Question bank
VCP - VMware Cloud Foundation Support
42 VCP - VMware Cloud Foundation Support questions with the correct answer and a written explanation, organised across 5 exam domains.
- 42 questions
- 5 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Architecture and Technologies
10 questions in this domain
- Question 1Single Choice
What is the primary role of SDDC Manager in VMware Cloud Foundation?
- AIt orchestrates lifecycle management across all workload domains.Correct answer
- BIt provides the hypervisor for virtual machines.
- CIt manages storage policies for vSAN clusters.
- DIt performs network routing and switching.
Why this is the answer
SDDC Manager is the centralized orchestration and lifecycle management platform for the entire VCF stack, automating deployment, patching, upgrades, and certificate management.
- Question 2Multiple Select
Which components are typically deployed in the VCF management domain? (Choose two)
- ASDDC ManagerCorrect answer
- BvCenter Server for managementCorrect answer
- CProduction workload VMs
- DNSX Edge cluster for tenant workloads
Why this is the answer
The management domain contains all management VMs: SDDC Manager, vCenter Server, NSX Manager, and the vSAN witness. Tenant workloads run in VI workload domains.
- Question 3Interactive
Review the deployment specification snippet provided. What is the purpose of this JSON block in VCF?
- AIt is the depoySpec.json used during initial bring-up of VCF.Correct answer
- BIt defines an NSX firewall rule set.
- CIt is a vSAN storage policy template.
- DIt contains credentials for SDDC Manager backup.
Why this is the answer
The depoySpec.json file is a JSON-based deployment specification used by SDDC Manager to automate the creation of the management domain during the initial bring-up process.
- Question 4Single Choice
What is the function of VMware vSAN within a VCF architecture?
- AIt provides software-defined storage by pooling local disks from ESXi hosts.Correct answer
- BIt manages virtual machine networking and security.
- CIt automates lifecycle operations across domains.
- DIt acts as the hypervisor for running VMs.
Why this is the answer
vSAN is the software-defined storage layer in VCF, aggregating local disks from ESXi hosts into a distributed shared datastore managed through storage policies.
- Question 5Multiple Select
Which two components are integrated by SDDC Manager in a VCF workload domain? (Choose two)
- AvSANCorrect answer
- BNSXCorrect answer
- CVMware Horizon
- DVMware Site Recovery Manager
Why this is the answer
Each VCF workload domain includes vSphere, vSAN, and NSX. SDDC Manager orchestrates the deployment and lifecycle of these components. Horizon and SRM are optional add-ons.
- Question 6Interactive
Examine the code block from a VCF orchestration script. What action is being performed?
- AAdding a host to a workload domain via SDDC Manager.Correct answer
- BUpgrading the NSX Manager appliance.
- CConfiguring a vSAN storage policy.
- DCreating a vCenter Server backup.
Why this is the answer
The PowerCLI snippet shows the 'Add-VCFHost' cmdlet, which is used by SDDC Manager to add an ESXi host to a workload domain, ensuring lifecycle consistency.
- Question 7Single Choice
What is the purpose of an availability zone in a VCF workload domain?
- AIt provides failure isolation at the rack or infrastructure level.Correct answer
- BIt separates management and tenant workloads into different domains.
- CIt defines the network segmentation between domains.
- DIt controls vSAN storage policy inheritance.
Why this is the answer
Availability zones group clusters that share common infrastructure (power, cooling, network) to prevent a single failure from affecting the entire workload domain.
- Question 8Multiple Select
Which two statements correctly describe workload domains in VCF? (Choose two)
- AA workload domain can contain multiple vSphere clusters.Correct answer
- BEach workload domain has its own vCenter Server instance.Correct answer
- CAll workload domains share the same NSX transport zone.
- DWorkload domains can be deleted independently without affecting other domains.
Why this is the answer
A workload domain can have multiple clusters and typically uses a dedicated vCenter Server. Each domain has isolated NSX transport zones, and deleting one does not affect others as long as the management domain remains.
- Question 9Interactive
Examine the configuration block. Which VCF component is being configured for hybrid cloud connectivity?
- AA direct connect link between on-premises VCF and VMware Cloud on AWS.Correct answer
- BA vSAN stretched cluster witness configuration.
- CAn NSX Tier-0 gateway route redistribution policy.
- DA vSphere Replication schedule for disaster recovery.
Why this is the answer
The JSON snippet shows a direct connect configuration, a prerequisite for hybrid cloud integration between on-premises VCF and VMware Cloud on AWS.
