VCF design workshops have been conducted, and the architect collected the following customer requirements for the newly planned VCF infrastructure:
•	The new VCF infrastructure is targeting two zones: DEV/UAT and DMZ.
•	The infrastructure team requested that the number of management components be minimized as much as possible.
•	Eight hosts should be ordered for the DEV/UAT environment.
•	Four hosts should be ordered for the DMZ environment.
•	The DEV/UAT workloads must comply with an erasure coding vSAN storage policy and have the ability to tolerate the failure of two hosts.
Which workload domain sizing will be required to achieve these requirements?

A. 12-hosts workload domain for both zones, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ cluster

B. 8-hosts DEV/UAT workload domain, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

C. 8-hosts DEV/UAT workload domain, having a 4-hosts DEV cluster, and a 4-hosts UAT cluster, in addition to a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

D. 12-hosts workload domain for both zones, having a 4-hosts DEV cluster, a 4-hosts UAT cluster, and a 4-hosts DMZ cluster

What is required as part of enabling the Harbor Image Registry?

A. Access Control

B. Tanzu Enabled Cluster

C. Resource Limits

D. Storage Policy

What limits can an administrator configure on a vSphere Namespace for a VMware Cloud Foundation Developer-Ready Workload Domain?

A. Secrets

B. Tanzu Kubernetes Cluster worker nodes

C. Tanzu Kubernetes Cluster master nodes

D. Persistent Volumes

Which type of storage entity is used as the backing disks for persistent volumes in vSphere with Tanzu?

A. Thick provisioned VMDK

B. Raw Device Mapping (RDM)

C. First Class Disk (FCD)

D. Virtual Volumes (vVOLs)

An administrator needs to upgrade the current VMware Cloud Foundation (VCF) environment from version 4.1 to 4.3, knowing that the environment has direct access to the internet.
Which steps should be performed to download the online bundles?

A. 1. SDDC Manager checks depot.vmware.com.2. The administrator accesses SDDC Manager.3. The administrator downloads the bundles from SDDC Manager.

B. 1. SDDC Manager checks depot.vmware.com.2. The administrator accesses vSphere Lifecycle Manager.3. The administrator downloads the bundles from vSphere Lifecycle Manager.

C. 1. vSphere Lifecycle Manager checks depot.vmware.com.2. The administrator accesses vSphere Lifecycle Manager.3. The administrator downloads the bundles from vSphere Lifecycle Manager.

D. 1. vSphere Lifecycle Manager checks depot.vmware.com.2. The administrator accesses SDDC Manager.3. The administrator downloads the bundles from SDDC Manager.

An administrator is tasked with deploying a new VI Workload Domain into an existing VMware Cloud Foundation environment.
Which three initial shared storage types are supported? (Choose three.)

A. vVols

B. NFS v3

C. NFS v4.1

D. vSAN

E. SMB 3.0

F. VMFS on iSCSI

An architect is designing overlay networking and routing for two VMware Cloud Foundation VI workload domains.
The following requirements must be met in the design:
NSX-T Bare Metal Edge nodes are required to satisfy a requirement for extremely low latency.
The costs must be kept to a minimum.
Which design meets these customer requirements?

A. Create separate NSX-T Manager clusters for each workload domain, and then create separate NSX-T Bare Metal Edge clusters for each workload domain.

B. Place the Bare Metal Edge nodes in the same rack as the management domain hosts, and then add the NSX-T Bare Metal Edge cluster to the management domain NSX-T Manager cluster.

C. Share an NSX-T Manager cluster between both workload domains, and then add the NSX-T Bare Metal Edge cluster to the shared NSX-T Manager cluster.

D. Create separate NSX-T Manager clusters for each workload domain, and then create a single NSX-T Bare Metal Edge cluster to be shared between NSX-T Manager clusters.

Which order of steps should an administrator use to replace a failed host in a stretched cluster?

A. 1.Decommission the failed host.2. Remove the host using cluster APIs.3. Add the newly commissioned host to the cluster using cluster APIs.4. Commission the new host with the correct network.

B. 1. Decommission the failed host.2. Remove the host using cluster APIs.3. Commission the new host with the correct network.4. Add the newly commissioned host to the cluster using cluster APIs.

C. 1. Remove the host using cluster APIs.2. Decommission the failed host.3. Commission the new host with the correct network.4. Add the newly commissioned host to the cluster using cluster APIs.

D. 1. Remove the host using cluster APIs.2. Decommission the failed host.3. Add the newly commissioned host to the cluster using cluster APIs.4. Commission the new host with the correct network.

An administrator is planning to deploy an edge cluster in a VMware Cloud Foundation environment.
Which three NSX components are automated during this deployment? (Choose three.)

