VCP-621 VUE考试中心题库中英文对照文档

VMware VCP-621 Exam QUESTION NO: 1

An administrator wants to provide users restricted access. The users should only be able to perform the following tasks:

管理员想要提供用户限制访问。用户应该只可以执行以下任务:

- Create and consolidate virtual machine snapshots 创建和巩固虚拟机快照 - Add/Remove virtual disks 添加/删除虚拟磁盘 - Snapshot Management 快照管理

Which default role in vCenter Server would meet the administrator's requirements for the users? 哪个默认角色的vCenter服务器满足用户管理员的要求? A. Virtual machine user 虚拟机用户

B. Virtual machine power user 虚拟机电力用户

C. Virtual Datacenter administrator 虚拟数据中心管理员 D. VMware Consolidated Backup user VMware合并备份用户 Answer: B

QUESTION NO: 2

Which two roles can be modified? (Choose two.) 哪两个角色可以被修改？ A. Administrator 管理员

B. Network Administrator 网络管理员 C. Datastore Consumer 数据存储用户 D. Read-Only 只读 Answer: B,C

QUESTION NO: 3

An administrator with global administrator privileges

creates a custom role but fails to assign any privileges to it.

有全球管理员权限的管理员创建一个自定义的角色,但没有分配到任何权限。 Which two privileges would the custom role have? (Choose two.)

自定义用户有哪两个权限 A. System.View

B. System.Anonymous C. System.User D. System.ReadOnly Answer: A,B QUESTION NO: 4

An administrator wishes to give a user the ability to manage snapshots for virtual machines.Which privilege does the administrator need to assign to the user?

管理员希望让用户能够管理虚拟机的快照.哪个特权管理员需要分配给用户 A. Datastore.Allocate Space Datastore.Allocate空间

B. Virtual machine.Configuration.create snapshot 虚拟machine.Configuration.create快照 C. Virtual machine.Configuration.manage snapshot 虚拟machine.Configuration.manage快照 D. Datastore.Browse Datastore Datastore.Browse数据存储 Answer: A

QUESTION NO: 5

An object has inherited permissions from two parent objects.

一个对象已经从两个父对象继承了权限

What is true about the permissions on the object? 关于这个对象的权限说法正确的是？ A. The common permissions between the two are applied and the rest are discarded. 两个父对象之间的共同权限是可实施的,其它的是不能实施的。

B. The permissions are combined from both parent objects. 父对象的权限相结合。 C. No permissions are applied from the parent objects. 从父对象没有应用的权限 D. The permission is randomly selected from either of the two parent objects. 权限是随机从两个父对象选择的 Answer: B

QUESTION NO: 6

What is the highest object level from which a virtual machine can inherit privileges? 虚拟机可以继承特权的最高对象级别是什么？ A. Host Folder B. Data Center

C. Data Center Folder D. VM Folder Answer: C

QUESTION NO: 7

Which three Authorization types are valid in vSphere? (Choose three.) 哪三种授权类型在vSphere是有效的

A. Group Membership in vsphere.local 组成员在vsphere.local B. B. Global 全体的 C. C. Forest 森林

D. vCenter Server vCenter服务器

E. Group Membership in system-domain 组成员在系统域 Answer: A,B,D QUESTION NO: 8

Which three components should an administrator select when configuring vSphere permissions?(Choose three.) 在配置vSphere权限时哪三个组件要管理员选择 A. Inventory Object B. Role

C. User/Group

D. Privilege 特权 E. Password 口令 Answer: A,B,C QUESTION NO: 9

In which two vsphere.local groups should an administrator avoid adding members? (Choose two.) 在哪两个vsphere当地群组中管理员应该避免添加成员? A. SolutionUsers B. Administrators C. DCAdmins

D. ExternalPDUsers Answer: A,B

QUESTION NO: 10

An administrator has configured three vCenter Servers and vRealize Orchestrator within aPlatform Services Controller domain, and needs to grant a user privileges that span all environments. 管理员在latform服务控制器域中配置三个vCenter服务器和vRealize协调器，需要授予用户可以跨越所有环境得特权。

Which statement best describes how the administrator would accomplish this? 哪个陈述最好的描述了管理员能完成上述过程？

A. Assign a Global Permission to the user. 全球许可分配给用户。 B. Assign a vCenter Permission to the user. vCenter权限分配给用户。

C. Assign vsphere.local membership to the user. 分配vsphere.local membership 给用户 D. Assign an ESXi Permission to the user. 向用户分配一个ESXi的许可。 Answer: A

QUESTION NO: 11

Which two methods are recommended for managing the VMware Directory Service? 哪两种方法推荐用来管理VMware目录服务？ (Choose two.) A. Utilize the vmdir command. 利用vmdir命令。

B. Manage through the vSphere Web Client. 通过vSphere Web客户端管理 C. Manage using the VMware Directory Service. 通过VMware目录服务管理 D. Utilize the dc rep command. 利用dc rep 命令。 Answer: A,B

QUESTION NO: 12

What are two sample roles that are provided with vCenter Server by default? (Choose two.) 在默认情况下，哪两个示例角色提供给vCenter服务器? A. Virtual machine User 虚拟机用户 B. Network Administrator 网络管理员

C. Content Library Administrator 内容库管理员 D. Storage Administrator 存储管理员 Answer: A,B

QUESTION NO: 13

Which three services can be enabled/disabled in the Security Profile for an ESXi host? (Choosethree.)

