First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Installation and Configuration
A technician is preparing a Windows Server host to run vComputeCluster services. Which installation type is most appropriate for a dedicated hypervisor host that should not expose a full desktop shell?
- Windows Subsystem deployment
- Desktop Experience installation
- Minimal Server Interface installation
- Server Core installation Correct answer.
Explanation
Server Core provides a minimal footprint without the full graphical shell, which reduces patching surface and attack surface on dedicated hypervisor hosts. Desktop Experience adds the full GUI and is unnecessary on a host managed remotely.
Question 2Installation and Configuration
During cluster configuration, you must supply a dedicated network for live migration. What is the recommended practice for that network's addressing?
- Assign a separate, non-routable subnet isolated from client traffic Correct answer.
- Share the storage network to reduce switch ports
- Place it on the same subnet as the management network for simplicity
- Use DHCP so addresses rotate automatically
Explanation
Live migration traffic should be isolated on its own subnet so it does not compete with management or client traffic and cannot be intercepted on general networks. A separate non-routable segment also avoids routing dependencies during a migration event.
Question 3Installation and Configuration
An administrator is choosing between a thick and thin provisioning model for a new datastore. Which statement accurately describes thin provisioning?
- Storage is allocated on demand as blocks are written Correct answer.
- Storage cannot be over-committed under any circumstance
- Storage capacity is fixed by the physical disk geometry
- Storage is allocated in full at creation time regardless of use
Explanation
Thin provisioning allocates backing storage only as data is actually written, which allows capacity to be over-committed across datastores. Thick provisioning reserves the full requested capacity up front.
Question 4Installation and Configuration
Before adding a host to an existing cluster, which prerequisite must be satisfied for cluster membership to succeed?
- The host must have a unique cluster name identical to the existing cluster
- The host must already hold the cluster quorum witness disk
- The host must be running a compatible version and have consistent network and storage access Correct answer.
- The host must be configured with a static public IP only
Explanation
Cluster membership requires version compatibility plus consistent access to the shared networks and storage the cluster depends on. Without that common configuration the host cannot participate in cluster communication or resource failover.
Question 5Installation and Configuration
Which component is responsible for resolving host names to management IP addresses during initial configuration of a new node?
- The virtual switch uplink
- The local hosts file only
- The cluster quorum disk
- A configured DNS resolver Correct answer.
Explanation
Name resolution during configuration relies on a DNS resolver so nodes and management tools can locate each other by name. A hosts file can supplement resolution but is not the primary configured mechanism.
Question 6Installation and Configuration
An administrator needs to license a host with a large number of cores. Which licensing model should be evaluated?
- Per-virtual-machine licensing only
- Per-core licensing with a minimum per-processor requirement Correct answer.
- Per-socket licensing only
- Per-user licensing
Explanation
Modern host licensing is typically assessed per core, with a minimum number of core licenses required per physical processor. Socket-only and per-VM models do not reflect core-based entitlements.
Question 7Installation and Configuration
What is the purpose of configuring a management VLAN on the host?
- To encrypt all guest disk writes
- To increase the maximum transmission unit for guest traffic
- To separate administrative traffic from guest and storage traffic Correct answer.
- To provide DHCP relay for guest virtual machines
Explanation
A management VLAN logically separates administrative traffic from guest and storage traffic, improving security and reducing contention. It does not change MTU, provide DHCP relay, or encrypt disk writes.
Question 8Installation and Configuration
Which step should be performed immediately after installing the hypervisor role on a new host and before joining it to production clusters?
- Convert all local disks to thin provisioned datastores
- Disable all management network interfaces
- Apply current updates and verify driver and firmware compatibility Correct answer.
- Remove the host from DNS
Explanation
Patching and verifying driver and firmware compatibility before cluster join prevents known defects and unsupported combinations from affecting production. Disabling management interfaces or removing DNS entries would break connectivity.
Question 9Installation and Configuration
A host reports that it cannot see the shared LUN presented by the storage array. Which configuration area should be checked first?
- The virtual machine's MAC address pool
- The cluster witness disk label
- The guest operating system's page file size
- The host bus adapter zoning and LUN masking on the array Correct answer.