- Question 10Single Choice
In a vSAN stretched cluster for VCF, what is the role of the witness host?
- AIt provides quorum and arbitration during site failures.Correct answer
- BIt stores a full copy of all virtual machine data.
- CIt acts as a router for inter-site traffic.
- DIt manages vCenter Server failover.
Why this is the answer
The witness host is a lightweight appliance placed in a third location to arbitrate which site should continue to serve data when inter-site connectivity is lost, preventing split-brain.
Installation, Configuration, and Upgrade
11 questions in this domain
- Question 11Single Choice
Which component is the first to be deployed during a fresh VCF installation?
- ASDDC Manager VM
- BvCenter Server
- CVCF Builder VMCorrect answer
- DNSX Manager
Why this is the answer
The VCF Builder VM is the bootstrap appliance used to deploy SDDC Manager and the management domain; it is the first component deployed.
- Question 12Multiple Select
Which of the following are required before deploying the VCF Builder VM? (Select two.)
- ADNS server configuredCorrect answer
- BvCenter Server already deployed
- CNTP server reachableCorrect answer
- DLicense key entered
Why this is the answer
The document lists DNS and NTP as prerequisites; the license key is entered later in the wizard, not before builder deployment.
- Question 13Interactive
Given the following log snippet from a failed deployment, what is the most likely cause?
- ADNS misconfiguration
- BStale /etc/hosts entry on SDDC ManagerCorrect answer
- CvCenter certificate expired
- DNTP drift between components
Why this is the answer
The log shows an IP resolution mismatch – the SDDC Manager resolves the vCenter FQDN to an old IP due to a stale hosts file.
- Question 14Single Choice
What is the correct order for upgrading VCF components?
- AManagement domain first, then workload domainsCorrect answer
- BWorkload domains first, then management domain
- CAny order is supported
- DAll domains simultaneously
Why this is the answer
The management domain must be upgraded first because it hosts SDDC Manager and core management components.
- Question 15Multiple Select
Which are valid methods to obtain LCM bundles in an air-gapped VCF environment? (Select two.)
- ADirect download from Broadcom portal via SDDC Manager
- BManual download from customer portal and upload via UICorrect answer
- CUsing the vcf update download command
- DUploading the offline bundle using vcf update uploadCorrect answer
Why this is the answer
Offline environments require manual download and import; the download command only works with internet access.
- Question 16Interactive
Examine the command: 'vcf update upload /path/to/bundle.vcfb'. What does this command achieve?
- ADownloads a bundle from the internet
- BUploads a local bundle to the SDDC Manager depotCorrect answer
- CInstalls the patch immediately
- DRuns pre-checks for an update
Why this is the answer
The vcf update upload command is used to import locally downloaded bundles into the SDDC Manager for offline upgrades.
- Question 17Single Choice
Where is the VCF Builder VM deployed during a fresh installation?
- AOn the management domain's vSAN datastore
- BOn a prepared ESXi host using vSphere ClientCorrect answer
- CInside the SDDC Manager VM
- DOn a workload domain cluster
Why this is the answer
The builder OVA is deployed on a single ESXi host that is already prepared and connected to the management network.
- Question 18Multiple Select
Which of the following are common causes of validation failures during a fresh VCF installation? (Select two.)
- AIncorrect DNS recordsCorrect answer
- BLicense key already used
- CMissing VLAN on physical switchesCorrect answer
- DvCenter already deployed
Why this is the answer
The document highlights DNS misconfiguration and missing VLANs as common pitfalls; license issues are not mentioned as validation failures.
- Question 19Interactive
An administrator sees the following error when trying to enable vSAN deduplication via vCenter. What is the correct action?
- AEnable deduplication via SDDC Manager cluster image settingsCorrect answer
- BManually edit the vSAN policy via API
- CRecreate the cluster with deduplication enabled
- DApply a new license that supports deduplication
Why this is the answer
In VCF, vSAN settings must be changed through SDDC Manager’s cluster image workflow; direct vCenter changes break lifecycle management.
- Question 20Single Choice
Which tool is used to collect logs from all VCF components for troubleshooting?
- Avcf-deployment-validator
- Bvcf-support-bundleCorrect answer
- CSkyline Health
- DvCenter Log Browser
Why this is the answer
The vcf-support-bundle script collects logs from all components into a single tar.gz file for analysis.
- Question 21Multiple Select
Which of the following are valid steps in the pre-upgrade health check? (Select two.)
- AVerify cluster statusCorrect answer
- BRun vcf update precheckCorrect answer
- CApply the patch immediately
- DDelete old log files
Why this is the answer
The pre-upgrade health check includes verifying cluster status and running the precheck command; applying the patch comes later.
