During the design phase for a greenfield VMware Cloud Foundation (VCF) deployment, the following design decision has been agreed upon:
•	Developer Ready Infrastructure needs to be deployed
The Infrastructure Architect is working with the client to fill the Planning and Preparation Workbook. The Option for ‘Developer Ready Infrastructure using VMware Cloud Foundation’ has been set to ‘Deploy’. The ‘Developer Ready Infrastructure using VMware Cloud Foundation’ is displaying an error, and its Final Result is stating ‘Excluded’.
Which option should be enabled in the Planning and Preparation Workbook to address this issue?

A. Stretched Cluster for Management Domain

B. Clustered Workspace ONE Access

C. Identity and Access Management for VMware Cloud Foundation

D. Stretched Cluster for Workload Domain

An administrator needs to upgrade the current VMware Cloud Foundation (VCF) environment from version 4.1 to 4.3, knowing that the environment has direct access to the internet.
Which steps should be performed to download the online bundles?

A. 1. SDDC Manager checks depot.vmware.com.2. The administrator accesses SDDC Manager.3. The administrator downloads the bundles from SDDC Manager.

B. 1. SDDC Manager checks depot.vmware.com.2. The administrator accesses vSphere Lifecycle Manager.3. The administrator downloads the bundles from vSphere Lifecycle Manager.

C. 1. vSphere Lifecycle Manager checks depot.vmware.com.2. The administrator accesses vSphere Lifecycle Manager.3. The administrator downloads the bundles from vSphere Lifecycle Manager.

D. 1. vSphere Lifecycle Manager checks depot.vmware.com.2. The administrator accesses SDDC Manager.3. The administrator downloads the bundles from SDDC Manager.

Which two roles are provided by a local NSX Manager appliance? (Choose two.)

A. Compliance

B. Controller

C. Policy

D. Authorization

E. Orchestrator

A systems administrator is tasked to configure MTUs for the VCF components and plans on using the recommended MTU size of the Management VLAN for the two Availability Zones in implementing the stretched cluster.
What is the recommended MTU size?

A. 1500

B. 9000

C. 1600

D. 1492

Which action(s) can a developer perform on Kubernetes storage classes that are mapped from the VM Storage Policies?

A. Access Only

B. Access and Modify

C. Access, Modify, and Delete

D. Access, Create, and Delete

A systems administrator is tasked to deploy a management domain during VMware Cloud Foundation Bring-Up process.
What are the minimum hardware requirements for the management cluster?

A. 8 vSAN Ready Nodes, 256 GB RAM per server, and 2 10GbE NICs

B. 6 vSAN Ready Nodes, 256 GB RAM per server, and 4 10GbE NICs

C. 4 vSAN Ready Nodes, 192 GB RAM per server, and 2 10GbE NICs

D. 2 vSAN Ready Nodes, 192 GB RAM per server, and 4 10GbE NICs

The architect of a multi-site VMware Cloud Foundation solution is tasked with ensuring that the prerequisites for vSAN data at rest encryption have been achieved. The existing design calls for use of the vSphere Native Key Provider. NSX-T is configured with Federation, and both sites benefit from a stretched T0 and T1 network topology.
A new security policy requires the use of vSphere Virtual Machine encryption, in addition to the at-rest encryption already configured. During a failover test from Site-A to Site-B using Site Recovery Manager, the virtual machines were unable to power-on.
How does the design need to be changed to support the new requirement?

A. Ensure that a TPM 2.0 certified module is installed on all ESXi hosts at Site-B.

B. Use a third-party KMS solution at each site.

C. Use a third-party KMS solution that allows for key replication.

D. Ensure that the Site Recovery Manager service account has Cryptographer.ReadKeyServersInfo privileges.

What are the correct steps to grant the DevOps team permissions to a vSphere Namespace in a VMware Cloud Foundation (VCF) developer-ready workload domain while following the principle of least privilege access?