Explanation
LUN visibility depends on correct HBA zoning and array-side LUN masking so the host initiator is permitted to see the device. Guest page file size, witness labels, and MAC pools have no bearing on LUN presentation.
Question 10Installation and Configuration
You must configure a cluster so that it remains available if one of three nodes fails. Which quorum configuration is appropriate?
- No quorum configuration
- Disk only with a single node
- Node majority with three nodes Correct answer.
- Node and disk majority with no shared disk
Explanation
With three nodes, node majority quorum tolerates the loss of one node while retaining a majority for cluster operation. Disk-based or witness configurations are needed only when node counts are even or when additional fault tolerance is required.
Question 11Installation and Configuration
An administrator enables jumbo frames on the storage network but not on the virtual switch. What is the likely result?
- The virtual switch silently raises its MTU to match
- Guest VMs receive larger default receive buffers
- Storage throughput increases because the host compensates automatically
- Large packets are dropped or fragmented, causing storage timeouts Correct answer.
Explanation
MTU must be consistent end to end across adapters, virtual switches, and physical switches. A mismatch causes large frames to be dropped or fragmented, which manifests as storage timeouts and retransmissions.
Question 12Installation and Configuration
A cluster node fails to join because the cluster validation report flags inconsistent processor feature sets. What is the best remediation?
- Reduce the number of cluster nodes to two
- Ignore the warning since validation is advisory
- Standardize host hardware or enable compatible processor masks across nodes Correct answer.
- Disable the cluster service on the failing node
Explanation
Processor feature mismatches can prevent live migration and cause unpredictable behavior, so hosts should be standardized or compatibility masking applied. Validation warnings about CPU features are not safely ignored for production clusters.
Question 13Installation and Configuration
Which setting controls whether a virtual machine's traffic is tagged for a specific VLAN when connected to a virtual switch port group?
- The VLAN ID configured on the port group Correct answer.
- The cluster heartbeat interval
- The datastore block size
- The guest operating system firewall profile
Explanation
VLAN tagging for virtual machine traffic is defined by the VLAN ID on the port group that the virtual NIC connects to. Firewall profiles, datastore block size, and heartbeat intervals do not control VLAN tagging.
Question 14Installation and Configuration
An administrator wants to automate host configuration across many nodes. Which approach best supports repeatable, version-controlled deployment?
- Copying configuration files between hosts by hand
- Manual configuration of each host via console
- Scripted configuration using host profiles or infrastructure-as-code templates Correct answer.
- Cloning a running production host's live state
Explanation
Host profiles and infrastructure-as-code templates make configuration repeatable, reviewable, and version-controlled across many nodes. Manual or ad hoc copying is error-prone and hard to audit.
Question 15Installation and Configuration
A storage array presents a LUN that is visible to two hosts but the cluster reports the datastore as unavailable on one node. Which cause is most likely?
- The guest operating system has too much memory assigned
- The virtual switch has too many uplinks
- The cluster name exceeds the allowed length
- The second host lacks the multipath configuration required for the array Correct answer.
Explanation
Multipath configuration is required so each host can present the array's paths correctly; missing it on one node can make the datastore appear unavailable there. Guest memory, cluster name length, and uplink count do not affect datastore visibility.
Question 16Installation and Configuration
Which practice best secures the out-of-band management interface of a newly installed host?
- Disable authentication to speed up provisioning
- Place it on the production guest VLAN for convenience
- Put it on a dedicated isolated management network with strong authentication Correct answer.
- Expose it to the internet for remote support
Explanation
Out-of-band management interfaces should sit on a dedicated isolated network with strong authentication because they provide privileged hardware control. Exposing them to guest or public networks creates a serious compromise path.
Question 17Installation and Configuration
An administrator configures a cluster with two nodes and no shared storage. Which quorum option should be added to maintain majority?
- A file share witness Correct answer.
- A second disk witness on each node
- A node majority with both nodes voting
- No witness, since two nodes always form a majority
Explanation
An even number of nodes can split evenly, so a witness is needed to break ties. A file share witness provides that tie-breaking vote when shared storage is unavailable.
Question 18Installation and Configuration
A host profile compliance check reports drift on a node's virtual switch MTU setting. What is the correct remediation?
- Ignore the drift since MTU is cosmetic
- Apply the host profile to remediate the drifted setting Correct answer.
