A company needs to provide global visibility and consistent policy management across multiple Tanzu Kubernetes Clusters, namespaces, and clouds.
Which VMware solution will meet these requirements?

A. vSphere with Tanzu Supervisor Cluster

B. vCenter Server

C. Tanzu Mission Control

D. Tanzu Kubernetes Grid Service

An administrator is tasked with horizontally scaling an existing Tanzu Kubernetes cluster from 6 to 4 nodes.
Which action does the administrator need to complete to ensure the cluster scales successfully when updating the YAML definition?

A. Decrease the number of control plane nodes to 4.

B. Decrease the number of worker nodes to 4.

C. Update the Virtual Machine Class Type.

D. Update the Kubernetes version to the latest supported version.

How can a vSphere administrator replace the Supervisor Cluster API endpoint certificate?

A. Use the certificate-manager CLI utility to replace the Supervisor Cluster API endpoint certificate.

B. Use the vSphere Client to replace the Workload platform MTG certificate.

C. Use the vSphere Client to replace the NSX Load Balancer certificate.

D. Use kubectl to replace the Supervisor Cluster API endpoint certificate.

The application development team plans to test a few CPU intensive applications. The virtualization team is concerned about these applications impacting other teams.
How should the team manage this problem?

A. Set a CPU reservation on the Namespace Resource Pool in vCenter.

B. Add a CPU limit to the Namespace Resource Pool in vCenter.

C. Set a network policy to limit network bandwidth within the vSphere Namespace.

D. Add a CPU limit to the vSphere Namespace for the development team.

Which action is required to enable workload management?

A. Assign vSphere Enterprise Plus license to the Supervisor Cluster

B. Change Kubernetes API Endpoint Certificate

C. Use NSX-T as the Networking Stack for Supervisor Cluster

D. Enable vSphere HA and vSphere DRS in Fully Automated mode

What is automatically created within NSX-T when an administrator creates a new namespace in the vSphere client?

A. A new segment connected to a Tier-1 gateway and a new overlay transport zone

B. A new segment connected to a Tier-0 gateway and a new overlay transport zone

C. A new segment connected to a Tier-0 gateway and an existing overlay transport zone

D. A new segment connected to a Tier-1 gateway and an existing overlay transport zone

Which vSphere with Tanzu Workload Network topology provides Layer 2 isolation between Tanzu Kubernetes clusters across namespaces when vSphere Distributed Switches are used?

A. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and separate Workload Networks for each namespace

B. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and a single Workload Network for namespaces

C. A single Workload Network for the Supervisor Cluster control plane VMs and Tanzu Kubernetes clusters

D. Distributed firewall rules to isolate namespaces

Which two capabilities are associated with vSphere Pod? (Choose two.)

A. Compatibility with vSphere vMotion

B. Compatibility with vSphere performance charts

C. Compatibility with NSX-V Datacenter

D. Compatibility with vSphere HA and DRS

E. Compatibility with Windows and Linux kernels

Where are the virtual machine images stored that are used to deploy Tanzu Kubernetes clusters?

A. Content Library

B. Supervisor Cluster

C. Harbor Image Registry

D. Namespace

What is the minimum number of virtual distributed portgroups that must be configured on the vSphere Distributed Switch before enabling Workload Management using the vSphere networking stack and a HAProxy load balancer?

A. 2

B. 1

C. 4

D. 3

Which kubectl command should be used to change the active vSphere namespace to namespace-01?

A. kubectl config use-context namespace-01

B. kubectl describe ns namespace-01

C. kubectl get ns namespace-01

D. kubectl config change-context namespace-01

Which two configurations are needed to meet the minimum vSphere with Tanzu on vSphere Distributed Switch Network Requirements? (Choose two.)

A. Network Interface Cards with Single Root IO Virtualization support (SR-IOV)

B. vCenter Server connected to the workload network

C. Non-overlapping subnets on workload networks

D. One workload network designated as the primary workload network

E. Physical Network MTU set to 1600 Bytes

What is the primary way that the Supervisor Cluster enables vSphere administrators to provide governance around DevOps on-demand workloads?

A. Namespaces act as resource envelopes with policy that limits access and resource consumption.

B. Root access to ESXi hosts is disabled.

C. Load Balancer and multiple control plane nodes provide high availability.

D. Prometheus provides observability to the cluster.

Which two actions are orchestrated by the NSX Container Plugin (NCP)? (Choose two.)

A. Creation of an embedded registry

B. Creation of an NSX Edge

C. Creation of a portgroup

D. Creation of a service

E. Creation of a network policy

Which step in vSphere with Tanzu enablement using the vSphere Distributed Switch process is done prior to using the Workload Management Enablement Wizard?

A. Deploy the load balancer

B. Choose the Kubernetes content library that should be used in the Supervisor Cluster

C. Define the Primary workload network IP range

D. Define the Management network interfaces for the Supervisor Cluster

Which value must be increased or decreased to horizontally scale a Tanzu Kubernetes cluster?

