VCP-621-VUE考试中心题库中英文对照文档.docx

VMwareVCP-621ExamQUESTION NO:1Anadministratorwantstoprovideusersrestrictedaccess.Theusersshouldonlybeabletoperformthefollowingtasks:管理员想要提供用户限制访问。用户应该只可以执行以下任务:-Createandconsolidatevirtualmachinesnapshots创建和巩固虚拟机快照-Add/Removevirtualdisks添加/删除虚拟磁盘-SnapshotManagement快照管理WhichdefaultroleinvCenterServerwouldmeettheadministratorsrequirementsfortheusers?哪个默认角色的vCenter服务器满足用户管理员的要求?A.Virtualmachineuser虚拟机用户B.Virtualmachinepoweruser虚拟机电力用户C.VirtualDatacenteradministrator虚拟数据中心管理员D.VMwareConsolidatedBackupuserVMware合并备份用户Answer:BQUESTION NO:2Whichtworolescanbemodified?(Choosetwo.)哪两个角色可以被修改？A.Administrator管理员B.NetworkAdministrator网络管理员C.DatastoreConsumer数据存储用户D.Read-Only只读Answer:B,CQUESTION NO:3Anadministratorwithglobaladministratorprivilegescreatesacustomrolebutfailstoassignanyprivilegestoit.有全球管理员权限的管理员创建一个自定义的角色,但没有分配到任何权限。Whichtwoprivilegeswouldthecustomrolehave?(Choosetwo.)自定义用户有哪两个权限A.System.ViewB.System.AnonymousC.System.UserD.System.ReadOnlyAnswer:A,BQUESTION NO:4Anadministratorwishestogiveausertheabilitytomanagesnapshotsforvirtualmachines.Whichprivilegedoestheadministratorneedtoassigntotheuser?管理员希望让用户能够管理虚拟机的快照.哪个特权管理员需要分配给用户A.Datastore.AllocateSpaceDatastore.Allocate空间B.Virtualmachine.Configuration.createsnapshot虚拟machine.Configuration.create快照C.Virtualmachine.Configuration.managesnapshot虚拟machine.Configuration.manage快照D.Datastore.BrowseDatastoreDatastore.Browse数据存储Answer:AQUESTION NO:5Anobjecthasinheritedpermissionsfromtwoparentobjects.一个对象已经从两个父对象继承了权限Whatistrueaboutthepermissionsontheobject?关于这个对象的权限说法正确的是？A.Thecommonpermissionsbetweenthetwoareappliedandtherestarediscarded.两个父对象之间的共同权限是可实施的,其它的是不能实施的。B.Thepermissionsarecombinedfrombothparentobjects.父对象的权限相结合。C.Nopermissionsareappliedfromtheparentobjects.从父对象没有应用的权限D.Thepermissionisrandomlyselectedfromeitherofthetwoparentobjects.权限是随机从两个父对象选择的Answer:BQUESTION NO:6Whatisthehighestobjectlevelfromwhichavirtualmachinecaninheritprivileges?虚拟机可以继承特权的最高对象级别是什么？A. HostFolderB.DataCenterC.DataCenterFolderD.VMFolderAnswer:CQUESTION NO:7WhichthreeAuthorizationtypesarevalidinvSphere?(Choosethree.)哪三种授权类型在vSphere是有效的A. GroupMembershipinvsphere.local组成员在vsphere.localB. B.Global全体的C. C.Forest森林D.vCenterServervCenter服务器E.GroupMembershipinsystem-domain组成员在系统域Answer:A,B,DQUESTION NO:8WhichthreecomponentsshouldanadministratorselectwhenconfiguringvSpherepermissions?(Choosethree.)在配置vSphere权限时哪三个组件要管理员选择A.InventoryObjectB.RoleC.User/GroupD.Privilege特权E.Password口令Answer:A,B,CQUESTION NO:9Inwhichtwovsphere.localgroupsshouldanadministratoravoidaddingmembers?