Prepare for your exam certification with our 2V0-21.23 Certified VMware
Free VMware 2V0-21.23 Exam 2023 Practice Materials Collection
NEW QUESTION # 62
Which VMware offering will allow an administrator to manage the lifecycle of multiple vCenter Server instances in a single software as a service (SaaS)-based solution to help drive operational efficiency?
- A. VMware Aria Suite Lifecycle
- B. VMware vSphere with Tanzu
- C. VMware vSphere+
- D. VMware Cloud Foundation
Answer: A
Explanation:
Explanation
VMware Aria Suite Lifecycle is a SaaS-based solution that allows an administrator to manage the lifecycle of multiple vCenter Server instances, as well as other VMware products and solutions, from a single console.
References: https://www.vmware.com/products/vrealize-suite-lifecycle-manager.html
NEW QUESTION # 63
To keep virtual machines (VMs) up and running at all times in a vSphere cluster, an administrator would like VMs to be migrated automatically when the host hardware health status becomes degraded.
Which cluster feature can be used to meet this requirement?
- A. vSphere Fault Tolerance
- B. vSphere HA Orchestrated Restart
- C. Proactive HA
- D. Predictive DRS
Answer: C
Explanation:
Explanation
Proactive HA is a cluster feature that can be used to migrate VMs automatically when the host hardware health status becomes degraded, before a failure occurs.
References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.avail.doc/GUID-C3FFBF62-D6BF-4A5
NEW QUESTION # 64
The vCenter inventory contains a virtual machine (VM) template called Linux-01 The administrator wants to install a software patch into Linux-01 while allowing users to continue to access Linux-01 to deploy VMs. Which series of steps should the administrator take to accomplish this task?
- A. 1. Verify that Linux-01 is in a content library
2. Clone Linux-01
3. Convert the clone to a VM
4. Install the software patch. - B. 1. Verify that Linux-01 is in a content library
2. Checkout Linux-01
3. Install the software patch
4.Check in Linux-01 - C. 1. Convert Linux-01 to a VM
2 Install the software patch
3 Convert the VM back to a VM template
4 Add Linux-01 to the content library. - D. 1. Clone Linux-01.
2. Convert the clone to a VM
3. Install the software patch.
4. Convert the VM back to a template.
Answer: D
Explanation:
The administrator should clone Linux-01, which creates a copy of the virtual machine template. The administrator should then convert the clone to a VM, which allows the administrator to power on and modify the virtual machine. The administrator should then install the software patch on the VM, which updates the application. The administrator should then convert the VM back to a template, which preserves the changes made to the VM and allows users to deploy VMs from it. Reference: https://docs.vmware.com/en/VMware-vSphere/8.0/com.vmware.vsphere.vm_admin.doc/GUID-E8E854DD-AA97-4E0C-8419-CE84F93C4058.html
NEW QUESTION # 65
Following a merger with another company, an administrator is tasked with configuring an identity source for VMware vCenter so that all vSphere administrators can authenticate using their existing Active Directory accounts. Each company has user accounts in their own Active Directory forests.
The following additional information has been provided:
* The corporate policy states that only Windows-based machine accounts are allowed in Active Directory.
Which action should the administrator take to configure vCenter Single Sign-On (SSO) to meet this requirement?
- A. Configure SSO to use Active Directory over LDAP as the identity source.
- B. Configure SSO to use OpenLDAP as the identity source.
- C. Join the vCenter Server Appliance to the LDAP domain.
- D. Configure SSO to use Active Directory (Integrated Windows Authentication) as the identity source.
Answer: D
Explanation:
Explanation
The action that should be taken to configure SSO to use existing Active Directory accounts without creating machine accounts in Active Directory is to configure SSO to use Active Directory (Integrated Windows Authentication) as the identity source, which allows using Windows session authentication credentials.
References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F8F105EC-A6EA-4
NEW QUESTION # 66
An administrator is required to configure several Microsoft Windows virtual machines (VMs) to support Secure Boot for a critical secure application.