A. At the Permissions setting, add the DevOps group and assign the “Editor” permission

B. At the Global Permissions setting, add the DevOps group and assign the vSphere Kubernetes Manager role

C. At the Global Permissions setting, add the DevOps group and assign the SupervisorService Cluster Operator role

D. At the Permissions setting, add the DevOps group and assign the “Can edit” permission

In which order should the VMware Cloud Foundation components in a Management Domain be upgraded?

A. vRealize Suite, SDDC Manager and VMware Cloud Foundation services, NSX-T Datacenter, vCenter Server, ESXi servers

B. SDDC Manager and VMware Cloud Foundation services, vRealize Suite, NSX-T Datacenter, vCenter Server, ESXi servers

C. SDDC Manager and VMware Cloud Foundation services, NSX-T Datacenter, vCenter Server, ESXi servers, vRealize Suite

D. SDDC Manager and VMware Cloud Foundation services, vRealize Suite, NSX-T Datacenter, ESXi servers, vCenter Server

What is a valid way to replace the expiring evaluation Tanzu license for a vSphere with Tanzu cluster?

A. 1. Connect to the SDDC Manager.2. In the navigation pane, click Solutions.3. Find the cluster, click “Update Workload Management license”, and select the appropriate license.

B. 1. Connect to the SDDC Manager.2. Go to Administration > Licensing.3. Add the license key for vSphere with Tanzu.

C. 1. Connect to the vCenter Web Console.2. Go to Menu > Home > Administration > Licenses3. Click “Add New Licenses”, and enter the license key.

D. 1. Connect to the vCenter Web Console.2. Go to “Hosts and Clusters”, and right click on the cluster that supports namespace creation.3. Click “Assign license”, and select the appropriate license.

A service provider has a number of VMware Cloud Foundation workload domains and would like to sell Tanzu Namespaces as a managed service.
Which two functions will help the service provider with Tanzu resource management? (Choose two.)

A. Separate NSX-T instances

B. Resource Limits

C. Container Network Interfaces

D. Resource Pools

E. Object Limits

An architect needs to enable the workload management for a VCF VI workload domain and plans on using the minimum requirement for deploying a highly available NSX edge cluster.
What is the minimum requirement for this deployment?

A. A cluster of two small NSX edge nodes

B. A cluster of three large NSX edge node

C. A cluster of two large NSX edge nodes

D. A cluster of one large NSX edge node

A systems administrator is tasked to deploy VMware Cloud Foundation (VCF) and has already deployed the VMware Cloud Builder appliance.
What is the next step the systems administrator should take?

A. Upload the Deployment Parameter Workbook.

B. Configure the Management Domain using custom certificates.

C. Deploy the Management Domain using VMware Cloud Builder.

D. Prepare and configure the ESXi hosts to be used in the deployment.

An administrator is tasked with replacing the default, self-signed certificates in a VMware Cloud Foundation environment.
The administrator begins by completing the three tasks which must be executed to prepare a Microsoft Active Directory Certificate Services authority to integrate with VMware Cloud Foundation.
Which three tasks were executed by the administrator? (Choose three.)

A. Join the vCenter server instances to the Active Directory domain.

B. Modify the “Web Server” template to include User Authentication.

C. Enable Active Directory authentication for Certificate Services.

D. Assign the “Issue and Manage Certificates” permission to the SDDC Manager service account.

E. Create a new template that supports Server Authentication and proof of origin.

F. Enable Basic authentication for Certificate Services.

A systems administrator needs to apply a custom ESXi image to a host using VMware Imaging Appliance (VIA).
Which statement is correct when preparing a host for imaging?

A. VIA service does not support UEFI boot mode.

B. PXE Boot must be configured as the second boot option.

C. Onboard NICs should be enabled on the server.

D. VMware Cloud Builder appliance must be deployed in a tagged VLAN/Network.

What are the minimum hardware requirements to run customer workloads within a cluster in a VI workload domain considering maintenance operations without risking availability?

