Answer: A,B QUESTION NO: 22
Which two groups of settings should be reviewed when attempting to increase the security of virtual machines (VMs)? (Choose two.)
当试图增加虚拟机(vm)的安全时哪这两组设置应该被审查? A. Disable hardware devices 禁用硬件设备
B. Disable unexposed features 禁用未曝光的功能 C. Disable VMtools devices 禁用VMtools设备
D. Disable VM Template features 禁用VM模板功能 Answer: A,B
QUESTION NO: 23
Which password meets ESXi 6.x host password requirements?
哪个密码符合ESXi 6.x主机密码要求？
A. 8kMVnn2x! B. zNgtnJBA2 C. Nvgt34kn44 D. !b74wr Answer: A QUESTION NO: 24
An administrator would like to use a passphrase for their ESXi 6.x hosts which has these characteristics:
管理员想要使用具有以下特点ESXi 6.x主机的一个密码: - Minimum of 21 characters 至少21个字符 - Minimum of 2 words
-至少2字符
Which advanced options must be set to allow this passphrase configuration to be used? 哪个高级选项必须设置来允许使用这个密码配置? A. retry=3 min=disabled,disabled,7,21,7 passphrase=2 B. retry=3 min=disabled,disabled,21,7,7 passphrase=2 C. retry=3 min=disabled,disabled,2,21,7 D. retry=3 min=disabled,disabled,21,21,2 Answer: B Explanation: QUESTION NO: 25
Which Advanced Setting should be created for the vCenter Server to change the expiration policy of the vpxuser password?
哪个先进的设置应该为vCenter服务器创建来更改vpxuser密码过期策略?
A. VimPasswordExpirationInDays B. VimExpirationPasswordDays C. VimPassExpirationInDays D.
VimPasswordRefreshDays Answer: A Explanation: QUESTION NO: 26
An administrator has been instructed to secure existing virtual machines in vCenter Server. 管理员被指示来确保现有的在 vCenter服务器上的虚拟机安全。
Which two actions should the administrator take to secure these virtual machines? (Choose two.)
哪两个动作管理员应该采取来保护这些虚拟机?
A. Disable native remote management services 禁用本地远程管理服务 B. Restrict Remote Console access 限制远程控制台访问
C. Use Independent Non-Persistent virtual disks 使用独立的非持久性虚拟磁盘
D. Prevent use of Independent Non-Persistent virtual disks 防止使用独立的非持久性虚拟磁盘 Answer: B,D Explanation: QUESTION NO: 27
An administrator has recently audited the environment and found numerous virtual machines with sensitive data written to the configuration files.
管理员最近审计环境,发现了许多敏感数据写入配置文件的虚拟机
To prevent this in the future, which advanced parameter should be applied to the virtual machines? 以防止在未来发生,哪个先进的参数应该被应用到虚拟机?
A. isolation.tools.setinfo.disable = true B. isolation.tools.setinfo.enable = true C. isolation.tools.setinfo.disable = false D. isolation.tools.setinfo.enable = false Answer: A Explanation: QUESTION NO: 28
Which two statements are correct regarding vSphere certificates? (Choose two.)
关于vSphere证书哪两个语句是正确的？
A. ESXi host upgrades do not preserve the SSL certificate and reissue one from the VMwareCertificate Authority (VMCA).
ESXi主机升级不保存SSL证书,从VMCA补发一个
B. ESXi host upgrades preserve the existing SSL certificate. ESXi主机升级保存现有的SSL证书。
C. ESXi hosts have assigned SSL certificates from the VMware Certificate Authority (VMCA) during install. 在安装时ESXi主机已经从VMCA分配SSL证书。
D. ESXi hosts have self-signed SSL certificates by default. ESXi主机默认签名SSL证书。 Answer: B,C Explanation: QUESTION NO: 29
Which three options are available for replacing vCenter Server Security Certificates? (Choosethree.)