- Delete the host profile and recreate it
- Rebuild the host from scratch
Explanation
Host profiles detect drift and can remediate the affected setting back to the defined baseline. Rebuilding the host or deleting the profile is disproportionate and does not address the configuration mismatch.
Question 19Installation and Configuration
Which configuration ensures that a newly provisioned virtual machine can resolve names on the corporate network?
- Assign a static MAC address to the virtual NIC
- Configure the guest with valid DNS server addresses Correct answer.
- Enable jumbo frames on the guest adapter
- Increase the guest's virtual CPU count
Explanation
Name resolution in the guest requires valid DNS server addresses configured on the guest network adapter. MAC addresses, CPU counts, and MTU settings do not provide name resolution.
Question 20Installation and Configuration
An administrator must add a new host to a cluster while minimizing disruption to running workloads. Which sequence is most appropriate?
- Install and patch the host, validate configuration, place it in maintenance mode, then join the cluster Correct answer.
- Add the host and migrate all workloads to it before validation
- Power off all cluster nodes, then add the new host
- Join the cluster immediately, then install updates during production hours
Explanation
Installing and patching first, validating configuration, and using maintenance mode prevents an unverified host from affecting running workloads. Joining before validation or powering off nodes introduces avoidable risk.
Question 21Installation and Configuration
A host is configured with two physical NICs in a team for management traffic. Which failure mode should be verified during installation testing?
- Both NICs must fail simultaneously to trigger failover
- Loss of one NIC should not interrupt management connectivity Correct answer.
- The team must disable all VLAN tagging
- The team must use identical MAC addresses on both members
Explanation
Teaming is intended to preserve connectivity when a member NIC fails, so testing should confirm management access survives a single-link failure. Identical MAC addresses or disabled VLAN tagging are not valid teaming requirements.
Question 22Installation and Configuration
An administrator needs to confirm that a host's time source is consistent with the rest of the cluster. Which configuration should be verified?
- The datastore block size
- The NTP server configuration on the host Correct answer.
- The port group VLAN ID
- The cluster witness path
Explanation
Time synchronization across cluster nodes depends on a consistent NTP configuration so logs, tickets, and cluster operations align. Datastore block size, VLAN IDs, and witness paths do not affect time.
Question 23Installation and Configuration
A cluster is being designed for a site with frequent, brief power interruptions. Which configuration decision most directly protects cluster integrity?
- Reduce the cluster heartbeat interval to one second
- Configure UPS-backed power and set the host to shut down gracefully on low battery Correct answer.
- Enable thin provisioning on all datastores
- Increase the number of guest virtual CPUs on each host
Explanation
Graceful shutdown on UPS battery depletion prevents abrupt power loss that can corrupt cluster state and storage. CPU counts, thin provisioning, and heartbeat tuning do not address power-loss integrity.
Question 24Installation and Configuration
After enabling a distributed virtual switch, an administrator finds that a host cannot join because its uplink configuration differs from the switch definition. What is the correct resolution?
- Convert all port groups to ephemeral
- Disable the distributed switch and rebuild the cluster
- Assign the host's physical NICs to the correct uplinks defined by the switch Correct answer.
- Remove the host from the datacenter
Explanation
A distributed switch requires host physical NICs to map to the uplinks defined in the switch configuration. Correcting the uplink assignment resolves the mismatch without destructive cluster changes.
Question 25Installation and Configuration
An administrator must prove that a host can survive the loss of a storage path without impacting running VMs. Which test best validates this?
- Disconnect one path at the switch and confirm I/O continues over the remaining path Correct answer.
- Reboot the storage array during production hours
- Delete the datastore and recreate it
- Disable multipath on the host
Explanation
Multipath resilience is validated by removing a single path and confirming that I/O continues over the surviving path. Rebooting the array or deleting datastores causes outages rather than controlled validation.
Question 26Installation and Configuration
During initial configuration of a new host, which setting determines the DNS suffix that the host appends when resolving short unqualified names?
- The iSCSI initiator IQN string
- The NTP server pool assigned to the host
- The search domain list configured in the host's DNS settings Correct answer.
