VMware 5V0-21.21 Exam Questions Instant Access

Question 1

After a vSAN Witness Appliance network configuration, the vSAN administrator notices that vSAN traffic flows from vmk0 (Management Traffic) rather than vmk1 (vSAN Traffic).

Which step should be taken to resolve this issue?

AConfigure vmk0 with IP address on the same range as that of vmk1.

BTag the vmk0 for vSAN traffic.

CConfigure vmk1 with IP address on the different network than that of vmk0.

DTag the vmk1 for Witness traffic.

Answer : C

The vmk1 interface cannot be configured with an IP address on the same range as that of vmk0. This is because Management traffic and vSAN traffic use the default TCP/IP stack. If both vmk0 and vmk1 are configured on the same range, a multihoming condition will occur and vSAN traffic will flow from vmk0, rather than vmk1.

Question 2

Which three steps are required to decommission a stretched cluster and convert it to a standard vSAN cluster? (Choose three.)

AReinstall the ESXi hosts

BRemove the Fault Domain configuration

CRemove the vSAN partition schema on the disk groups

DDelete the witness host VM

ERepair the cluster objects

FDisable and remove the stretched cluster

Answer : B, E, F

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vsan-planning.doc/GUID-1D3FE3B4-1BFE-4B0E-BDC3-3D388D2BEF61.html

Question 3

Due to an update in their security requirements, an organization is no longer compliant because the metadata traffic between hosts in their vSAN cluster is not being encrypted.

Which step must be taken by the administrator to meet the new security requirements?

AEnable vMotion encryption on the vSAN cluster.

BEnable virtual machine encryption on the vSAN cluster.

CEnable Data-At-Rest Encryption on the vSAN cluster.

DEnable Data-In-Transit Encryption on the vSAN cluster.

Answer : D

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vsan.doc/GUID-10099331-92E7-41AF-BCAA-88DB4B4A4B7B.html

Question 4

An administrator notes that the Data-At-Rest Encryption keys have expired.

Which action is needed to resolve this situation?

AAdd a new Standard Key Provider at the vSAN cluster level

BGenerate new encryptions keys at the vSAN cluster level

CAdd an additional KMS at the vCenter server level

DGenerate new encryptions keys at the vCenter server level

Answer : B

https://docs.vmware.com/en/VMware-vSphere/8.0/vsan-administration/GUID-15393A27-5F38-4814-94E0-ED37A7E65249.html

Question 5

An administrator is tasked with setting up Kerberos authentication only for the vSAN File services.

Which version of Kerberos must be selected if the NFS version is v4.1?

Akrb5i

Bkrb4

Ckrb5

Dkrb5p

Answer : C

Because krb5 for authentication only, or krb5i for authentication and data integrity. https://core.vmware.com/resource/best-practices-running-nfs-vmware-vsphere#sec9459-sub5

https://blogs.vmware.com/virtualblocks/2020/09/17/vsan-7-u1-file-services/

Question 6

In a stretched vSAN cluster, how is Read Locality established after fail over to the secondary site?

A100% of the reads comes from vSAN hosts on the local site

B50% of the reads comes from vSAN hosts on the local site

C100% of the reads comes from vSAN hosts on the remote site

D50% of the reads comes from vSAN hosts on the remote site

Answer : C

In the event of a failure or maintenance event, the virtual machine is restarted on the remote site. The 100% rule continues in the event of a failure. This means that the virtual machine will now read from the replica on the site to which it has failed over. One consideration is that there is no cached data on this site, so cache will need to warm for the virtual machine to achieve its previous levels of performance.

Question 7

An architect is working with vSAN and setting the fault domains to support FTT=1.

How many fault domains will be needed?

Answer : B

VMware HCI Master Specialist 5V0-21.21 Exam Questions