2V0-622 Practice Questions
524 real 2V0-622 exam questions with expert-verified answers and explanations. Page 1 of 11.
- Question #1Section 1 – Configure and Administer vSphere 6.5 Security
An administrator wants to provide users restricted access. The users should only be able to perform the following tasks: -Create and consolidate virtual machine snapshots -Add/Remo...
vCenter rolespermissionsvirtual machine power user - Question #2Section 1 – Configure and Administer vSphere 6.5 Security
Which two roles can be modified? (Choose two.)
vCenter rolesdefault rolesrole modification - Question #3Section 1 – Configure and Administer vSphere 6.5 Security
An administrator with global administrator privileges creates a custom role but fails to assign any privileges to it. Which two privileges would the custom role have? (Choose two.)
custom rolessystem privilegesvCenter permissions - Question #4Section 1 – Configure and Administer vSphere 6.5 Security
An administrator wishes to give a user the ability to manage snapshots for virtual machines. Which privilege does the administrator need to assign to the user?
snapshot managementprivilege assignmentdatastore allocation - Question #5Section 1 – Configure and Administer vSphere 6.5 Security
An object has inherited permissions from two parent objects. What is true about the permissions on the object?
inherited permissionspermission propagationvCenter hierarchy - Question #6Section 5 – Administer and Protect vSphere 6.5 Resources
Which feature helps in managing the power consumed by a cluster when virtual machine usage is low?
DPMpower managementcluster resources - Question #7Section 6 – Administer vSphere 6.5 Availability
Where does Fault Tolerance store the primary and secondary virtual machine files?
Fault ToleranceFT storageprimary secondary VM - Question #8Section 8 – Deploy and Administer VMware Virtual Machines
VMware vSphere 6.x provides which three capabilities? (Choose three.)
vSphere capabilitieslive migrationvMotion - Question #9Section 2 – Configure and Administer vSphere 6.5 Networking
What is the minimum number of virtual NICs that you can configure for a virtual machine?
virtual NICVM configurationnetwork adapters - Question #10Section 3 – Configure and Administer vSphere 6.5 Storage
Why does iSCSI use hardware and software initiators?
iSCSIhardware initiatorsoftware initiatorESXi native support - Question #11Section 1 – Configure and Administer vSphere 6.5 Security
Which two methods are recommended for managing the VMware Directory Service? (Choose two.)
VMware Directory ServicevmdirvSphere Web Client - Question #12Section 1 – Configure and Administer vSphere 6.5 Security
What are two sample roles that are provided with vCenter Server by default? (Choose two.)
default rolesvCenter Serversample roles - Question #13Section 1 – Configure and Administer vSphere 6.5 Security
Which three services can be enabled/disabled in the Security Profile for an ESXi host? (Choose three.)
ESXi security profilehost servicesCIM serversyslog - Question #14Section 1 – Configure and Administer vSphere 6.5 Security
An administrator would like to use the VMware Certificate Authority (VMCA) as an Intermediate Certificate Authority (CA). The first two steps performed are: -Replace the Root Certi...
VMCAintermediate CAcertificate replacementsolution user certificates - Question #15Section 1 – Configure and Administer vSphere 6.5 Security
Which three options are available for ESXi Certificate Replacement? (Choose three.)
ESXi certificate modesVMCA modecustom CAthumbprint mode - Question #16Section 1 – Configure and Administer vSphere 6.5 Security
Lockdown Mode has been enabled on an ESXi 6.x host and users are restricted from logging into the Direct Console User Interface (DCUI). Which two statements are true given this con...
lockdown modeDCUI accessexception usersESXi security - Question #17Section 1 – Configure and Administer vSphere 6.5 Security
Strict Lockdown Mode has been enabled on an ESXi host. Which action should an administrator perform to allow ESXi Shell or SSH access for users with administrator privileges?
strict lockdown modeexception usersESXi shellSSH access - Question #18Section 1 – Configure and Administer vSphere 6.5 Security
A common root user account has been configured for a group of ESXi 6.x hosts. Which two steps should be taken to mitigate security risks associated with this configuration? (Choose...
root account securityActive DirectoryESXi hardeninglockdown mode - Question #19Section 1 – Configure and Administer vSphere 6.5 Security
An administrator wants to configure an ESXi 6.x host to use Active Directory (AD) to manage users and groups. The AD domain group ESX Admins is planned for administrative access to...
