最全题库包含翻译2V0-621Q242

1、Q1. An administrator wants to provide users restricted access. The users should only be able to perform the following tasks: 管理员希望为用户提供限制访问权限。用户只能执行下列任务- Create and consolidate virtual machine snapshots创建和合并虚拟机快照- Add/Remove virtual disks添加/删除虚拟磁盘- Snapshot Management快照管理Which default role in vCente

2、r Server would meet the administrator's requirements for the users? 在vCenter服务器角色将满足用户的要求，默认管理员A. Virtual machine user虚拟机的用户B. Virtual machine power user虚拟机高级用户C. Virtual Datacenter administrator虚拟数据中心管理员D. VMware Consolidated Backup user合并备份用户Answer: BQ2. Which two roles can be modified? (Choos

3、e two.) 可以修改哪两个角色A. AdministratorB. Network Administrator 网络管理员C. Datastore Consumer 数据中心用户D. Read-Only只读Answer: B,CQ3. An administrator with global administrator privileges creates a custom role but fails to assign any privileges to it. 具有全局管理员权限的管理员创建自定义角色，但未能给它分配任何特权Which two privileges would the

4、 custom role have? (Choose two.) 可以修改哪两个角色A. System.View查看系统B. System.Anonymous匿名系统C. System.User 系统用户D. System.ReadOnly只读Answer: A,BQ4. An administrator wishes to give a user the ability to manage snapshots for virtual machines.Which privilege doesthe administrator need to assign to the user? 管理员希望

5、给用户管理虚拟机快照的能力。这特权的管理员需要分配给用户A. Datastore.Allocate Space数据中心分配空间B. Virtual machine.Configuration.create snapshot虚拟机配置创建快照C. Virtual machine.Configuration.manage snapshot虚拟机管理创建快照D. Datastore.Browse Datastore浏览数据中心Answer: AQ5. An object has inherited permissions from two parent objects. What is true a

6、bout the permissions on the object? 对象继承了两个父对象的权限关于对象的权限的内容是什么A. The common permissions between the two are applied and the rest are discarded. 两者之间的公共权限被应用，其余部分被丢弃B. The permissions are combined from both parent objects. 权限由父对象组合C. No permissions are applied from the parent objects. 没有从父对象应用权限D. Th

7、e permission is randomly selected from either of the two parent objects. Answer: B 从两个父对象中的任意一个中随机选择权限Q6. What is the highest object level from which a virtual machine can inherit privileges? 虚拟机可以继承特权的最高对象级别是什么A. Host Folder主文件夹B. Data Center数据中心C. Data Center Folder数据中心的文件夹D. VM Folder虚拟机文件夹Answer

8、: CQ7. Which three Authorization types are valid in vSphere? (Choose three.) 三授权类型是有效的A. Group Membership in vsphere.local在vsphere.local组成员B. Global全局C. Forest森林D. vCenter Server vCenter服务器E. Group Membership in system-domain系统域中的组成员Answer: A,B,DQ8. Which three components should an administrator sel

9、ect when configuring vSphere permissions? (Choose three.) 这三个部件应选择在配置管理员的权限A. Inventory Object 对象库存B. Role角色C. User/GroupD. Privilege权限E. Password密码Answer: A,B,CQ9. In which two vsphere.local groups should an administrator avoid adding members? (Choose two.) 在这两vsphere.local组应管理员避免添加成员A. SolutionUse

10、rs解决方案的用户B. AdministratorsC. DCAdmins域控D. ExternalPDUsers外部 PD用户Answer: A,BQ10. An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform Services Controller domain, and needs to grant a user privileges that span all environments. 管理员已配置三vCenter服务器和vRealize配器在

11、平台服务 控制器域，需要授予跨越所有环境的用户特权 哪个语句最能描述管理员如何实现这一点Which statement best describes how the administrator would accomplish this?A. Assign a Global Permission to the user. 为用户分配全局权限B. Assign a vCenter Permission to the user. 允许用户指定一个vCenterC. Assign vsphere.local membership to the user. 分配vsphere.local会员用户D.

