Question bank
VCAP - VMware Cloud Foundation Storage
40 VCAP - VMware Cloud Foundation Storage questions with the correct answer and a written explanation, organised across 5 exam domains.
- 40 questions
- 5 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Architecture and Design
10 questions in this domain
- Question 1Single Choice
What is the minimum number of hosts required for a vSAN stretched cluster?
- A2Correct answer
- B3
- C4
- D5
Why this is the answer
A vSAN stretched cluster requires at least two hosts (one per site) plus an external witness, making two the minimum host count.
- Question 2Multiple Select
Which two are vSAN storage policy parameters?
- APrimary Failures to Tolerate (PFTT)Correct answer
- BNumber of Disk StripesCorrect answer
- CvCenter Server version
- DCluster node count
Why this is the answer
PFTT and Number of Disk Stripes are key vSAN storage policy parameters controlling availability and performance.
- Question 3Interactive
Refer to the code block below. What is the purpose of this ESXi command?
- ALists NFS datastores mounted on the hostCorrect answer
- BMounts a new NFS datastore
- CChecks vSAN health status
- DConfigures NFS v4.1 security
Why this is the answer
The command 'esxcli storage nfs list' displays all NFS datastores currently mounted on the ESXi host.
- Question 4Single Choice
What is the recommended free capacity headroom in a vSAN cluster for maintenance operations?
- A10%
- B20%
- C25%Correct answer
- D30%
Why this is the answer
VCF recommends maintaining 25% free capacity in each vSAN cluster for host maintenance, rebuilds, and policy changes.
- Question 5Multiple Select
Which two are benefits of using erasure coding (RAID-5/6) over mirroring in vSAN?
- ALower capacity overheadCorrect answer
- BBetter write performance
- CLower rebuild impact
- DHigher capacity efficiencyCorrect answer
Why this is the answer
Erasure coding offers lower capacity overhead (33-50% vs 100-200%) and higher capacity efficiency, but incurs write performance penalty and slower rebuilds.
- Question 6Interactive
Refer to the code block. Which two pieces of information are provided by this command?
- ANFS server IP addressCorrect answer
- BvCenter Server name
- CDatastore nameCorrect answer
- DVMFS volume label
Why this is the answer
The 'esxcli storage nfs list' displays the NFS server IP and the datastore name (volume label) for each mounted NFS datastore.
- Question 7Single Choice
What is the minimum number of hosts required for a vSAN cluster to use RAID-5 erasure coding?
- A3
- B4Correct answer
- C5
- D6
Why this is the answer
RAID-5 erasure coding requires a minimum of 4 hosts; RAID-6 requires 6 hosts.
- Question 8Multiple Select
Which two vSAN storage policy parameters are used to configure availability?
- AFailures to Tolerate (FTT)Correct answer
- BStriping Width
- CFailure Tolerance MethodCorrect answer
- DObject Space Reservation
Why this is the answer
FTT defines how many failures are tolerated, and Failure Tolerance Method (mirroring vs erasure coding) implements that tolerance.
- Question 9Interactive
Refer to the code block. What does this command validate after mounting an NFS datastore?
- ASuccessful NFS datastore mountCorrect answer
- BvSAN health status
- CVASA provider connectivity
- DKerberos authentication
Why this is the answer
The command lists NFS datastores, confirming that the mount was successful and the datastore is accessible by the host.
- Question 10Single Choice
Which NFS protocol is preferred for secure storage integration in VCF?
- ANFS v3
- BNFS v4.1Correct answer
- CiSCSI
- DFibre Channel
Why this is the answer
NFS v4.1 is preferred because it supports Kerberos authentication and better file locking, enhancing security.
Implementation and Configuration
12 questions in this domain
- Question 11Single Choice
What is the minimum number of ESXi hosts required to form a standard vSAN cluster?
- A2
- B3Correct answer
- C4
- D5
Why this is the answer
A standard vSAN cluster requires a minimum of 3 hosts to provide storage and ensure failure tolerance.
- Question 12Multiple Select
Which two network prerequisites must be met to configure vSAN within a workload domain?