(Choosetwo.)在哪两个vsphere当地群组中管理员应该避免添加成员?A. SolutionUsersB.AdministratorsC.DCAdminsD.ExternalPDUsersAnswer:A,BQUESTION NO:10AnadministratorhasconfiguredthreevCenterServersandvRealizeOrchestratorwithinaPlatformServicesControllerdomain,andneedstograntauserprivilegesthatspanallenvironments.管理员在latform服务控制器域中配置三个vCenter服务器和vRealize协调器，需要授予用户可以跨越所有环境得特权。Whichstatementbestdescribeshowtheadministratorwouldaccomplishthis?哪个陈述最好的描述了管理员能完成上述过程？A.AssignaGlobalPermissiontotheuser.全球许可分配给用户。B.AssignavCenterPermissiontotheuser.vCenter权限分配给用户。C.Assignvsphere.localmembershiptotheuser.分配vsphere.localmembership给用户D.AssignanESXiPermissiontotheuser.向用户分配一个ESXi的许可。Answer:AQUESTION NO:11WhichtwomethodsarerecommendedformanagingtheVMwareDirectoryService?哪两种方法推荐用来管理VMware目录服务？(Choosetwo.)A.Utilizethevmdircommand.利用vmdir命令。B.ManagethroughthevSphereWebClient.通过vSphereWeb客户端管理C.ManageusingtheVMwareDirectoryService.通过VMware目录服务管理D.Utilizethedcrepcommand.利用dcrep命令。Answer:A,BQUESTION NO:12WhataretwosamplerolesthatareprovidedwithvCenterServerbydefault?(Choosetwo.)在默认情况下，哪两个示例角色提供给vCenter服务器?A.VirtualmachineUser虚拟机用户B.NetworkAdministrator网络管理员C.ContentLibraryAdministrator内容库管理员D.StorageAdministrator存储管理员Answer:A,BQUESTION NO:13Whichthreeservicescanbeenabled/disabledintheSecurityProfileforanESXihost?(Choosethree.)哪三个服务可以启用/禁用在ESXi主机的安全性配置文件A.CIMServerCIM服务器B.SingleSign-On单点登录C.DirectConsoleUI直接控制UID.SyslogServer系统日志服务器E.vSphereWebAccessvSphere网络访问Answer:A,C,DQUESTION NO:14AnadministratorwouldliketousetheVMwareCertificateAuthority(VMCA)asanIntermediateCertificateAuthority(CA).Thefirsttwostepsperformedare:管理员想使用VMware证书颁发机构(VMCA)作为IntermediateCertificate权威(CA)。前两个步骤如下-ReplacetheRootCertificate取代根证书-ReplaceMachineCertificates(IntermediateCA)更换机器证书(中级CA)Whichtwostepswouldneedtobeperformednext?(Choosetwo.)接下来哪两个步骤要被执行？A.ReplaceSolutionUserCertificates(IntermediateCA)替代解决方案的用户证书(中级CA)B.ReplacetheVMwareDirectoryServiceCertificate(IntermediateCA)取代VMware目录服务证书(中级CA)C.ReplacetheVMwareDirectoryServiceCertificate取代VMware目录服务证书D.ReplaceSolutionUserCertificates替代解决方案的用户证书Answer:A,CQUESTION NO:15WhichthreeoptionsareavailableforESXiCertificateReplacement?(Choosethree.)哪三个选项可用于ESXi证书替换？A.VMwareCertificateAuthoritymodeVMware认证授权模式B.CustomCertificateAuthoritymode自定义认证授权模式C.Thumbprintmode个性特征模式D.HybridDeployment混合部署E.VMwareCertificateEndpointAuthorityModeVMware证书终端权威模式Answer:A,B,CQUESTION NO:16LockdownModehasbeenenabledonanESXi6.xhostandusersarerestrictedfromloggingintotheDirectConsoleUserInterface(DCUI).ESXi6.x主机的锁定模式已启用和用户受限制登录到直接控制台用户界面Whichtwostatementsaretruegiventhisconfiguration?