Active Directory integrationESX AdminsAuto DeployESXi authentication - Question #20Section 1 – Configure and Administer vSphere 6.5 Security
Which two advanced features should be disabled for virtual machines that are only hosted on a vSphere system? (Choose two.)
VM isolationadvanced VM settingsVMware Toolssecurity hardening - Question #21Section 1 – Configure and Administer vSphere 6.5 Security
To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)
VM attack surfacehardware device settingsVM configuration hardeningserial device - Question #22Section 1 – Configure and Administer vSphere 6.5 Security
Which two groups of settings should be reviewed when attempting to increase the security of virtual machines (VMs)? (Choose two.)
VM security reviewhardware device hardeningunexposed featuresVM hardening - Question #23Section 1 – Configure and Administer vSphere 6.5 Security
Which password meets ESXi 6.x host password requirements?
ESXi password policypassword complexityhost authenticationpassword requirements - Question #24Section 1 – Configure and Administer vSphere 6.5 Security
An administrator would like to use a passphrase for their ESXi 6.x hosts which has these characteristics: -Minimum of 21 characters -Minimum of 2 words Which advanced options must...
ESXi passphrasePAM configurationadvanced password optionsESXi authentication - Question #25Section 1 – Configure and Administer vSphere 6.5 Security
Which Advanced Setting should be created for the vCenter Server to change the expiration policy of the vpxuser password?
vpxuser passwordvCenter advanced settingspassword expirationVimPasswordExpirationInDays - Question #26Section 1 – Configure and Administer vSphere 6.5 Security
An administrator has been instructed to secure existing virtual machines in vCenter Server. Which two actions should the administrator take to secure these virtual machines? (Choos...
VM security hardeningremote console accessindependent non-persistent disksVM data protection - Question #27Section 1 – Configure and Administer vSphere 6.5 Security
An administrator has recently audited the environment and found numerous virtual machines with sensitive data written to the configuration files. To prevent this in the future, whi...
VM configuration securityisolation.tools.setinfosensitive data protectionadvanced VM parameters - Question #28Section 1 – Configure and Administer vSphere 6.5 Security
Which two statements are correct regarding vSphere certificates? (Choose two.)
vSphere certificatesSSL certificatesVMCAESXi host upgrades - Question #29Section 1 – Configure and Administer vSphere 6.5 Security
Which three options are available for replacing vCenter Server Security Certificates? (Choose three.)
vCenter certificatesVMCAcertificate replacement optionsintermediate CA - Question #30Section 1 – Configure and Administer vSphere 6.5 Security
When attempting to log in with the vSphere Web Client, users have reported the error: Incorrect Username/Password The administrator has configured the Platform Services Controller...
SSO identity sourceActive Directory LDAPforest trustvSphere Web Client login - Question #31Section 1 – Configure and Administer vSphere 6.5 Security
Which group in the vsphere.local domain will have administrator privileges for the VMware Certificate Authority (VMCA)?
VMCA administrationvsphere.local groupsCAAdminscertificate authority - Question #32Section 1 – Configure and Administer vSphere 6.5 Security
Which Platform Service Controller Password Policy determines the number of days a password can exist before the user must change it?
PSC password policyMaximum Lifetimepassword expirationPlatform Services Controller - Question #33Section 1 – Configure and Administer vSphere 6.5 Security
An administrator is configuring the clock tolerance for the Single Sign-On token configuration policy and wants to define the time skew tolerance between a client and the domain co...
SSO token policyclock tolerancetime skewSingle Sign-On configuration - Question #34Section 1 – Configure and Administer vSphere 6.5 Security
Which VMware Single Sign-On component issues Security Assertion Markup Language (SAML) tokens?
