A financial services company is deploying a new vSphere environment and must ensure that only vCenter Server and ESXi hosts that have passed hardware attestation can participate in the cluster. They want to use vSphere Trust Authority to establish a hardware root of trust. Which component must be deployed first to provide the attestation service?

A vCenter Server appliance with the Trust Authority role enabled on the same instance managing the cluster.

A standalone Key Management Server (KMS) integrated with vCenter.

A dedicated vCenter Server instance configured as the Trust Authority.

An ESXi host configured as a trust host within the Trust Authority.

Which component is a core part of the VMware Single Sign-On (SSO) architecture?

VMware Directory Service (vmdir)

An administrator has successfully configured vSphere Trust Authority and added ESXi hosts as trust hosts. They want to verify that the attestation is working correctly. Where in the vSphere Client can they check the attestation status of the trust hosts?

In the vSphere Client under 'Administration' > 'Licensing'.

In the ESXi host's local UI under 'Security'.

In the Trust Authority vCenter Server under 'Trust Authority' > 'Trust Hosts'.

In the workload vCenter Server under 'Hosts and Clusters'.

What is the purpose of configuring an identity source in vCenter Single Sign-On (SSO)?

To provide a backup of the vCenter Server database.

To allow SSO to authenticate users from an external directory service.

To store virtual machine encryption keys.

To enable network time synchronization for ESXi hosts.

What is the primary role of VMware Single Sign-On (SSO) in a vSphere environment?

To provide a central authentication framework that allows users to authenticate once and access multiple vSphere services.

To replace Active Directory as the identity store for all vSphere users.

To provide a firewall between vCenter Server and external networks.

To manage virtual machine encryption keys and provide attestation for ESXi hosts.

VMwareCertified Professional - Data Center Virtualization (VCP-DCV)

Domain 3Objective 3

Configure Identity and Security VCP-DCV Practice Questions (Page 4)

Part of the Installing, Configuring, and Setup domain, which makes up ~26% of our current practice bank. VMware does not publish an official question count, but from its 135-minute exam (~55–90 total, ~14–23 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

Questions 16–20

16application · medium
A financial services company is deploying a new vSphere environment and must ensure that only vCenter Server and ESXi hosts that have passed hardware attestation can participate in the cluster. They want to use vSphere Trust Authority to establish a hardware root of trust. Which component must be deployed first to provide the attestation service?
Select an answer first
17foundation · easy
Which component is a core part of the VMware Single Sign-On (SSO) architecture?
Select an answer first
18application · medium
An administrator has successfully configured vSphere Trust Authority and added ESXi hosts as trust hosts. They want to verify that the attestation is working correctly. Where in the vSphere Client can they check the attestation status of the trust hosts?
Select an answer first
19foundation · easy
What is the purpose of configuring an identity source in vCenter Single Sign-On (SSO)?
Select an answer first
20foundation · easy
What is the primary role of VMware Single Sign-On (SSO) in a vSphere environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCP-DCV

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCP-DCV” is a trademark of its owner, used for identification only.