(Choosetwo.)对于给出的这个配置哪两个语句是正确的？A.AusergrantedadministrativeprivilegesintheExceptionUserlistcanlogin.在异常用户列表中一个授予管理权限的用户可以登录B.AuserdefinedintheDCUI.Accesswithoutadministrativeprivilegescanlogin.DCUI访问中定义的一个没有管理权限用户可以登录。C.AuserdefinedintheESXiAdminsdomaingroupcanlogin.在ESXi管理域组定义的用户可以登录D.AusersettothevCenterAdministratorrolecanlogin.设置为vCenter管理员角色的用户可以登录Answer:A,BQUESTION NO:17StrictLockdownModehasbeenenabledonanESXihost.严格封锁模式在ESXi主机上已启用。WhichactionshouldanadministratorperformtoallowESXiShellorSSHaccessforuserswithadministratorprivileges?管理员应该执行哪个操作来允许ESXiShell或SSH访问用户管理员权限A.Granttheuserstheadministratorroleandenabletheservice.授予用户管理员角色并启动服务。B.AddtheuserstoExceptionUsersandenabletheservice.将用户添加到异常用户并支持服务C.Noactioncanbetaken,StrictLockdownModepreventsdirectaccess.不采取任何行动,严格封锁方式防止直接访问。D. Addtheuserstovsphere.localandenabletheservice.添加用户vsphere本地和启动服务Answer:BQUESTION NO:18AcommonrootuseraccounthasbeenconfiguredforagroupofESXi6.xhosts.一个共同的根用户账户被配置在一群ESXi6.x主机上。Whichtwostepsshouldbetakentomitigatesecurityrisksassociatedwiththisconfiguration?(Choosetwo.)哪两个步骤应采取来减小这个配置的安全风险？A.RemovetherootuseraccountfromtheESXihost.从ESXi主机删除根用户账户。B.Setacomplexpasswordfortherootaccountandlimititsuse.根帐户设置复杂的密码,限制其使用。C.UseESXiActiveDirectorycapabilitiestoassignuserstheadministratorrole.使用ESXiActiveDirectory功能给用户分配管理员角色。E. UseLockdownmodetorestrictrootaccountaccess.使用锁定模式限制根帐户访问。Answer:B,CQUESTION NO:19AnadministratorwantstoconfigureanESXi6.xhosttouseActiveDirectory(AD)tomanageusersandgroups.TheADdomaingroupESXAdminsisplannedforadministrativeaccesstothehost.管理员使用ActiveDirectory想要配置一个ESXi6.x主机为管理员用户和群组。ActiveDirectory(AD)域ESX管理员组计划管理访问主机。Whichtwoconditionsshouldbeconsideredwhenplanningthisconfiguration?(Choosetwo.)在规划这个配置时哪两个条件应考虑？A.IfadministrativeaccessforESXAdminsisnotrequired,thissettingcanbealtered.如果管理访问ESX管理员不是必需的,可以改变该设置。B.TheusersinESXAdminsarenotrestrictedbyLockdownMode.ESX管理员中的用户不受锁定模式限制。C.AnESXihostprovisionedwithAutoDeploycannotstoreADcredentials.配置自动部署的ESXi主机不能存储AD凭证。D.TheusersinESXAdminsaregrantedadministrativeprivilegesinvCenterServer.ESX管理员中的用户在vCenter服务器中授予管理权限。Answer:A,CQUESTION NO:20WhichtwoadvancedfeaturesshouldbedisabledforvirtualmachinesthatareonlyhostedonavSpheresystem?(Choosetwo.)只是托管在vSphere系统的虚拟机的哪两个高级特性应该禁用,?A.isolation.tools.unity.push.update.disableB.isolation.tools.ghi.launchmenu.changeC.isolation.tools.bbs.disableD.isolation.tools.hgfsServerSet.enableAnswer:A,BQUESTION NO:21Toreducetheattackvectorsforavirtualmachine,whichtwosettingsshouldanadministratorsettofalse?