Practice Exam: VMCE+ v13

Question bank: 200 · timed mock exam: 150 min · indicative pass mark 72%

Official exam page on the vendor's site (opens in a new tab)

Compare: VMCE vs NCP-MCI

  • Data protection and maintenance 54 questions
  • Deployment, configuration and security 42 questions
  • Restore and verification 30 questions
  • Fundamentals, strategy and design 28 questions
  • Analytics, monitoring and observability 26 questions
  • Orchestration and disaster recovery 20 questions
Study mode (free) Exam mode (subscribers)

Free: 25 questions in study mode, all domains, no account.

Subscription: the 200 questions of this certification, the timed exam mode, and all other certifications too.

Subscribe · €9.99 / month

Secure card payment (Stripe) · No commitment · Cancel online

How to prepare for VMCE+ v13 with InfraPrep

The 200 questions cover 6 domains: Data protection and maintenance, Deployment, configuration and security, Restore and verification, Fundamentals, strategy and design, Analytics, monitoring and observability, Orchestration and disaster recovery. 25 of them are free, without an account.

Study mode

Answer at your pace: each answer is corrected straight away, with an explanation and the link to the documentation it relies on.

Exam mode

A timed exam of 150 minutes, with a question map to flag and come back to questions before you submit.

Results by domain

Your score is broken down by domain, so you know what to review first.

Original questions

Every question is written from the public documentation, never copied from the exam. You can contest an answer from study mode.

10 free sample questions

Question 1 Fundamentals, strategy and design

A retailer runs its production VMs on a VMware vSAN cluster. The backup team wants LAN-free data retrieval for the nightly backup jobs and asks you where to place the VMware backup proxy and which transport mode to plan for.

  1. A physical proxy on the 1 Gb Ethernet management network, using Network mode
  2. A proxy VM on an ESXi host outside the vSAN cluster, using Virtual appliance mode
  3. A proxy VM running on an ESXi host connected to the vSAN storage, using Virtual appliance mode
  4. A physical proxy with an iSCSI connection to the vSAN datastore, using Direct storage access
Show the answer and the explanation

Correct answer: C

For vSAN, the documentation recommends a proxy VM on an ESXi host connected to the vSAN storage device, which gives Virtual appliance (HotAdd) mode and LAN-free retrieval.

Source: official documentation

Question 2 Deployment, configuration and security

To save disk space, an administrator wants a VM backup job that targets a new hardened repository to use forever forward incremental, with no periodic full backup. Which backup method should the job use instead?

  1. Reverse incremental, which keeps only one full backup file
  2. Forward incremental, with active full or synthetic full backups enabled
  3. Forever forward incremental, with an immutability period of 7 days
  4. Forever forward incremental, with the "Defragment and compact" option enabled
Show the answer and the explanation

Correct answer: B

On a hardened repository, only forward incremental with active full or synthetic full is allowed. Immutable files cannot be merged before the immutability period ends, so methods that merge or rewrite files cannot be selected.

Source: official documentation

Question 3 Fundamentals, strategy and design

A company deployed Veeam Software Appliance from the ISO on a physical server that has a Fibre Channel HBA zoned to the production SAN. The appliance still holds the default VMware backup proxy role. Jobs run, but always in Network mode, and the customer wants Direct SAN access for its VMware VMs. What is the best design change?

  1. Install a multipath driver on the appliance and rescan the SAN LUNs from the console
  2. Enable Direct SAN access for the appliance in the Veeam Host Management console
  3. Switch the default proxy on the appliance to Virtual appliance (HotAdd) mode
  4. Add a separate VMware backup proxy that has FC access to the SAN
Show the answer and the explanation

Correct answer: D

Veeam Software Appliance supports only the Network and Virtual Appliance (HotAdd) transport modes for VMware. Direct storage access needs another proxy: the transport mode table marks Direct SAN access as available when a Windows server, a Linux server or a Veeam Infrastructure Appliance is the proxy.

Source: official documentation

Question 4 Deployment, configuration and security

A company wants to reuse the capacity of its enterprise NAS for a hardened repository. The plan is to build a Linux server, mount an NFS export from the NAS on it, and add the server as a hardened repository. What is the problem with this plan?

  1. The NFS volume must be formatted with ReFS so that block cloning works
  2. The NFS export must use NFS v4.1 with Kerberos before it can be made immutable
  3. The Linux server must be joined to the Active Directory domain of the NAS
  4. A hardened repository needs block storage, so a Linux machine with a mounted NFS volume cannot be used
Show the answer and the explanation

Correct answer: D

The hardened repository requires block storage. NFS shares, and Linux machines with a mounted NFS volume, are explicitly excluded.

Source: official documentation

Question 5 Fundamentals, strategy and design

You add a manually installed Rocky Linux server as a VMware backup proxy. A firewall sits between it and a Windows-based backup server. Apart from the Veeam Data Mover ports, which ports must the firewall allow from the backup server to this Linux proxy?