A. Two vSAN Ready Nodes (ROBO) with two 10GbE NICs, and optionally one 1GbE BMC NIC

B. Four vSAN Ready Nodes with two 25GbE NICs

C. Three vSAN Ready Nodes with two 10GbE NICs, and optionally one 1GbE BMC NIC

D. Three vSAN Ready Nodes with two 25GbE NICs

A VMware Cloud Foundation (VCF) architect is presented with a customer's requirements for an architecture that needs to achieve:
Network high availability across workloads in two data center locations.
Maintain the least administrative overhead when performing day 2 operations.
Decrease the RTO of both management plane and data plane when site-wide failure occurs.
Which VCF design consideration should the architect recommend?

A. VCF with NSX-T L2-VPN

B. VCF with NSX-T Federation

C. VCF with NSX-T Multi-Site

D. VCF with NSX-T Bridging

Which two features are supported when implementing NSX Federation? (Choose two.)

A. NAT operations

B. Identity Firewall

C. DHCP dynamic binding

D. Load Balancer

E. DHCP

An administrator is planning to enable vSphere with Tanzu on an existing VI workload domain. The following information is known:
•	There is one vSphere cluster in that domain where all ESXi hosts have two uplinks.
•	The NSX edge cluster will be deployed on the same vSphere cluster.
•	Both System and NSX traffic will use the same uplinks of the VDS switch spanning the ESXi hosts.
Which statement accurately describes the deployment of this NSX edge cluster?

A. Two VLANs are needed for ESXi and edge TEP traffic.

B. Additional NICs will have to be added to the ESXi hosts to separate the system and NSX traffic.

C. One VLAN can be used for both ESXi and edge TEP traffic.

D. Host overlay IP pool can be shared with the Edge overlay IP pool.

Which option is supported to upgrade the ESXi 7.x hosts for a vSAN stretched cluster in a VMware Cloud Foundation environment?

A. vSphere Update Manager Baselines

B. vSphere Lifecycle Manager Baselines

C. vRealize Suite Lifecycle Manager

D. vSphere Lifecycle Manager Images

An administrator is tasked with changing the password of the SDDC Manager super user account in a newly installed VCF environment.
Which method must the administrator use to complete this task?

A. 1. SSH in to the SDDC Manager VM using the vcf user account.2. Switch to the root user.3. Enter the passwd vcf command.4. Enter and retype the new password.

B. 1. Log in to SDDC manager UI as a user with the ADMIN role.2. Go to Administration > Security > Password Management.3. Select the SDDC Manager account from the component drop-down menu.4. Click Rotate Now button.

C. 1. Log in to the SDDC manager UI as a user with the ADMIN role.2. Go to Developer Center > API Explorer.3. Expand APIs for managing users.4. Update password for roof user.

D. 1. SSH in to the SDDC Manager VM using the vcf user account.2. Switch to the root user.3. Enter the passwd admin command.4. Enter and retype the new password.

What do VM Storage Policies match to when using vSphere with Tanzu?

A. Kubernetes storage classes in the Supervisor Cluster

B. Kubernetes datastores in a namespace

C. Kubernetes storage classes in a namespace

D. Kubernetes datastores in the Supervisor Cluster

Which two steps must be performed to create a vSphere with Tanzu namespace? (Choose two.)

A. Deploy a vSphere Cluster

B. Enable Harbor Image Registry

C. Use a DNS-compliant name

D. Assign permissions

E. Define resource limits

A VMware Cloud Foundation administrator has been tasked with replacing self-signed certificates with those signed by a third-party Certificate Authority. A security policy disallows the integration and use of Microsoft Active Directory Certificate Services and prefers an external provider.
Which two steps must be taken in order to configure these certificates? (Choose two.)