(Choosetwo.)减少攻击向量为一个虚拟机,哪两个设置管理员应该设置为false？A. ideX:Y.presentB.serial.presentC.ideX:Y.enabledD.serial.enabledAnswer:A,BQUESTION NO:22Whichtwogroupsofsettingsshouldbereviewedwhenattemptingtoincreasethesecurityofvirtualmachines(VMs)?(Choosetwo.)当试图增加虚拟机(vm)的安全时哪这两组设置应该被审查?A.Disablehardwaredevices禁用硬件设备B.Disableunexposedfeatures禁用未曝光的功能C.DisableVMtoolsdevices禁用VMtools设备D.DisableVMTemplatefeatures禁用VM模板功能Answer:A,B QUESTION NO:23WhichpasswordmeetsESXi6.xhostpasswordrequirements?哪个密码符合ESXi6.x主机密码要求？A. 8kMVnn2x!B.zNgtnJBA2C.Nvgt34kn44D.!b74wrAnswer:AQUESTION NO:24AnadministratorwouldliketouseapassphrasefortheirESXi6.xhostswhichhasthesecharacteristics:管理员想要使用具有以下特点ESXi6.x主机的一个密码:-Minimumof21characters至少21个字符-Minimumof2words-至少2字符Whichadvancedoptionsmustbesettoallowthispassphraseconfigurationtobeused?哪个高级选项必须设置来允许使用这个密码配置?A.retry=3min=disabled,disabled,7,21,7passphrase=2B.retry=3min=disabled,disabled,21,7,7passphrase=2C.retry=3min=disabled,disabled,2,21,7D.retry=3min=disabled,disabled,21,21,2Answer:BExplanation:QUESTION NO:25WhichAdvancedSettingshouldbecreatedforthevCenterServertochangetheexpirationpolicyofthevpxuserpassword?哪个先进的设置应该为vCenter服务器创建来更改vpxuser密码过期策略?A. VimPasswordExpirationInDaysB.VimExpirationPasswordDaysC.VimPassExpirationInDaysD.VimPasswordRefreshDaysAnswer:AExplanation:QUESTION NO:26AnadministratorhasbeeninstructedtosecureexistingvirtualmachinesinvCenterServer.管理员被指示来确保现有的在vCenter服务器上的虚拟机安全。Whichtwoactionsshouldtheadministratortaketosecurethesevirtualmachines?(Choosetwo.)哪两个动作管理员应该采取来保护这些虚拟机?A.Disablenativeremotemanagementservices禁用本地远程管理服务B.RestrictRemoteConsoleaccess限制远程控制台访问C.UseIndependentNon-Persistentvirtualdisks使用独立的非持久性虚拟磁盘D.PreventuseofIndependentNon-Persistentvirtualdisks防止使用独立的非持久性虚拟磁盘Answer:B,DExplanation:QUESTION NO:27Anadministratorhasrecentlyauditedtheenvironmentandfoundnumerousvirtualmachineswithsensitivedatawrittentotheconfigurationfiles.管理员最近审计环境,发现了许多敏感数据写入配置文件的虚拟机Topreventthisinthefuture,whichadvancedparametershouldbeappliedtothevirtualmachines?以防止在未来发生,哪个先进的参数应该被应用到虚拟机?A.isolation.tools.setinfo.disable=trueB.isolation.tools.setinfo.enable=trueC.isolation.tools.setinfo.disable=falseD.isolation.tools.setinfo.enable=falseAnswer:AExplanation:QUESTION NO:28WhichtwostatementsarecorrectregardingvSpherecertificates?(Choosetwo.)关于vSphere证书哪两个语句是正确的？