A、 vSphere vMotion
B、 PCI passthrough
C、 vSphere High Availability (HA)
D、 vSphere Fault Tolerance
E、 vSphere Distributed Resources Scheduler (DRS)
F、 Hot Add of CPU or memory
G、
H、
I、
J、
答案：ACE
解析：解析: Option A， C and E are correct because they indicate that vSphere features such as vMotion， High Availability (HA) and Distributed Resource Scheduler (DRS) are still supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， which provides enhanced protection for guest operating systems and applications against various attacks. Option B is incorrect because PCI passthrough is not supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， as this feature requires direct access to physical devices that cannot be shared or protected by hypervisor mechanisms. Option D is incorrect because Fault Tolerance is not supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， as this feature requires identical execution states for primary and secondary virtual machines that cannot be guaranteed by hypervisor mechanisms. Option F is incorrect because Hot Add of CPU or memory is not supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， as this feature requires dynamic changes to virtual hardware configuration that cannot be handled by hypervisor mechanisms.解释选项A、C和E是正确的，因为它们表明，在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机仍然支持vMotion、高可用性(HA)和分布式资源调度器(DRS)等vSphere功能，该功能为来宾操作系统和应用程序提供了增强的保护，可抵御各种攻击。选项B不正确，因为在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机不支持PCI直通，因为该功能需要直接访问无法由虚拟机管理程序机制共享或保护的物理设备。选项D不正确，因为在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机不支持容错，因为该功能要求主虚拟机和辅助虚拟机具有相同的执行状态，而虚拟机管理程序机制无法保证这一点。选项F不正确，因为在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机不支持热添加CPU或内存，因为该功能需要对虚拟硬件配置进行动态更改，而虚拟机管理程序机制无法处理这些更改。
A、 vSphere vMotion
B、 PCI passthrough
C、 vSphere High Availability (HA)
D、 vSphere Fault Tolerance
E、 vSphere Distributed Resources Scheduler (DRS)
F、 Hot Add of CPU or memory
G、
H、
I、
J、
答案：ACE
解析：解析: Option A， C and E are correct because they indicate that vSphere features such as vMotion， High Availability (HA) and Distributed Resource Scheduler (DRS) are still supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， which provides enhanced protection for guest operating systems and applications against various attacks. Option B is incorrect because PCI passthrough is not supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， as this feature requires direct access to physical devices that cannot be shared or protected by hypervisor mechanisms. Option D is incorrect because Fault Tolerance is not supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， as this feature requires identical execution states for primary and secondary virtual machines that cannot be guaranteed by hypervisor mechanisms. Option F is incorrect because Hot Add of CPU or memory is not supported for Windows-based virtual machines when enabling vSphere’s virtualization-based security feature， as this feature requires dynamic changes to virtual hardware configuration that cannot be handled by hypervisor mechanisms.解释选项A、C和E是正确的，因为它们表明，在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机仍然支持vMotion、高可用性(HA)和分布式资源调度器(DRS)等vSphere功能，该功能为来宾操作系统和应用程序提供了增强的保护，可抵御各种攻击。选项B不正确，因为在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机不支持PCI直通，因为该功能需要直接访问无法由虚拟机管理程序机制共享或保护的物理设备。选项D不正确，因为在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机不支持容错，因为该功能要求主虚拟机和辅助虚拟机具有相同的执行状态，而虚拟机管理程序机制无法保证这一点。选项F不正确，因为在启用vSphere基于虚拟化的安全功能时，基于Windows的虚拟机不支持热添加CPU或内存，因为该功能需要对虚拟硬件配置进行动态更改，而虚拟机管理程序机制无法处理这些更改。
A. Extract the host profile from the reference host
B. Export the host profile from vCenter.
C. Import host customization on the reference host.
D. Attach the host profile to each cluster that requires the secure configuration.
E. Check the compliance of each host against the host profile.
F. Reset host customization on the reference host.
G. 在引用主机上重置主机定制。
H.
I.
J.