哪三个服务可以启用/禁用在ESXi主机的安全性配置文件 A. CIM Server CIM服务器 B. Single Sign-On 单点登录

C. Direct Console UI 直接控制UI D. Syslog Server 系统日志服务器 E. vSphere Web Access vSphere 网络访问 Answer: A,C,D QUESTION NO: 14

An administrator would like to use the VMware Certificate Authority (VMCA) as an IntermediateCertificate Authority (CA). The first two steps performed are:

管理员想使用VMware证书颁发机构(VMCA)作为IntermediateCertificate权威(CA)。前两个步骤如下

- Replace the Root Certificate 取代根证书

- Replace Machine Certificates (Intermediate CA) 更换机器证书(中级CA) Which two steps would need to be performed next? (Choose two.)

接下来哪两个步骤要被执行？

A. Replace Solution User Certificates (Intermediate CA) 替代解决方案的用户证书(中级CA) B. Replace the VMware Directory Service Certificate (Intermediate CA) 取代VMware目录服务证书(中级CA)

C. Replace the VMware Directory Service Certificate 取代VMware目录服务证书 D. Replace Solution User Certificates 替代解决方案的用户证书 Answer: A,C

QUESTION NO: 15

Which three options are available for ESXi Certificate Replacement? (Choose three.)

哪三个选项可用于ESXi证书替换？

A. VMware Certificate Authority mode VMware认证授权模式 B. Custom Certificate Authority mode 自定义认证授权模式 C. Thumbprint mode 个性特征模式 D. Hybrid Deployment 混合部署

E. VMware Certificate Endpoint Authority Mode VMware证书终端权威模式 Answer: A,B,C QUESTION NO: 16

Lockdown Mode has been enabled on an ESXi 6.x host and users are restricted from logging into the Direct Console User Interface (DCUI).

ESXi 6.x主机的锁定模式已启用和用户受限制登录到直接控制台用户界面 Which two statements are true given this configuration? (Choose two.) 对于给出的这个配置哪两个语句是正确的？

A. A user granted administrative privileges in the Exception User list can login. 在异常用户列表中一个授予管理权限的用户可以登录

B. A user defined in the DCUI.Access without administrative privileges can login. DCUI访问中定义的一个没有管理权限用户可以登录。 C. A user defined in the ESXi Admins domain group can login.

在ESXi管理域组定义的用户可以登录

D.A user set to the vCenter Administrator role can login. 设置为vCenter管理员角色的用户可以登录 Answer: A,B QUESTION NO: 17

Strict Lockdown Mode has been enabled on an ESXi host. 严格封锁模式在ESXi主机上已启用。 Which action should an administrator perform to allow ESXi Shell or SSH access for users with administrator privileges?

管理员应该执行哪个操作来允许ESXi Shell或SSH访问用户管理员权限 A. Grant the users the administrator role and enable the service. 授予用户管理员角色并启动服务。

B. Add the users to Exception Users and enable the service. 将用户添加到异常用户并支持服务 C. No action can be taken, Strict Lockdown Mode prevents direct access. 不采取任何行动,严格封锁方式防止直接访问。

D. Add the users to vsphere.local and enable the service. 添加用户vsphere本地和启动服务

Answer: B QUESTION NO: 18

A common root user account has been configured for a group of ESXi 6.x hosts.

一个共同的根用户账户被配置在一群ESXi 6.x主机上。

Which two steps should be taken to mitigate security risks associated with this configuration?(Choose two.)

哪两个步骤应采取来减小这个配置的安全风险？

A. Remove the root user account from the ESXi host. 从ESXi主机删除根用户账户。 B. Set a complex password for the root account and limit its use. 根帐户设置复杂的密码,限制其使用。

C. Use ESXi Active Directory capabilities to assign users the administrator role.

使用ESXi Active Directory 功能给用户分配管理员角色。

E. Use Lockdown mode to restrict root account access. 使用锁定模式限制根帐户访问。

Answer: B,C QUESTION NO: 19

An administrator wants to configure an ESXi 6.x host to use Active Directory (AD) to manage users and groups. The AD domain group ESX Admins is planned for administrative access to the host. 管理员使用Active Directory想要配置一个ESXi 6.x主机为管理员用户和群组。Active Directory (AD)域ESX 管理员组计划管理访问主机。

Which two conditions should be considered when planning this configuration? (Choose two.) 在规划这个配置时哪两个条件应考虑？

A. If administrative access for ESX Admins is not required, this setting can be altered. 如果管理访问ESX管理员不是必需的,可以改变该设置。

B. The users in ESX Admins are not restricted by Lockdown Mode. ESX管理员中的用户不受锁定模式限制。

C. An ESXi host provisioned with Auto Deploy cannot store AD credentials. 配置自动部署的ESXi主机不能存储AD凭证。

D. The users in ESX Admins are granted administrative privileges in vCenter Server.

ESX管理员中的用户在vCenter服务器中授予管理权限。 Answer: A,C

QUESTION NO: 20

Which two advanced features should be disabled for virtual machines that are only hosted on a vSphere system? (Choose two.)

只是托管在vSphere系统的虚拟机的哪两个高级特性应该禁用,? A. isolation.tools.unity.push.update.disable B. isolation.tools.ghi.launchmenu.change C. isolation.tools.bbs.disable

D. isolation.tools.hgfsServerSet.enable Answer: A,B

QUESTION NO: 21

To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)

减少攻击向量为一个虚拟机,哪两个设置管理员应该设置为false？ A. ideX:Y.present

B. serial.present C. ideX:Y.enabled D. serial.enabled

本文来源：https://www.bwwdw.com/article/jm0d.html