VMware VCP-VVF: vSphere Foundation Administrator Practice Exam

What the VMware VCP-VVF exam covers

• 2.1 Virtualization Fundamentals45 questions
• 2.2 VMware Compute Fundamentals286 questions
• 2.3 VMware Storage Fundamentals159 questions
• 2.4 VMware Network Fundamentals92 questions
• 4.1 VVF: Deploy and Configure81 questions
• 4.2 VVF: Manage107 questions
• 4.3 VVF: Operate161 questions
• 4.4 VVF: Consume and Automate63 questions

Free VMware VCP-VVF practice test questions

A sample of 10 questions with answers and explanations. A free account includes a fixed set of 20 practice questions for this exam, retryable anytime. Paid access unlocks the full 994-question bank.

1. Question 14.1 VVF: Deploy and Configure

   An architect is comparing the VMware vSphere Foundation 9.0 and VMware Cloud Foundation 9.0 platforms. How does NSX relate to them?

   • ANSX is a standard component of both the VVF and VCF bundles.
   • BNSX is bundled with VCF but is not part of the VVF bundle.Correct
   • CNSX is included in VVF but sold separately as a VCF add-on.
   • DNSX is left out of both bundles and only sold on its own.
   ✓ Correct answer: B

   The 9.0 component node table lists NSX Manager and NSX Edge with a platform type of VCF only. The VCF Installer deployment scope confirms it: NSX nodes are deployed for VCF simple and high availability builds and marked No for vSphere Foundation. VVF networking therefore relies on vSphere Distributed Switches and port groups. A VVF Supervisor accordingly uses VDS networking with the Foundation Load Balancer or Avi rather than NSX.

   Why the other options are wrong

   • ANSX is not a VVF component; the 9.0 component table and installer scope mark every NSX node as VCF only.
   • CNSX is not included in VVF; this reverses the relationship, since VVF lacks NSX, and VCF is the platform that includes NSX networking.
   • DVCF does include NSX, and the VCF Installer deploys NSX Manager nodes for both VCF deployment models.
2. Question 22.2 VMware Compute Fundamentals

   An administrator enables PTP on an ESX 9.0 host for precise timestamps, then tries to add NTP servers on the same host as a fallback. What happens?

   • ANTP runs as a standby, taking over whenever PTP loses its time source
   • BNTP runs together with PTP, with the host averaging the two time sources
   • CNTP cannot run at the same time as PTP, so PTP must be stopped firstCorrect
   • DThe host ignores both daemons, keeping its manually set clock instead
   ✓ Correct answer: C

   ESX 9.0 hosts can synchronize time with either an NTP server or a PTP server, and the NTP Daemon and PTP Daemon are host services with a startup policy. The documentation states that the NTP and PTP services cannot run simultaneously, so you deactivate the PTP service and then enable NTP synchronization. Enabling NTP also makes the manual time configuration inactive. ESX hosts keep time in UTC and do not support changing time zones.

   Why the other options are wrong

   • AThere is no automatic failover from PTP to NTP on an ESX host; the two services are mutually exclusive, not primary and standby.
   • BESX does not blend or average NTP and PTP sources; only one of the two time services can run on a host at a time.
   • DManual time configuration is usable only after both NTP and PTP are stopped; configuring a daemon does not revert the host to its manual clock.
3. Question 32.2 VMware Compute Fundamentals

   Hosts in a new cluster fail every vMotion attempt with a network compatibility error. What must be configured on both the source and the destination hosts?

   • AA VMkernel adapter with only Management traffic on
   • BA VMkernel adapter with the vMotion service enabledCorrect
   • CAn NFS datastore mounted with root access on each
   • DA VM port group named vMotion on each host
   ✓ Correct answer: B

   Each host must have at least one network interface for vMotion traffic, which in practice is a VMkernel adapter with the vMotion service enabled on a vMotion port group. To route vMotion across IP subnets you place it on the vMotion TCP/IP stack. The vMotion network should be secure and reachable only by trusted parties, and each concurrent migration needs at least 250 Mbps. Several NICs can be combined for vMotion to add bandwidth.

