Question 140
A developer installs virtualization software inside an existing laptop OS for isolated network automation test VMs. The incident evidence is: A lab VM cannot start until the user's laptop operating system and hosted virtualization application launch. Which targeted configuration or design change best addresses the failure?
- Enable supported nested virtualization/CPU assist exposure where required by the hypervisor and hardware.
- Choose a Type 1 bare-metal hypervisor to directly manage physical hardware and hosted VMs.
- Use a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture.
- Create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor.
Explanation
Correct Answer
C:The required correction is: Use a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture. The underlying failure mechanism is: The hypervisor is Type 2 and depends on the underlying host OS lifecycle. Verify success by carrying out this direct test: verify the virtualization process runs on top of the user's installed host OS and creates isolated guest VMs.
Incorrect Answers
A:Enabling supported nested virtualization/CPU assist exposure where required by the hypervisor and hardware would not meet the need for a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture.
B:Choosing a Type 1 bare-metal hypervisor to directly manage physical hardware and hosted VMs would not meet the need for a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture.
D:Creating separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor would not meet the need for a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture.
Question 141
A developer installs virtualization software inside an existing laptop OS for isolated network automation test VMs. The proposed remedy is: Use a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture. Which observation would most directly confirm that remedy works as intended?
- Inspect guest inventory and confirm two separate VM OS instances with independent virtual resources.
- Verify the virtualization process runs on top of the user's installed host OS and creates isolated guest VMs.
- Inspect inner guest startup and exposed CPU virtualization features in the parent VM.
- Inspect the hypervisor deployment and confirm no separate desktop host OS mediates its hardware access.
Explanation
Correct Answer
B:The decisive acceptance observation is: Verify the virtualization process runs on top of the user's installed host OS and creates isolated guest VMs. This tests the working mechanism, while the original incident was: a lab VM cannot start until the user's laptop operating system and hosted virtualization application launch.
Incorrect Answers
A:This test measures a different behavior: Inspect guest inventory and confirm two separate VM OS instances with independent virtual resources. It does not establish the target outcome. For the documented fault, the direct acceptance test is: verify the virtualization process runs on top of the user's installed host OS and creates isolated guest VMs.
C:This test measures a different behavior: Inspect inner guest startup and exposed CPU virtualization features in the parent VM. It does not establish the target outcome. For the documented fault, the direct acceptance test is: verify the virtualization process runs on top of the user's installed host OS and creates isolated guest VMs.
D:This test measures a different behavior: Inspect the hypervisor deployment and confirm no separate desktop host OS mediates its hardware access. It does not establish the target outcome. For the documented fault, the direct acceptance test is: verify the virtualization process runs on top of the user's installed host OS and creates isolated guest VMs.
Question 142
A developer installs virtualization software inside an existing laptop OS for isolated network automation test VMs. During troubleshooting: A lab VM cannot start until the user's laptop operating system and hosted virtualization application launch. Which underlying cause best explains the recorded behavior?
- The outer hypervisor did not expose required virtualization extensions to the nested hypervisor.
- The virtual machine lacks sufficient effective compute/memory resources, not packet transport reachability.
- The hypervisor is Type 2 and depends on the underlying host OS lifecycle.
- The environments are processes in a shared OS, not two isolated guest virtual machines.
Explanation
Correct Answer
C:The actual technical cause is: The hypervisor is Type 2 and depends on the underlying host OS lifecycle. It specifically explains the observation: a lab VM cannot start until the user's laptop operating system and hosted virtualization application launch. The correcting configuration is: use a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture.
Incorrect Answers
A:That diagnosis is supported by a different symptom: Second-level virtual routers report hardware-assisted virtualization unavailable. Here the recorded observation is: a lab VM cannot start until the user's laptop operating system and hosted virtualization application launch. The applicable cause is: the hypervisor is Type 2 and depends on the underlying host OS lifecycle.
