A VCF administrator is troubleshooting a vSAN health alert. The alert indicates that a disk is failing on a specific ESXi host. The administrator wants to see all vSAN-related log entries for that host in the last hour. Which search filter should be used?

Source: vSAN, Host: , Time: Last 1 hour

Source: NSX, Host: , Time: Last 1 hour

Source: vCenter, Keyword: 'disk', Time: Last 1 hour

Source: ESXi, Host: , Time: Last 24 hours

What is the purpose of configuring log collection settings in VCF Operations?

To set the retention period for log data

To define which users can access the log search interface

To determine the severity levels of log entries

To ensure logs are ingested from the desired sources

A VCF administrator is correlating a vCenter alert about a VM being disconnected from the network with log entries. The administrator finds an NSX-T log entry showing a distributed firewall rule blocking traffic. What should the administrator do next to confirm the root cause?

Disable the distributed firewall to allow all traffic.

Restart the VM to restore network connectivity.

Review the NSX-T distributed firewall rules to see if the VM is affected.

Check the VM's ESXi host logs for network errors at the same time.

What is the purpose of exporting logs from VCF Operations?

To automatically resolve alerts

To reduce the storage footprint of VCF Operations

To enable further analysis and retention in external tools

To change the log source configuration

A VCF administrator needs to provide logs to an external security team for a compliance audit. The security team requires logs to be retained for 12 months in a central SIEM. What should the administrator do in VCF Operations?

Enable log collection for all sources and rely on VCF Operations' built-in reporting.

Increase the log retention period in VCF Operations to 12 months.

Configure VCF Operations to forward logs to the SIEM using a syslog or API integration.

Export the logs manually to a CSV file and email them to the security team.

VMwareVCAP-VCF Support

Domain 5Objective 5

Given a Scenario, Use VCF Operations for Logs to Troubleshoot Issues VCAP-VCF-SUPPORT Practice Questions (Page 4)

Part of the VCF Operations Troubleshooting domain, which makes up ~21% of our current practice bank.

27questions here

6free pages

6concepts

Questions 16–20

16application · medium
A VCF administrator is troubleshooting a vSAN health alert. The alert indicates that a disk is failing on a specific ESXi host. The administrator wants to see all vSAN-related log entries for that host in the last hour. Which search filter should be used?
Select an answer first
17foundation · easy
What is the purpose of configuring log collection settings in VCF Operations?
Select an answer first
18application · medium
A VCF administrator is correlating a vCenter alert about a VM being disconnected from the network with log entries. The administrator finds an NSX-T log entry showing a distributed firewall rule blocking traffic. What should the administrator do next to confirm the root cause?
Select an answer first
19foundation · easy
What is the purpose of exporting logs from VCF Operations?
Select an answer first
20application · medium
A VCF administrator needs to provide logs to an external security team for a compliance audit. The security team requires logs to be retained for 12 months in a central SIEM. What should the administrator do in VCF Operations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCAP-VCF-SUPPORT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-SUPPORT” is a trademark of its owner, used for identification only.