- AMTU 9000Correct answer
- BVLAN isolation from VM trafficCorrect answer
- CUse of DHCP for IP assignment
- DMulticast disabled
Why this is the answer
vSAN requires jumbo frames (MTU 9000) and a dedicated VLAN isolated from other traffic.
- Question 13Interactive
In the provided vSAN disk group configuration, which device serves as the cache tier?
- Avmhba0:C0:T0:L0Correct answer
- Bvmhba0:C0:T1:L0
- Cvmhba0:C0:T2:L0
- DNone of the above
Why this is the answer
The cache device is listed under Cache Tier, which is vmhba0:C0:T0:L0.
- Question 14Single Choice
Where does the VASA Provider need to be registered to expose storage capabilities?
- AESXi host
- BvCenter ServerCorrect answer
- CNSX Controller
- DSDDC Manager
Why this is the answer
The VASA Provider is registered with vCenter Server to expose array capabilities.
- Question 15Multiple Select
Which two capabilities are provided by VASA in a vSphere environment?
- AExpose array capabilities for SPBMCorrect answer
- BOffload storage operations like snapshots
- CEnable Virtual VolumesCorrect answer
- DProvide backup integration
Why this is the answer
VASA exposes storage capabilities for policy-based management and is required for Virtual Volumes.
- Question 16Interactive
What does the status \"Connected\" indicate for the VASA Provider?
- AProvider is running and communicating with vCenterCorrect answer
- BProvider is registered but not responding
- CProvider needs certificate update
- DProvider is in maintenance mode
Why this is the answer
\"Connected\" indicates the VASA Provider is successfully communicating with vCenter.
- Question 17Single Choice
Which Storage DRS mode requires administrator approval before recommendations are executed?
- AAutomated
- BManualCorrect answer
- CSemi-automated
- DIntelligent
Why this is the answer
Manual mode generates recommendations but requires admin action to execute them.
- Question 18Multiple Select
Which two conditions must be met for Storage DRS to perform load balancing migrations?
- AStorage vMotion licenseCorrect answer
- BShared storage between datastoresCorrect answer
- CvMotion network configured
- DvSAN enabled on the cluster
Why this is the answer
SDRS requires storage vMotion licensing and shared storage between datastores.
- Question 19Interactive
Based on the SDRS settings, which threshold would trigger a load balancing operation?
- ASpace utilization exceeding 80%Correct answer
- BI/O latency above 10 ms
- CI/O load threshold 20
- DInvocation frequency change
Why this is the answer
The space utilization threshold is set to 80%; exceeding it triggers evaluation.
- Question 20Single Choice
Which external system is required to enable vSAN encryption?
- AActive Directory
- BKey Management ServerCorrect answer
- CDNS Server
- DvCenter Native Key Provider
Why this is the answer
vSAN encryption requires an external KMIP-compliant Key Management Server.
- Question 21Multiple Select
Which two statements correctly differentiate vSAN encryption from VM-level encryption?
- AvSAN encryption protects entire datastore, VM-level encrypts individual VMDKsCorrect answer
- BVM-level encryption supports deduplication, vSAN does not
- CvSAN encryption requires external KMS, VM-level can use NKPCorrect answer
- DBoth require the same KMS type
Why this is the answer
vSAN encryption encrypts all data at cluster level; VM-level can use NKP and encrypts individual disks.
- Question 22Interactive
According to the vSAN encryption workflow, which action must occur first?
- ARegister external KMSCorrect answer
- BCreate storage policy
- CApply policy to cluster
- DConfirm enable
Why this is the answer
The KMS must be registered before any encryption policy or enablement.
Operations and Management
8 questions in this domain
- Question 23Single Choice
What is the default interval (in minutes) for vSAN Skyline Health built-in health checks to run?
- A30 minutes
- B60 minutesCorrect answer
- C120 minutes
- D90 minutes
Why this is the answer
The document states that vSAN Skyline Health performs health checks on a configurable interval with a default of 60 minutes.
- Question 24Multiple Select
Which two tools are identified in the document as the primary monitoring tools for vSAN storage health and performance in VCF?
