How is the storage selected for the Harbor pods when the embedded Harbor image registry is enabled?

A. vCenter Server automatically selects a local ESXi host datastore.

B. An administrator selects a VM storage policy as part of enablement.

C. vCenter Server automatically chooses a VM storage policy.

D. An administrator selects a specific datastore as part of enablement.

What needs to be deployed to access applications on vSphere with Tanzu?

A. vSphere Distributed Switch

B. Virtual router

C. Internal load balancer

D. External load balancer

Which statement accurately describes a vSphere with Tanzu Supervisor Cluster?

A. It is a Kubernetes cluster deployed by developers using a YAML specification file.

B. It aggregates hosts across vSphere clusters to form a Kubernetes cluster on vSphere.

C. It enables vSphere High Availability and Distributed Resource Scheduler.

D. It exposes a Kubernetes API for use by DevOps teams.

What is the proper way to delete a Persistent Volume Claim?

A. By using the kubectl delete persistentvolumeclaim command

B. By using the kubectl remove pvc command

C. Through the SPBM policy engine using the vSphere Client

D. By unmounting the volume from the VM and deleting it from the vSphere datastore

Which command provides valid syntax to deploy a vSphere Pod?

A. tkg apply -c containerName

B. docker run containerName

C. kubectl apply -c deployment.yaml

D. kubectl apply -f deployment.yaml

Which name is a valid namespace name?

A. name$pace01

B. namespace-01

C. namespace_01

D. NameSpace 01

Which three elements should be configured by a vSphere administrator after creating vSphere Namespace? (Choose three.)

A. Permissions

B. Capacity and Usage limits

C. License

D. Namespace name

E. Storage Policy

F. NSX Segment

Which two networks are used to attach Supervisor Cluster control plane VMs when using the vSphere networking stack? (Choose two.)

A. vMotion

B. Frontend

C. Primary workload

D. Management

E. Non-primary workload

To which set of networks are the Supervisor Cluster nodes attached when deploying with an NSX-T network topology?

A. Frontend and Workload

B. Frontend and Management

C. Workload and NSX Overlay

D. Management and NSX Overlay

Which open-source project extends the Docker registry source code to provide an enterprise-class registry server?

A. Namespace

B. Manifest

C. Harbor

D. Github

Which two distributed port groups is HAProxy connected to when using the vSphere networking stack default configuration? (Choose two.)

A. Edge

B. Backend

C. Frontend

D. Workload

E. Management

A company needs its administrators to be able to manage access, apply security policies, and inspect Kubernetes clusters for security and configuration risks across multiple platforms.
Which solution will meet these requirements?

A. Kubernetes Security Contexts

B. Kubernetes Role Based Access Control (RBAC)

C. Tanzu Kubernetes Grid Service

D. Tanzu Mission Control

What is the minimum number of portgroups needed, in addition to the management portgroup, to provide connectivity for external services on a Supervisor Cluster?

A. 1

B. 4

C. 3

D. 2

Which type of application will typically require a persistent volume?

A. API gateway

B. Proxy server

C. Relational database

D. Web server

Which two considerations needs to be made when deciding on a virtual machine class type during the process of creating a Tanzu Kubernetes cluster? (Choose two.)

A. Whether the resources provided by the virtual machine class type should be reserved on the host

B. The configuration parameters which need to be edited in the cluster

C. The amount of CPU, memory, and storage the virtual machine should have

D. Connectivity between the Tanzu Kubernetes cluster and the Subscribed Content Library

E. The storage classes which need to be made available to the cluster

Which description reflects a use case for an embedded image registry?

A. Manage source code changes

B. Configure network settings of the image

C. Maintain desired state configuration for containers

D. Secure artifacts with policies and role-based access control

Which kubectl command is used to list all pods in the current active namespace?

A. kubectl get nodes

B. kubectl get pods

C. kubectl get services

D. kubectl list pods

An administrator is planning the deployment of a vSphere with Tanzu using an NSX-T environment and must ensure that the control plane VMs and container images are placed onto different datastores. The administrator decides to create two datastores and apply differently named tags to each datastore.
Which additional action would the administrator need to perform to meet this requirement?

A. Create two storage policies with different tag criteria and apply to the Supervisor Cluster using the vSphere Client.

B. Create two storage policies with different tag criteria and apply to the Supervisor Cluster using kubectl commands.

C. Create two storage policies with all tag criteria and apply to the Supervisor Cluster using kubectl commands.

D. Create a single storage policy containing all tag criteria and apply to the Supervisor Cluster using the vSphere Client.

How do vSphere Namespaces allow different teams to share a Kubernetes cluster?