Single Sign-OnSAML tokensSecurity Token ServiceSSO components - Question #35Section 1 – Configure and Administer vSphere 6.5 Security
Which two are valid Identity Sources when configuring vCenter Single Sign-On? (Choose two.)
vCenter SSOidentity sourcesOpenLDAPLocalOS - Question #36Section 1 – Configure and Administer vSphere 6.5 Security
An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA). Which two actions will accomplish t...
IWA identity sourceVCSA Active Directory joinService Principal Namemachine account - Question #37Section 8 – Deploy and Administer VMware Virtual Machines
An administrator wants to reduce the memory overhead for a 3D graphics enabled virtual machine (VM). What advanced feature can be added to the VM configuration file to reduce memor...
VM 3D graphicsmemory overhead reductionvga.vgaOnlyadvanced VM parameters - Question #38Section 8 – Deploy and Administer VMware Virtual Machines
An administrator is building a large virtual machine that will require as many vCPUs as the host can support. An ESXi 6.x host has these specifications: -Six 32-core Intel Xeon Pro...
vCPU limitsESXi host capacityvirtual machine maximumsVM sizing - Question #39Section 8 – Deploy and Administer VMware Virtual Machines
Which two features are available for virtual machines configured with DirectPath I/O? (Choose two.)
DirectPath I/Ohardware passthroughvSMPvNUMA - Question #40Section 8 – Deploy and Administer VMware Virtual Machines
An administrator is creating a new Content Library. It will subscribe to another remote Content Library without authentication enabled. What information from the published library...
Content Librarylibrary subscriptionsubscription URLpublished library - Question #41Section 1 – Configure and Administer vSphere 6.5 Security
An administrator is assigning a user the Content Library administrator role. The user will only be creating the library for a single vCenter Server. What is the lowest level of the...
Content Librarypermissions hierarchyglobal permissionsrole assignment - Question #42Section 1 – Configure and Administer vSphere 6.5 Security
A user notifies an administrator that Content Libraries are not visible. What is a possible solution?
Content Libraryglobal permissionsread-only rolevisibility - Question #43Section 8 – Deploy and Administer VMware Virtual Machines
When a Content Library is deleted, what happens to the files contained on the backing storage?
Content Librarybacking storagedelete behaviorlibrary management - Question #44Section 2 – Configure and Administer vSphere 6.5 Networking
Which three connection types are supported between a remote site and vCloud Air? (Choose three.)
vCloud Airconnectivity typesVPNDirect Connect - Question #45Section 6 – Administer vSphere 6.5 Availability
An administrator subscribes to the vCloud Air Disaster Recovery service. Which replicated objects can be directly monitored and managed?
vCloud AirDisaster Recoveryreplicationvirtual machines - Question #46Section 1 – Configure and Administer vSphere 6.5 Security
Refer to the Exhibit. An administrator is adding an Active Directory over LDAP Identity Source for vCenter Single Sign-On, as indicated in the Exhibit. What is the correct value to...
SSOActive Directory LDAPNetBIOS nameidentity source - Question #47Section 2 – Configure and Administer vSphere 6.5 Networking
Refer to the Exhibit. An administrator is changing the settings on a vSphere Distributed Switch (vDS). During this process, the ESXi Management IP address is set to an address whic...
vDSmanagement networkrollback protectionESXi connectivity - Question #48Section 2 – Configure and Administer vSphere 6.5 Networking
Which secondary Private VLAN (PVLAN) type can communicate and send packets to an Isolated PVLAN?
PVLANPromiscuous VLANIsolated VLANprivate VLAN types - Question #49Section 2 – Configure and Administer vSphere 6.5 Networking
Which three traffic types can be configured for dedicated VMkernel adapters? (Choose three.)
VMkernel adaptertraffic typesvMotionvSphere Replication NFC - Question #50Section 2 – Configure and Administer vSphere 6.5 Networking
What are two limitations of Link Aggregation Control Protocol (LACP) on a vSphere Distributed Switch? (Choose two.)
LACPvDSiSCSI multipathingHost Profiles