B:That diagnosis is supported by a different symptom: Packet-capture samples drop during host memory pressure while physical network links show no errors. Here the recorded observation is: a lab VM cannot start until the user's laptop operating system and hosted virtualization application launch. The applicable cause is: the hypervisor is Type 2 and depends on the underlying host OS lifecycle.
D:That diagnosis is supported by a different symptom: Changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS. Here the recorded observation is: a lab VM cannot start until the user's laptop operating system and hosted virtualization application launch. The applicable cause is: the hypervisor is Type 2 and depends on the underlying host OS lifecycle.
Question 143
A developer installs virtualization software inside an existing laptop OS for isolated network automation test VMs. The initial change is: Use a hosted Type 2 hypervisor appropriate for laptop-based experiments rather than claiming bare-metal architecture. Which continuing control most directly prevents a recurrence of the documented problem: A lab VM cannot start until the user's laptop operating system and hosted virtualization application launch.
- Document the difference between development-only hosted virtualization and production bare-metal hosts.
- Use supported enterprise hypervisor clustering and host update procedures rather than desktop VM assumptions.
- Use VM snapshots and resource quotas without treating snapshots as application-consistent backups.
- Keep nested lab feature support separate from production hardware-virtualization guarantees.
Explanation
Correct Answer
A:The continuing protective control is: Document the difference between development-only hosted virtualization and production bare-metal hosts. This addresses the underlying failure mechanism: the hypervisor is Type 2 and depends on the underlying host OS lifecycle. The corresponding operational check is: verify the virtualization process runs on top of the user's installed host OS and creates isolated guest VMs.
Incorrect Answers
B:That control reduces a separate risk: The solution is a hosted Type 2 hypervisor dependent on the general-purpose host OS. For the described design, the recurring risk arises from: the hypervisor is Type 2 and depends on the underlying host OS lifecycle. The specific required safeguard is: document the difference between development-only hosted virtualization and production bare-metal hosts.
C:That control reduces a separate risk: The environments are processes in a shared OS, not two isolated guest virtual machines. For the described design, the recurring risk arises from: the hypervisor is Type 2 and depends on the underlying host OS lifecycle. The specific required safeguard is: document the difference between development-only hosted virtualization and production bare-metal hosts.
D:That control reduces a separate risk: The outer hypervisor did not expose required virtualization extensions to the nested hypervisor. For the described design, the recurring risk arises from: the hypervisor is Type 2 and depends on the underlying host OS lifecycle. The specific required safeguard is: document the difference between development-only hosted virtualization and production bare-metal hosts.
Question 144
A router lab needs two isolated Linux virtual machines sharing one physical CPU and NIC without dual-booting the server. The incident evidence is: Changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS. Which targeted configuration or design change best addresses the failure?
- Attach the vNICs to an appropriate virtual switch/port group on the host.
- Create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor.
- Reserve or allocate appropriate VM memory and host capacity instead of changing remote routing tables.
- Enable supported nested virtualization/CPU assist exposure where required by the hypervisor and hardware.
Explanation
Correct Answer
B:The required correction is: Create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor. The underlying failure mechanism is: The environments are processes in a shared OS, not two isolated guest virtual machines. Verify success by carrying out this direct test: inspect guest inventory and confirm two separate VM OS instances with independent virtual resources.
Incorrect Answers
A:Attaching the vNICs to an appropriate virtual switch/port group on the host would not create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor.
C:Reserve or allocate appropriate VM memory and host capacity would not create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor.
D:Enabling supported nested virtualization/CPU assist exposure where required by the hypervisor and hardware would not create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor.
Question 145
A router lab needs two isolated Linux virtual machines sharing one physical CPU and NIC without dual-booting the server. The proposed remedy is: Create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor. Which observation would most directly confirm that remedy works as intended?
- Inspect guest inventory and confirm two separate VM OS instances with independent virtual resources.
- Capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests.
- Inspect inner guest startup and exposed CPU virtualization features in the parent VM.
- Compare guest memory pressure and host swap/balloon activity before and after capacity adjustment.
Explanation
Correct Answer
A:The decisive acceptance observation is: Inspect guest inventory and confirm two separate VM OS instances with independent virtual resources. This tests the working mechanism, while the original incident was: changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS.
