All VMware by Broadcom exams

Free 2V0-16.25 practice test: 30 questions with answers

30 original questions for VMware vSphere Foundation 9.0 Administrator (VCP-VVF Administrator), drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.

Free questions
30
Full bank
112 questions
Real exam
60 questions, 135 min
Passing score
300 (scaled)

2V0-16.25 exam guide: topics, cost and format

All 30 2V0-16.25 questions with answers

The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.

Virtualization principles and use cases (4 questions)

  1. Question 1

    A company needs to retire an aging physical database server. The team wants the same operating system and application to run on new hardware without a rebuild. Which virtualization use case fits best?

    1. ARebuilding the database as a containerized service on the new hardware
    2. BInstalling a second operating system alongside the current one
    3. CConverting the existing physical server into a virtual machine
    4. DCopying only the database files to a new standalone server
    Show answer and explanation
    Correct answer: C

    Physical-to-virtual (P2V) conversion captures the existing operating system, application and data as a virtual machine that can run on new hosts without a rebuild. The containerized option requires rebuilding the application, dual-boot does not virtualize anything, and copying only data files leaves out the operating system and application configuration.

  2. Question 2

    Which description best matches a Type 1 hypervisor such as VMware ESXi?

    1. AA hypervisor that runs as an application on a general-purpose host operating system
    2. BA hypervisor that runs directly on the hardware and manages the virtual machines
    3. CA hypervisor that needs a desktop operating system installed first to start virtual machines
    4. DA hypervisor intended mainly for desktop testing rather than production workloads
    Show answer and explanation
    Correct answer: B

    A Type 1 (bare-metal) hypervisor runs directly on the physical hardware and schedules the virtual machines itself. The first option describes a Type 2 hypervisor, while the second and fourth options misstate how ESXi is installed and used.

  3. Question 3

    An administrator takes a snapshot of a virtual machine before a software update. The update succeeds, and two weeks later the team wants to treat that snapshot as the only backup of the VM. What is the best response?

    1. AKeep the snapshot indefinitely because it captures the complete VM state for later restores
    2. BRemove the snapshot after verification and rely on a separate backup product
    3. CConvert the snapshot into a template so that it is replicated to other hosts
    4. DEnable vMotion so the snapshot is copied to another host automatically
    Show answer and explanation
    Correct answer: B

    Snapshots are delta files kept alongside the VM and are not an independent backup, so they should be consolidated once the change is verified and a real backup solution should protect the VM. Keeping the snapshot as a backup, converting it to a template, or relying on vMotion to copy it are all incorrect because snapshots are not replicated or self-sufficient backups.

  4. Question 4

    Which two statements about hardware-assisted virtualization are accurate? (Choose two.)

    1. AIt uses CPU extensions such as Intel VT-x or AMD-V to run guest code more efficiently
    2. BIt removes the need for a hypervisor because guests run directly on the CPU
    3. CIt reduces the overhead of privileged operations that guest operating systems issue
    4. DIt lets every guest access all physical devices without any hypervisor involvement
    Show answer and explanation
    Correct answer: A, C

    Hardware-assisted virtualization relies on CPU features such as Intel VT-x and AMD-V, which reduce the overhead of privileged guest operations. A hypervisor is still required, and the hypervisor still mediates device access except in specific, explicitly configured passthrough cases.

vCenter and ESX compute: clusters, VMs, content libraries, encryption (4 questions)

  1. Question 5

    A cluster contains hosts from two processor generations. An administrator wants to vMotion virtual machines between all of the hosts without replacing any processors. Which cluster setting should be enabled?

    1. ADistributed Power Management with a more aggressive power-saving policy
    2. BEnhanced vMotion Compatibility (EVC) at a common baseline
    3. CvSphere High Availability admission control with a host failover limit
    4. DStorage I/O Control with per-VM shares enabled on the datastores
    Show answer and explanation
    Correct answer: B

    EVC masks CPU features down to a common baseline so that hosts with different processor generations present compatible CPUs for vMotion. Distributed Power Management saves energy, HA admission control reserves failover capacity, and Storage I/O Control arbitrates datastore I/O, so none of them solves CPU compatibility.

  2. Question 6

    A team wants one repository of OVF templates and ISO images that its members can use to deploy virtual machines. Which vSphere feature should the administrator set up?