12、Assign an ESXi Permission to the user. 允许用户指定一个ESXiAnswer: AQ11. Which two methods are recommended for managing the VMware Directory Service? (Choosetwo.) 推荐管理VMware目录服务的哪两种方法A. Utilize the vmdir command. 利用vmdir命令B. Manage through the vSphere Web Client. 通过vSphere Web客户端管理C. Manage using the VMware

13、 Directory Service. 管理使用VMware目录服务D. Utilize the dc rep command. 利用直流代表指令Answer: A,BQ12. What are two sample roles that are provided with vCenter Server by default? (Choose two.) 两样本的作用，提供了默认的vCenter服务器是什么A. Virtual machine User虚拟机的用户B. Network AdministratorC. Content Library Administrator内容库管理员D. S

14、torage Administrator硬盘管理员Answer: A,BQ13. An administrator would like to use the VMware Certificate Authority (VMCA) as an Intermediate Certificate Authority (CA). The first two steps performed are: 管理员想使用VMware的证书颁发机构（VMCA）作为中间证书颁发机构（CA）。前两个步骤是- Replace the Root Certificate替换根证书- Replace Machine Cer

15、tificates (Intermediate CA) 更换机器证书（中级CA）Which two steps would need to be performed next? (two.) 接下来需要执行两个步骤A. Replace Solution User Certificates (Intermediate CA) 替换解决方案用户证书B. Replace the VMware Directory Service Certificate (Intermediate CA) 替换VMware目录服务证书C. Replace the VMware Directory Service Cer

16、tificate替换VMware目录服务证书D. Replace Solution User Certificates替换解决方案用户证书Answer: A,CQ14. Which three options are available for ESXi Certificate Replacement? (Choose three.) 这三个可供选择的ESXi补发证书A. VMware Certificate Authority mode证书权威模式B. Custom Certificate Authority mode自定义证书授权模式C. Thumbprint mode指纹模式D. Hyb

17、rid Deployment混合部署E. VMware Certificate Endpoint Authority Mode证书端点授权模式Answer: A,B,CQ15. Lockdown Mode has been enabled on an ESXi 6.x host and users are restricted from logging into the Direct Console User Interface (DCUI). 锁定模式已在ESXi 6启用。X主机和用户限制登录直接控制台用户界面 这两个语句是真实的Which two statements are true g

18、iven this configuration? (Choose two.)A. A user granted administrative privileges in the Exception User list can login. 在异常用户列表中授予管理员权限的用户可以登录B. A user defined in the DCUI.Access without administrative privileges can login. 在dcui定义用户没有管理权限的访问可以登录C. A user defined in the ESXi Admins domain group can

19、login. 用户定义的ESXi管理员可以登录域组D. A user set to the vCenter Administrator role can login. 用户设置为vCenter管理员角色可以登录Answer: A,BQ16. Strict Lockdown Mode has been enabled on an ESXi host. 严格的锁定模式一直在ESXi主机启用，这一行动应该允许管理员执行ESXi壳或SSH访问具有管理员权限的用户Which action should an administrator perform to allow ESXi Shell or SSH

20、 access for users with administrator privileges?A. Grant the users the administrator role and enable the service. 授予用户管理员角色并启用该服务B. Add the users to Exception Users and enable the service.将用户添加到异常用户并启用该服务C. No action can be taken, Strict Lockdown Mode prevents direct access. 不采取行动，严格锁定模式可以防止直接访问D. A

21、dd the users to vsphere.local and enable the service. 添加用户vsphere.local使服务Answer: BQ17. An administrator wants to configure an ESXi 6.x host to use Active Directory (AD) to manage users and groups. The AD domain group ESX Admins is planned for administrative access to the host. 管理员想配置ESXi 6。x主机使用活动目

22、录（AD）来管理用户和组。AD域组ESX管理员计划到主机的管理权限，规划此配置时应考虑哪两个条件？Which two conditions should be considered when planning this configuration? (Choose two.)A. If administrative access for ESX Admins is not required, this setting can be altered. 如果ESX管理员的管理权限是不需要的，这个设置可以改变B. The users in ESX Admins are not restricted

23、by Lockdown Mode. 在ESX管理员用户不通过锁定模式限制C. An ESXi host provisioned with Auto Deploy cannot store AD credentials. 一个ESXi主机配置自动部署不能存储AD凭据D. The users in ESX Admins are granted administrative privileges in vCenter Server. 在ESX管理员的用户授予在vCenter服务器管理权限Answer: A,CQ18. Which password meets ESXi 6.x host passwo