A. Namespaces

B. etcd instance

C. Worker node count

D. ReplicaSets

An administrator needs to configure a Supervisor Cluster with the vSphere networking stack (vSphere Distributed Switch) and HAProxy appliance using default configuration. The administrator has already connected all hosts in the cluster to a vSphere Distributed Switch and created distributed portgroups.
Which designation must be mapped to a distributed portgroup?

A. Primary Workload Network

B. Load Balancer Network

C. Frontend Network

D. Supervisor Cluster Network

Which description reflects a use case for an embedded image registry?

A. Manage source code changes

B. Configure network settings of the image

C. Maintain desired state configuration for containers

D. Secure artifacts with policies and role-based access control

An administrator needs to label and push an image into Harbor.
Which command should the administrator run first?

A. docker tag demoapp01:14.04 /demo/demoapp01:14.04

B. kubectl tag demoapp01:14.04 /demo/demoapp01:14.04

C. kubectl label demoapp01:14.04 /demo/demoapp01:14.04

D. docker label demoapp01:14.04 /demo/demoapp01:14.04

An administrator is tasked with increasing the amount of CPU and memory in an existing Tanzu Kubernetes cluster.
Which change must the administrator complete to ensure the cluster scales successfully when updating the YAML definition?

A. Manually update the CPU and memory of the nodes

B. Update the Virtual Machine Class Type

C. Increase the number of worker nodes

D. Increase the number of control plane nodes

What needs to be deployed to access applications on vSphere with Tanzu?

A. vSphere Distributed Switch

B. Virtual router

C. Internal load balancer

D. External load balancer

To which network are HA Proxy virtual server IP addresses issued when using the vSphere networking stack default configuration?

A. vMotion

B. Overlay

C. Primary workload

D. Management

An administrator is planning the deployment of a vSphere with Tanzu using an NSX-T environment and must ensure that the control plane VMs and container images are placed onto different datastores. The administrator decides to create two datastores and apply differently named tags to each datastore.
Which additional action would the administrator need to perform to meet this requirement?

A. Create two storage policies with different tag criteria and apply to the Supervisor Cluster using the vSphere Client.

B. Create two storage policies with different tag criteria and apply to the Supervisor Cluster using kubectl commands.

C. Create two storage policies with all tag criteria and apply to the Supervisor Cluster using kubectl commands.

D. Create a single storage policy containing all tag criteria and apply to the Supervisor Cluster using the vSphere Client.

Which step is necessary in order to allocate storage to a newly created namespace?

A. Assign a VM Storage Policy

B. Assign permissions to users

C. Define resource limits

D. Add a content library

A developer is trying to deploy a Kubernetes Application into a namespace within a Supervisor Cluster. The deployment must utilize the latest assets that have been pushed into the Registry Service.
What should the developer add to the YAML file to ensure that the deployment is successful?

A. image: //:latest

B. template: //:latest

C. image: //:latest

D. template: //:latest

Which command will display the container image(s) used in a vSphere pod deployment name nginx-deployment?

A. kubectl get deployment nginx-deployment

B. kubectl get pod nginx

C. kubectl describe deployment nginx-deployment

D. docker ps

Which kubectl command is used to deploy the application when using a Kubernetes deployment specification file, my-app.yaml?

A. kubectl run my-app.yaml

B. kubectl apply -f my-app.yaml

C. kubectl create my-app.yaml

D. kubectl apply spеc my-app.yaml

What is the correct process to store images in a project on the Registry Service?

A. Use the kubectl push command

B. Use the docker push command

C. Use the vSphere Client to upload the image the content library

D. Use the vSphere Client to upload the image to the Registry Service

Which three elements should be configured by a vSphere administrator after creating vSphere Namespace? (Choose three.)

A. Permissions

B. Capacity and Usage limits

C. License

D. Namespace name

E. Storage Policy

F. NSX Segment

Which Kubernetes Service Types exposes the service externally using a static port?

A. Headless

B. NodePort

C. ExternalName

D. ClusterIP

Which process should be used to enable the embedded Harbor image registry in vSphere with Tanzu?

A. Deploy the Harbor OVF template to the cluster.

B. Use kubectl, and deploy a Harbor deployment specification.

C. Deploy the Harbor Helm chart.

D. Enable directly through the vSphere Client.

What is the proper way to delete a Persistent Volume Claim?

A. By using the kubectl delete persistentvolumeclaim command

B. By using the kubectl remove pvc command

C. Through the SPBM policy engine using the vSphere Client

D. By unmounting the volume from the VM and deleting it from the vSphere datastore

Which statement provides the most accurate description for the Sphere let?

A. The Spherelet allows the ESXi host to become part of the Kubernetes cluster.

B. The Spherelet provides high availability for the Kubernetes cluster.

C. The Spherelets exist as VMs and are load balanced, each with their own IP address.

D. The Spherelet includes a paravirtualized Linux kernel that works together with the hypervisor.

Where is a storage policy applied to enable Persistent Volumes?

A. Namespace

B. Datastore

C. Virtual Machine

D. Cluster

Which object helps maintain copies of a vSphere pod?