    1. AA datastore cluster with Storage DRS enabled on every datastore in the environment
    2. BA distributed port group with a shared VLAN definition
    3. CA host profile applied to every ESXi host in the cluster
    4. DA content library holding OVF/OVA templates and ISO files for deployments
    Show answer and explanation
    Correct answer: D

    A content library stores and manages templates, OVF/OVA packages and ISO files, which members can then use for deployments. Storage DRS balances datastore placement, host profiles apply host configuration, and distributed port groups define networking, so none of them stores templates.

  3. Question 7

    A team publishes VM templates from a content library at its primary site. A second site's vCenter Server must receive identical templates automatically. What should the administrator configure?

    1. ACopy each template's VMX and VMDK files by hand to the remote datastore
    2. BA subscribed content library that synchronizes from the published library
    3. CvSphere Replication configured for the template VMs at the primary site
    4. DA second datacenter object created under the primary site's vCenter Server
    Show answer and explanation
    Correct answer: B

    A subscribed content library synchronizes its items from a published library, which keeps templates consistent across sites. Manual file copies are error-prone and never sync, vSphere Replication protects VM disks rather than distributing library items, and a datacenter object cannot be used to share templates.

  4. Question 8

    A cluster has several hosts. Some run heavy workloads while others are lightly loaded, and the administrator wants VMs placed and moved automatically to balance demand. Which feature provides this?

    1. AvSphere Fault Tolerance on each heavily loaded VM
    2. BvSphere High Availability with host failure admission control enabled
    3. CvSphere DRS with an automation level set to fully automated
    4. DStorage DRS with capacity balancing across the datastores
    Show answer and explanation
    Correct answer: C

    DRS balances CPU and memory demand across hosts in the cluster and, when fully automated, migrates VMs without administrator action. HA restarts VMs after failures, FT protects a single VM with a live secondary, and Storage DRS balances datastores rather than host load.

vSphere storage and vSAN ESA/OSA, storage policies, resilience, space efficiency (4 questions)

  1. Question 9

    An administrator sets a VM storage policy to tolerate one failure in a vSAN cluster. After a host goes down, the VM remains accessible. Which policy setting explains this behavior?

    1. AForce provisioning enabled so the object is created even when non-compliant
    2. BA stripe width of two, which spreads each object across two disks
    3. CObject space reservation set to 100 percent on the VM disks
    4. DFailures to tolerate set to one, so each object survives a single failure
    Show answer and explanation
    Correct answer: D

    The failures to tolerate setting determines how many failures an object can survive while staying accessible, so a value of one protects against a single failure. Stripe width affects how data is spread, space reservation affects capacity commitment, and force provisioning only allows creation without meeting the policy, so none of them explains the tolerance.

  2. Question 10

    A vSAN cluster is large enough to support erasure coding. A non-critical VM must tolerate one failure while using less raw capacity than mirroring would require. Which storage policy should be applied?

    1. ARAID-1 mirroring with failures to tolerate set to two
    2. BStripe width of four with failures to tolerate set to zero
    3. CRAID-5 erasure coding with failures to tolerate set to one
    4. DObject space reservation of 100 percent with RAID-1 mirroring
    Show answer and explanation
    Correct answer: C

    RAID-5 erasure coding with one failure tolerated protects against a single failure with less raw capacity overhead than mirroring. Two-failure mirroring uses more copies, zero failures to tolerate gives no protection, and a space reservation adds capacity commitment without adding any protection.

  3. Question 11

    An architect plans a new vSAN cluster built on NVMe devices. The design calls for pooled devices per host in a single device tier, with no separate cache tier. Which architecture matches this plan?

    1. AA vSAN datastore presented to hosts as an NFS export from a NAS
    2. BvSAN OSA with disk groups that have cache and capacity devices
    3. CA vSAN stretched cluster with a witness host at a third site
    4. DvSAN ESA with storage pools built from a single device tier
    Show answer and explanation
    Correct answer: D

    The Express Storage Architecture (ESA) pools devices in a single tier, while the Original Storage Architecture (OSA) uses disk groups with separate cache and capacity tiers. Stretched clusters describe site topology and an NFS export is not a vSAN datastore, so neither describes a tier design.

  4. Question 12

    Which vSphere feature lets an administrator define storage capability requirements for VMs and check whether their disks sit on compliant datastores?