24、rd requirements? 这密码符合ESXi主机密码要求X 6A. 8kMVnn2x!B. zNgtnJBA2C. Nvgt34kn44D. !b74wrAnswer: AQ19. An administrator would like to use a passphrase for their ESXi 6.x hosts which has these characteristics: 管理员想使用一个口令的ESXi 6。x主机具有这些特点- Minimum of 21 characters最少21个字符- Minimum of 2 words最少2字Which advanced

25、options must be set to allow this passphrase configuration to be used? 其中高级选项必须设置为允许这个密码要使用的配置A. retry=3 min=disabled, disabled, 7, 21, 7 passphrase=2B. retry=3 min=disabled, disabled, 21, 7, 7 passphrase=2C. retry=3 min=disabled, disabled, 2, 21, 7D. retry=3 min=disabled, disabled, 21, 21, 2Answer:

26、 BQ20. Which Advanced Setting should be created for the vCenter Server to change the expiration policy of the vpxuser password? 先进的设置应为vCenter服务器更改密码的vpxuser到期策略创建A. VimPasswordExpirationInDays编辑密码到期日B. VimExpirationPasswordDays密码到期日C. VimPassExpirationInDaysD. VimPasswordRefreshDaysAnswer: AQ21. An

27、 administrator has been instructed受指示 to secure existing virtual machines in vCenter Server. 管理员已奉命在vCenter服务器安全的现有的虚拟机Which two actions should the administrator take to secure these virtual machines? (Choose two.) 管理员应该采取哪些行动来保护这些虚拟机A. Disable native remote management services禁用本地远程管理服务B. Restrict

28、Remote Console access限制远程控制台访问C. Use Independent Non-Persistent virtual disks使用独立非持久虚拟磁盘D. Prevent use of Independent Non-Persistent virtual disks防止独立非持久虚拟磁盘的使用Answer: B,DQ22. An administrator has recently audited the environment and found numerous virtual machines with sensitive data written to the

29、 configuration files. 管理员最近对环境进行了审计，发现许多虚拟机使用配置文件的敏感数据To prevent this in the future, which advanced parameter should be applied to the virtual machines? 为了防止这一点，未来的高级参数应该应用到虚拟机A. isolation.tools.setinfo.disable = true隔离工具 设置信息 禁用B. isolation.tools.setinfo.enable = true隔离工具 设置信息 有效C. isolation.tools.

30、setinfo.disable = falseD. isolation.tools.setinfo.enable = falseAnswer: AQ23. Which two statements are correct regarding vSphere certificates? (Choose two.) 这两个是有关于正确的证书A. ESXi host upgrades do not preserve the SSL certificate and reissue one from the VMware Certificate Authority(VMCA). ESXi主机升级不保留的

31、SSL证书，补发从VMware认证B. ESXi host upgrades preserve the existing SSL certificate. ESXi主机升级，保留现有的SSL证书C. ESXi hosts have assigned SSL certificates from the VMware Certificate Authority (VMCA) during install. 从VMware ESXi主机分配证书的SSL证书（VMCA）在安装D. ESXi hosts have self-signed SSL certificates by default. ESXi

32、主机默认的自签名的SSL证书Answer: B,CQ24. Which three options are available for replacing vCenter Server Security Certificates? (Choose three.) 这三个选项可用于代替vCenter服务器的安全证书A. Replace with Certificates signed by the VMware Certificate Authority. 替换由VMware证书颁发机构签署的证书B. Make VMware Certificate Authority an Intermedia

33、te Certificate Authority. 使VMware证书颁发机构成为中间证书颁发机构C. Do not use VMware Certificate Authority, provision your own Certificates. 不要使用VMware证书颁发机构，提供您自己的证书D. Use SSL Thumbprint mode. 使用SSL的指纹模式E. Replace all VMware Certificate Authority issued Certificates with self-signed Certificates.Answer: A,B,C用自签名

34、证书替换所有VMware证书颁发机构证书Q25. When attempting to log in with the vSphere Web Client, users have reported the error:Incorrect Username/Password The administrator has configured the Platform Services Controller Identity Source as: 试图登录与vSphere Web客户端的时候，用户报告错误：错误的用户名/密码管理员已将平台服务控制器身份源配置为：- Type. Active Dir