解析：解析: To apply the security standards from a reference host to other hosts across multiple clusters， the administrator needs to extract a host profile from the reference host， which captures its configuration settings; attach the host profile to each cluster that requires the same configuration; check the compliance of each host against the host profile， which compares their settings; and remediate all non-compliant hosts， which applies the configuration settings from the host profile.为了将来自参考主机的安全标准应用到跨多个集群的其他主机，管理员需要从参考主机提取主机配置文件，该主机配置文件捕获其配置设置;将主机配置文件附加到需要相同配置的每个群集;对照主机配置文件检查每台主机的合规性，主机配置文件会比较它们的设置;并修复所有不符合的主机，这将应用主机配置文件中的配置设置。
A. A preferential rule between the DB group and PROD11 group
B. A preferential rule between the DB group and the PROD55 group
C. A preferential rule between the DB group and the PROD55 group
D. A required rule between the DB group and the PROD11 group
E.
F.
G.
H.
I.
J.
解析：解析:Option A is correct because it allows the administrator to create a preferential rule between the DB group and PROD11 group， which will force the VMs in the DB group to run on the hosts in the PROD11 group if possible， but will allow them to run on the hosts in PROD55 group if necessary. Option B is incorrect because it will create a preferential rule between the DB group and PROD55 group， which will force the VMs in the DB group to run on the hosts in PROD55 group if possible， which is not what the administrator wants. Option C is incorrect because it is the same as option B. Option D is incorrect because it will create a required rule between the DB group and PROD11 group， which will force the VMs in the DB group to run only on the hosts in PROD11 group and not allow them to run on the hosts in PROD55 group if needed.选项A是正确的，因为它允许管理员在DB组和PROD11组之间创建一个优先规则，如果可能，该规则将强制DB组中的虚拟机在PROD11组中的主机上运行，但如果必要，将允许它们在PROD55组中的主机上运行。选项B是不正确的，因为它将在数据库组和PROD55组之间创建一个优先规则，如果可能的话，将强制数据库组中的虚拟机在PROD55组中的主机上运行，这不是管理员想要的。选项C不正确，因为它与选项b相同。选项D不正确，因为它将在数据库组和PROD11组之间创建一个必需的规则，该规则将强制数据库组中的虚拟机仅在PROD11组中的主机上运行，而不允许它们在需要时在PROD55组中的主机上运行。
A. Network latency must be less than 10 milliseconds
B. They must have a supported Wide Area Network (WAN).
C. They must have a minimum of a 10 Gbps network adapter
D. They must have a minimum of a 1 Gbps network adapter.
E. Network latency must be more than 10 milliseconds.
F.
G.
H.
I.
J.
解析：解析:When configuring vCenter High Availability (HA)， two of the requirements for the active， passive， and witness nodes are that network latency must be less than 10 milliseconds， which ensures reliable communication between them; and they must have a minimum of a 1 Gbps network adapter， which provides sufficient bandwidth for data replication.在配置vCenter高可用性(HA)时，对主动、被动和见证节点的两个要求是网络延迟必须小于10毫秒，这可确保它们之间的可靠通信;他们必须至少有一个1 Gbps的网络适配器，为数据复制提供足够的带宽。
A. Configure vSphere Lifecycle Manager with an image for the cluster
B. Register the vendor hardware management system as a vCenter Server extension.
C. Download the firmware updates from the VMware website
D. Download the firmware updates from the vendor website.
E. Run a hardware compatibility check using vSphere Lifecycle Manager
F. Configure vSphere Lifecycle Manager with a baseline for the cluster.
G.
H.
I.
J.
解析：The administrator should take these three steps to perform an update to vSphere clusters that are running vSAN: Configure vSphere Lifecycle Manager with an image for the cluster, which allows the administrator to specify the desired ESXi version and firmware for the hosts in the cluster. Register the vendor hardware management system as a vCenter Server extension, which allows the administrator to update the firmware on the hosts using vSphere Lifecycle Manager. The vendor hardware management system can also provide the firmware updates to vSphere Lifecycle Manager, so there is no need to download them from the vendor website separately. Run a hardware compatibility check using vSphere Lifecycle Manager, which verifies that the new software and firmware versions are compatible with the vSAN Hardware Compatibility List.管理员应采取以下三个步骤来对运行vSAN的vSphere集群执行更新:使用集群映像配置vSphere Lifecycle Manager，这允许管理员为集群中的主机指定所需的ESXi版本和固件。将供应商硬件管理系统注册为vCenter Server扩展，这允许管理员使用vSphere Lifecycle Manager更新主机上的固件。供应商硬件管理系统还可以向vSphere Lifecycle Manager提供固件更新，因此无需单独从供应商网站下载。使用vSphere Lifecycle Manager运行硬件兼容性检查，验证新的软件和固件版本是否与vSAN硬件兼容性列表兼容。
A. Configure SSO to use Active Directory over LDAP as the identity source.
B. Configure SSO to use OpenLDAP as the identity source.
C. Join the vCenter Server Appliance to the LDAP domain.
D. Configure SSO to use Active Directory (Integrated Windows Authentication) as the identity source.
E.