The following information is provided:
* The corporate security policy states that all forms of data encryption must utilize a key provider.
* The firmware of each VM is currently set to use Unified Extensible Firmware Interface (UEFI).
* Due to the nature of the application running within the VMs, the guest operating system for each VM is currently a minimum of Windows Server 2008 and Windows 7.
Which security feature should the administrator implement to meet these requirements?
- A. vSphere Visualization-Based Security
- B. Virtual Trusted Platform Module (vTPM)
- C. Virtual Intel Software Guard Extensions (vSGX)
- D. vSphere Virtual Machine Encryption
Answer: C
NEW QUESTION # 67
An administrator is tasked with configuring remote direct memory access (RDMA) over Converged Ethernet v2 (RoCE v2).
Which two types of adapters must the administrator configure? (Choose two.)
- A. Fibre Channel over Ethernet (FCoE) adapter
- B. Software NVMe over RDMA storage adapter
- C. Software iSCSi adapter
- D. Paravirtual RDMA adapter
- E. RDMA network adapter
Answer: D,E
Explanation:
Explanation
Option A and B are correct because they are the types of adapters that support RDMA over Converged Ethernet v2 (RoCE v2), which is a protocol that allows remote direct memory access (RDMA) over an Ethernet network. Option C is incorrect because it is a type of adapter that supports iSCSI protocol, which is a protocol that allows SCSI commands to be sent over an IP network. Option D is incorrect because it is a type of adapter that supports Fibre Channel over Ethernet (FCoE) protocol, which is a protocol that allows Fibre Channel commands to be sent over an Ethernet network. Option E is incorrect because it is a type of adapter that supports NVMe over RDMA storage protocol, which is a protocol that allows NVMe commands to be sent over an RDMA network. References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.storage.doc/GUID-9F9E3F8C-0E2B-4B
NEW QUESTION # 68
An administrator is tasked with configuring vSphere Trust Authority. The administrator has completed the following steps:
* Set up the workstation
* Enabled the Trust Authority Administrator
* Enabled the Trust Authority State
* Collected information about the ESXi hosts and vCenter to be trusted
Which step does the administrator need to complete next?
- A. Import the Trusted Host information to the Trust Authority Cluster
- B. Import the Trusted Cluster information to the Trusted Hosts
- C. Import the Trusted Host information to the Trusted Cluster
- D. Create the Key Provider on the Trusted Cluster
Answer: C
Explanation:
Explanation
To complete the configuration of vSphere Trust Authority, after collecting information about the ESXi hosts and vCenter to be trusted, the administrator needs to import the Trusted Host information to the Trusted Cluster, which establishes trust between them.
References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.trustauthority.doc/GUID-B1B1CE2D-E
NEW QUESTION # 69
Which feature would allow for the non-disruptive migration of a virtual machine between two clusters in a single VMware vCenter instance?
- A. vSphere Fault Tolerance
- B. vSphere vMotion
- C. Cross vCenter Migration
- D. vSphere Storage vMotion
Answer: B
Explanation:
vSphere vMotion allows for the non-disruptive migration of a virtual machine between two clusters in a single vCenter instance, as long as there is shared storage and network connectivity between the clusters.
Reference:
vMotion is used to move the VM to a different cluster within the same vCenter. This only works if both clusters share the same storage. If they don't you also need to perform a Storage vMotion. Cross vCenter Migration is only used to migrate to a different vCenter.
NEW QUESTION # 70
An administrator is working with VMware Support and Is asked to provide log bundles for the ESXI hosts in an environment.
h three options Joes the administrator have? (Choose three.)
- A. Generate a combined log bundle for all ESXI hosts using the vCenter Management Interface.
- B. Generate a separate log bundle for each ESXI host using the vSphere Host Client.
- C. Generate a combined log bundle for all ESXi hosts using the vSphere Host Client.
- D. Generate a separate log bundle for each ESXI host using the vSphere Client.
