01. VCF Operations monitors NSX through the VMware Infrastructure Health integration. Last week an NSX Manager certificate raised an about-to-expire symptom at Warning criticality. Today the symptom for the same certificate shows Immediate criticality, although nobody has changed the certificate, the symptom definitions or the global settings.
What does the change in criticality indicate?
a) The NSX Manager certificate has already expired
b) The certificate is now closer to expiry
c) Infrastructure Health stopped collecting from NSX Manager
d) An administrator lowered the global expiry thresholds
02. NSX raises a management-channel-to-transport-node-down alarm for one ESX host. On the host, get controllers shows the controller connections as up. The firewall team proposes opening TCP 1235 between the host and the NSX Manager nodes to clear the alarm.
What should the administrator verify instead?
a) That TCP 1235 is open, because the alarm covers the controller channel to the managers
b) That the NSX VDS MTU meets the overlay minimum
c) That TCP 1234 to the managers is permitted, checked with get managers
d) That LLDP is enabled on the physical switch ports that face the affected host
03. After an existing vSphere environment is converted into VCF 9.0, its cluster is managed with vSphere Configuration Profiles. Several hosts now show their configuration compliance as unknown, and the team wants to follow the documented recovery for this state.
Which two actions are part of that recovery?
(Choose two.)
a) Run the conversion workflow again so the hosts are adopted with a fresh configuration
b) Switch the cluster back to vLCM baselines to clear the profile
c) Create a draft configuration by importing it from a reference host
d) Re-check compliance, then remediate the hosts
e) Reboot each host in maintenance mode
04. Yesterday an engineer launched the Observability Workbench in VCF Operations from an alert, adjusted the scope and reviewed the potential evidence, then logged out. Today the session is no longer listed among the active sessions.
What explains this, and where can the engineer find it?
a) The session expired because its time range went past the seven-day maximum and must be rebuilt
b) Workbench sessions are kept only while the source alert is active; reopen it from the alert
c) The session was saved as a dashboard; open it from the Dashboards list
d) Active sessions do not persist after logout; it appears under Recent Searches
05. An engineer commissions two new hosts for an existing workload domain cluster. Both hosts respond to ping, forward and reverse DNS lookups return esx21.corp.example and esx22.corp.example for their management addresses, and the disks hold no existing partitions. Commissioning validation still fails for both hosts. The host configuration shows the names esx21 and esx22.
What is the most likely cause?
a) Reverse DNS records are missing, so validation cannot map the management addresses back to the host names
b) Each host is configured with a short name instead of its FQDN
c) The hosts were not first placed in a cluster with HA and DRS enabled
d) The management IPs share a subnet with other hosts
06. A Tier-0 gateway has an uplink interface 192.168.50.2/24 toward a top-of-rack switch. The network team asks for eBGP peering to the switch's loopback address 10.10.10.1, and the administrator adds that address as a BGP neighbor with default settings. A static route to 10.10.10.0/24 via 192.168.50.1 exists, and ping from the Tier-0 service router to 10.10.10.1 succeeds, yet the BGP session never establishes.
What is the most likely cause?
a) The neighbor is not in the uplink subnet, so the session needs eBGP multihop
b) Route redistribution of Tier-1 connected subnets is not enabled on the Tier-0 gateway
c) BFD is not enabled for this neighbor
d) The Tier-0 gateway has to run in active-active HA mode before it can establish any eBGP session with a physical router
07. In VCF Operations, the Configuration Drifts view lists three vCenter instances. Two show Not Drifted. The third is a vCenter 8.0 instance in an environment that has not yet been upgraded, and its drift status shows Unavailable. Running Detect Drift does not change that status.
What explains the Unavailable status?
a) Drift is still being computed and appears after the next Detect Drift run
b) Drift monitoring covers only vCenter 9.0 and later
c) The vCenter has drifted
d) Its template is too large
08. Support has asked for detailed vCenter server (vpxd) logs covering an intermittent failure of VM reconfiguration tasks in a workload domain. The logs collected so far contain too little detail to show the failing calls, and the engineer receiving the bundle reports that the vpxd logs inside it are not plain text files.
What should the administrator do?
a) Collect the host vpxa.log files instead
b) Restart the vCenter services to start fresh vpxd logs, then export a Minimal support bundle, which stores them uncompressed
c) Set vCenter logging to verbose, reproduce, re-export; extract the .tgz vpxd logs
d) Collect a log bundle with Log Assist from VCF Operations, which raises vpxd logging to verbose before collection
09. An administrator plans to import an existing vCenter instance into a VCF Instance as an isolated workload domain. A pre-import review of the source vCenter records several findings about its identity and linking configuration.
Which two findings mean this vCenter is not a valid import candidate as it stands?
(Choose two.)
a) It has its own vCenter SSO domain, named differently from every other SSO domain in the instance
b) It will join a VCF Operations vCenter Linking Group to share tags
c) It is joined in Enhanced Linked Mode with a vCenter already in the VCF Instance
d) Its SSO domain holds only local administrator accounts
e) It authenticates against the SSO domain used by the management vCenter
10. While creating a new region for All Apps organizations in the VCF Automation Provider Management portal, an administrator cannot select the workload domain's NSX Manager. The NSX Manager is healthy, and the domain's vCenter appears on the Connections → vCenter tab, but the NSX Manager is absent from the Connections → NSX Manager tab.
What should the administrator do?
a) Use Sync on the Edge Clusters page to force NSX synchronization
b) Deploy a second workload domain, because a region needs two NSX Managers
c) Configure an HCX service mesh between the domains first
d) Register the NSX Manager with VCF Automation through the VCF Automation API, because it was not properly registered