VMware Cloud Foundation Specialist 5V0-31.22

Q41. What do VM Storage Policies match to when using vSphere with Tanzu?

A. Kubernetes storage classes in the Supervisor Cluster
B. Kubernetes datastores in a namespace
C. Kubernetes storage classes in a namespace
D. Kubernetes datastores in the Supervisor Cluster

Hint answer: C

Q42. Which two switches can be used to perform log collection using the SoS tool? (Choose two.)

A. –psc-logs
B. –vcenter-logs
C. –nsxt-logs
D. –wcp-logs
E. –sddc-logs

Hint answer: A D

Q43. During a design workshop, an architect discussed strategies to backup and restore the SDDC Manager in a VMware Cloud Foundation environment. The customer asks for more clarification about the functionality and need for an external SFTP server. Which two statements should the administrator share with the customer? (Choose two.)

A. It stores backup for vSAN encryption keys.
B. It provides better protection and decouples NSX-T backup from the SDDC Manager.
C. It is a prerequisite for restoring Cloud Builder file-based backups.
D. It is a prerequisite for restoring SDDC Manager file-based backups.
E. It stores backup for vRealize Suite Lifecycle Manager.

Hint answer: B D

Q44. What is a valid way to replace the expiring evaluation Tanzu license for a vSphere with Tanzu cluster?

A. 1. Connect to the SDDC Manager.
2. In the navigation pane, click Solutions.
3. Find the cluster, click “Update Workload Management license”, and select the appropriate license.
B. 1. Connect to the SDDC Manager.
2. Go to Administration > Licensing.
3. Add the license key for vSphere with Tanzu.
C. 1. Connect to the vCenter Web Console.
2. Go to Menu > Home > Administration > Licenses
3. Click “Add New Licenses”, and enter the license key.
D. 1. Connect to the vCenter Web Console.
2. Go to “Hosts and Clusters”, and right click on the cluster that supports namespace creation.
3. Click “Assign license”, and select the appropriate license.

Hint answer: A

Q45. An architect is designing networking for a developer-ready infrastructure on VMware Cloud Foundation. Which use case would require the architect to consider a CIDR range larger than /27 for Egress?

A. More than 30 services are required
B. More than 30 pods are required
C. More than 30 load balancers are required
D. More than 30 namespaces are required

Hint answer: D

Q46. Which two components are required when planning for stretched clusters in a VMware Cloud Foundation environment? (Choose two.)

A. There must be separate Network Pools for each Availability Zone.
B. A third site is required for a witness host.
C. The host overlay network can use static IP addresses.
D. Use shared vSphere vMotion, vSAN, and host overlay networks.
E. The round-trip time (RTT) between sites must be ≤ 15 milliseconds.

Hint answer: A B

Q47. An architect is designing networking for a developer-ready infrastructure on VMware Cloud Foundation. During the discussion with the network team, a question comes up about the use of a routable CIDR range. Which item uses this type of range?

A. vSphere Pod
B. Ingress
C. Kubernetes services
D. ClusterIP

Hint answer: B

Q48. A developer is deploying pods with Persistent Volumes (PV) on vSphere with Tanzu. Which component determines the datastore that the PV will be placed on?

A. CNS-CSI
B. Hostd
C. SPBM
D. Spherelet

Hint answer: C

Q49. Which functionality is provided by NSX Global Manager?

A. Global Managers move control plane to a central place.
B. Configurations requiring protection against site failures must be configured in the Global Manager.
C. Global configurations are sent to all Local Managers.
D. Global Managers move all existing Local Manager configuration to the Global Manager.

Hint answer: C

Q50. Which tool can be used to add a new vSphere Cluster to an existing VI Workload Domain?

A. vSphere Client
B. VMware Imaging Appliance
C. SDDC Manager
D. Cloud Builder

Hint answer: C

Q51. An administrator is creating a VMFS on FC-based VI Workload Domain. Which two licenses must already be present in the SDDC Manager inventory? (Choose two.)

A. VMware NSX-T Data Center
B. VMware vSphere
C. VMware vSAN
D. VMware vRealize Suite Lifecycle Manager
E. VMware Workspace ONE Access

Hint answer: A B

Q52. What limits can an administrator configure on a vSphere Namespace for a VMware Cloud Foundation Developer-Ready Workload Domain?

A. Secrets
B. Tanzu Kubernetes Cluster worker nodes
C. Tanzu Kubernetes Cluster master nodes
D. Persistent Volumes

Hint answer: A

Q53. An architect needs to enable the workload management for a VCF VI workload domain and plans on using the minimum requirement for deploying a highly available NSX edge cluster. What is the minimum requirement for this deployment?

