Free VMware 2V0-621 Exam Practice Questions & Explanations
Prepared & Reviewed by the ValidExamDumps Editorial Team
At ValidExamDumps, we consistently monitor updates to the VMware 2V0-621 exam questions by VMware. Whenever our team identifies changes in the exam questions, objectives, focus areas or requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these up to date and 100% exam domain coverage questions, our customers can successfully pass the VMware Certified Professional 6 - Data Center Virtualization exam on their first attempt without needing additional materials or study guides.
Other certification materials providers often include outdated or removed questions by VMware in their 2V0-621 exam. These outdated questions lead to customers failing their VMware Certified Professional 6 - Data Center Virtualization exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions. Our main priority is your success in the VMware 2V0-621 exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.
A vSphere 6.x cluster is attached to an ALUA-capable active/active array over Fibre Channel. The storage vendor documentation states that the array supports simultaneous I/O on all paths to a LUN and recommends distributing I/O across every available path. The datastore currently shows only one active path in use.
Which action should the administrator take?
The Round Robin path selection policy (VMW_PSP_RR) rotates I/O across all available active (and, for ALUA arrays, active-optimized) paths, which is what the vendor recommends and which resolves the single-active-path behavior.
MRU and Fixed both send I/O down a single path at a time. VMW_SATP_LOCAL is the SATP for local, non-multipathed devices and would be incorrect for a Fibre Channel array. Storage I/O Control manages datastore-wide latency and queue fairness during congestion; it does not change multipathing behavior.
A distributed port group carries traffic for a virtual firewall appliance. An administrator must ensure that the appliance's vNIC can receive all frames traversing the port group, including frames destined for other MAC addresses, and can also transmit frames using a source MAC address other than the one assigned to its vNIC.
Which security policy configuration on the distributed port group is required?
Promiscuous mode must be set to Accept so the vNIC receives all frames on the port group. Forged transmits must be set to Accept so outbound frames with a source MAC different from the vNIC's effective address are not dropped. MAC address changes affects inbound filtering when the guest changes its effective MAC in the guest OS; that is not required by the stated scenario and should remain Reject for security.
Options B and C block forged transmits, so the appliance's spoofed outbound frames would be dropped. Option D blocks reception of frames not addressed to the vNIC.
An administrator is configuring a vSphere Distributed Switch 6.x uplink team for iSCSI and vMotion traffic. The physical switches are two independent (non-stacked) switches, and the requirement is to actively balance outbound traffic based on actual link saturation over a 30-second sampling interval.
Which load balancing policy meets the requirement?
Route based on physical NIC load (Load Based Teaming) is available only on a vSphere Distributed Switch. It starts with virtual port assignment but re-evaluates uplink utilization every 30 seconds and moves traffic if an uplink exceeds 75 percent utilization. It also requires no special physical switch configuration, so non-stacked independent switches are supported.
IP hash requires a single logical link aggregation group (etherchannel/LACP) across the uplinks, which is not possible with independent non-stacked switches. Originating virtual port and source MAC hash assign uplinks statically and never consider actual load.
A security team requires that ESXi 6.x hosts be placed in lockdown mode, but the monitoring team still needs an existing local service account named monitorsvc to be able to log in directly to the ESXi Shell over SSH even while lockdown mode is active, without disabling lockdown mode.
What should the administrator do?
vSphere 6.x introduced Exception Users. Accounts on the Exception Users list are not affected by lockdown mode, and if they hold administrator privileges on the host they can continue to log in to the ESXi Shell/SSH (assuming those services are running). Normal lockdown mode is used because strict lockdown mode disables the DCUI entirely, which is not required here and adds unnecessary risk.
DCUI.Access only grants access to the Direct Console UI, not SSH. Lockdown mode does restrict local account access, so D is false.
An administrator must harden an ESXi 6.x host that is managed by vCenter Server. Corporate policy requires that any user who logs in directly to the DCUI or the ESXi Shell must be automatically logged out after 10 minutes of inactivity, and that a locally logged-on shell session cannot remain open indefinitely.
Which two advanced host settings should the administrator configure to meet this requirement?
UserVars.ESXiShellInteractiveTimeOut logs out idle interactive shell and SSH sessions after the specified number of seconds, and UserVars.DcuiTimeOut logs out an idle DCUI session. Together they satisfy the idle-timeout requirement.
UserVars.ESXiShellTimeOut is the availability timeout - it stops the running ESXi Shell/SSH service after a period, but does not terminate an already established idle session, so A is incomplete. SuppressShellWarning only hides the vCenter warning message. Security.AccountLockFailures/AccountUnlockTime control lockout after failed logins, not inactivity.