- AvSAN Skyline HealthCorrect answer
- BvRealize Operations (with vSAN Management Pack)Correct answer
- CvRealize Log Insight
- DvCenter Performance Charts
Why this is the answer
The playbook explicitly states: 'two primary tools: vSAN Skyline Health (formerly Skyline Health Diagnostics, now integrated into the vSphere Client as the vSAN Skyline Health dashboard) and vRealize Operations (vROps) with its vSAN Management Pack.'
- Question 25Interactive
An administrator runs the command `esxcli vsan network list` on an ESXi host and receives the output shown. Which statement best describes the vSAN network configuration?
- AThe vSAN network uses multicast mode with MTU 9000.
- BThe vSAN network is configured with unicast mode and MTU 1500.Correct answer
- CThe vSAN network is using a dedicated physical NIC but no IP address.
- DThe vSAN network is misconfigured because multicast is false.
Why this is the answer
The output shows Mode: unicast and MTU: 1500. vSAN uses unicast by default in recent versions, and multicast being false is normal. Therefore, the configuration is correct with unicast mode and MTU 1500.
- Question 26Single Choice
At what default capacity utilization deviation (in percentage) does vSAN trigger proactive rebalancing?
- A10%
- B20%Correct answer
- C30%
- D15%
Why this is the answer
The document states: 'When the deviation for any disk group exceeds the threshold set by the advanced parameter RebalanceThreshold (default 20%), the system flags a potential rebalance.'
- Question 27Multiple Select
Which of the following are true about the role of SDDC Manager in storage component lifecycle management for VCF workload domains? (Select two)
- AIt can be bypassed by using vCenter directly for upgrades.
- BIt orchestrates upgrades in a strict sequence.Correct answer
- CIt only manages compute, not storage.
- DIt enforces pre-flight checks before upgrades.Correct answer
Why this is the answer
The playbook explains that SDDC Manager is the central orchestrator, enforcing a strict sequence of upgrades and running pre-flight checks. Directly using vCenter for upgrades is unsupported.
- Question 28Interactive
The vSAN Health dashboard displays the status shown above. Based on this output, which health categories are in a warning state? (Select all that apply)
- AHardware Compatibility
- BNetworkCorrect answer
- CDataCorrect answer
- DPerformance Service
Why this is the answer
The output shows Network and Data as Yellow (Warning). Hardware Compatibility and Performance Service are Green. Therefore, the Network and Data categories are in warning state.
- Question 29Single Choice
According to the document, what must be completed before upgrading the vSAN on-disk format?
- AUpgrade the vCenter Server.
- BUpgrade all ESXi hosts to a compatible version.Correct answer
- CEnable vSAN performance service.
- DRun a manual rebalance.
Why this is the answer
The document states: 'Upgrading the format... requires all hosts to be at a compatible ESXi version. SDDC Manager will enforce the sequence: upgrade ESXi first, then upgrade vSAN on-disk format.'
- Question 30Multiple Select
Which of the following correctly describe the behavior or definition of Permanent Device Loss (PDL) and All Paths Down (APD) as per the document? (Select two)
- AFor PDL, the VM may require manual intervention.Correct answer
- BAPD means the device might reappear.Correct answer
- CPDL is a temporary condition.
- DAPD triggers an automatic vSAN object rebuild.
Why this is the answer
The document explains: PDL results in the VM entering a state requiring manual intervention, and APD means all paths are temporarily unavailable but the device might reappear. PDL is permanent and may trigger an object rebuild, not APD.
Security and Compliance
4 questions in this domain
- Question 31Single Choice
What is the primary method for encrypting vSAN datastores in VMware Cloud Foundation?
- AvSAN Native Encryption using TPM
- BvSAN Encryption with an external KMSCorrect answer
- CVM-level encryption via vSphere
- DStorage DRS encryption
Why this is the answer
vSAN encryption with an external KMS is the primary method for encrypting vSAN datastores, providing key separation and compliance.
- Question 32Multiple Select
Which two privileges are required for a user to apply a storage policy to a VM on a vSAN datastore? (Select two.)
- ADatastore.AllocateSpaceCorrect answer
- BStorageProfile.ApplyCorrect answer
- CDatastore.Browse
- DStorageProfile.Create
Why this is the answer
To apply a storage policy, a user needs Datastore.AllocateSpace on the target datastore and StorageProfile.Apply privilege.
