Given a Scenario, Use VCF Operations for Logs to Troubleshoot Issues VCAP-VCF-SUPPORT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A VCF administrator wants to ensure that logs from all ESXi hosts are collected in VCF Operations. What should the administrator do?

   • AIncrease the log retention period for ESXi logs.
   • BConfigure a syslog server on each ESXi host.
   • CEnable the ESXi log source in the log collection configuration.
   • DAdd each ESXi host as a separate log source.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A VCF administrator is required to send logs to an external SIEM for real-time monitoring. The SIEM expects logs in a specific format and requires a secure connection. What should the administrator configure in VCF Operations?

   • AEnable log collection for all sources and use the built-in log search to view logs.
   • BConfigure a syslog forwarder with TLS to the SIEM endpoint.
   • CExport logs manually and upload them to the SIEM via SFTP.
   • DIncrease the log retention period in VCF Operations.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Where in VCF Operations would an administrator configure which log sources are collected?

   • AAlert Definitions
   • BLog Collection Settings
   • CUser Preferences
   • DCertificate Management
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a log source that VCF Operations can ingest for troubleshooting?

   • AVMware Workstation logs
   • BVMware Site Recovery Manager logs
   • CVMware Horizon Connection Server logs
   • DvCenter Server logs
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A VCF administrator is troubleshooting an alert that a VM is not responding to network pings. The alert was triggered at 10:00 AM. The administrator finds the following log entries: 09:59:30 - NSX-T log: 'Distributed firewall rule 'Block-Web' matched traffic from VM-A'; 10:00:00 - vCenter log: 'VM-A is disconnected from network'; 10:00:15 - ESXi log: 'vmxnet3 network adapter reset'. Which log entry is most likely the root cause?

   • AThe vCenter log entry about disconnection
   • BThe ESXi log entry about the network adapter reset
   • CThe NSX-T distributed firewall rule 'Block-Web'
   • DThe alert itself
   Reveal Solution Discussion Select an answer first