A. A cluster of two small NSX edge nodes
B. A cluster of three large NSX edge node
C. A cluster of two large NSX edge nodes
D. A cluster of one large NSX edge node

Hint answer: C

Q54. An administrator is tasked with deploying a new VI Workload Domain with VMFS on FC storage.

Which type of network pool must the hosts be associated with while adding them to VCF inventory?

A. NFS only network pool
B. Network pool with vMotion and iSCSI
C. vMotion only network pool
D. iSCSI only network pool

Hint answer: C

Q55. Which three requirements are needed to provision an additional cluster within VMware Cloud Foundation? (Choose three.)

A. Minimum of three hosts using vSAN as a principal storage
B. Valid license specified in SDDC Manager
C. All hosts in maintenance mode with no patches applied
D. Minimum of three hosts using NFS, VMFS on FC, or vVols as a principal storage
E. A new vCenter license to accommodate the additional cluster
F. Minimum of five hosts for any type of principal storage

Hint answer: A B D

Q56. An administrator successfully finished restoring a SDDC Manager and now needs to verify its operation. Which tool should the administrator use for this verification?

A. Ruby vSphere Console VCF check tool
B. SDDC Manager GUI restore health tool
C. vRealize Operation plugin tool for VCF
D. Support and Serviceability (SoS) tool

Hint answer: D

Q57. An architect is designing overlay networking and routing for two VMware Cloud Foundation VI workload domains.
The following requirements must be met in the design:
NSX-T Bare Metal Edge nodes are required to satisfy a requirement for extremely low latency.
The costs must be kept to a minimum.
Which design meets these customer requirements?

A. Create separate NSX-T Manager clusters for each workload domain, and then create separate NSX-T Bare Metal Edge clusters for each workload domain.
B. Place the Bare Metal Edge nodes in the same rack as the management domain hosts, and then add the NSX-T Bare Metal Edge cluster to the management domain NSX-T Manager cluster.
C. Share an NSX-T Manager cluster between both workload domains, and then add the NSX-T Bare Metal Edge cluster to the shared NSX-T Manager cluster.
D. Create separate NSX-T Manager clusters for each workload domain, and then create a single NSX-T Bare Metal Edge cluster to be shared between NSX-T Manager clusters.

Hint answer: A

Q58. A VCF architect collected the following requirements when designing the expansion of a new VI Workload Domain with twenty-four vSAN Ready nodes, each with a dual-port 25Gbps network interface card:
Provide scalable high-performance networking with layer-3 termination at top-of-rack
Protect workloads from switch/NIC/rack failure
Provide isolation for DMZ workloads
Provide at-least 25Gbps dedicated bandwidth to backup traffic
Easily accept workloads on traditional VLAN-backed networks

Fully-supported by VMware –
Which three design considerations meet all of these requirements? (Choose three.)

A. Core Aggregation network topology
B. Spine and Leaf network topology with layer-3 at top of rack
C. Two-node Edge Cluster with ECMP
D. Stretched Clustering
E. Spine and Leaf network topology with layer-3 at Spine
F. Two-node Edge Cluster with BFD

Hint answer: B C F

Q59. What is a supported function of the vSphere Lifecycle Manager (LCM) in VMware Cloud Foundation (VCF)?

A. Upgrade SDDC Manager
B. Downgrade VM hardware version
C. Check hardware compatibility of hosts and clusters
D. Upgrade vCenter Server

Hint answer: C

Q60. An administrator is planning to deploy an edge cluster in a VMware Cloud Foundation environment. Which three NSX components are automated during this deployment? (Choose three.)

A. Tier-0 VRF gateway configuration
B. Edge VM deployment
C. Segments for VM workloads
D. Edge Uplink Profile configuration
E. Tier-0 and Tier-1 gateway configuration
F. Transport Node Profile configuration

Hint answer: B D E

Q61. A systems administrator is tasked to deploy a management domain as part of the VMware Cloud Foundation Bring-Up process and notes the VCF components which will require at least four vCPUs. Which VCF components have this requirement as default?

A. NSX-T Manager and SDDC Manager
B. SDDC Manager and vCenter Server
C. NSX-Edge Node and NSX-T Manager
D. vCenter Server and NSX-T Manager

Hint answer: B

Q62. An administrator is tasked with replacing the default, self-signed certificates in a VMware Cloud Foundation environment. The administrator begins by completing the three tasks which must be executed to prepare a Microsoft Active Directory Certificate Services authority to integrate with VMware Cloud Foundation. Which three tasks were executed by the administrator? (Choose three.)