- The host's default gateway address
Explanation
The DNS search domain list tells the resolver which suffixes to append when a client queries a short, unqualified hostname, so a query for a bare name can be completed to a fully qualified name. Gateway, NTP, and IQN settings have no role in name resolution suffixing.
Question 27Installation and Configuration
An administrator is preparing a host for production and wants the hypervisor to start automatically after a power loss without manual intervention. Which configuration area should be verified?
- The virtual machine guest OS startup scripts
- The storage array's LUN masking table
- The vMotion network MTU setting
- The host's boot order and autostart policy in the firmware and hypervisor settings Correct answer.
Explanation
Automatic recovery after power loss depends on the server firmware boot order and the hypervisor's autostart policy, which together decide whether the host and its registered workloads come back without an operator. Guest scripts only run after the hypervisor and VM are already powered on, and storage or vMotion settings do not control boot behavior.
Question 28Installation and Configuration
Which configuration item must be set on a host before it can be added to a cluster that enforces a specific time synchronization source for certificate validation?
- A static MAC address for the management NIC
- A second default gateway for the storage network
- A dedicated VMkernel port for vMotion
- A consistent NTP source configured on the host Correct answer.
Explanation
Cluster operations that validate certificates depend on synchronized clocks, so the host must point at the same NTP source used by the rest of the cluster. Static MAC addresses, vMotion VMkernel ports, and extra gateways do not affect time consistency.
Question 29Installation and Configuration
An administrator wants to reduce the attack surface of a freshly installed host before placing it in production. Which configuration change best accomplishes this?
- Enable SSH and leave it open for convenience
- Disable the host firewall to simplify troubleshooting
- Disable unused services and close unused firewall ports on the host Correct answer.
- Assign the management interface a public routable address
Explanation
Disabling services that are not needed and closing unused firewall ports reduces the number of entry points an attacker can target, which is the standard hardening approach for a new host. Leaving SSH open, exposing management publicly, or disabling the firewall all increase exposure.
Question 30Installation and Configuration
A host is being configured with a dedicated VMkernel adapter for storage traffic. Which setting must be applied so that storage traffic uses that adapter rather than the management adapter?
- Bind the storage adapter to the management default gateway
- Enable the appropriate traffic type on the storage VMkernel adapter and ensure its subnet is reachable Correct answer.
- Disable the storage adapter and rely on the management network
- Assign the storage adapter the same IP address as the management adapter
Explanation
Traffic types are enabled per VMkernel adapter, and the adapter needs an address on a subnet the storage array can reach so that storage flows over that path. Sharing the management address, binding to the management gateway, or disabling the adapter would not create a separate storage path.
Question 31Installation and Configuration
After installation, an administrator must confirm that the host can reach the storage array on the iSCSI network. Which verification step is most direct?
- Check the guest OS disk defragmentation schedule
- Review the virtual machine snapshot consolidation status
- Inspect the cluster's HA admission control policy
- Perform an adapter discovery or ping test from the storage VMkernel interface to the array's target address Correct answer.
Explanation
A discovery or ping from the storage VMkernel interface directly tests L2/L3 reachability between the host's storage path and the array target. Defragmentation, snapshot status, and HA admission control do not test network reachability to the array.
Question 32Installation and Configuration
An administrator configures a host with two uplinks in an active/standby team for management traffic. Which behavior should be confirmed to ensure a single uplink failure does not isolate the host?
- Both uplinks remain active simultaneously for management traffic
- The standby uplink is administratively disabled until a manual switch
- Failover moves management traffic to the standby uplink within the expected detection window Correct answer.
- Management traffic is routed through the storage VMkernel adapter
Explanation
In an active/standby team, the key property is that a failed active uplink causes traffic to move to the standby within the failover detection window so the host stays reachable. Simultaneous active use describes a different teaming policy, and manual intervention would defeat the purpose of the team.
Question 33Installation and Configuration
A host must be configured so that its virtual machines can reach a network that is only available through a specific VLAN. Which configuration must be applied on the virtual switch port group?
- Enable promiscuous mode on the port group
- Set the MTU on the port group to 9000
- Set the port group to use the management VMkernel adapter
- Set the VLAN ID on the port group to match the required network Correct answer.