- E. Generate a combined log bundle for all ESXI hosts using the vSphere Client.
- F. Generate a separate log bundle for each ESXI host using the vCenter Management Interface.
Answer: B,D,E
Explanation:
Explanation
Option B, C and D are correct because they are valid methods to generate log bundles for individual or multiple ESXi hosts using different interfaces. Option A and E are incorrect because they are not possible options to generate log bundles for all ESXi hosts using the vCenter Management Interface. Option F is incorrect because it is not possible to generate a combined log bundle for all ESXi hosts using the vSphere Host Client. References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.troubleshooting.doc/GUID-9A94C3D1
NEW QUESTION # 71
f\n administrator needs to provide encryption for workloads within an existing vSphere cluster. The following requirements must be met:
* Workloads should be encrypted at rest.
* Encrypted workloads must automatically be encrypted during transit.
* Encryption should not require any specific hardware.
What should the administrator configure to meet these requirements?
- A. VM Encryption
- B. Host Encryption
- C. Encrypted vSphere vMotion
- D. Unified Extensible Firmware Interface (UEFI) Secure Boot
Answer: A
Explanation:
The feature that should be configured to provide encryption for workloads within an existing vSphere cluster without requiring any specific hardware is VM Encryption, which allows encrypting VMs at rest and during vMotion.
NEW QUESTION # 72
An administrator is tasked with migrating a single virtual machine (VM) from an existing VMware vCenter to a secure environment where corporate security policy requires that all VMs be encrypted. The secure environment consists of a dedicated vCenter instance with a 4-node vSphere cluster and already contains a number of encrypted VMs.
Which two steps must the administrator take to ensure the migration is a success? (Choose two.)
- A. Ensure that the source and destination vCenter instances share the same Key Management Server (KMS).
- B. Ensure that Encrypted vMotion Is turned off for the VM.
- C. Ensure that the source and destination vCenter Servers have a different Key Management Server (KMS).
- D. Ensure that the VM is encrypted before attempting the migration.
- E. Ensure that the VM is powered off before attempting the migration.
Answer: A,D
Explanation:
Explanation
To ensure a successful migration of an encrypted VM to a secure environment, the administrator needs to ensure that the source and destination vCenter instances share the same Key Management Server (KMS), which provides encryption keys for both environments; and ensure that the VM is encrypted before attempting the migration, which allows preserving its encryption status during vMotion.
References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F8F105EC-A6EA-4
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-C3FFBF62-D6BF-4
NEW QUESTION # 73
An administrator has been notified that a number of hosts are not compliant with the company policy for time synchronization.
The relevant portion of the policy states:
* All physical servers must synchronize time with an external time source that is accurate to the microsecond.
Which step should the administrator take to ensure compliance with the policy?
- A. Ensure that each ESXi host is configured to use a Precision Time Protocol (PTP) source.
- B. Ensure that each vCenter Server Appliance is configured to use a Precision Time Protocol (PTP) source.
- C. Ensure that each vCenter Server Appliance is configured to use a Network Time Protocol (NTP) source.
- D. Ensure that each ESXi host is configured to use a Network Time Protocol (NTP) source.
Answer: A
Explanation:
Explanation
To comply with the policy of synchronizing time with an external source that is accurate to the microsecond, the administrator needs to ensure that each ESXi host is configured to use a PTP source, which provides higher accuracy than NTP.
References:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vcenterhost.doc/GUID-F7DF1DD3-E3F
NEW QUESTION # 74
An administrator has been notified that a number of hosts are not compliant with the company policy for time synchronization.
The relevant portion of the policy states:
* All physical servers must synchronize time with an external time source that is accurate to the microsecond. Which step should the administrator take to ensure compliance with the policy?
- A. Ensure that each ESXi host is configured to use a Precision Time Protocol (PTP) source.
- B. Ensure that each vCenter Server Appliance is configured to use a Precision Time Protocol (PTP) source.