Operations, Monitoring, and Automation
7 questions in this domain
- Question 22Single Choice
Which tool is the primary platform for comprehensive health and performance monitoring in VMware Cloud Foundation?
- AVMware Aria OperationsCorrect answer
- BvCenter Server
- CSDDC Manager
- DSkyline Health
Why this is the answer
VMware Aria Operations is the primary monitoring platform in VCF, collecting metrics from all components via management packs.
- Question 23Multiple Select
Which two metrics indicate vSAN performance degradation according to VMware best practices?
- ARead latency > 10msCorrect answer
- BWrite latency > 5msCorrect answer
- CCPU ready time > 5%
- DMemory ballooning > 0
Why this is the answer
Read latency above 10ms and write latency above 5ms are vSAN performance degradation indicators per VMware best practices.
- Question 24Interactive
What HTTP method and endpoint should be used to initiate a domain upgrade via SDDC Manager API?
- APOST /v1/domains/{domainId}/upgradeCorrect answer
- BGET /v1/domains/{domainId}/upgrade
- CPUT /v1/domains/{domainId}/upgrade
- DPOST /v1/domains/{domainId}/start-upgrade
Why this is the answer
The correct API to initiate a domain upgrade is POST to the /v1/domains/{domainId}/upgrade endpoint.
- Question 25Single Choice
What is the first step when decommissioning a workload domain in VCF?
- AEvacuate all virtual machinesCorrect answer
- BDelete the domain from SDDC Manager
- CRemove all ESXi hosts
- DDestroy the vSAN datastore
Why this is the answer
All VMs must be evacuated to another domain or storage before any decommissioning steps to prevent data loss.
- Question 26Multiple Select
Which two pre-checks does SDDC Manager perform before adding a host to an existing vSAN cluster?
- AVerify host firmware compatibility with cluster baselineCorrect answer
- BValidate vSAN disk group configuration on the hostCorrect answer
- CDelete existing vSAN objects on the host
- DPlace host in maintenance mode manually
Why this is the answer
SDDC Manager checks host firmware compatibility and validates the vSAN disk group configuration to ensure successful integration.
- Question 27Interactive
What is the correct restoration order for a VCF management domain after a disaster?
- ARestore SDDC Manager first, then vCenter, then NSXCorrect answer
- BRestore vCenter Server first, then SDDC Manager
- CRestore NSX Manager first, then vCenter
- DRestore all components simultaneously
Why this is the answer
SDDC Manager orchestrates the recovery of vCenter and NSX, so it must be restored first to coordinate the process.
- Question 28Single Choice
What is the recommended threshold for CPU ready time per physical CPU in a vSphere host?
- A5%Correct answer
- B10%
- C2%
- D15%
Why this is the answer
VMware recommends keeping CPU ready time below 5% per physical core to avoid performance degradation.
Product and Solution Planning
6 questions in this domain
- Question 29Single Choice
What is the primary source for verifying hardware compatibility when planning a VMware Cloud Foundation deployment?
- AGeneral vSphere Hardware Compatibility List (HCL)
- BVMware Compatibility Guide (VCG) filtered for VCFCorrect answer
- CVendor-specific firmware matrix
- DVMware Knowledge Base articles
Why this is the answer
VMware Cloud Foundation requires that all hardware components be listed in the VCG with the VCF filter. The general vSphere HCL is necessary but not sufficient; VCF has additional integration testing. Vendor firmware matrices and KB articles supplement but do not replace the VCG.
- Question 30Multiple Select
Which of the following are correct statements about VCF deployment planning? (Select two.)
- ASDDC Manager requires a persistent boot device such as a local SSD.Correct answer
- BvSAN storage traffic must operate over networks configured with jumbo frames (MTU 9000).Correct answer
- CThe management domain can be deployed with a minimum of two hosts.
- DNSX overlay transport zones use default MTU 1500 for optimal performance.
Why this is the answer
VCF 5.x+ does not support SD card or USB boot devices; a persistent local SSD is required. vSAN requires jumbo frames (MTU 9000) for replication traffic; default 1500 causes packet fragmentation. A minimum of three hosts is required for a management domain, and NSX overlay transport zones require jumbo frames (MTU 1600+) to avoid fragmentation.
- Question 31Interactive
In the VCF deployment plan snippet above, what is the most critical design flaw?
- AThe management domain is configured with only three hosts.