A. Join the vCenter server instances to the Active Directory domain.
B. Modify the “Web Server” template to include User Authentication.
C. Enable Active Directory authentication for Certificate Services.
D. Assign the “Issue and Manage Certificates” permission to the SDDC Manager service account.
E. Create a new template that supports Server Authentication and proof of origin.
F. Enable Basic authentication for Certificate Services.

Hint answer: D E F

Q63. An administrator is creating a VI Workload Domain where NSX-T must be configured to allow for dynamic routing. Which pre-requisites are required?

A. Two MPLS peers on ToR switches with an interface IP and an iBGP Autonomous System Number
B. Two BGP peers on ToR switches with an interface IP and BGP Autonomous System Number
C. Separate VLANs and subnets available for NSX-T Host Overlay TEP VLAN and NSX-T Edge Overlay TEP VLAN
D. Reserved BGP Autonomous System Number to use for the NSX-T Edge cluster’s Tier-0 gateway

Hint answer: B

Q64. Which two steps must be performed to create a vSphere with Tanzu namespace? (Choose two.)

A. Deploy a vSphere Cluster
B. Enable Harbor Image Registry
C. Use a DNS-compliant name
D. Assign permissions
E. Define resource limits

Hint answer: A C

Q65. Which order of operations deletes a VI Workload Domain from a VMware Cloud Foundation environment?

A. 1. Migrate VMs.
2. Remove NSX Edge clusters.
3. Remove the Workload Domain.
4. Decommission hosts.
5. Delete the network pool.
B. 1. Migrate VMs.
2. Remove NSX Edge clusters.
3. Remove the Workload Domain.
4. Delete the network pool.
5. Decommission hosts.
C. 1. Migrate VMs.
2. Remove the Workload Domain.
3. Decommission hosts.
4. Delete the network pool.
D. 1. Migrate VMs.
2. Decommission hosts.
3. Remove the Workload Domain.
4. Delete the network pool.

Hint answer: A

Q66. An administrator needs to upgrade the current VMware Cloud Foundation (VCF) environment from version 4.1 to 4.3, knowing that the environment has direct access to the internet. Which steps should be performed to download the online bundles?

A. 1. SDDC Manager checks depot.vmware.com.
2. The administrator accesses SDDC Manager.
3. The administrator downloads the bundles from SDDC Manager.
B. 1. SDDC Manager checks depot.vmware.com.
2. The administrator accesses vSphere Lifecycle Manager.
3. The administrator downloads the bundles from vSphere Lifecycle Manager.
C. 1. vSphere Lifecycle Manager checks depot.vmware.com.
2. The administrator accesses vSphere Lifecycle Manager.
3. The administrator downloads the bundles from vSphere Lifecycle Manager.
D. 1. vSphere Lifecycle Manager checks depot.vmware.com.
2. The administrator accesses SDDC Manager.
3. The administrator downloads the bundles from SDDC Manager.

Hint answer: A

Q67. A systems administrator is tasked with deploying a new VI Workload Domain cluster to support the HR system. A new storage policy must be created to satisfy the following requirements:

• Support two host failures
• Use the least amount of hosts
• Minimize storage capacity usage

Which configuration will satisfy these requirements?

A. 6 Hosts, FTT=2, RAID 1
B. 6 Hosts, FTT=2, RAID 5/6
C. 5 Hosts, FTT=2, RAID 5/6
D. 5 Hosts, FTT=2, RAID 1

Hint answer: B

Q68. An administrator wants to delete a VMware Cloud Foundation Workload Domain and re-use the attached ESXi hosts by returning them to the list of unassigned hosts in the SDDC Manager inventory. Which action needs to be taken to complete this task?

A. ESXi hosts need to be re-imaged and updated.
B. ESXi hosts need to be decommissioned and re-imaged.
C. ESXi hosts need to be re-imaged and rejoined.
D. ESXi hosts need to be decommissioned and updated.

Hint answer: B

Q69. A VMware architect has been tasked to deploy a VCF environment for a large federal organization. Security, availability, and redundancy are key requirements for the deployment. The administrator has been asked to keep the cost down as well. A standard deployment of VCF is being planned for the headquarters. The first VI domain is estimated to have 5,000 VMs.

Which vCenter Server appliance sizing should the architect use for the VI workload domain?