  1. TCP 10443 and TCP 443
  2. TCP 445 and TCP 6160
  3. TCP 443 and TCP 902
  4. TCP 22 and TCP 6160
Show the answer and the explanation

Correct answer: D

The ports table lists TCP 22 and TCP 6160 from the backup server to a Linux backup proxy.

Source: official documentation

Question 6 Deployment, configuration and security

A hardened repository has an immutability period of 14 days, and it has not been changed. An image-level VM backup job (forward incremental, no GFS retention, no log backups) created the full backup of its active chain on March 2, then one incremental each day through March 6. Every session completed successfully, and no session has run since. Until when are the image-level backup files of this active chain immutable?

  1. All files until March 13, which is the last restore point plus 7 days
  2. The full backup until March 16, and each incremental until 14 days after its own creation date
  3. All files until the next active full backup starts a new chain
  4. All files, full backup included, until March 20
Show the answer and the explanation

Correct answer: D

The immutability period is counted from the creation of the last restore point of the active chain (March 6), and it is extended to every file of the chain: March 6 + 14 days = March 20.

Source: official documentation

Question 7 Fundamentals, strategy and design

A VMware backup proxy in Network mode sits in a dedicated backup VLAN. The firewall already allows TCP 443 from the proxy to vCenter Server, yet jobs fail when the proxy starts reading virtual disks from the ESXi hosts. The environment is on-premises vSphere. Which port must be opened from the proxy to the ESXi hosts?

  1. TCP 10443
  2. TCP 902
  3. TCP 6162
  4. TCP 22
Show the answer and the explanation

Correct answer: B

The ports table lists TCP 902 from the backup proxy to the ESXi server; it is only waived for VMware Cloud on AWS.

Source: official documentation

Question 8 Deployment, configuration and security

A standalone Linux server was added to the backup infrastructure as a regular Linux backup repository using its IP address, 192.168.10.20. It holds no mount server role and has none of the blocking optional packages installed. You now want to upgrade it to a hardened repository to get immutability, and you will add the same server again as a hardened repository. How must you identify the server when you add it as a hardened repository?

  1. With a second IP address configured on the same Linux server
  2. With the same IP address, 192.168.10.20, so that the existing backups are matched to the same server
  3. With a hostname that resolves to 192.168.10.20 in DNS or in the local hosts file of the backup server
  4. With a hostname, after first removing any DNS or hosts file record that points to 192.168.10.20, so that the backup server does not see the server twice
Show the answer and the explanation

Correct answer: C

When you upgrade a Linux repository to a hardened repository, you cannot reuse the value used to add the Linux repository. If an IP address was used, you must use a hostname, and that hostname must resolve to the same IP address in DNS or in the local hosts file.

Source: official documentation

Question 9 Fundamentals, strategy and design

A payment processor runs a mission-critical VMware VM. The business states that losing more than a few seconds of transactions is unacceptable. Which Veeam Backup & Replication technology should you propose for this VM?

  1. A snapshot-based replication job scheduled every hour
  2. Continuous data protection (CDP)
  3. A backup job every 15 minutes to a hardened repository
  4. A backup copy job with an RPO warning of 1 hour
Show the answer and the explanation

Correct answer: B

The documentation recommends replication for an RPO of hours and CDP when an RPO of seconds is required.

Source: official documentation

Question 10 Deployment, configuration and security

A small branch has one physical server that already acts as a hardened repository, and it has a Fibre Channel HBA connected to the SAN. The branch manager asks whether this server could also be the VMware backup proxy. What does the documentation say?

  1. It can be a VMware backup proxy in Virtual appliance (HotAdd) mode only
  2. It can be a VMware backup proxy with Direct SAN access, because it has an FC HBA
  3. It cannot be a VMware backup proxy: for security reasons, a hardened repository holds no other role, without exception
  4. It can be a VMware backup proxy, but only in Network mode (NBD)
Show the answer and the explanation

Correct answer: D

The VMware backup proxy role can be assigned to a hardened repository, but only the Network mode (NBD) is supported. The documentation still recommends putting this role on another server when possible, because of VDDK vulnerabilities.

Source: official documentation

Frequently asked questions

Are there free questions, and do I need an account?

Yes. 25 questions of this certification are free in study mode, across all its domains, without a subscription and without registration. The account is created when you subscribe, at checkout.

How does the subscription work, and can I cancel?

One monthly subscription covers all certifications and the timed practice exams. There is no minimum period. You cancel online, at any time, with the "Cancel your contract" function in My account; cancellation takes effect at the end of the month already paid, and no further payment is taken.

Where do the questions come from?

Every question is original, written from the vendor's public documentation. Each answer comes with an explanation and a link to the documentation page it relies on. InfraPrep is not affiliated with the vendors, and certification names belong to their owners.

In which language are the questions?

The questions are written in English, also on the French version of the site.

Is the catalog updated?

Yes, the catalog changes over time: new certifications and new questions are added.