Explanation
The VLAN ID on the port group determines the 802.1Q tag applied to traffic from VMs connected to that group, which is how they reach the required VLAN. MTU, promiscuous mode, and VMkernel binding do not select a VLAN.
Question 34Installation and Configuration
An administrator needs to add a second host to an existing cluster and wants the new node to inherit the same networking and storage configuration as the first node. Which approach is most appropriate?
- Manually recreate each setting on the new host without documentation
- Attach the host to a host profile extracted from a reference host and remediate Correct answer.
- Clone the first host's virtual machines to the new host
- Assign the new host the same IP address as the first host
Explanation
A host profile captures the configuration of a reference host and can be applied to new hosts so they match, with remediation correcting any drift. Manual recreation is error-prone, cloning VMs does not configure the host, and duplicate IPs cause conflicts.
Question 35Installation and Configuration
A host is configured with a software iSCSI adapter, but the array reports no initiator logged in. Which configuration item is most likely missing on the host?
- The host's DNS search domain must include the array's domain
- The host's iSCSI initiator must be added to the array's allowed initiator list Correct answer.
- The host's vMotion VMkernel port must be enabled
- The host's NTP server must be reachable
Explanation
An iSCSI array only permits logins from initiators that are explicitly allowed, so the host's initiator name must be registered on the array before the session can establish. NTP, vMotion, and DNS suffixes do not control whether the target accepts the initiator.
Question 36Installation and Configuration
An administrator must configure a host so that virtual machine traffic and management traffic never share a physical uplink. Which configuration achieves this?
- Set the management adapter to use the VM port group's VLAN
- Place both on the same virtual switch with a single uplink
- Enable promiscuous mode on the management adapter
- Place the VM port group and the management VMkernel adapter on separate virtual switches with dedicated uplinks Correct answer.
Explanation
Separating the traffic onto distinct virtual switches, each backed by its own physical uplinks, guarantees that VM and management traffic do not share a physical path. A single shared uplink or a shared VLAN would still combine the traffic.
Question 37Installation and Configuration
A host is being configured to boot from SAN. Which setting must be verified in the firmware to ensure the host can start when local disks are absent?
- The vMotion VMkernel port is enabled on the storage subnet
- The host's DNS suffix matches the array's management domain
- The host's firewall allows outbound SMTP
- The SAN host bus adapter is enabled in the boot order and the LUN is presented to the host Correct answer.
Explanation
Boot from SAN requires the firmware to place the SAN HBA in the boot order and the array to present a boot LUN that the host can see. DNS suffixes, vMotion ports, and SMTP rules do not affect the boot path.
Question 38Installation and Configuration
An administrator is designing a host configuration for a site where the management network is shared with other tenants. Which design decision most directly limits exposure of the host's out-of-band management?
- Place the management interface on a dedicated isolated VLAN reachable only through a jump host Correct answer.
- Allow the management interface to be reached from the internet for remote support
- Assign the management interface an address from the tenant DHCP pool
- Enable the management interface on all physical uplinks without restriction
Explanation
An isolated management VLAN reachable only through a controlled jump host restricts who can reach the out-of-band interface, which is the primary way to limit its exposure on a shared network. Tenant DHCP, unrestricted uplinks, and internet reachability all broaden access.
Question 39Installation and Configuration
During a host build, an administrator notices that the host can reach the array over the storage network but virtual machines cannot migrate between hosts. Which configuration difference is the most likely cause?
- The vMotion traffic type is not enabled on a VMkernel adapter on both hosts Correct answer.
- The storage array's LUN masking excludes the second host
- The host's NTP source is set to a public pool
- The DNS search domain differs between the two hosts
Explanation
Live migration requires a VMkernel adapter with the vMotion traffic type enabled on each host and reachable between them; if it is missing, storage reachability alone will not permit migration. LUN masking, DNS suffixes, and NTP sources do not enable vMotion traffic.
Question 40Installation and Configuration
An administrator must verify that a new host's storage configuration will survive the loss of one path without disrupting running virtual machines. Which test is most appropriate?
- Reboot the storage array during production hours
- Disconnect the host's management network and observe the VMs
- Delete and recreate the host's iSCSI adapter
- Disable one storage path or uplink and confirm I/O continues over the remaining path Correct answer.