- C. Ensure that each vCenter Server Appliance is configured to use a Network Time Protocol (NTP) source.
- D. Ensure that each ESXi host is configured to use a Network Time Protocol (NTP) source.
Answer: A
Explanation:
To comply with the policy of synchronizing time with an external source that is accurate to the microsecond, the administrator needs to ensure that each ESXi host is configured to use a PTP source, which provides higher accuracy than NTP.
NEW QUESTION # 75
An administrator enables Secure Boot on an ESXi host. On booting the ESXi host, the following error message appears:
Fatal error: 39 (Secure Boot Failed)
- A. A package (VIB or driver) has been tampered with.
- B. The Trusted Platform Module chip has failed.
- C. The kernel has been tampered with.
- D. The administrator attempted to boot with a bootloader that is unsigned or has been tampered with.
Answer: C
Explanation:
The fatal error "Secure Boot Failed" may indicate that either the kernel or a package (VIB or driver) has been tampered with, which violates the Secure Boot integrity check.
NEW QUESTION # 76
A vSphere cluster has the following vSphere Distributed Resource Scheduler (DRS) group configuration:
* Virtual machine (VM) group named DB
* Host groups named PROD11 and PROD55
The administrator wants to force the VMs in the DB group to run on the hosts in the PROD11 group. However, if all the hosts in PROD55.
Which VM/Host rule must the administrator create to ensure that these requirements are met?
- A. A preferential rule between the DB group and the PROD55 group
- B. A preferential rule between the DB group and the PROD55 group
- C. A required rule between the DB group and the PROD11 group
- D. A preferential rule between the DB group and PROD11 group
Answer: D
Explanation:
Option A is correct because it allows the administrator to create a preferential rule between the DB group and PROD11 group, which will force the VMs in the DB group to run on the hosts in the PROD11 group if possible, but will allow them to run on the hosts in PROD55 group if necessary. Option B is incorrect because it will create a preferential rule between the DB group and PROD55 group, which will force the VMs in the DB group to run on the hosts in PROD55 group if possible, which is not what the administrator wants. Option C is incorrect because it is the same as option B Option D is incorrect because it will create a required rule between the DB group and PROD11 group, which will force the VMs in the DB group to run only on the hosts in PROD11 group and not allow them to run on the hosts in PROD55 group if needed. Reference: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.resmgmt.doc/GUID-60077B40-66FF-4625-934A-641703ED7601.html
NEW QUESTION # 77
An administrator creates a virtual machine that contains the latest company-approved software, tools and security updates. Company policy requires that only full clones are allowed for server workloads.
A combination of which two tasks should the administrator complete to prepare for the deployment of this virtual machine for multiple users? (Choose two.)
- A. Upgrade the virtual hardware.
- B. Take a snapshot of the virtual machine.
- C. Create a virtual machine customization specification.
- D. Convert the virtual machine to a template.
- E. Set appropriate permissions on the virtual machine.
Answer: C,D
Explanation:
Option B and D are correct because they allow the administrator to create a virtual machine customization specification, which can be used to customize guest operating system settings for multiple virtual machines, and convert the virtual machine to a template, which can be used to create full clones of server workloads. Option A is incorrect because assigning appropriate permissions on the virtual machine does not prepare it for deployment for multiple users. Option C is incorrect because upgrading the virtual hardware does not prepare it for deployment for multiple users. Option E is incorrect because taking a snapshot of the virtual machine does not prepare it for deployment for multiple users. Reference: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vm_admin.doc/GUID-9F9E3F8C-0E2B-4B6A-8C5C-3F8E5F6B4E9D.html
NEW QUESTION # 78
......
Pass VMware 2V0-21.23 Actual Free Exam Q&As Updated Dump: https://www.realvce.com/2V0-21.23_free-dumps.html
2V0-21.23 Exam Info and Free Practice Test All-in-One Exam Guide Sep-2023: https://drive.google.com/open?id=1NlsG4GZSQbajRviiQc1pyRSYnrXqjUvo