A. Attaches authorization and policy to a subsection of the cluster

B. Installs Calico CNI

C. Installs a network policy provider

D. Advertises extended resources for a node

What should be increased or reduced in order to scale a Tanzu Kubernetes cluster up or down?

A. The number of Pods that it contains

B. The number of Namespaces that it contains

C. The number of Deployments that it contains

D. The number of worker nodes that it contains

Why would developers choose to deploy an application as a vSphere Pod instead of a Tanzu Kubernetes cluster?

A. They need the application to run as privileged pods.

B. The application works with sensitive customer data, and they want strong resource and security isolation.

C. They want to have root level access to the control plane and worker nodes in the Kubernetes cluster.

D. The application requires a version of Kubernetes that is above the version running on the supervisor cluster.

Which three characteristics are true of Control Plane VMs? (Choose three.)

A. They can be resized by administrators directly through vCenter Inventory View.

B. They each run the Spherelet.

C. They each expose the Kubernetes API.

D. They do not run any Kubernetes Pods.

E. They are connected to a Management portgroup.

F. They are deployed via a vCenter Service.

Which command will show the Tanzu Kubernetes cluster versions available in the vSphere content library?

A. kubectl get rc,services

B. kubectl get contentlibrary

C. kubectl get tanzukubernetesreleases

D. kubectl get tanzuimages

Which kubectl command should be used to change the active vSphere namespace to namespace-01?

A. kubectl config use-context namespace-01

B. kubectl describe ns namespace-01

C. kubectl get ns namespace-01

D. kubectl config change-context namespace-01

What is the primary way that the Supervisor Cluster enables vSphere administrators to provide governance around DevOps on-demand workloads?

A. Namespaces act as resource envelopes with policy that limits access and resource consumption.

B. Root access to ESXi hosts is disabled.

C. Load Balancer and multiple control plane nodes provide high availability.

D. Prometheus provides observability to the cluster.

An administrator needs to configure a Supervisor Cluster with the vSphere networking stack (vSphere Distributed Switch) and HAProxy appliance using default configuration. The administrator has already connected all hosts in the cluster to a vSphere Distributed Switch and created distributed portgroups.
Which designation must be mapped to a distributed portgroup?

A. Primary Workload Network

B. Load Balancer Network

C. Frontend Network

D. Supervisor Cluster Network

Why would an organization set up private image registries?

A. Role-based access control can be assigned by integrating the image registry with user identity management.

B. DevOps engineers are able to store virtual machine images in a central location.

C. Open source registry server projects enable organizations to modify them as necessary.

D. Public image registries lack enterprise support.

The Gold storage policy has been assigned to the Web namespace, and the DevOps engineer wants to place a persistent volume for the Web application in the Gold storage class.
How should this goal be accomplished?

A. Indicate the Gold storage class in the persistent volume claim specification

B. Assign the persistent volume to the Gold storage class

C. Indicate the Gold storage class in the persistent volume specification

D. Configure tag-based placement for the persistent volume

What can be used to define whether a vSphere pod can be scaled?

A. Deployment

B. Namespaces

C. Persistent Volume

D. Network Policies

Which functionality does the Cloud Native Storage (CNS) component take advantage of to support the creation of container volumes?

A. First Class Disk

B. VMware Disk Encryption

C. Virtual Disk

D. Storage Based Policy Management

Which statement provides the most accurate description for the Sphere let?

A. The Spherelet allows the ESXi host to become part of the Kubernetes cluster.

B. The Spherelet provides high availability for the Kubernetes cluster.

C. The Spherelets exist as VMs and are load balanced, each with their own IP address.

D. The Spherelet includes a paravirtualized Linux kernel that works together with the hypervisor.

An administrator is configuring a vSphere with Tanzu Supervisor Cluster with the vSphere networking stack.
Which two minimum requirements must be met for the compute and networking components? (Choose two.)

A. The cluster configured with vSphere High Availability enabled

B. A DHCP IP address range for the Kubernetes control plane VMs

C. A DHCP IP address range for the HA Proxy virtual IPs

D. A minimum of three distinct subnets

E. The cluster configured with vSphere DRS enabled and automation level set to Fully Automated

How would information be found about which Kubernetes cluster and pod are using a given PersistentVolume in vSphere?

A. Through the file browser in the Datastore view within vCenter

B. By querying the CNS API using the esxcli command

C. Using the vSphere Client, go to the Cloud Native Storage view for the datastore

D. By using vmwarectrl get persistentvolumes command

Which process should be used to enable the embedded Harbor image registry in vSphere with Tanzu?

A. Deploy the Harbor OVF template to the cluster.

B. Use kubectl, and deploy a Harbor deployment specification.

C. Deploy the Harbor Helm chart.

D. Enable directly through the vSphere Client.

A vSphere administrator is required to provide a developer with read/write permissions on a vSphere Namespace.
Which role should the vSphere administrator apply for the developer?