35、ectory as an LDAP Server 型 Active Directory作为LDAP服务器- Domain: 域：- Alias: VMWARE 别名: VMWARE- Default Domain: Yes默认域名：是Which two statements would explain why users cannot login to the vSphere Web Client? (Choose two.) 这两种说法可以解释为什么用户不能登录到vSphere Web客户端A. Users are typing the password incorrectly. 用户输入密

36、码错误B. Users are in a forest that has 1-way trust. 用户在森林里有1 TRUSC. Users are in a forest that has 2-way trust. 用户在一个森林，有双向信任D. Users are logging into vCenter Server with incorrect permissions. Answer: A,B 用户登录与权限vCenter服务器错误Q26. Which group in the vsphere.local domain will have administrator privileg

37、es for the VMware Certificate Authority(VMCA)? 这组在vsphere.local域将为VMware认证机构具有管理员特权A. SolutionUsers解决方案的用户B. CAAdmins CA管理员C. DCAAdminsDCA管理员D. SystemConfiguration.Administrators管理员配置Answer: BQ27. Which Platform Service Controller Password Policy determines the number of days a password can exist be

38、fore the user must change it? 哪个平台服务控制器密码策略决定了口令在用户必须更改密码之前可以存在的天数A. Maximum Lifetime最大寿命B. Password Age密码时代C. Maximum Days最大的天D. Password Lifetime密码有效期Answer: AQ28. An administrator is configuring the clock tolerance for the Single Sign-On token configuration policy and wants to define the time ske

39、w tolerance between a client and the domain controller clock. 管理员正在为单点登录令牌配置策略配置时钟容差，并希望定义客户端和域控制器时钟之间的时间偏移公差Which time measurement is used for the value? 用于该值的时间测量A. Milliseconds 毫秒B. SecondsC. MinutesD. HoursAnswer: AQ29. Which VMware Single Sign-On component issues Security Assertion Markup Langu

40、age (SAML) tokens? VMware的单点登录组件问题安全断言标记语言（SAA. VMware Security Token Service安全令牌服务B. Administration ServerC. VMware Directory Service目录服务D. Identity Management Service身份管理服务Answer: AQ30. Which two are valid Identity Sources when configuring vCenter Single Sign-On? (Choose two.) 这两个有效身份来源当配置vCenter的

41、单点登录A. Radius半径B. NISC. OpenLDAP目录服务D. LocalOS本地操作系统Answer: C,DQ31. An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA). 管理员需要建立一个集成的Windows身份验证（IWA）在新部署的vCenter服务器设备身份Which two actions will accomplish this?

42、(Choose two.) 这两个行动将完成A. Use a Service Principal Name (SPN) to configure the Identity Source. 使用服务主体名称（SPN）配置身份源B. Use a Domain administrator to configure the Identity Source. 使用域管理员配置身份源C. Join the VCSA to Active Directory and configure the Identity Source with a Machine Account. 加入VCSA活动目录和一个机器帐户配

43、置身份来源。D. Create a computer account in Active Directory for the VCSA and configure the Identity Source. 创建一个计算机帐户在Active Directory中的VCSA和配置身份来源Answer: A,CQ32. An administrator is creating a new Content Library. It will subscribe to another remote Content Library without authentication enabled. 管理员正在创

44、建新的内容库。它将订阅另一个远程内容库，而无需启用身份验证What information from the published library will they need in order to complete the subscription? 为了完成订阅，他们将需要从已发布的库中获取什么信息A. Subscription URL 订阅路径B. A security password from the publishing Content Library来自发布内容库的安全密码C. Publisher's Items.json file出版商的items.json文件D. U

45、sername from the publishing Content Library来自发布内容库的用户名Answer: AQ33. An administrator is assigning a user the Content Library administrator role. The user will only be creating the library for a single vCenter Server. 管理员正在为用户分配内容库管理员角色。用户只会创造一个vCenter Server的图书馆What is the lowest level of the permis

46、sion heirarchy that this role can be granted to the user and still allow them to create a Content Library? 权限的层次，这个角色可以授予用户，还允许他们创建内容库的最低水平是什么A. Global 全局B. Datacenter Folder 数据中心文件夹C. Virtual Center 虚拟中心D. Datacenter 数据中心Answer: AQ34. Which three connection types are supported between a remote site

47、 and vCloud Air? (Choose three.) 这三个连接类型支持之间的远程站点和vCloud AirA. Secure Internet Connectivity安全的互联网连接B. Private Connect专用连接C. Direct Connect直接连接D. Internet Connectivity互联网连接E. Secure VPN 安全VPNAnswer: A,C,EQ35. Refer to the Exhibit.An administrator is adding an Active Directory over LDAP Identity Sourc