A. Generate Certificate Signing Requests from SDDC Manager.

B. Ensure that the external provider has Administrator rights in vCenter.

C. Create and package the certificates in a domain_name.tar.gz file.

D. Use the sddcmanager-ssl-util.sh utility to list and delete existing certificates.

E. Generate public-private key pairs using the external provider.

A VMware architect has been tasked to deploy a VCF environment for a large federal organization. Security, availability, and redundancy are key requirements for the deployment. The administrator has been asked to keep the cost down as well.
A standard deployment of VCF is being planned for the headquarters. The first VI domain is estimated to have 5,000 VMs.
Which vCenter Server appliance sizing should the architect use for the VI workload domain?

A. Large vCenter Server appliance with default storage size

B. Small vCenter Server appliance with X-Large storage size

C. Medium vCenter Server appliance with large storage size

D. Medium vCenter Server appliance with default storage size

Which three components are required to deploy a stretched cluster in a VMware Cloud Foundation environment? (Choose three.)

A. DHCP on the NSX Edge overlay network

B. vSAN, host overlay and vMotion network stretched across both sites

C. One witness host per site

D. One witness host per vSAN stretched cluster

E. vSAN, host overlay and vMotion network per data site

F. DHCP on the host overlay network

A systems administrator is tasked with creating a new VI workload domain that will leverage either an external NFS or a VMFS on FC storage as the principal storage.
Which action is required to fulfill this requirement?

A. Create a new network pool for vMotion and NFS networks.

B. Create a new network pool for vMotion, vSAN, and NFS networks.

C. Create a new network pool only for vMotion network.

D. Create a new network pool for vMotion and vSAN networks.

An architect is decommissioning a host from a VI Workload Domain and wants to reuse it in a VMware Cloud Foundation environment.
Which statement accurately describes this process?

A. Use the decommission host workflow against a host with an unassigned state, and then run the commission host workflow.

B. Use the decommission host workflow against a host with an unassigned state, re-image the host, and then run the commission host workflow.

C. Use the decommission host workflow against a host with an assigned state, re-image the host, and then run the commission host workflow.

D. Use the decommission host workflow against a host with an assigned state, and then run the commission host workflow.

Which two options can be used to create a new VMware Cloud Foundation VI workload domain? (Choose two.)

A. REST API

B. SDDC Manager UI

C. Cloud Builder UI

D. PowerCLI

E. vCenter UI

A VMware Cloud Foundation administrator created a Tanzu Namespace in one of the workload domains.
Which two functions related to permissions can be performed on the newly created Namespace? (Choose two.)

A. Add permissions to local vSphere with Tanzu users only.

B. Permissions can be set to either view or edit.

C. Add a custom role to create more granular permissions.

D. Add permissions only from the vSphere.local domain.

E. Add permissions to users from vCenter Single Sign-On identity sources.

Which two NSX-T Data Center components are configured when deploying an NSX Edge cluster using SDDC Manager? (Choose two.)

A. NSX Edge VMs

B. NSX Load Balancer

C. NSX Global Manager

D. NSX Local Manager

E. NSX Tier-1 Gateway

An architect needs to create a VMware Cloud Foundation (VCF) VI Workload Domain design with the following requirements:
•	Design blueprint needs to be repeatable for additional regions
•	Multiple availability zones
•	Seven nodes per availability zone to host the workloads
•	vSAN storage will be used
What is the maximum accepted latency supported by vMotion between the two availability zones?

A. 100 ms

B. 150 ms

C. 10 ms

D. 200 ms

A systems administrator is implementing stretched clusters in an environment with multiple Availability Zones (AZs).
Which statement accurately describes this design?

A. The Layer 3 gateway for the workload domain and Edge overlay networks must be highly available across the AZs.

B. Layer 3 networks must be stretched between the AZs by the physical infrastructure.

C. If VLAN is stretched between AZ1 and AZ2, the Layer 3 network must also be stretched between the two AZs.

D. For VLANs that are stretched between AZs, configure load balancing in the Layer 3 gateway between AZs.

Which two tools can be used to create custom ESXi ISO images when preparing for the VMware Cloud Foundation bring-up process? (Choose two.)