Incorrect Answers
B:This test measures a different behavior: Capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect guest inventory and confirm two separate VM OS instances with independent virtual resources.
C:This test measures a different behavior: Inspect inner guest startup and exposed CPU virtualization features in the parent VM. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect guest inventory and confirm two separate VM OS instances with independent virtual resources.
D:This test measures a different behavior: Compare guest memory pressure and host swap/balloon activity before and after capacity adjustment. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect guest inventory and confirm two separate VM OS instances with independent virtual resources.
Question 146
A router lab needs two isolated Linux virtual machines sharing one physical CPU and NIC without dual-booting the server. During troubleshooting: Changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS. Which underlying cause best explains the recorded behavior?
- The environments are processes in a shared OS, not two isolated guest virtual machines.
- Their virtual NICs attach to different isolated virtual switches or port groups.
- The virtual machine lacks sufficient effective compute/memory resources, not packet transport reachability.
- The outer hypervisor did not expose required virtualization extensions to the nested hypervisor.
Explanation
Correct Answer
A:The actual technical cause is: The environments are processes in a shared OS, not two isolated guest virtual machines. It specifically explains the observation: changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS. The correcting configuration is: create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor.
Incorrect Answers
B:That diagnosis is supported by a different symptom: Two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host. Here the recorded observation is: changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS. The applicable cause is: the environments are processes in a shared OS, not two isolated guest virtual machines.
C:That diagnosis is supported by a different symptom: Packet-capture samples drop during host memory pressure while physical network links show no errors. Here the recorded observation is: changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS. The applicable cause is: the environments are processes in a shared OS, not two isolated guest virtual machines.
D:That diagnosis is supported by a different symptom: Second-level virtual routers report hardware-assisted virtualization unavailable. Here the recorded observation is: changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS. The applicable cause is: the environments are processes in a shared OS, not two isolated guest virtual machines.
Question 147
A router lab needs two isolated Linux virtual machines sharing one physical CPU and NIC without dual-booting the server. The initial change is: Create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor. Which continuing control most directly prevents a recurrence of the documented problem: Changes to one guest kernel unexpectedly take the other lab workload down because both tests run in one OS.
- Verify virtual-switch port-group membership and VLAN isolation after VM migrations.
- Keep nested lab feature support separate from production hardware-virtualization guarantees.
- Use VM snapshots and resource quotas without treating snapshots as application-consistent backups.
- Set workload resource reservations and monitor oversubscription under peak tests.
Explanation
Correct Answer
C:The continuing protective control is: Use VM snapshots and resource quotas without treating snapshots as application-consistent backups. This addresses the underlying failure mechanism: the environments are processes in a shared OS, not two isolated guest virtual machines. The corresponding operational check is: inspect guest inventory and confirm two separate VM OS instances with independent virtual resources.
Incorrect Answers
A:That control reduces a separate risk: Their virtual NICs attach to different isolated virtual switches or port groups. For the described design, the recurring risk arises from: the environments are processes in a shared OS, not two isolated guest virtual machines. The specific required safeguard is: use VM snapshots and resource quotas without treating snapshots as application-consistent backups.
B:That control reduces a separate risk: The outer hypervisor did not expose required virtualization extensions to the nested hypervisor. For the described design, the recurring risk arises from: the environments are processes in a shared OS, not two isolated guest virtual machines. The specific required safeguard is: use VM snapshots and resource quotas without treating snapshots as application-consistent backups.
D:That control reduces a separate risk: The virtual machine lacks sufficient effective compute/memory resources, not packet transport reachability. For the described design, the recurring risk arises from: the environments are processes in a shared OS, not two isolated guest virtual machines. The specific required safeguard is: use VM snapshots and resource quotas without treating snapshots as application-consistent backups.
Question 148
Two application VMs on the same host should exchange Ethernet frames without forcing traffic out to an external physical switch. The incident evidence is: Two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host. Which targeted configuration or design change best addresses the failure?