    1. AStorage I/O Control with per-VM shares
    2. BDatastore cluster with Storage DRS automation
    3. CStorage policy-based management
    4. DNetwork I/O Control with bandwidth reservations
    Show answer and explanation
    Correct answer: C

    Storage policy-based management defines storage requirements as policies and reports whether VM objects comply with them. Storage I/O Control prioritizes I/O, Storage DRS balances placement, and Network I/O Control manages network bandwidth, so none of these checks compliance.

VVF networking components (4 questions)

  1. Question 13

    An administrator needs identical port group settings and Network I/O Control applied consistently to every host in a cluster, managed from one place. Which switch type should be used?

    1. AA vSphere Distributed Switch managed centrally through vCenter Server
    2. BA standard virtual switch configured separately on each ESXi host in the cluster
    3. CAn internal-only virtual switch with no physical uplinks attached
    4. DA standard switch whose port groups are inherited from the cluster object
    Show answer and explanation
    Correct answer: A

    A vSphere Distributed Switch is a single switch object managed through vCenter Server across all attached hosts, and it supports Network I/O Control. Standard switches are configured per host, internal-only switches have no uplinks, and standard switches do not inherit settings from a cluster.

  2. Question 14

    An administrator notices that moving a powered-on virtual machine to another host is slow. Which VMkernel traffic type carries the data for these live migrations?

    1. AManagement traffic for host and vCenter Server communication
    2. BProvisioning traffic used for cold migrations and cloning
    3. CvSAN traffic between cluster members for object replication
    4. DvMotion traffic for moving running VMs between hosts
    Show answer and explanation
    Correct answer: D

    vMotion traffic carries the memory and execution state of running VMs during live migration. Management traffic handles control communication, vSAN traffic replicates storage objects, and provisioning traffic is used for cold migrations and cloning rather than live moves.

  3. Question 15

    Which two port group security policies are set to Reject by default? (Choose two.)

    1. APromiscuous mode
    2. BForged transmits
    3. CRoute based on originating virtual port
    4. DNotify switches
    Show answer and explanation
    Correct answer: A, B

    Promiscuous mode and forged transmits both default to Reject, which blocks guests from receiving others' traffic or sending spoofed source addresses. Route based on originating virtual port is a load balancing method and Notify switches is a failover setting, so neither is a security policy.

  4. Question 16

    Uplinks on a vSphere Distributed Switch carry VM, vMotion and vSAN traffic. During a migration burst, VM traffic slows noticeably. Which feature gives priority to traffic types when the uplinks are contended?

    1. APort mirroring that copies traffic to an analysis VM
    2. BLoad-based teaming that rebalances flows across uplinks
    3. CNetwork I/O Control with shares for each traffic type
    4. DNetFlow export from the switch to a collector
    Show answer and explanation
    Correct answer: C

    Network I/O Control uses shares to prioritize traffic types such as VM, vMotion and vSAN when bandwidth is contended. Port mirroring and NetFlow only observe traffic, and load-based teaming spreads flows across uplinks without ranking traffic types.

vSphere Supervisor and VKS concepts, networking, services (4 questions)

  1. Question 17

    A platform team wants developers to request Kubernetes clusters through a self-service workflow managed from vSphere. Which component should the administrator enable?

    1. AThe vSphere Supervisor with the VKS service for Kubernetes clusters
    2. BvSphere Replication for protecting persistent container volumes across two sites
    3. CA standalone container engine installed on each ESXi host
    4. DvSphere Fault Tolerance enabled for all Kubernetes node VMs
    Show answer and explanation
    Correct answer: A

    The vSphere Supervisor runs a Kubernetes control plane inside vSphere, and the VKS service uses it to provision guest Kubernetes clusters on request. Replication, a container engine on each host, and Fault Tolerance do not provide self-service cluster provisioning.

  2. Question 18

    A team lead wants to give one project group a bounded share of CPU, memory and storage in the Supervisor, and let members deploy workloads only inside that boundary. Which construct should be created?