- Question 33Interactive
An administrator runs the following command. What does the output indicate about the VMDK object?
- AThe object has a retention lock applied.Correct answer
- BThe object is encrypted with an external KMS.
- CThe object is non-compliant with the storage policy.
- DThe object is undergoing a rebuild.
Why this is the answer
The output shows a lock expiration timestamp, indicating a retention lock is set on the VMDK object.
- Question 34Single Choice
Which network segmentation approach is recommended for vSAN traffic in VMware Cloud Foundation?
- AOverlay NSX segment (Geneve)
- BVLAN-based segmentation (802.1Q)Correct answer
- CFlat untagged network
- DVPN tunnel over management network
Why this is the answer
VLAN-based segmentation is recommended for vSAN due to multicast dependencies and performance requirements.
Troubleshooting and Optimization
6 questions in this domain
- Question 35Single Choice
In vSAN Original Storage Architecture (OSA), what is the maximum number of disk groups allowed per ESXi host?
- AUp to 5 disk groups per hostCorrect answer
- BUp to 2 disk groups per host
- CUp to 3 disk groups per host
- DOnly 1 disk group per host
Why this is the answer
In vSAN OSA, each ESXi host can support up to five disk groups. This is a key architectural constraint; more disk groups increase parallelism but consume more memory.
- Question 36Multiple Select
Which of the following statements about vSAN capacity thresholds and alarms are correct? (Select two.)
- AvSAN triggers a warning at 80% usage.Correct answer
- BvSAN triggers a critical alarm at 95% usage.Correct answer
- CAt 100% capacity, vSAN enters a read-only mode for all objects.
- DThe warning at 80% means immediate hardware addition is required.
Why this is the answer
vSAN issues a warning at 80% utilization and a critical alarm at 95%. At 100%, some objects may become read-only, not all. The 80% warning is proactive; analyze reclaimable space before adding hardware.
- Question 37Interactive
An administrator runs 'esxcli vsan storage list' and sees that a disk shows 'Not eligible for vSAN'. Which is the most likely cause based on the output shown below?
- AThe disk is not HCL qualified for the vSAN version.Correct answer
- BThe disk is already used as a cache device in another disk group.
- CThe disk has been partitioned with a VMFS datastore.
- DThe disk is too small to serve as a capacity device.
Why this is the answer
The most common reason for 'Not eligible for vSAN' is that the disk is not listed on the VMware Compatibility Guide (HCL). Other reasons like existing partitions are possible but the output typically indicates HCL failure first.
- Question 38Single Choice
What is the primary difference between vSAN OSA and ESA in terms of disk group structure?
- AESA uses only NVMe devices and allows only one disk group per host with no separate cache tier.Correct answer
- BESA supports up to five disk groups per host, each with a dedicated cache device.
- COSA requires all devices to be NVMe and supports only one disk group per host.
- DIn ESA, capacity devices are HDDs while cache devices are SSDs.
Why this is the answer
ESA is designed for all-NVMe clusters, with a single disk group per host that combines cache and capacity in the same NVMe devices – there is no separate cache tier. OSA uses a cache + capacity model and supports up to five disk groups.
- Question 39Multiple Select
Which of the following are valid attributes in a vSAN storage policy? (Select two.)
- ANumber of Failures to Tolerate (FTT)Correct answer
- BNumber of Disk Stripes per ObjectCorrect answer
- CHost Cache Size
- DDisk Group Count
Why this is the answer
FTT and Striping are explicit vSAN storage policy attributes. Host Cache Size and Disk Group Count are not policy settings; they are host-level or cluster-level configurations.
- Question 40Interactive
An administrator uses esxtop to diagnose high write latency. Which metric indicates the average time the storage device takes to complete a command?
- ADAVG/cmdCorrect answer
- BKAVG/cmd
- CGAVG/cmd
- DQ depth
Why this is the answer
DAVG (Device Average) measures the average latency at the storage device level, including the adapter and the device itself. KAVG is kernel latency, GAVG is guest-perceived latency. Q depth is queue depth.
Frequently asked questions
Everything about the VCAP - VMware Cloud Foundation Storage question bank and how to use it.