A.ESXihostupgradesdonotpreservetheSSLcertificateandreissueonefromtheVMwareCertificateAuthority(VMCA).ESXi主机升级不保存SSL证书,从VMCA补发一个B.ESXihostupgradespreservetheexistingSSLcertificate.ESXi主机升级保存现有的SSL证书。C.ESXihostshaveassignedSSLcertificatesfromtheVMwareCertificateAuthority(VMCA)duringinstall.在安装时ESXi主机已经从VMCA分配SSL证书。D.ESXihostshaveself-signedSSLcertificatesbydefault.ESXi主机默认签名SSL证书。Answer:B,CExplanation:QUESTION NO:29WhichthreeoptionsareavailableforreplacingvCenterServerSecurityCertificates?(Choosethree.)哪三个选项可用于取代vCenter服务器安全证书A.ReplacewithCertificatessignedbytheVMwareCertificateAuthority.替换为VMware证书颁发机构签署的证书。B.MakeVMwareCertificateAuthorityanIntermediateCertificateAuthority.让VMware证书颁发机构为中间证书颁发机构。C.DonotuseVMwareCertificateAuthority,provisionyourownCertificates.不使用VMware证书颁发机构,提供自己的证书D.UseSSLThumbprintmode.使用SSL拇指指纹模式。E.ReplaceallVMwareCertificateAuthorityissuedCertificateswithself-signedCertificates.替换所有VMware证书颁发机构发行的证书使用自签名证书。Answer:A,B,CExplanation:QUESTION NO:30WhenattemptingtologinwiththevSphereWebClient,usershavereportedtheerror:当试图登录到vSphereWeb客户端,用户报告错误:IncorrectUsername/Password不正确的用户名/密码TheadministratorhasconfiguredthePlatformServicesControllerIdentitySourceas:管理员配置的平台服务控制器管身份资源是:-Type.ActiveDirectoryasanLDAPServer-Domain:-Alias:VMWARE-DefaultDomain:Yes缺省域：是WhichtwostatementswouldexplainwhyuserscannotlogintothevSphereWebClient?(Choosetwo.)哪两个表述可以解释为什么用户无法登录到vSphereWeb客户端？A.Usersaretypingthepasswordincorrectly.用户输入的密码不正确。B.Usersareinaforestthathas1-waytrust.用户在一个forest有1路的信任。C.Usersareinaforestthathas2-waytrust.用户在一个forest有2路的信任。D.UsersareloggingintovCenterServerwithincorrectpermissions.用户用不正确的权限登录到vCenter服务器。Answer:A,BExplanation:QUESTION NO:31Whichgroupinthevsphere.localdomainwillhaveadministratorprivilegesfortheVMwareCertificateAuthority(VMCA)?Vsphere本地域的哪一组有VMCA的管理员权限？A.SolutionUsers解决方案用户B.CAAdminsC.DCAAdminsD.SystemConfiguration.Administrators系统配置.管理员Answer:BExplanation:QUESTION NO:32WhichPlatformServiceControllerPasswordPolicydeterminesthenumberofdaysapasswordcanexistbeforetheusermustchangeit?在用户必须改变它之前，哪个平台服务控制器密码策略可以确定密码的存在天数。A.MaximumLifetime做大生命周期B.PasswordAge密码年龄C.MaximumDays最大天数D.PasswordLifetime密码生命周期Answer:AExplanation:QUESTION NO:33AnadministratorisconfiguringtheclocktolerancefortheSingleSign-Ontokenconfigurationpolicyandwantstodefinethetimeskewtolerancebetweenaclientandthedomaincontrollerclock.管理员配置时钟对单点登录令牌政策，想定义一个倾斜公差在客户端和域控制器时钟之间。Whichtimemeasurementisusedforthevalue?这个值可以用那个时间单位表示？A.Milliseconds毫秒B.Seconds秒C.Minutes分D.Hours小时Answer:AExplanation:QUESTION NO:34WhichVMwareSingleSign-OncomponentissuesSecurityAssertionMarkupLanguage(SAML)tokens?