A. vRealize Suite Lifecycle Manager

B. VMware Imaging Appliance

C. vSphere Lifecycle Manager

D. PowerCLI

E. SSH

An administrator wants to scale an existing VMware Cloud Foundation (VCF) environment by adding a new VI Workload Domain.
Which two storage options can be used for the new VI Workload Domain? (Choose two.)

A. iSCSI principal storage with SMB supplemental storage

B. vSAN principal storage with SMB supplemental storage

C. vSAN principal storage with VMFS on FC supplemental storage

D. vSAN principal storage with NFS supplemental storage

E. vVOL principal storage with SCSI supplemental storage

What is the correct sequence of steps to add a new VI Workload Domain in a VMware Cloud Foundation environment?

A. 1. Configure DNS.2. Create a network pool.3. Commission hosts.4. Add licenses to SDDC Manager.5. Create the workload domain.

B. 1. Configure DNS.2. Commission hosts.3. Create a network pool.4. Add licenses to SDDC Manager.5. Create the workload domain.

C. 1. Create a network pool.2. Commission hosts.3. Add licenses to SDDC Manager.4. Create the workload domain.

D. 1. Create a network pool.2. Commission hosts.3. Create the workload domain.4. Add licenses to SDDC Manager.

Which two configurations are validated during the VMware Cloud Foundation bring-up process? (Choose two.)

A. Network Configuration validation

B. Network Connectivity validation

C. Stretched Cluster validation

D. Cloud Builder Log Configuration validation

E. NSX Edge validation

An administrator is tasked with deploying an additional cluster within VI Workload Domain which has been created with vSAN as a principal storage.
Which types of principal storage may the administrator configure during this process?

A. NFS v4.1, VMFS on FC, vSAN

B. vSAN, iSCSI, SMB 3.0

C. iSCSI, vVols, vSAN, NFS v4.1

D. vVols, vSAN, NFS v3, VMFS on FC

An architect is presented with a Bill of Material for different vSAN ready nodes:
8 identical nodes with 1 vSAN disk group
8 identical nodes with 2 vSAN disk groups
What is the ideal design of VMware Cloud Foundation domains that the architect should recommend?

A. 1 Management Domain of 6 Nodes, 1 Workload Domain of 4 nodes, and 1 Workload Domain of 6 nodes

B. 1 Management Domain of 6 nodes and 1 Workload Domain of 10 nodes

C. 1 Domain of 16 nodes deployed on a Consolidated Architecture model

D. 1 Management Domain of 4 nodes, 1 Workload Domain of 4 nodes, and 1 Workload Domain of 8 nodes

Which statement is true regarding NSX Manager configuration in a VMware Cloud Foundation environment?

A. NSX Managers can be deployed to different VLANs.

B. The cluster virtual IP address is attached to all NSX Managers.

C. The cluster virtual IP address is used for API and GUI access to NSX Managers.

D. Traffic is load-balanced across all NSX Managers while using the virtual IP address.

A VMware architect has been asked to design a VMware Cloud Foundation solution for an online gaming company.
The Chief Information Officer (CIO) of the company has asked the architect to focus on these requirements:
The environment should be optimized for maximum hardware utilization.
The environment should be highly available.
Which method meets these requirements and is supported for vCenter Server with VMware Cloud Foundation?

A. Storage level snapshots

B. vCenter HA

C. vSphere HA

D. vSphere FT

A vSphere administrator is tasked with enabling Workload Management on a VMware Cloud Foundation Workload Domain.
Which three components are configured as part of the Supervisor Cluster control plane after this task is completed? (Choose three.)

A. Kubernetes Grid Orchestrator

B. Kubernetes Mission Control

C. kubectl-vSphere

D. Spherelet

E. Tanzu Kubernetes Grid Service

F. Container Runtime Executive

Which functionality does a NSX Tier-1 Gateway provide to a vSphere with Tanzu deployment?