- Create separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor.
- Align virtual port-group VLAN tagging and physical uplink 802.1Q trunk permitted VLANs.
- Attach the vNICs to an appropriate virtual switch/port group on the host.
- Enable supported virtual-switch port security or forged-transmit rejection for the guest port group.
Explanation
Correct Answer
C:The required correction is: Attach the vNICs to an appropriate virtual switch/port group on the host. The underlying failure mechanism is: Their virtual NICs attach to different isolated virtual switches or port groups. Verify success by carrying out this direct test: capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests.
Incorrect Answers
A:Creating separate guest VMs with allocated vCPUs, memory and virtual NICs managed by the hypervisor would not attach the vNICs to an appropriate virtual switch/port group on the host.
B:Aligning virtual port-group VLAN tagging and physical uplink 802.1Q trunk permitted VLANs would not attach the vNICs to an appropriate virtual switch/port group on the host.
D:Enabling supported virtual-switch port security or forged-transmit rejection for the guest port group would not attach the vNICs to an appropriate virtual switch/port group on the host.
Question 149
Two application VMs on the same host should exchange Ethernet frames without forcing traffic out to an external physical switch. The proposed remedy is: Attach the vNICs to an appropriate virtual switch/port group on the host. Which observation would most directly confirm that remedy works as intended?
- Validate guest connectivity and port-group assignment after a test live migration.
- Capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests.
- Verify tagged VLAN traffic across virtual and physical switch boundaries.
- Transmit a controlled spoofed-source frame and confirm the virtual switch rejects it while legitimate frames pass.
Explanation
Correct Answer
B:The decisive acceptance observation is: Capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests. This tests the working mechanism, while the original incident was: two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host.
Incorrect Answers
A:This test measures a different behavior: Validate guest connectivity and port-group assignment after a test live migration. It does not establish the target outcome. For the documented fault, the direct acceptance test is: capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests.
C:This test measures a different behavior: Verify tagged VLAN traffic across virtual and physical switch boundaries. It does not establish the target outcome. For the documented fault, the direct acceptance test is: capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests.
D:This test measures a different behavior: Transmit a controlled spoofed-source frame and confirm the virtual switch rejects it while legitimate frames pass. It does not establish the target outcome. For the documented fault, the direct acceptance test is: capture east-west frames on the virtual switch and verify no physical-uplink transit is required for local guests.
Question 150
Two application VMs on the same host should exchange Ethernet frames without forcing traffic out to an external physical switch. During troubleshooting: Two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host. Which underlying cause best explains the recorded behavior?
- Virtual networking is not consistently provisioned across destination hosts.
- Their virtual NICs attach to different isolated virtual switches or port groups.
- The virtual-switch security policy permits forged source-MAC transmissions.
- The physical uplink trunk or virtual port-group VLAN mapping excludes VLAN 120.
Explanation
Correct Answer
B:The actual technical cause is: Their virtual NICs attach to different isolated virtual switches or port groups. It specifically explains the observation: two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host. The correcting configuration is: attach the vNICs to an appropriate virtual switch/port group on the host.
Incorrect Answers
A:That diagnosis is supported by a different symptom: The migrated VM lands on a host with no matching port group and loses network connectivity. Here the recorded observation is: two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host. The applicable cause is: their virtual NICs attach to different isolated virtual switches or port groups.
C:That diagnosis is supported by a different symptom: A compromised VM forges another tenant's MAC and sends frames through its vNIC unrestricted. Here the recorded observation is: two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host. The applicable cause is: their virtual NICs attach to different isolated virtual switches or port groups.
D:That diagnosis is supported by a different symptom: VMs on VLAN 120 communicate internally but cannot reach external devices on VLAN 120. Here the recorded observation is: two guests in separate isolated virtual networks cannot ARP for one another despite using the same physical host. The applicable cause is: their virtual NICs attach to different isolated virtual switches or port groups.
Implementing Cisco Enterprise Network Core Technologies (ENCOR) (350-401) Practice Tests