    1. AA vSphere Namespace with resource limits, permissions and storage policies
    2. BA resource pool with only CPU shares on a single host
    3. CA distributed port group dedicated to the project's VLAN with its own security policy
    4. DA content library subscribed to the project's template folder
    Show answer and explanation
    Correct answer: A

    A vSphere Namespace is the tenancy boundary in the Supervisor, where permissions, resource limits and storage policies are applied for a group. A port group, a single-host resource pool or a content library cannot provide that boundary on its own.

  3. Question 19

    Which two statements about VKS clusters running on a vSphere Supervisor are accurate? (Choose two.)

    1. ACluster lifecycle is requested through declarative Kubernetes API objects
    2. BControl plane and worker nodes run as virtual machines placed on ESXi hosts
    3. CEvery VKS cluster must be managed by its own dedicated vCenter Server
    4. DVKS clusters make vSphere DRS and HA unnecessary for the Supervisor
    Show answer and explanation
    Correct answer: A, B

    VKS clusters are described and requested through Kubernetes API objects, and their nodes are virtual machines placed by vSphere on ESXi hosts. A dedicated vCenter Server per cluster is not required, and VKS does not remove the need for DRS or HA in the infrastructure beneath the Supervisor.

  4. Question 20

    A developer requests a worker node VM in a namespace and picks a size from the list offered. Which object defines the CPU, memory and reservation settings that the VM receives?

    1. AA resource pool that holds only CPU and memory shares
    2. BA storage policy that defines datastore placement and encryption rules
    3. CA VM class that defines CPU, memory and reservation settings
    4. DA distributed port group that defines VLAN and security settings
    Show answer and explanation
    Correct answer: C

    A VM class specifies the compute profile, including vCPU, memory and reservations, that node VMs are created with. Storage policies control placement and encryption of disks, resource pools control share-based allocation, and port groups control networking, so none of them defines the VM size.

Deploy and configure a VVF environment and Supervisor (4 questions)

  1. Question 21

    An administrator adds ESXi hosts to a new vCenter Server by name. The add fails, but adding the same hosts by IP address works. Which configuration gap is the most likely cause?

    1. AThe browser used to open the vSphere Client is set to a different language and locale
    2. BThe hosts have no vMotion VMkernel adapter configured yet
    3. CForward and reverse DNS records for the hosts and vCenter are missing or wrong
    4. DThe datastore has not been formatted with a VMFS volume yet
    Show answer and explanation
    Correct answer: C

    When adding by name fails but by IP succeeds, name resolution is the likely fault, so forward and reverse DNS records must exist and match. The browser language, the vMotion adapter and the datastore format do not affect whether a host name resolves.

  2. Question 22

    Users report sign-in failures and certificate errors soon after a vSphere deployment. Some ESXi hosts show clocks several minutes away from vCenter Server. What should the administrator correct?

    1. AThe number of vCPUs assigned to the vCenter Server appliance
    2. BTime synchronization so all components use the same reliable NTP source
    3. CThe MTU on the management VMkernel adapter for jumbo frames
    4. DThe amount of free space on the datastore holding the ISO files
    Show answer and explanation
    Correct answer: B

    Authentication tokens and certificates depend on consistent clocks, so vCenter Server and every host should synchronize to the same reliable NTP source. vCPU count, MTU and datastore free space have no effect on clock skew.

  3. Question 23

    Which two actions belong to a sound sequence for building a new vSphere environment? (Choose two.)

    1. AConfigure DNS and NTP before deploying vCenter Server
    2. BInstall ESXi on the hosts, then add them to a cluster in vCenter Server
    3. CRemove DNS entries so that hosts are managed by IP address only
    4. DEnable vSAN on a cluster that has no hosts or disks yet
    Show answer and explanation
    Correct answer: A, B

    DNS and NTP should be working before vCenter Server is deployed, and hosts join a cluster only after ESXi is installed on them. Managing hosts by IP address only removes name-based reliability, and vSAN cannot be enabled on a cluster without hosts and disks.

  4. Question 24

    An administrator adds three new hosts to a cluster that must support vMotion and DRS. Which action matters most?

    1. AInstall a different ESXi build on each host so that the hosts can be patched at separate times
    2. BConfigure matching port groups and VMkernel networking on all hosts in the cluster
    3. CGive each host a unique hostname without any DNS entries
    4. DKeep vMotion disabled until all virtual machines have been deployed
    Show answer and explanation
    Correct answer: B

    vMotion and DRS rely on each host seeing the same port groups and VMkernel networking, so those must match across the cluster. Mixed ESXi builds, missing DNS names and disabling vMotion all work against the cluster's behavior.