A. Downlink connection to segments

B. Downlink connection to Tier-0 gateway

C. Layer 2 Switching

D. Static or dynamic routing

During the design phase for a greenfield VMware Cloud Foundation (VCF) deployment, the following design decisions have been agreed upon:
Stretched Cluster needs to be deployed
Identity and Access Management for VMware Cloud Foundation needs to be deployed
The Infrastructure Architect is working with the client to fill the Planning and Preparation Workbook. The Option for Stretched Cluster has been set to 'Include'. The 'Identity and Access Management' is displaying an error, and its Final Result is stating 'Excluded'.
Which option should be enabled in the Planning and Preparation Workbook to address the issue?

A. Apply Signed Certificates

B. Consolidated Management Domain

C. Clustered Workspace One Access

D. NSX Routing for Management Domain

An architect needs to create a VMware Cloud Foundation (VCF) VI Workload Domain design with these requirements:
Design blueprint needs to be repeatable for additional regions
Multiple availability zones -
Seven nodes per availability zone to host the workloads
vSAN storage will be used
What is the maximum accepted latency supported by vSAN between the two availability zones?

A. 5 ms

B. 10 ms

C. 100 ms

D. 150 ms

VMware vRealize Suite Lifecycle Manager is deployed in VMware Cloud Foundation-aware mode, and the VMware Cloud Foundation version is 4.4 or higher.
A new release of VMware vRealize Automation is available with features the automation team requires.
What should the VCF administrator consider to upgrade?

A. Install the version of vRealize Automation that is contained in the VMware Cloud Foundation Bill of Materials.

B. Upgrade all vRealize Suite products managed by vRealize Suite Lifecycle Manager to the same version as vRealize Automation.

C. Upgrade vRealize Automation to the version requested by the automation team.

D. Install a version of vRealize Automation compatible with vRealize Suite Lifecycle Manager in the VMware Cloud Foundation Bill of Materials.

Which two requirements are needed to add new hosts to an existing VI workload in a VMware Cloud Foundation environment? (Choose two.)

A. The host uses only the VLAN network.

B. The host uses heterogenous hardware.

C. The host uses a minimum of four network ports.

D. The host uses the same storage type as the existing cluster hosts.

E. The host uses the same network pool.

A systems administrator has recently added newly-commissioned hosts in the VI workload domain, and IP addresses are automatically configured to their associated network pool. The administrator reviews which storage options require only vMotion and NFS networks in the network pool.
Which two storage options have this requirement? (Choose two.)

A. vSAN

B. vVols on NFS

C. vSAN and NFS

D. NFS

E. vVols on ISCSI

Which two components are required when planning for stretched clusters in a VMware Cloud Foundation environment? (Choose two.)

A. There must be separate Network Pools for each Availability Zone.

B. A third site is required for a witness host.

C. The host overlay network can use static IP addresses.

D. Use shared vSphere vMotion, vSAN, and host overlay networks.

E. The round-trip time (RTT) between sites must be ≤ 15 milliseconds.

A VCF architect collected the following requirements when designing the expansion of a new VI Workload Domain with twenty-four vSAN Ready nodes, each with a dual-port 25Gbps network interface card:
Provide scalable high-performance networking with layer-3 termination at top-of-rack
Protect workloads from switch/NIC/rack failure
Provide isolation for DMZ workloads
Provide at-least 25Gbps dedicated bandwidth to backup traffic
Easily accept workloads on traditional VLAN-backed networks
Fully-supported by VMware -
Which three design considerations meet all of these requirements? (Choose three.)

A. Core Aggregation network topology

B. Spine and Leaf network topology with layer-3 at top of rack

C. Two-node Edge Cluster with ECMP

D. Stretched Clustering

E. Spine and Leaf network topology with layer-3 at Spine

F. Two-node Edge Cluster with BFD