A. Assign the developer user with the “can edit” role at the vSphere Namespace object.

B. Assign the developer user with the “vSphere Kubernetes Manager” role at the vSphere Namespace object.

C. Assign the developer user with the “vSphere Kubernetes Manager” role at the cluster object.

D. Assign the developer user with the “can edit” role at the cluster object.

What is required to enable Workload Management?

A. vSphere Distributed Switch

B. Windows Network Load Balancer

C. Github repository

D. NSX-V

Which statement is true about Kubernetes Network Policies?

A. The Supervisor cluster contains a firewall to implement the network policy.

B. The policy is created by developers and applied using a YAML specification.

C. vSphere administrator adds the Kubernetes Network policy to the Development team’s Namespace to implement the rules.

D. vSphere administrator creates the network policy in NSX Manager to restrict app-to-app communication.

The network topology for a Supervisor Cluster deployed using the vSphere networking stack, and a HAProxy load balancer is being planned.
In addition to the control plane management IP range and services IP range, how many non-overlapping IP address ranges are needed?

A. 3

B. 1

C. 4

D. 2

Which command will display the container image(s) used in a vSphere pod deployment name nginx-deployment?

A. kubectl get deployment nginx-deployment

B. kubectl get pod nginx

C. kubectl describe deployment nginx-deployment

D. docker ps

Which two capabilities are associated with vSphere Pod? (Choose two.)

A. Compatibility with vSphere vMotion

B. Compatibility with vSphere performance charts

C. Compatibility with NSX-V Datacenter

D. Compatibility with vSphere HA and DRS

E. Compatibility with Windows and Linux kernels

Which Kubernetes Service Types exposes the service externally using a static port?

A. Headless

B. NodePort

C. ExternalName

D. ClusterIP

A HAProxy appliance has been deployed using a 3 NIC configuration.
Which network will developers and external services use to connect?

A. DMZ

B. Frontend

C. HAProxy

D. Workload

Which authentication method is supported for logging into the vSphere with Tanzu Supervisor cluster?

A. Key-based authentication

B. Workspace ONE access

C. Static username and password

D. vCenter Single Sign-On

Which action is required to enable workload management?

A. Assign vSphere Enterprise Plus license to the Supervisor Cluster

B. Change Kubernetes API Endpoint Certificate

C. Use NSX-T as the Networking Stack for Supervisor Cluster

D. Enable vSphere HA and vSphere DRS in Fully Automated mode

What provides a declarative, Kubernetes-style API for cluster creation, configuration, and management?

A. Tanzu Kubernetes Grid Service

B. kubectl

C. vSphere REST API

D. Virtual Machine Service

A development team has submitted a YAML specification to create a Tanzu Kubernetes cluster called dev-cluster and wants to verify that the cluster is running.
Which command should be run to obtain this verification?

A. kubectl show tkc dev-cluster

B. kubectl get cluster dev-cluster

C. kubectl get tkc dev-cluster

D. kubectl list cluster dev-cluster

Which process should be used to upgrade the vSphere with Tanzu Supervisor Cluster?

A. Use the vSphere Client, navigate to Workload Management, and apply updates.

B. Use kubectl, and apply an update manifest specification to the Supervisor Cluster.

C. Use the vSphere Client, navigate to vSphere Lifecycle Manager, and apply updates.

D. Allow vSphere with Tanzu Supervisor Cluster to upgrade automatically when new versions are available.

Which two functions are provided by the NSX Container Plug-in (NCP)? (Choose two.)

A. Implements Kubernetes Ingress with an NSX-T layer 7 load balancer

B. Integrates with container-based PaaS such as Docker

C. Creates an NSX-T logical topology for a Kubernetes cluster and a separate logical network for each Kubernetes namespace

D. Configures Overlay Transport Zones

E. Implements Kubernetes Ingress with an NSX-T layer 4 load balancer

Which is a valid version change for a Tanzu Kubernetes cluster running Kubernetes version 1.16.7?

A. Upgrade one major version (e.g., 2.0.1)

B. Upgrade two minor versions (e.g., 1.18.0)

C. Downgrade one patch version (e.g., 1.16.5)

D. Upgrade one minor version (e.g., 1.17.0)

The application development team is pushing a Kubernetes application into production. It consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?

A. Yes, by using kubectl to create a Network Policy that only allows pods on the same network segment to talk to each other.

B. Yes, by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database.

C. Yes, by using kubectl to create a policy that disables pod to pod communication in the Namespace.

D. No, Kubernetes Network Policy does not support this action.