A. ReplicaSets

B. Network Policies

C. Namespaces

D. Persistent Volume

Which statement is true about Kubernetes Network Policies?

A. The Supervisor cluster contains a firewall to implement the network policy.

B. The policy is created by developers and applied using a YAML specification.

C. vSphere administrator adds the Kubernetes Network policy to the Development team’s Namespace to implement the rules.

D. vSphere administrator creates the network policy in NSX Manager to restrict app-to-app communication.

Which command provides valid syntax to deploy a vSphere Pod?

A. tkg apply -c containerName

B. docker run containerName

C. kubectl apply -c deployment.yaml

D. kubectl apply -f deployment.yaml

The application development team is pushing a Kubernetes application into production. It consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?

A. Yes, by using kubectl to create a Network Policy that only allows pods on the same network segment to talk to each other.

B. Yes, by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database.

C. Yes, by using kubectl to create a policy that disables pod to pod communication in the Namespace.

D. No, Kubernetes Network Policy does not support this action.

Kubernetes object types are going to be limited by an administrator within a vSphere with Tanzu namespace.
Which three Kubernetes object types may be limited? (Choose three.)

A. Number of Persistent Volume Claims

B. Number of Pods

C. Number of Operators

D. Number of DaemonSets

E. Number of Ingress frontends

F. Number of Load Balancer Services

Which kubectl command is used to list the Kubernetes services in the current active namespace?

A. kubectl get services

B. kubectl get loadbalancer

C. kubectl services get ip

D. kubectl list services

A developer is trying to deploy a Kubernetes Application by using an image from the embedded Registry Service into an existing Namespace within a Supervisor Cluster.
Which three steps must be completed to ensure the deployment is successful? (Choose three.)

A. Include the image: //: in the YAML spec.

B. Run kubectl config use-context to switch to the correct namespace.

C. Run kubectl config set-context to switch to the correct namespace.

D. Pull the image into the Registry service with docker pull //:.

E. Include the image: /: in the YAML spec.

F. Push the image to the Registry service with docker push //:.

How would information be found about which Kubernetes cluster and pod are using a given PersistentVolume in vSphere?

A. Through the file browser in the Datastore view within vCenter

B. By querying the CNS API using the esxcli command

C. Using the vSphere Client, go to the Cloud Native Storage view for the datastore

D. By using vmwarectrl get persistentvolumes command

Which three characteristics are true of Control Plane VMs? (Choose three.)

A. They can be resized by administrators directly through vCenter Inventory View.

B. They each run the Spherelet.

C. They each expose the Kubernetes API.

D. They do not run any Kubernetes Pods.

E. They are connected to a Management portgroup.

F. They are deployed via a vCenter Service.

How are quotas and permissions guaranteed by vSphere with Tanzu for Tanzu Kubernetes (TKG) clusters that are deployed within a namespace?

A. By routing quota and permission API calls to vCenter Server via the Supervisor Cluster

B. By ensuring each TKG cluster has a quotas and permissions system built into it natively which enforces all requests

C. By having the Supervisor Cluster poll the TKG cluster periodically to ensure adherence to quotas and permissions

D. By deploying an external authentication solution

How can the vSphere administrator generate a certificate signing request for the Supervisor Cluster API endpoint certificate?

A. Use kubectl to generate a certificate signing request for the Supervisor Cluster API endpoint certificate.

B. Use the certificate-manager CLI utility to generate a certificate signing request for the Supervisor Cluster API endpoint certificate.

C. Use the vSphere Client to generate a certificate signing request for the NSX Load Balancer certificate.

D. Use the vSphere Client to generate a certificate signing request for the Workload platform MTG certificate.

A development team has submitted a YAML specification to create a Tanzu Kubernetes cluster called dev-cluster and wants to verify that the cluster is running.
Which command should be run to obtain this verification?

A. kubectl show tkc dev-cluster

B. kubectl get cluster dev-cluster

C. kubectl get tkc dev-cluster

D. kubectl list cluster dev-cluster

How do Tanzu Kubernetes clusters communicate with Storage Policy Based Management to request PersistentVolumes?

A. Through a proxy VM

B. Directly with vCenter Server and the underlying ESXi hosts

C. Through the Supervisor Cluster

D. Directly with the vCenter Server

Which capability do persistent volumes provide to containerized applications?

A. Automated disk archival

B. Support for in-memory databases

C. Support for ephemeral workloads

D. Retention of application state and data

What provides the North-South connectivity from NSX-T Data Center to the physical infrastructure?

A. Tier-1 uplink

B. vSphere Distributed Switch

C. Tier-0 uplink segment

D. Transport Zones

A company needs its administrators to be able to manage access, apply security policies, and inspect Kubernetes clusters for security and configuration risks across multiple platforms.
Which solution will meet these requirements?

A. Kubernetes Security Contexts

B. Kubernetes Role Based Access Control (RBAC)

C. Tanzu Kubernetes Grid Service

D. Tanzu Mission Control