Identity, RBAC, license, certificate and lifecycle management (3 questions)

  1. Question 25

    A help desk group needs to power on and reset virtual machines in one folder but must not change host or network settings. Which approach follows least privilege?

    1. AGrant the Read-Only role at the datacenter level and rely on group membership
    2. BCreate a custom role with only VM power and reset privileges and assign it on the folder
    3. CAdd the group to the local root account on each ESXi host
    4. DAssign the Administrator role at the vCenter Server root object
    Show answer and explanation
    Correct answer: B

    A custom role that holds only the power and reset privileges, assigned on the folder, grants exactly what the group needs within that scope. The Administrator role at the root is far too broad, local root accounts sit outside vCenter role assignments, and Read-Only cannot power VMs on or reset them.

  2. Question 26

    A company wants administrators to sign in to vCenter Server with their existing Active Directory credentials. Which component validates those credentials against the directory?

    1. AThe VMware Certificate Authority that issues machine certificates
    2. BThe Supervisor control plane that stores Kubernetes secrets
    3. CThe local root account stored on the vCenter Server appliance
    4. DvCenter Single Sign-On with Active Directory as an identity source
    Show answer and explanation
    Correct answer: D

    vCenter Single Sign-On authenticates users against configured identity sources such as Active Directory. The certificate authority issues certificates, the local root account is not directory based, and the Supervisor control plane has no role in vCenter sign-in.

  3. Question 27

    A company buys vSphere licenses for its hosts. An administrator asks whether each virtual machine needs its own license key. Which statement is correct?

    1. AEach virtual machine must hold its own license key matching its guest operating system
    2. BLicense keys are stored inside each VM's configuration file and must be copied with it
    3. CLicenses are assigned to hosts and vCenter instances, and the edition determines the features
    4. DOnce an edition is assigned to a host, that host can never be reassigned to another license
    Show answer and explanation
    Correct answer: C

    vSphere licensing applies to hosts and vCenter Server instances, and the license edition determines which features are available. Virtual machines do not carry their own keys, and licenses can be reassigned rather than fixed permanently to a host.

VCF Operations: dashboards, views, reports, alerting, policies (3 questions)

  1. Question 28

    An operations team wants an alert when CPU demand is high, but only for clusters that belong to one business unit. Which VCF Operations construct scopes the alerting to those clusters?

    1. AA one-time PDF report exported from a dashboard for the monthly review meeting
    2. BA custom dashboard that refreshes every five minutes for the team's wallboard display screens
    3. CA view that lists CPU values in a table for every cluster in the environment
    4. DA policy applied to a group of matching objects that sets alert definitions and thresholds
    Show answer and explanation
    Correct answer: D

    A policy applied to a group of matching objects controls which alert definitions and thresholds apply to them, which scopes the alerting to that business unit. A report, a view and a dashboard display information but do not by themselves generate scoped alerts.

  2. Question 29

    What is the main purpose of a dashboard in VCF Operations?

    1. AIt shows widgets with selected metrics, alerts and summaries for quick monitoring
    2. BIt is the only place where alert policies can be created and assigned across the environment
    3. CIt stores the full historical vCenter event logs for compliance audits
    4. DIt replaces the vCenter Server inventory tree with a new object model
    Show answer and explanation
    Correct answer: A

    Dashboards arrange widgets that show selected metrics, alerts and summaries so operators can monitor quickly. Policies are configured separately, dashboards do not store vCenter event logs, and VCF Operations does not replace the vCenter inventory.

  3. Question 30

    A capacity manager needs a monthly summary of cluster capacity and right-sizing findings that can be shared as a file with the finance team. Which VCF Operations feature fits?

    1. AA report generated from a template on a schedule and shared as a file
    2. BAn alert definition that fires once a month for each cluster in the business unit
    3. CA super metric that counts the number of powered-on VMs
    4. DA dashboard set to auto-refresh every thirty seconds
    Show answer and explanation
    Correct answer: A

    Reports are generated from templates, can run on a schedule, and can be shared as files, which suits a periodic summary for finance. Alerts signal conditions rather than summarize capacity, super metrics calculate a single value, and auto-refresh only changes how a dashboard displays data.