Free 3V0-21.23: VMware vSphere 8.x Advanced Design Exam Questions and Answers

Last updated: September 19, 2026

Exam code

3V0-21.23

Provider

VMware

Questions in our bank

1000+

Free to read

First 10, with answers

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   An administrator is required to configure several Microsoft Windows virtual machines (VMs) to support Secure Boot for a critical secure application. The following information is provided: •The corporate security policy states that all forms of data encryption must utilize a key provider. •The firmware of each VM is currently set to use Unified Extensible Firmware Interface (UEFI). •Due to the nature of the application running within the VMs, the guest operating system for each VM is currently a minimum of Windows Server 2008 and Windows 7. Which security feature should the administrator implement to meet these requirements?

   • A. vSphere Virtual Machine Encryption
   • B. vSphere Visualization-Based Security
   • C. Virtual Intel Software Guard Extensions (vSGX)
   • D. Virtual Trusted Platform Module (vTPM)
   Reveal Answer

2. Question #2

   Refer to the exhibit. Given the configuration shown in the exhibit, what must the administrator do to delete only the latest version of the template?

   
   • A. Delete App-LibTemplete (3) from the SA-Templates folder.
   • B. In the SA-template folder, rename App-Libtemplate (2) to App-LibTemplate
   • C. Check out AppLibTemplate (3) and delete the template from the SA-Templates folder.
   • D. Revert to APP-LibTemplate (2) and delete App-LibTemplate (3).
   Reveal Answer

3. Question #3

   An administrator is tasked with providing users access to objects within an existing VMware vCenter instance. The vCenter inventory has a single data center with one management vSphere cluster and five workload vSphere clusters. The following requirements must be met for assigning the users access: • Users must only be able to view all of the inventory objects associated with the management vSphere cluster. • Users must be able to edit all of the inventory objects associated with the workload vSphere clusters. The administrator creates a custom role to provide the permissions needed to allow users to edit inventory objects. Which series of steps should the administrator complete to assign the custom role and provide the required level of access to users?

   • A. Apply Global permissions to assign the Read Only role to the root vCenter object.Apply vCenter permissions to assign the custom role to the workload vSphere clusters and enable propagation.
   • B. Apply Global permissions to assign the Read Only role to the root vCenter object and enable propagation. Apply vCenter permissions to assign the custom role to the workload vSphere clusters and enable propagation.
   • C. Apply Global permissions to assign the Read Only role to the root vCenter object. Apply vCenter permissions to assign the custom role to the workload vSphere clusters.
   • D. Apply Global permissions to assign the Read Only role to the root vCenter object and enable propagation. Apply vCenter permissions to assign the custom role to the workload vSphere clusters.
   Reveal Answer

4. Question #4

   An administrator needs to provide encryption for workloads within an existing vSphere cluster. The following requirements must be met: • Workloads should be encrypted at rest. • Encrypted workloads must automatically be encrypted during transit. • Encryption should not require any specific hardware. What should the administrator configure to meet these requirements?

   • A. Encrypted vSphere vMotion
   • B. Unified Extensible Firmware Interface (UEFI) Secure Boot
   • C. Host Encryption
   • D. VM Encryption
   Reveal Answer

5. Question #5

   A vSphere cluster hosts a three-tier application. The cluster has 50% resources available. If a host in the cluster fails, the database server must be online before the application server, and the application server must be online before the Web server. Which feature can be used to meet these requirements?

   • A. Predictive DRS
   • B. vSphere HA Orchestrated Restart
   • C. vSphere HA Restart Priority
   • D. Proactive HA
   Reveal Answer

6. Question #6

   administrator successfully installs VMware ESXi onto the first host of a new vSphere duster but makes no additional configuration changes. When attempting to log into the vSphere Host Client using the Fully Qualified Domain Name (FQDN) of the host, the administrator receives the following error message: ‘’server Not Found –we can’t connect to the server at esxit101.corp.local.’’ • Host FQDN: esxi 101. Corp. local • Management VLAN ID: 10 • DHCP: No • Management IP Address: 172.16.10.101/24 • Management IP Gateway: 172.16.10.1 • Corporate DNS Servers: 172.16.10.5, 172.16.10.6 • DNS Domain: corp.local Which three high level tasks should the administrator complete, at a minimum, in order to successfully log into the the vSphsrs Host Client using the FQDN for the exxi101 and complete the configuration (Choose three.)