A. Large vCenter Server appliance with default storage size
B. Small vCenter Server appliance with X-Large storage size
C. Medium vCenter Server appliance with large storage size
D. Medium vCenter Server appliance with default storage size

Hint answer: A

Q70. An administrator has registered an external identity source in a consolidated architecture and would like to make sure that any subsequent workload domains can be accessed using the same identity sources. How can this goal be achieved with VMware Cloud Foundation?

A. By configuring LDAPS as an identity source
B. By configuring IWA as an identity source
C. By replicating vSphere SSO configuration
D. By keeping the pre-configured defaults

Hint answer: C

Q71. During a VCF design workshop, the architect gathered the following customer requirements:
There must be two environments: PROD and DEV.
PROD and DEV should be administratively separated.
PROD will use two different hardware server types, and DEV will only use one hardware server type.
The VCF infrastructure design should be flexible and scalable as much as possible.
How many NSX local managers in total will be provisioned after deploying the full VCF infrastructure?

A. 9
B. 6
C. 3
D. 12

Hint answer: A

Q72. Which two features are supported when implementing NSX Federation? (Choose two.)

A. NAT operations
B. Identity Firewall
C. DHCP dynamic binding
D. Load Balancer
E. DHCP

Hint answer: A E

Q73. An administrator wants to scale an existing VMware Cloud Foundation (VCF) environment by adding a new VI Workload Domain. Which two storage options can be used for the new VI Workload Domain? (Choose two.)

A. iSCSI principal storage with SMB supplemental storage
B. vSAN principal storage with SMB supplemental storage
C. vSAN principal storage with VMFS on FC supplemental storage
D. vSAN principal storage with NFS supplemental storage
E. vVOL principal storage with SCSI supplemental storage

Hint answer: C D

Q74. Which two options can be used to create a new VMware Cloud Foundation VI workload domain? (Choose two.)

A. REST API
B. SDDC Manager UI
C. Cloud Builder UI
D. PowerCLI
E. vCenter UI

Hint answer: A B

Q75. Which three components are required to deploy a stretched cluster in a VMware Cloud Foundation environment? (Choose three.)

A. DHCP on the NSX Edge overlay network
B. vSAN, host overlay and vMotion network stretched across both sites
C. One witness host per site
D. One witness host per vSAN stretched cluster
E. vSAN, host overlay and vMotion network per data site
F. DHCP on the host overlay network

Hint answer: D E F

Q76. A customer is leveraging vRA to provision workloads to a consolidated VCF domain cluster. Due to the increased demand of customer workloads, more capacity is now needed. The architect provides information on scaling the customer’s consolidated design. Which statement accurately characterizes this design?

A. Migrating to a standard design will require redeploying the infrastructure from scratch.
B. Migrating to a standard design should be considered after reaching 8 or 10 nodes in the consolidated design.
C. A VMware GSS team must be involved during the process of migrating to a consolidated design.
D. A consolidated design will not support the addition of multiple clusters.

Hint answer: B

Q77. A systems administrator is implementing stretched clusters in an environment with multiple Availability Zones (AZs). Which statement accurately describes this design?

A. The Layer 3 gateway for the workload domain and Edge overlay networks must be highly available across the AZs.
B. Layer 3 networks must be stretched between the AZs by the physical infrastructure.
C. If VLAN is stretched between AZ1 and AZ2, the Layer 3 network must also be stretched between the two AZs.
D. For VLANs that are stretched between AZs, configure load balancing in the Layer 3 gateway between AZs.

Hint answer: C

Q78. Which two use cases would require the creation of multiple clusters in a workload domain? (Choose two.)

A. Different virtual machine workload types
B. Different application licensing models
C. Bare-Metal vs. virtual workloads
D. Different host CPU types
E. Different memory requirements

Hint answer: B D

Q79. Which three options are valid use cases for multiple clusters in a workload domain? (Choose three.)

A. One stretched cluster across two regions and two workload domains
B. Two clusters forming one stretched workload domain
C. One cluster stretching two workload domains
D. One cluster distributed across two racks and one workload domain
E. Workload domain with multiple availability zones each containing clusters
F. Workload domain with multiple clusters in one rack

Hint answer: D E F

Q80. Which two functionalities does a NSX Tier-0 Gateway provide to a vSphere with Tanzu deployment? (Choose two.)

A. Connectivity to physical networks and routers
B. Downlink Connections to Segments
C. Layer 2 Switching
D. Gateway for Segments
E. Connectivity to all Tier-1 Gateways

Hint answer: A E