48、e for vCenter Single Sign- On, as indicated in the Exhibit. 根据下图，管理员添加到vCenter的单点登录LDAP身份源活动目录，在展览说明 为域别名配置的正确值是多少What is the correct value to configure for the Domain alias?A. The domain's NetBIOS name. 域的NetBIOS名称B. The fully qualified domain name. 完全限定域名C. vsphere.localD. A user defined label

49、. 用户定义标签Answer: AQ36. An administrator decides to change the root password for an ESXi 6.x host to comply with the company's security policies. 管理员决定改变一个ESXi 6 root密码。X主机遵守公司的安全政策 有两种方法可以做到这一点What are two ways that this can be accomplished? (Choose two.)A. Use the Direct Console User Interface t

50、o change the password. 使用直接控制台用户界面更改密码B. Use the passwd command in the ESXi Shell. 在ESXi壳牌passwd命令C. Use the password command in the ESXi Shell. 在ESXi壳密码命令D. Use the vSphere client to update local users. 使用vSphere客户端更新本地用户Answer: A,BQ37. An administrator connects to an ESXi 6.x host console in order

51、 to shutdown the host.Which option in the Direct Console User Interface would perform this task? 管理员连接到ESXi 6。x主机控制台以关闭主机。该选项在直接控制台用户界面会执行这个任务A. Press the F12 keyB. Press the F2 key C. Press Alt + F1 simultaneously 同时D. Press Alt + F2 simultaneouslyAnswer: AQ38.An administrator is able to manage an

52、ESXi 6.x host connected to vCenter Server using the vSphere Web Client but is unable to connect to the host directly. 管理员能够管理ESXi 6。x主机连接vCenter服务器使用vSphere Web客户端但无法连接到主机直接Which action should the administrator take to correct this behavior? 管理员应该采取哪些行动来纠正这种行为A. Restart management agents on the ESXi

53、 host. 重启对ESXi主机管理代理B. Disable Lockdown Mode on the ESXi host through vCenter Server. 禁用锁定模式在ESXi主机通过vCenter服务器C. Disable the ESXi firewall with the command esxcli network firewall unload. 禁用ESXi防火墙与网络防火墙卸载命令esxcliD. Reboot the ESXi host. 重启ESXi主机Answer: BQ39. An administrator needs two vCenter Serv

54、ers to be visible within a single vSphere Web Client session. 管理员需要两vCenter服务器在一个单一的vSphere Web客户端会话是可见的 这两个vCenter服务器和平台服务控制器（PSC）的配置，要做到这一点呢Which two vCenter Server and Platform Services Controller (PSC) configurations would accomplish this? (Choose two.)A. Install a single PSC with two vCenter Se

55、rvers registered to it. 安装一个PSC两vCenter服务器注册它B. Install two PSCs in the same Single Sign-On domain with one vCenter Server registered to each PSC. 安装两PSCs在同一域的单点登录vCenter服务器注册每个PSCC. Install a single PSC with two vCenter Servers registered to it and configure Linked Mode. 安装两个vCenter服务器注册一个单一的PSC和配置

56、连接方式D. Install two PSCs in the same Single Sign-On domain with one vCenter Server registered to each PSC and configure Linked Mode. 安装两PSCs在同一域的单点登录vCenter服务器注册每个PSC和配置连接方式Answer: A,BQ40. An administrator wants to clone a virtual machine using the vSphere Client.Which explains why the Clone option i

57、s missing? 管理员想克隆一个虚拟机使用vSphere客户端。这解释了为什么克隆选项不见了？A. The vSphere Client is directly connected to the ESXi host. vSphere客户端直接连接到ESXi主机 虚拟机的配置与精简配置虚拟磁盘B. The virtual machine is configured with a thin-provisioned virtual disk.C. The virtual machine is configured with outdated Virtual Hardware. 虚拟机配置过时的虚拟硬件 克隆只能vRealize Orchestrator的执行D. Cloning can only be performed with vRealize Orchestrator.Answer: AQ41. An administrator creates a custom ESXi firewall rule using an XML file, however the rules do not appear in the vSphere Web Client. 克隆只能vRealize Orchestrator的执行Which