Which two statements are correct regarding vSphere certificates?

I agree with B and C.

Question states “vSphere” (not just ESXi). vSphere = vCenter so it’s B & C.

B&D makes a lot of sense, but if VMware is expecting a literal answer you should check this link, which has this comment “Provisioning happens when the host is added to vCenter Server explicitly or as part of installation or upgrade to ESXi 6.0 or later”,… http://pubs.vmware.com/vsphere-65/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-32AD28E1-53C3-48E6-96A9-FD9E4015D0B2.html

B and C ..agreed

2017-7-25 New 2V0-621D Exam Questions:
QUESTION 31
Which group in the vsphere.local domain will have administrator privileges for the VMware Certificate Authority (VMCA)?

A. SolutionUsers
B. CAAdmins
C. DCAAdmins
D. SystemConfiguration.Administrators

Answer: B
Explanation:
Members of the CAAdmins group have administrator privileges for VMCA. Adding members to these groups is not usually recommended.
Reference: https://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-87DA2F34-DCC9-4DAB-8900-1BA35837D07E.html

QUESTION 32
Which Platform Service Controller Password Policy determines the number of days a password can exist before the user must change it?

A. Maximum Lifetime
B. Password Age
C. Maximum Days
D. Password Lifetime

Answer: A
Explanation:
You can configure the following parameters for password policy:
Description ¬- Password policy description. Required.
Maximum lifetime -¬ Maximum number of days that a password can exist before it has to be changed.
Restrict re-use -¬ Number of the user’s previous passwords that cannot be set again.
Maximum length ¬- Maximum number of characters that are allowed in the password.
Minimum length ¬- Minimum number of characters required in the password.
Character requirements ¬- Minimum number of different character types required in the password.
Identical adjacent characters ¬- Maximum number of identical adjacent characters allowed in the password.
Reference: http://www.vladan.fr/vcp6-dcv-objective-1-3-enable-sso-and-active-directory-integration/

QUESTION 33
An administrator is configuring the clock tolerance for the Single Sign-On token configuration policy and wants to define the time skew tolerance between a client and the domain controller clock.
Which time measurement is used for the value?

A. Milliseconds
B. Seconds
C. Minutes
D. Hours

Answer: A
Explanation:
The time skew tolerance between a client and the domain controller clock is measured in milliseconds.

QUESTION 34
Which VMware Single Sign-On component issues Security Assertion Markup Language (SAML) tokens?

A. VMware Security Token Service
B. Administration Server
C. VMware Directory Service
D. Identity Management Service

Answer: A
Explanation:
The security token service issues Security Assertion Markup Language (SAML) tokens. These security tokens pass information about a system user between an identity provider and a web service. This service enables a user who has logged on through vCenter Single Sign-On to use multiple web-service delivered applications without authenticating to each one.
Reference: https://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.upgrade.doc%2FGUID-90C1E3DC-4397-4BF0-808E-DF3802E56BC6.html

QUESTION 35
Which two are valid Identity Sources when configuring vCenter Single Sign-On? (Choose two.)

A. Radius
B. NIS
C. OpenLDAP
D. LocalOS

Answer: CD
Explanation:
Active Directory (Integrated Windows Authentication) Use this option for native Active Directory implementations. The machine on which the vCenter Single Sign-Onservice is running must be in an Active Directory domain if you want to use this option.
See Active Directory Identity Source Settings.
Active Directory as an LDAP Server
This option is available for backward compatibility. It requires that you specify the domain controller and other information. See Active Directory LDAP Server and OpenLDAP Server Identity Source Settings.
OpenLDAP
Use this option for an OpenLDAP identity source. See Active Directory LDAP Server and OpenLDAP Server Identity Source Settings.
LocalOS
Use this option to add the local operating system as an identity source. You are prompted only for the name of the local operating system. If you select this option, all users on the specified machine are visible to vCenter Single Sign-On, even if those users are not part of another domain.
Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID-B23B1360-8838-4FF2-B074-71643C4CB040.html

QUESTION 36
An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA).
Which two actions will accomplish this? (Choose two.)

A. Use a Service Principal Name (SPN) to configure the Identity Source.
B. Use a Domain administrator to configure the Identity Source.
C. Join the VCSA to Active Directory and configure the Identity Source with a Machine Account.
D. Create a computer account in Active Directory for the VCSA and configure the Identity Source.

Answer: AC
Explanation:
Using a machine account when configuring an Active Directory identity source for vCenter Server requires that the Windows system be joined to the domain. If the system is not joined to the domain, SSO cannot leverage the machine account to create the identity source and perform its function as the secure token service user.
To resolve this issue in VCVA 5.5, use only the Use SPN option.
Reference:
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC &externalId=2058919

QUESTION 37
An administrator wants to reduce the memory overhead for a 3D graphics enabled virtual machine (VM).
What advanced feature can be added to the VM configuration file to reduce memory overhead?

A. vga.vgaOnly=TRUE
B. vga.svgaEnable=FALSE
C. svgaEnabled=FALSE
D. svgaDisable=TRUE

Answer: A
Reference: http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.vm_admin.doc%2FGUID-FAB0E2C3-3474-461D-99BC-549F7E21FE85.html

QUESTION 38
An administrator is building a large virtual machine that will require as many vCPUs as the host can support.
An ESXi 6.x host has these specifications:
– Six 32-core Intel Xeon Processors
– 256 GB of Memory
– 512 GB Local disk space using VMFS5
What is the maximum number of virtual CPUs that the virtual machine can be allocated?

A. 64
B. 128
C. 192
D. 256

Answer: B
Reference:
http://www.intel.com/content/dam/www/public/us/en/documents/white-papers/virtualization-xeon-core-count-impacts-performance-paper.pdf

QUESTION 39
Which two features are available for virtual machines configured with DirectPath I/O? (Choose two.)

A. Fault Tolerance
B. Suspend and Resume
C. Virtual Symmetric Multi-Processing (vSMP)
D. Virtual Non-Uniform Memory Access (vNUMA)

Answer: CD
Explanation:
VMs configured with DirectPath I/O have vSMP and vNUMA.

QUESTION 40
An administrator is creating a new Content Library. It will subscribe to another remote Content Library without authentication enabled.
What information from the published library will they need in order to complete the subscription ?

A. Subscription URL
B. A security password from the publishing Content Library
C. Publisher’s Items.json file
D. Username from the publishing Content Library

Answer: A
Explanation:
Subscription URL from the published library is needed to complete the subscription.

More new questions:https://drive.google.com/drive/folders/0B75b5xYLjSSNN0M4cTJyOXZySk0?usp=sharing