哪三个选项可用于取代vCenter服务器安全证书
A. Replace with Certificates signed by the VMware Certificate Authority. 替换为VMware证书颁发机构签署的证书。
B. Make VMware Certificate Authority an Intermediate Certificate Authority. 让VMware证书颁发机构为中间证书颁发机构。
C. Do not use VMware Certificate Authority, provision your own Certificates.
不使用VMware证书颁发机构,提供自己的证书
D. Use SSL Thumbprint mode. 使用SSL拇指指纹模式。
E. Replace all VMware Certificate Authority issued Certificates with self-signed Certificates. 替换所有VMware证书颁发机构发行的证书使用自签名证书。 Answer: A,B,C Explanation: QUESTION NO: 30
When attempting to log in with the vSphere Web Client, users have reported the error:
当试图登录到vSphere Web客户端,用户报告错误: Incorrect Username/Password 不正确的用户名/密码
The administrator has configured the Platform Services Controller Identity Source as: 管理员配置的平台服务控制器管身份资源是:
- Type.Active Directory as an LDAP Server - Domain: vmware.com - Alias: VMWARE - Default Dom
ain: Yes 缺省域：是
Which two statements would explain why users cannot login to the vSphere Web Client? (Choosetwo.)
哪两个表述可以解释为什么用户无法登录到vSphere Web客户端？ A. Users are typing the password incorrectly. 用户输入的密码不正确。
B. Users are in a forest that has 1-way trust. 用户在一个forest 有1路的信任。 C. Users are in a forest that has 2-way trust. 用户在一个forest 有2路的信任。 D. Users are logging into vCenter Server with incorrect permissions.
用户用不正确的权限登录到vCenter服务器。 Answer: A,B Explanation: QUESTION NO: 31
Which group in the vsphere.local domain will have administrator privileges for the VMwareCertificate Authority (VMCA)?
Vsphere本地域的哪一组有VMCA的管理员权限？
A. SolutionUsers 解决方案用户 B. CAAdmins C. DCAAdmins D. SystemConfiguration.Administrators 系统配置.管理员 Answer: B Explanation: QUESTION NO: 32
Which Platform Service Controller Password Policy determines the number of days a password can exist before the user must change it?
在用户必须改变它之前，哪个平台服务控制器密码策略可以确定密码的存在天数。 A. Maximum Lifetime 做大生命周期 B. Password Age 密码年龄 C. Maximum Days 最大天数
D. Password Lifetime 密码生命周期 Answer: A Explanation: QUESTION NO: 33
An administrator is configuring the clock tolerance for the Single Sign-On token configuration policy and wants to define the time skew tolerance between a client and the domain controller clock. 管理员配置时钟对单点登录令牌政策，想定义一个倾斜公差在客户端和域控制器时钟之间。 Which time measurement is used for the value? 这个值可以用那个时间单位表示？ A. Milliseconds 毫秒 B. Seconds 秒 C. Minutes 分 D. Hours 小时
Answer: A Explanation: QUESTION NO: 34
Which VMware Single Sign-On component issues Security Assertion Markup Language (SAML)tokens?
哪个VMware的单点登录组件涉及SAML令牌? A. VMware Security Token Service VMware安全令牌服务 B. Administration Server 管理服务器 C. VMware Directory Service VMware目录服务
D. Identity Management Service 身份管理服务 Answer: A Explanation: QUESTION NO: 35
Which two are valid Identity Sources when configuring vCenter Single Sign-On? (Choose two.) 在配置vCenter单点登录时哪两个身份来源是有效的?
A. Radius 半径 B. NIS C. OpenLDAP 开 D. LocalOS Answer: C,D Explanation:
QUESTION NO: 36
An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA).
管理员需要在一个新部署的VCSA上创建一个IWA身份源
Which two actions will accomplish this? (Choose two.) 这两个操作可以完成这个？ A. Use a Service Principal Name (SPN) to configure the Identity Source. 使用一个SPN配置身份源。
B. Use a Domain administrator to configure the Identity Source.
使用域管理员来配置身份源。
C. Join the VCSA to Active Directory and configure the Identity Source with a Machine Account. 加入VCSA 到活动目录和配置机器代码身份源
D. Create a computer account in Active Directory for the VCSA and configure the Identity Source. 在活动目录中为VCSA创建一个计算机帐户和配置身份源 Answer: A,C Explanation: QUESTION NO: 37
An administrator wants to reduce the memory overhead for a 3D graphics enabled virtual machine(VM).