Explanation
A controlled path-removal test, such as disabling one uplink or path, demonstrates whether multipathing takes over and I/O continues without interruption. Rebooting the array or deleting the adapter risks an outage, and disconnecting management does not test storage path redundancy.
Question 41Networking Fundamentals
Which OSI layer is responsible for logical addressing and path selection between networks?
- Session layer
- Transport layer
- Data link layer
- Network layer Correct answer.
Explanation
The network layer handles logical (IP) addressing and routing decisions that move packets between different networks. The data link layer deals with physical addressing on a single link, and the transport layer handles end-to-end delivery.
Question 42Networking Fundamentals
A workstation is configured with IP address 192.168.10.77 and subnet mask 255.255.255.192. Which address is the subnet broadcast address?
- 192.168.10.64
- 192.168.10.127 Correct answer.
- 192.168.10.63
- 192.168.10.79
Explanation
A /26 mask gives subnets in blocks of 64 addresses, so the subnet containing .77 runs from .64 to .127. The last address in that range, .127, is the directed broadcast address.
Question 43Networking Fundamentals
Which protocol resolves an IPv4 address to a MAC address on a local Ethernet segment?
- DNS
- ARP Correct answer.
- ICMP
- DHCP
Explanation
ARP broadcasts a request asking which device owns a given IPv4 address and receives the corresponding MAC address in reply. DNS maps names to IP addresses, DHCP assigns addresses, and ICMP carries diagnostic messages.
Question 44Networking Fundamentals
Which transport protocol offers connection-oriented, reliable delivery with sequencing and acknowledgments?
- UDP
- IP
- TCP Correct answer.
- ICMP
Explanation
TCP establishes a session with a three-way handshake and uses sequence numbers, acknowledgments, and retransmissions to guarantee ordered delivery. UDP is connectionless and best-effort, while ICMP and IP are not transport protocols.
Question 45Networking Fundamentals
What is the primary function of a default gateway on a host?
- To assign IP addresses to local hosts
- To resolve host names to IP addresses
- To filter broadcast traffic on the local segment
- To forward traffic destined for remote networks Correct answer.
Explanation
When a host determines that the destination IP is outside its own subnet, it sends the frame to the default gateway, which routes it onward. Address assignment and name resolution are handled by other services.
Question 46Networking Fundamentals
Which cable type is required to connect two modern switches directly through their standard copper ports without a crossover?
- Crossover cable
- Rollover cable
- Coaxial cable
- Straight-through cable Correct answer.
Explanation
Modern switch ports implement auto-MDIX, so a straight-through cable works for switch-to-switch links. The straight-through pinout matches transmit pins to receive pins on the far end in standard connections.
Question 47Networking Fundamentals
Which device forwards frames based on MAC addresses and maintains a table mapping MAC addresses to ports?
- Hub
- Repeater
- Layer 2 switch Correct answer.
- Router
Explanation
A Layer 2 switch learns source MAC addresses per port and forwards frames only out the port associated with the destination MAC. Routers forward based on IP addresses, while hubs and repeaters simply repeat signals.
Question 48Networking Fundamentals
Which IEEE standard defines wireless LAN operation in the 2.4 GHz and 5 GHz bands with OFDM?
- 802.15
- 802.3
- 802.11 Correct answer.
- 802.1Q
Explanation
The 802.11 family specifies wireless LAN media access and physical layers, including the 2.4 GHz and 5 GHz bands. 802.3 covers wired Ethernet and 802.1Q covers VLAN tagging.
Question 49Networking Fundamentals
An administrator needs to divide 172.16.0.0/16 into subnets that each support at least 500 usable hosts. What is the longest prefix that still meets the requirement?
- /22
- /23 Correct answer.
- /24
- /25
Explanation
A /23 leaves 9 host bits, giving 512 addresses and 510 usable hosts, which meets 500. A /24 provides only 254 usable hosts, so /23 is the longest prefix that satisfies the requirement.
Question 50Networking Fundamentals
Which record type in DNS maps a host name to an IPv6 address?
- AAAA Correct answer.
- CNAME
- A
- MX
Explanation
An AAAA record holds a 128-bit IPv6 address for a host name. A records hold IPv4 addresses, CNAME records alias one name to another, and MX records identify mail servers.