F.
G.
H.
I.
J.
解析：解析:Integrated Windows Authentication is now depreciated (from v7). ”The Active Directory over LDAP identity source is preferred over the Active Directory (Integrated Windows Authentication) option.”集成的Windows身份验证现在已经过时(从v7开始)。” LDAP身份源上的Active Directory优先于Active Directory(集成Windows身份验证)选项。
A. Import the Trusted Host information to the Trust Authority Cluster
B. Import the Trusted Cluster information to the Trusted Hosts
C. Create the Key Provider on the Trusted Cluster
D. Import the Trusted Host information to the Trusted Cluster
A. 30000
B. 20000
C. 10
D. 5000
E.
F.
G.
H.
I.
J.
解析：解析: The bronze tier VM is entitled to 30，000 IOPS， which is the maximum number of IOPS that the datastore supports. Storage I/O Control (SIOC) does not limit the IOPS of any VM unless the datastore latency exceeds the threshold， which is 30 ms in this case. Therefore， as long as the datastore latency is below 29 ms， the bronze tier VM can use up to 30，000 IOPS.解释青铜级虚拟机有权获得30，000 IOPS，这是数据存储区支持的最大IOPS数量。存储I/O控制(SIOC)不会限制任何虚拟机的IOPS，除非数据存储延迟超过阈值，在本例中为30毫秒。因此，只要数据存储延迟低于29毫秒，青铜级虚拟机就可以使用多达30，000 IOPS。
A. Generate a combined log bundle for all ESXI hosts using the vCenter Management Interface
B. Generate a separate log bundle for each ESXI host using the vSphere Host Client.
C. Generate a combined log bundle for all ESXI hosts using the vSphere Client.
D. Generate a separate log bundle for each ESXI host using the vSphere Client.
E. Generate a separate log bundle for each ESXI host using the vCenter Management Interface.
F. Generate a combined log bundle for all ESXi hosts using the vSphere Host Client.
G.
H.
I.
J.
解析：解释选项B、C和D是正确的，因为它们是为使用不同接口的单个或多个ESXi主机生成日志包的有效方法。选项A和E不正确，因为它们不是使用vCenter管理界面为所有ESXi主机生成日志包的可能选项。选项F不正确，因为不可能使用vSphere Host Client为所有ESXi主机生成组合日志捆绑包。
A. One Supervisor will be created in a specific zone.
B. One Supervisor will be created across all zones.
C. Three Supervisors will be created in Linked Mode.
D. Individual vSphere Namespaces will be placed into a specific zone.
E. Individual vSphere Namespaces will be spread across all zones.
F.
G.
H.
I.
J.
解析：解析: When mapping vSphere zones to vSphere clusters， one Supervisor will be created in each zone， and individual vSphere Namespaces will be placed into a specific zone based on their resource requirements and availability constraints.将vSphere分区映射到vSphere集群时，将在每个分区中创建一个Supervisor，并根据资源要求和可用性限制将各个vSphere命名空间放置到特定分区中。
A. Ensure that each vCenter Server Appliance is configured to use a Network Time Protocol (NTP) source.
B. Ensure that each ESXi host is configured to use a Precision Time Protocol (PTP) source.
C. Ensure that each ESXi host is configured to use a Network Time Protocol (NTP) source.
D. Ensure that each vCenter Server Appliance is configured to use a Precision Time Protocol (PTP) source.
解析：解析: To comply with the policy of synchronizing time with an external source that is accurate to the microsecond， the administrator needs to ensure that each ESXi host is configured to use a PTP source， which provides higher accuracy than NTP.为了遵守与精确到微秒的外部源同步时间的策略，管理员需要确保每台ESXi主机都配置为使用PTP源，这比NTP提供了更高的精确度。
