A-D58B-47B4-84B4-73391D55C268.html

  A vTPM is a virtualized version of a physical TPM and is used to protect VMs and their data by tying the cryptographic functions to the hardware of the server on which the VMs are running12. This allows for secure boot, disk encryption, and other security features12. It also supports key providers, which is a requirement in this case12.

• Question 147:

  An administrator is tasked with installing VMware vCenter. The vCenter Server Appliance must support an environment of:

  400 hosts 4000 virtual machines Which two resources must be allocated, at a minimum, to meet the requirements? (Choose two.)

  A. 16 vCPUs

  B. 30 GB Memory

  C. 4 vCPUs

  D. 8 vCPUs

  E. 20 GB Memory

  Correct Answer: BD

  Explanation: https://docs.vmware.com/en/VMwarevSphere/7.0/com.vmware.vcenter.install.doc/GUID-88571D8A-46E1-464D-A349- 4DC43DCAF320.html

• Question 148:

  A vSphere cluster has the following vSphere Distributed Resource Scheduler (DRS) group configuration:

  *

  Virtual machine (VM) group named DB

  *

  Host groups named PROD11 and PROD55

  The administrator wants to force the VMs in the DB group to run on the hosts in the PROD11 group. However, if all the hosts in PROD55.

  Which VM/Host rule must the administrator create to ensure that these requirements are met?

  A.

  A preferential rule between the DB group and PROD11 group

  B.

  A preferential rule between the DB group and the PROD55 group

  C.

  A preferential rule between the DB group and the PROD55 group

  D.

  A required rule between the DB group and the PROD11 group

  Correct Answer: A

  Explanation: Option A is correct because it allows the administrator to create a preferential rule between the DB group and PROD11 group, which will force the VMs in the DB group to run on the hosts in the PROD11 group if possible, but will allow them to run on the hosts in PROD55 group if necessary. Option B is incorrect because it will create a preferential rule between the DB group and PROD55 group, which will force the VMs in the DB group to run on the hosts in PROD55 group if possible, which is not what the administrator wants. Option C is incorrect because it is the same as option B. Option D is incorrect because it will create a required rule between the DB group and PROD11 group, which will force the VMs in the DB group to run only on the hosts in PROD11 group and not allow them to run on the hosts in PROD55 group if needed. References: https://docs.vmware.com/en/VMwarevSphere/7.0/com.vmware.vsphere.resmgmt.doc/GUID-60077B40-66FF-4625-934A- 641703ED7601.html

• Question 149:

  An administrator decides to restore VMware vCenter from a file-based backup following a failed upgrade. Which interface should the administrator use to complete the restore?

  A. Direct Console User Interface (DCUI)

  B. vCenter Management Interface (VAMI)

  C. vSphere Client

  D. vCenter GUI Installer

  Correct Answer: D

  Explanation: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-vcenter- installation/GUID-F02AF073-7CFD-45B2-ACC8-DE3B6ED28022.html#GUID-F02AF073- 7CFD-45B2-ACC8-DE3B6ED28022

  You can use the vCenter Server appliance GUI installer to restore a vCenter Server to an ESXi host or a vCenter Server instance. The restore procedure has two stages. The first stage deploys a new vCenter Server appliance. The second stage populates the newly deployed vCenter Server appliance with the data stored in the file-based backup. https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-vcenter-installation/GUID- F02AF073-7CFD-45B2-ACC8DE3B6ED28022.html

• Question 150:

  To keep virtual machines (VMs) up and running at all times in a vSphere cluster, an administrator would like VMs to be migrated automatically when the host hardware health status becomes degraded. Which cluster feature can be used to meet this requirement?

  A. Predictive DRS

  B. Proactive HA

  C. vSphere HA Orchestrated Restart

  D. vSphere Fault Tolerance

  Correct Answer: B

  Explanation: Proactive HA is a cluster feature that can be used to migrate VMs automatically when the host hardware health status becomes degraded, before a failure occurs. References: https://docs.vmware.com/en/VMwarevSphere/7.0/com.vmware.vsphere.avail.doc/GUID-C3FFBF62-D6BF-4A5E-B3FD- BFF622AC2ED9.html