   Why the other options are wrong

   • AA management-only VMkernel adapter does not carry vMotion traffic unless the vMotion service is also enabled.
   • CShared storage matters for compute-only vMotion, but an NFS mount does not provide the vMotion network interface.
   • DVM port groups carry guest traffic; vMotion needs a VMkernel adapter, not a VM port group.
4. Question 42.2 VMware Compute Fundamentals

   After HA is enabled on a cluster, one host keeps showing an HA configuration error while the others succeed. Reconfiguring the whole cluster does not help. What is the targeted remediation?

   • ADelete and recreate the cluster object so HA configures every host again
   • BDisable vSphere HA across the cluster, leaving it off to avoid the error
   • CRaise the host CPU and memory reservations so the HA agent can start up
   • DRun the Reconfigure for vSphere HA action on just that one failing hostCorrect
   ✓ Correct answer: D

   The host troubleshooting pages say that when a host stays in an HA error state after the underlying condition is resolved, you reconfigure vSphere HA on that host. The Reconfigure for vSphere HA action on the host retries the agent installation and configuration for that host only. When a Configure HA task fails, a reason is reported, such as host communication errors, timeouts or lack of disk space or unreserved memory. Resolve that reason first, then retry the reconfiguration.

   Why the other options are wrong

   • ARecreating the cluster disrupts every host and is not needed for one agent failure.
   • BDisabling HA removes protection from the whole cluster.
   • CRaising reservations works against the agent; the docs say to free unreserved memory, for example by reducing VM reservations.
5. Question 52.3 VMware Storage Fundamentals

   A three-host vSAN cluster must use erasure coding for FTT 1 to save capacity. Why does vSAN ESA allow this when OSA does not?

   • AESA erasure coding runs only on hybrid clusters with magnetic disks
   • BESA needs eight hosts before any erasure coding can be configured
   • CESA builds an adaptive 2+1 RAID-5 layout while OSA needs four hostsCorrect
   • DESA drops erasure coding to protect every object with mirrors
   ✓ Correct answer: C

   vSAN ESA creates an optimized RAID-5 format based on the cluster size: a 2+1 layout when there are fewer than six hosts and 4+1 at six or more. The vSAN default storage policy page states that RAID-5 in ESA supports three-host clusters. The 2+1 layout consumes about 150 GB per 100 GB, and 4+1 about 125 GB. OSA RAID-5 always uses a 3+1 layout and needs four or more fault domains. If auto-policy management is enabled, it chooses RAID-5 only once the cluster has four hosts.

   Why the other options are wrong

   • AESA uses only NVMe flash, and erasure coding is never a hybrid-only feature.
   • BESA erasure coding starts at three hosts for RAID-5 and six for RAID-6, far below eight.
   • DESA fully supports RAID-5 and RAID-6 erasure coding alongside RAID-1 mirroring.
6. Question 62.4 VMware Network Fundamentals

   An administrator needs to set a default gateway for the vMotion TCP/IP stack from the ESX command line instead of the vSphere Client. Which esxcli namespace is used for this?

   • Aesxcli system settings advanced
   • Besxcli network ip route ipv4Correct
   • Cesxcli network ip dns server
   • Desxcli network ip netstack
   ✓ Correct answer: B

   The vSphere Client lets you edit DNS and gateway settings only for the default TCP/IP stack, and the 9.0 networking guide points to CLI commands for static routes on other stacks. The route namespace accepts a gateway, a network (default for a default route) and the netstack name, so a command such as esxcli network ip route ipv4 add -g 10.0.20.1 -n default -N vmotion gives the vMotion stack its own gateway. This is what allows vMotion traffic on a separate stack to reach a routed subnet. Each stack keeps its own routing table.

   Why the other options are wrong

   • Aesxcli system settings advanced reads and sets host advanced options; it does not add routes to a TCP/IP stack routing table.
   • Cesxcli network ip dns server manages DNS resolver entries for the host, not routes or gateways for a TCP/IP stack.
   • Desxcli network ip netstack creates and lists TCP/IP stack instances themselves, such as adding the vmotion stack, not routes inside them.
7. Question 74.1 VVF: Deploy and Configure

   An administrator wants the scheduled vCenter 9.0 file-based backup to support recovering a vSphere Supervisor after a disaster. What should be selected in the backup schedule?

