VMware by Broadcom 2V0-15.25: VMware Cloud Foundation 9.0 Support (VCP-VCF Support)

Last checked November 10, 2026 against the official VMware by Broadcom exam page.

1. Question 1Troubleshoot VCF fleet deployment, scaling, upgrade and conversion

   An administrator starts a VCF bundle upgrade from SDDC Manager. The task stops at a precheck because one ESXi host fails a connectivity check. What should the administrator do next?

   1. ATurn off the precheck for that host so the rest of the upgrade can continue
   2. BFix the host connectivity problem, then rerun the precheck
   3. CInstall the new ESXi image on that host by hand and mark the task as complete
   4. DDelete the upgrade bundle and download it again without looking at the host
   Show answer and explanationHide answer

   Correct answer: B

   Prechecks exist to catch blockers before any component changes, so the cause must be fixed and the check rerun before the upgrade continues. Turning off the check bypasses a safety gate, a manual install skips the workflow SDDC Manager tracks, and re-downloading the bundle does not address a host-level failure.

2. Question 2Troubleshoot workload domain creation and scaling

   An administrator starts creating a workload domain, and validation fails on the new vCenter Server name with a lookup error. Which step should be done first?

   1. ARename the management domain's vCenter Server to match the new domain
   2. BAssign the vCenter Server a static IP and skip the name validation step
   3. CVerify forward and reverse DNS records for the new component names
   4. DEdit the workload domain specification file to remove the name check
   Show answer and explanationHide answer

   Correct answer: C

   A lookup error during validation usually means the component names do not resolve correctly in both directions, so the DNS records should be checked first. Renaming an unrelated vCenter Server or skipping validation does not fix the underlying name resolution problem.

3. Question 3Certificate, password, identity and license management issues

   An administrator replaces the vCenter Server certificate by hand from the appliance console. SDDC Manager later reports the certificate as out of sync. What should the administrator do to avoid this?

   1. AUse SDDC Manager certificate workflows to replace and track the certificate
   2. BKeep the manual certificate and clear the SDDC Manager inventory entry
   3. CDisable certificate checks in SDDC Manager until the next upgrade
   4. DCopy the certificate to every ESXi host by hand and ignore the warning
   Show answer and explanationHide answer

   Correct answer: A

   Certificates should be replaced through SDDC Manager workflows so the platform records the new certificate and keeps its inventory consistent. Manual copies, clearing inventory, or disabling checks leave the fleet records out of step with what is deployed.

4. Question 4ESX, vCenter, VM and vSAN issues including stretched clusters

   In a vSAN stretched cluster, what is the role of the witness host?

   1. AIt keeps a full copy of every VM so either data site can fail alone
   2. BIt stores witness components for quorum, not the full VM data
   3. CIt is the default gateway for VM traffic between the two data sites
   4. DIt runs the vCenter Server instance that manages the stretched cluster
   Show answer and explanationHide answer

   Correct answer: B

   The witness host stores witness components that help the cluster reach quorum when a site fails, and it does not hold the full VM data. The other options describe data replicas, gateway duties or the vCenter role, none of which belong to the witness.

5. Question 5VDS and NSX routing, gateways, services and VPC

   A design needs one component that connects the NSX virtual networks to the physical data center network. Which should be used?

   1. AA Tier-1 gateway with no connection to any Tier-0 gateway
   2. BA Tier-0 gateway with uplinks to the physical network
   3. CA distributed firewall rule that permits all traffic
   4. DA segment that spans only the ESXi management network
   Show answer and explanationHide answer

   Correct answer: B

   A Tier-0 gateway provides north-south connectivity through its uplinks to the physical network. A Tier-1 gateway without a Tier-0 has no path out, a firewall rule does not provide routing, and a management-only segment is not a route to the physical network.