哪个VMware的单点登录组件涉及SAML令牌?A.VMwareSecurityTokenServiceVMware安全令牌服务B.AdministrationServer管理服务器C.VMwareDirectoryServiceVMware目录服务D.IdentityManagementService身份管理服务Answer:AExplanation:QUESTION NO:35WhichtwoarevalidIdentitySourceswhenconfiguringvCenterSingleSign-On?(Choosetwo.)在配置vCenter单点登录时哪两个身份来源是有效的?A.Radius半径B.NISC.OpenLDAP开D.LocalOSAnswer:C,DExplanation:QUESTION NO:36AnadministratorneedstocreateanIntegratedWindowsAuthentication(IWA)IdentitySourceonanewlydeployedvCenterServerAppliance(VCSA).管理员需要在一个新部署的VCSA上创建一个IWA身份源Whichtwoactionswillaccomplishthis?(Choosetwo.)这两个操作可以完成这个？A.UseaServicePrincipalName(SPN)toconfiguretheIdentitySource.使用一个SPN配置身份源。B.UseaDomainadministratortoconfiguretheIdentitySource.使用域管理员来配置身份源。C.JointheVCSAtoActiveDirectoryandconfiguretheIdentitySourcewithaMachineAccount.加入VCSA到活动目录和配置机器代码身份源D.CreateacomputeraccountinActiveDirectoryfortheVCSAandconfiguretheIdentitySource.在活动目录中为VCSA创建一个计算机帐户和配置身份源Answer:A,CExplanation:QUESTION NO:37Anadministratorwantstoreducethememoryoverheadfora3Dgraphicsenabledvirtualmachine(VM).管理员希望减少内存开销为启用的虚拟机3D图形WhatadvancedfeaturecanbeaddedtotheVMconfigurationfiletoreducememoryoverhead?什么高级功能可以添加到VM配置文件,以减少内存开销A. vga.vgaOnly=TRUEB.vga.svgaEnable=FALSEC.svgaEnabled=FALSED.svgaDisable=TRUEAnswer:AExplanation:QUESTION NO:38AnadministratorisbuildingalargevirtualmachinethatwillrequireasmanyvCPUsasthehostcansupport.AnESXi6.xhosthasthesespecifications:管理员正在建设一个大型虚拟机，她需要和主机可以支持的一样多的vCPU。一个ESXi6。x主机有这些参数:-Six32-coreIntelXeonProcessors6个32核因特尔至强处理器-256GBofMemory256G的内存-512GBLocaldiskspaceusingVMFS5512G使用VMFS5的磁盘空间WhatisthemaximumnumberofvirtualCPUsthatthevirtualmachinecanbeallocated?虚拟机可以分配的虚拟cpu最大数量是多少?A.64B.128C.192D.256Answer:BExplanation:QUESTION NO:39WhichtwofeaturesareavailableforvirtualmachinesconfiguredwithDirectPathI/O?(Choosetwo.)哪两个特性可用于配置了DirectPathI/O虚拟机？A.FaultTolerance故障容差B.SuspendandResume挂起和恢复C.VirtualSymmetricMulti-Processing(vSMP)vSMPD.VirtualNon-UniformMemoryAccess(vNUMA)vNUMAAnswer:C,DExplanation:QUESTION NO:40AnadministratoriscreatinganewContentLibrary.ItwillsubscribetoanotherremoteContentLibrarywithoutauthenticationenabled.管理员创建一个新的内容库。它将订阅另一个远程内容库,不启用身份验证。Whatinformationfromthepublishedlibrarywilltheyneedinordertocompletethesubscription?为了完成以上订阅他们将需要从发布库发出的什么信息？A.SubscriptionURL订阅URLB.AsecuritypasswordfromthepublishingContentLibrary来自于出版内容库的一个安全密码C.PublishersItems.jsonfile出版商的Items.json文件D.UsernamefromthepublishingContentLibrary来着出版内容库的用户名Answer:AExplanation:QUESTION NO:41An