- BThe MTU for the management network is set to 1500 instead of 9000.Correct answer
- CThe workload domain has too many hosts.
- DVCF version 5.2 is not listed in the Compatibility Guide.
Why this is the answer
VCF requires jumbo frames (MTU 9000) on management, vSAN, and overlay networks. Setting MTU to 1500 will cause packet fragmentation and severe performance issues. Three hosts in the management domain is acceptable (though four is recommended), and VCF 5.2 is a valid version. The workload domain host count is within limits.
- Question 32Single Choice
What is the minimum number of cores per processor that must be licensed for a VCF subscription?
- A8 cores
- B16 coresCorrect answer
- C32 cores
- D10 cores
Why this is the answer
VMware licenses VCF per-core with a minimum of 16 cores per physical processor socket. Even if a CPU has fewer than 16 cores (e.g., 8 or 10), you must license 16 cores per socket. For CPUs with more than 16 cores, you license the actual core count.
- Question 33Multiple Select
Which two support tiers are available for VMware Cloud Foundation subscriptions? (Select two.)
- AStarter SupportCorrect answer
- BProduction SupportCorrect answer
- CPlatinum Support
- DPremier Support
Why this is the answer
VCF subscriptions include either Production Support (24x7, unlimited incidents) or Starter Support (business hours, limited incidents). Platinum Support is a legacy tier not applicable to VCF. Premier Support is an additional fee-based service but is not a base subscription tier; it can be purchased as an add-on.
- Question 34Interactive
In the stretched cluster specification above, what is the primary role of the witness component?
- AProvides additional storage capacity for the cluster.
- BActs as a tiebreaker to maintain quorum during site failures.Correct answer
- CAutomatically fails over VMs to the secondary site.
- DMonitors network latency between the two data centers.
Why this is the answer
In a vSAN stretched cluster, the witness host is a lightweight component that provides a quorum vote. It does not store VM data, only metadata and clustering information. Its main purpose is to arbitrate ownership if the two sites lose connectivity, preventing split-brain scenarios. Automatic failover is handled by vSAN and vSphere HA, not the witness alone.
Troubleshooting
8 questions in this domain
- Question 35Single Choice
What does a yellow status on vSAN Health Service indicate?
- AHealthy
- BAt risk or degradedCorrect answer
- CNot applicable
- DError
Why this is the answer
Yellow status indicates a potential issue or at-risk state, not immediate failure.
- Question 36Multiple Select
Which tools are used for vSAN health diagnostics? (Choose two)
- AvSAN Skyline HealthCorrect answer
- BRVC vsan commandsCorrect answer
- CNSX Manager
- DSDDC Manager LCM
Why this is the answer
vSAN Skyline Health and RVC are designed for vSAN diagnostics.
- Question 37Interactive
Examine the code block. What is the underlying command used for the output?
- Aesxcli vsan cluster list
- Besxcli vsan health cluster listCorrect answer
- Cesxcli vsan storage list
- Desxcli vsan network list
Why this is the answer
The JSON output with health check results corresponds to esxcli vsan health cluster list.
- Question 38Single Choice
What is the first step in VCF troubleshooting methodology?
- ACollect logs
- BIdentify symptomCorrect answer
- CRemediate
- DEscalate
Why this is the answer
The methodology begins with identifying the symptom from alerts or reports.
- Question 39Multiple Select
Which two components are part of NSX policy conflict diagnosis?
- ADistributed Firewall rulesCorrect answer
- BGateway Firewall rulesCorrect answer
- CvCenter alarms
- DvSAN health
Why this is the answer
Both DFW and Gateway FW rules need cross-checking for conflicts.
- Question 40Interactive
The code shows a log snippet. Which service generated this log?
- ACertificate Manager
- BLifecycle Management (LCM)Correct answer
- CDomain Manager
- DCredential Management
Why this is the answer
The log path /var/log/vmware/vcf/lcm indicates LCM service.
- Question 41Single Choice
What tool provides proactive health monitoring by comparing to known issues?
- AvRealize Log Insight
- BVMware SkylineCorrect answer
- CESXCLI
- DVCF Diagnostic Tool
Why this is the answer
Skyline collects data and correlates with VMware's known issue database.
- Question 42Multiple Select
Which two are common causes of vCenter Server service failure?
- ADatabase corruptionCorrect answer
- BCertificate expiryCorrect answer
- CvSAN disk full
- DESXi memory error
Why this is the answer
Database corruption and certificate expiry are common vCenter service issues.
Frequently asked questions
Everything about the VCP - VMware Cloud Foundation Support question bank and how to use it.