管理员希望减少内存开销为启用的虚拟机3D图形
What advanced feature can be added to the VM configuration file to reduce memory overhead? 什么高级功能可以添加到VM配置文件,以减少内存开销
A. vga.vgaOnly=TRUE B. vga.svgaEnable=FALSE C. svgaEnabled=FALSE D. svgaDisable=TRUE Answer: A Explanation: QUESTION NO: 38
An administrator is building a large virtual machine that will require as many vCPUs as the host can support. An ESXi 6.x host has these specifications:
管理员正在建设一个大型虚拟机，她需要和主机可以支持的一样多的vCPU。一个ESXi 6。x主机有这些参数: - Six 32-core Intel Xeon Processors 6个32核因特尔至强处理器 - 256 GB of Memory 256G的内存
- 512 GB Local disk space using VMFS5 512 G使用VMFS5的磁盘空间
What is the maximum number of virtual CPUs that the virtual machine can be allocated? 虚拟机可以分配的虚拟cpu最大数量是多少? A. 64 B. 128 C. 192 D. 256 Answer: B Explanation: QUESTION NO: 39
Which two features are available for virtual machines configured with DirectPath I/O? (Choosetwo.)
哪两个特性可用于配置了DirectPath I / O虚拟机？ A. Fault Tolerance 故障容差 B. Suspend and Resume 挂起和恢复
C. Virtual Symmetric Multi-Processing (vSMP) vSMP
D. Virtual Non-Uniform Memory Access (vNUMA) vNUMA Answer: C,D Explanation: QUESTION NO: 40
An administrator is creating a new Content Library. It will subscribe to another remote Content Library without authentication enabled.
管理员创建一个新的内容库。它将订阅另一个远程内容库,不启用身份验证。
What information from the published library will they need in order to complete the subscription?
为了完成以上订阅他们将需要从发布库发出的什么信息？ A. Subscription URL 订阅URL
B. A security password from the publishing Content Library
来自于出版内容库的一个安全密码 C. Publisher's Items.json file 出版商的Items.json文件 D. Username from the publishing Content Library 来着出版内容库的用户名 Answer: A Explanation: QUESTION NO: 41
An administrator is assigning a user the Content Library administrator role. The user will only be creating the library for a single vCenter Server.
管理员分配一个用户内容库管理员角色。用户只为单个vCenter服务器创建库。
What is the lowest level of the permission heirarchy that this role can be granted to the user and still allow them to create a Content Library?
哪个是这个角色可以授予用户允许最低的级别，直到允许他们创建内容库 A. Global 全球的 B. Datacenter Folder 数据中心文件夹 C. Virtual Center 虚拟中心 D. Datacenter 数据中心 Answer: A Explanation: QUESTION NO: 42
A user notifies an administrator that Content Libraries are not visible.
用户通知管理员内容库是不可见的。 What is a possible solution? 一种可能的解决方案是什么 A. Assign the user the read-only role at the global permission level. 在全球许可的水平分配用户只读角色。
B. Assign the user the read-only role at the vCenter Server root level.
在vCenter服务器根水平分配用户只读角色。
C. Assign the user the read-only role at the vCenter Server data center level. 在vCenter服务器数据中心级别分配用户只读角色。
D. Assign the user the read-only role at the vCenter Server cluster level. 在vCenter服务器集群级别分配用户只读角色。 Answer: A Explanation: QUESTION NO: 43
When a Content Library is deleted, what happens to the files contained on the backing storage? 删除内容库时,这些包含在后备存储器的文件会发生什么？
A. The files will be unchanged. 这些文件将保持不变。 B. The files will be deleted. 文件将被删除 C. The files will remain and be marked as orphaned. 文件将保持和被标记为孤儿 D. The containing folder will be marked as orphaned. 包含文件夹将被标记为孤儿 Answer: B Explanation: QUESTION NO: 44
Which three connection types are supported between a remote site and vCloud Air? 在一个远程站点和vCloud Air直接直接支持哪三个连接类型？ (Choose three.)
A. Secure Internet Connectivity 安全网络连接 B. Private Connect 私有连接 C. Direct Connect 直接连接
D. Internet Connectivity 网络连接 E. Secure VPN 安全VPN