Given a Scenario, Troubleshoot Issues Using VCF Operations for Logs VCP-VCF-SUPPORT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A VCF administrator is troubleshooting a storage performance degradation reported by users of a database VM. The issue started at 14:30. The administrator opens VCF Operations log search and wants to find relevant entries across all vCenter and ESXi logs. Which search query approach is most effective for this scenario?

   • ASearch for the VM's UUID in vCenter logs only, with a time range of the last hour
   • BSearch for 'error' OR 'warning' severity in all logs for the last 7 days, then manually correlate with the VM's performance charts
   • CSearch for 'storage' OR 'scsi' OR 'disk' keywords in ESXi hostd and vmkernel logs, filtered to the specific host and a time range of 14:25 to 14:35
   • DSearch for the VM name across all log types with a time range of the last 24 hours
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A VCF administrator is investigating a security alert in VCF Operations that indicates a VM may have been compromised. The alert is correlated with a specific time window. The administrator needs to determine if the VM communicated with a known malicious IP address during that window. Which combination of log sources and actions would provide the most definitive evidence?

   • ASearch the ESXi host vmkernel logs for the VM's IP address and the malicious IP address, then export the relevant entries for analysis
   • BSearch the vCenter Server logs for the VM's security policy changes
   • CSearch the SDDC Manager logs for the VM's lifecycle events
   • DSearch the NSX-T Manager logs for the VM's security group membership
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A VCF administrator is troubleshooting a DNS resolution issue affecting multiple VMs in a workload domain. The VMs are configured to use a specific DNS server. The administrator has verified that the DNS server is reachable from the management network but suspects the issue is isolated to the workload network. In VCF Operations, which search strategy would best confirm this hypothesis?

   • ASearch the ESXi host vmkernel logs for the VMs' IP addresses and the DNS server's IP address, filtering for dropped packets or connection timeouts
   • BSearch the SDDC Manager logs for the DNS server's health status
   • CSearch the vCenter Server logs for the VMs' DNS settings to confirm they are configured correctly
   • DSearch the NSX-T Manager logs for the DNS server's segment configuration
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A VCF administrator is investigating an intermittent issue where a VM loses connectivity to its management network for a few seconds every few hours. The VM is on a standard vSwitch portgroup. The administrator has already confirmed there are no vCenter alerts for the host or VM. Which log source and search strategy would be most effective in identifying the root cause?

   • ASearch the NSX-T Manager logs for the VM's segment ID over the last 24 hours
   • BSearch the vCenter Server logs for the VM's portgroup configuration changes over the last 24 hours
   • CSearch the SDDC Manager logs for the host's maintenance mode events over the last 24 hours
   • DSearch the ESXi host's vmkernel logs for the VM's port number, filtering for 'link down' or 'port down' events over the last 24 hours
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A VCF administrator is troubleshooting a performance issue in a workload domain. What is the first step in a systematic troubleshooting workflow using VCF Operations logs?

   • AOpen a support ticket with VMware
   • BApply a configuration change to the cluster
   • CIdentify the scope of the issue and gather relevant log data
   • DReboot all hosts in the cluster
   Reveal Solution Discussion Select an answer first