   • AThe Supervisors Control Plane selection on that scheduleCorrect
   • BThe Stats, Events, and Tasks historical data option
   • CAn encryption password so Supervisor secrets are included
   • DA second schedule that targets only the Supervisor namespace
   ✓ Correct answer: A

   The vSphere 9.0 schedule page adds a Supervisors Control Plane selection that activates backup and restore of a Supervisor in a disaster scenario. It records the state of the Supervisor control planes of that vCenter along with the regular file-based backup. Historical data and encryption are separate choices that do not capture Supervisor state. Only one backup schedule can exist at a time, so the option is set on the existing schedule.

   Why the other options are wrong

   • BStats, Events, and Tasks adds historical database data to the backup but records no Supervisor control plane state.
   • CAn encryption password protects the backup file and is needed at restore time, but it does not add Supervisor state.
   • DvCenter supports only one backup schedule at a time, and no schedule targets a namespace on its own.
8. Question 84.2 VVF: Manage

   Against what does the administrator@vsphere.local account authenticate when it signs in to vCenter?

   • AAn Active Directory domain controller over LDAPS
   • BThe built-in vsphere.local SSO domain held in vmdirCorrect
   • CThe external identity provider set up for federation
   • DThe ESX host's local account database through PAM
   ✓ Correct answer: B

   vCenter Single Sign-On creates a local domain during deployment, vsphere.local by default, stored in the VMware Directory Service (vmdir). administrator@vsphere.local lives in that domain and has the Administrator role on vCenter and SSO after installation. It keeps working when AD identity sources or identity federation are added, which is why it serves as the recovery account. It does not get locked out and its password does not expire.

   Why the other options are wrong

   • AAD identity sources hold domain users; administrator@vsphere.local is a local SSO account.
   • CLocal accounts remain in vCenter for recovery even when federation is on.
   • DESX local accounts serve host logons, not vCenter Single Sign-On.
9. Question 94.3 VVF: Operate

   A team sizing a VCF Operations for logs cluster asks how many nodes a single cluster supports and how many must stay healthy for it to work. Which statement is correct?

   • AFrom 3 to 32 nodes, with at least one healthy primary
   • BFrom 1 to 8 nodes, with at least half the nodes healthy
   • CFrom 2 to 12 nodes, with at least two healthy nodes
   • DFrom 3 to 18 nodes, with at least three healthy nodesCorrect
   ✓ Correct answer: D

   In cluster mode VCF Operations for logs has one primary node and worker nodes, and each node is responsible for a subset of the data. The documentation allows from three to 18 nodes in a cluster. A fully functional cluster must keep at least three healthy nodes, and most nodes of a larger cluster must be healthy. For example, if three nodes of a six-node cluster fail, none of the nodes functions fully until the failed ones are removed.

   Why the other options are wrong

   • AThe documented maximum is 18 nodes, not 32, and one healthy primary is not enough.
   • BA one-node deployment is standalone rather than a cluster, and the maximum is 18 nodes.
   • CTwo-node clusters are not a supported cluster size; the minimum is three nodes.
10. Question 104.3 VVF: Operate

    The platform team writes one policy for production and one for test environments. According to the policy guidance, how should their capacity settings differ?

    • AProduction uses higher performance settings with peak use in mindCorrect
    • BProduction uses higher utilization settings to save hardware
    • CTest uses the same settings as production for consistency
    • DTest uses Default policy settings rather than a custom policy
    ✓ Correct answer: A

    The policy decisions guidance recommends higher performance settings for production policies and accounting for peak use times. For test environments, higher utilization settings are recommended. This keeps production headroom for business-critical workloads while test hardware is used more densely. Each policy is then assigned to the matching object group.

    Why the other options are wrong

    • BHigher utilization settings are recommended for test, not for production.
    • CUsing identical settings ignores the different goals of the two environments.
    • DTest environments can have their own custom policy.

Who this VMware VCP-VVF practice exam is for

This practice set is for anyone preparing for the VMware VCP-VVF: vSphere Foundation Administrator exam at the foundational level - from first-time candidates building a foundation to experienced VMware practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this VMware VCP-VVF practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real VMware VCP-VVF exam.

Related VMware resources

• VMware VCP-VVF study guideKey concepts
• VMware practice examsAll VMware
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• VMware VCAP-VCF practice examRelated
• VMware VCP-NV 2024 practice examRelated
• VMware VCP-VCF Administrator (2V0-17.25) practice examRelated

VMware VCP-VVF practice exam FAQ