   Select 3 answers.

   • A. Ensure a DNS A Record Is created for the VMware ESXI host on the corporate DNS servers,
   • B. Update the VMware ESXI Management Network DNS configuration to use the corporate DNS servers for name, resolution,
   • C. Update the VMware ESXI Management Network IPv4 configuration to use a static a IPv4 address.
   • D. Configure at least two network adapters for the VMware ESXI Management Network.
   • E. Set the value of the VMware ESXI Management Network VLAN ID to 10.
   • F. Disable IPv6 for the VMware ESXI Management Network.
   Reveal Answer

7. Question #7

   Following a merger with another company, an administrator is tasked with configuring an identity source for VMware vCenter so that all vSphere administrators can authenticate using their existing Active Directory accounts. Each company has user accounts in their own Active Directory forests. The following additional information has been provided: • The corporate policy states that only Windows-based machine accounts are allowed in Active Directory. Which action should the administrator take to configure vCenter Single Sign-On (SSO) to meet this requirement?

   • A. Configure SSO to use Active Directory over LDAP as the identity source.
   • B. Configure SSO to use OpenLDAP as the identity source.
   • C. Join the vCenter Server Appliance to the LDAP domain.
   • D. Configure SSO to use Active Directory (Integrated Windows Authentication) as the identity source.
   Reveal Answer

8. Question #8

   An administrator has a requirement to revert a running virtual machine to a previous snapshot after a failed attempt to upgrade an application. When the administrator originally took the snapshot, the following choices in the Take Snapshot dialog were made: • Snapshot the virtual machine's memory = false • Quiesce guest file system = false What will be the result of the administrator selecting the ‘Revert to Latest Snapshot? option to return the virtual machine to a previous snapshot? (Choose two.)

   Select 2 answers.

   • A. The virtual machine will be restored to the parent snapshot
   • B. The virtual machine will be restored in a powered off state
   • C. The virtual machine will be restored to the child snapshot
   • D. The virtual machine will be restored in a powered on state
   • E. The virtual machine will be restored in a suspended state
   Reveal Answer

9. Question #9

   An administrator remotely deploys VMware ESXi using an out of band management connection and now needs to complete the configuration of the management network so that the host is accessible through the vSphere Host Client. The following information has been provided to complete the configuration: •Host FQDN esxi01corp.local •Management VLAN ID: 10 DHCP: No •Management IP Address: 172.16.10.101/24 •Management IP Gateway: 172.16.10.1 . Corporate DNS Servers: 172 16.10.5, 172.16.10..6 •DNS Domain: corp.local In addition, all host configurations must also meet the following requirements: •The management network must use only IPv4 network protocols. •The management network must be fault tolerant Which four high level tasks should the administrator complete in the Direct Console User Interface (DCUI) in order to meet the requirements and successfully log into the vSphere Host Client? (Choose four.)

   Select 4 answers.

   • A. Set the value of the VMware ESXi Management Network VLAN ID to 10
   • B. Configure at least two network adapters for the VMware ESXi Management Network
   • C. Update the VMware ESXi Management Network IPv4 configuration to use a static IPv4 address
   • D. Create a DNS A Record for the VMware ESXi host on the corporate DNS servers
   • E. Disable IPv6 for the VMware ESXi Management Network
   • F. Restore the original Management vSphere Standard Switch.
   • G. Update the VMware ESXi Management Network DNS configuration to use the corporate DNS serversfor ' names resolution
   Reveal Answer

10. Question #10

    An administrator creates a new corporate virtual machine (VM) template every month to include all of the latest patches. The administrator needs to ensure that the new VM template is synchronized from the primary data center site (London) to two secondary data center sites (Tokyo and New York). The administrator is aware that datastore space is limited within the secondary data center sites. The administrator needs to ensure that the VM template is available in the secondary sites the first time a new virtual machine is requested. Which four steps should the administrator take to meet these requirements? (Choose four.)

    Select 4 answers.

    • A. Create a new published content library at the primary site.
    • B. Add the virtual machine template to the subscribed content library.
    • C. Create a new published content library in each secondary site.
    • D. Create a new subscribed content library in each secondary site.
    • E. Configure the subscribed content library to download content when needed.
    • F. Configure each subscribed content library to download content immediately.
    • G. Add the virtual machine template to the published content library.
    Reveal Answer