A. Tier-0 VRF gateway configuration

B. Edge VM deployment

C. Segments for VM workloads

D. Edge Uplink Profile configuration

E. Tier-0 and Tier-1 gateway configuration

F. Transport Node Profile configuration

A systems administrator has recently added newly-commissioned hosts in the VI workload domain, and IP addresses are automatically configured to their associated network pool. The administrator reviews which storage options require only vMotion and NFS networks in the network pool.
Which two storage options have this requirement? (Choose two.)

A. vSAN

B. vVols on NFS

C. vSAN and NFS

D. NFS

E. vVols on ISCSI

An administrator is tasked with deploying a new VI Workload Domain with VMFS on FC storage.
Which type of network pool must the hosts be associated with while adding them to VCF inventory?

A. NFS only network pool

B. Network pool with vMotion and iSCSI

C. vMotion only network pool

D. iSCSI only network pool

A VMware Cloud Foundation consultant has a requirement to enable task-based backups for the SDDC Manager. What are two steps that need to be pre-configured to achieve this goal? (Choose two.)

A. Register with a VADP image-level backup solution.

B. Create an Image-Based backup job.

C. Register VCSA with a backup proxy.

D. Create a File-Based backup job.

E. Register an external backup repository.

An administrator is tasked with resetting a root password which has expired for one of the Workspace One Access (WSA) cluster nodes. The administrator has already reset the password directly on the WSA cluster node(s).
Which additional step must the administrator take to update the password in the SDDC Manager database?

A. Manually change the password in SDDC Manager using the “Update” button.

B. Remediate the password in SDDC Manager using the “Remediate” button.

C. Schedule the password rotation in SDDC Manager in the next five minutes using the “Schedule Rotation” button.

D. Rotate the password in SDDC Manager using the “Rotate Now” button.

What is the correct sequence of steps to add a new VI Workload Domain in a VMware Cloud Foundation environment?

A. 1. Configure DNS.2. Create a network pool.3. Commission hosts.4. Add licenses to SDDC Manager.5. Create the workload domain.

B. 1. Configure DNS.2. Commission hosts.3. Create a network pool.4. Add licenses to SDDC Manager.5. Create the workload domain.

C. 1. Create a network pool.2. Commission hosts.3. Add licenses to SDDC Manager.4. Create the workload domain.

D. 1. Create a network pool.2. Commission hosts.3. Create the workload domain.4. Add licenses to SDDC Manager.

An administrator is tasked with changing the password of the SDDC Manager super user account in a newly installed VCF environment.
Which method must the administrator use to complete this task?

A. 1. SSH in to the SDDC Manager VM using the vcf user account.2. Switch to the root user.3. Enter the passwd vcf command.4. Enter and retype the new password.

B. 1. Log in to SDDC manager UI as a user with the ADMIN role.2. Go to Administration > Security > Password Management.3. Select the SDDC Manager account from the component drop-down menu.4. Click Rotate Now button.

C. 1. Log in to the SDDC manager UI as a user with the ADMIN role.2. Go to Developer Center > API Explorer.3. Expand APIs for managing users.4. Update password for roof user.

D. 1. SSH in to the SDDC Manager VM using the vcf user account.2. Switch to the root user.3. Enter the passwd admin command.4. Enter and retype the new password.

A customer is leveraging vRA to provision workloads to a consolidated VCF domain cluster. Due to the increased demand of customer workloads, more capacity is now needed. The architect provides information on scaling the customer’s consolidated design.
Which statement accurately characterizes this design?

A. Migrating to a standard design will require redeploying the infrastructure from scratch.

B. Migrating to a standard design should be considered after reaching 8 or 10 nodes in the consolidated design.

C. A VMware GSS team must be involved during the process of migrating to a consolidated design.

D. A consolidated design will not support the addition of multiple clusters.

A VMware Cloud Foundation administrator created a Tanzu Namespace in one of the workload domains.
Which two functions related to permissions can be performed on the newly created Namespace? (Choose two.)

A. Add permissions to local vSphere with Tanzu users only.

B. Permissions can be set to either view or edit.

C. Add a custom role to create more granular permissions.

D. Add permissions only from the vSphere.local domain.

E. Add permissions to users from vCenter Single Sign-On identity sources.

Which two roles are played by a Spherelet in a Tanzu-enabled VCF workload domain? (Choose two.)

A. It starts and monitors vSphere pods running on the workload domain cluster.

B. It communicates with the vSphere with Tanzu embedded Harbor registry.

C. It runs as a VIB on all Supervisor Cluster ESXi hosts configured with the vSphere Networking Stack.

D. It enables an ESXi hypervisor to act as a Kubernetes master node.

E. It enables an ESXi hypervisor to act as a Kubernetes worker node.

What is a supported function of the vSphere Lifecycle Manager (LCM) in VMware Cloud Foundation (VCF)?

A. Upgrade SDDC Manager

B. Downgrade VM hardware version

C. Check hardware compatibility of hosts and clusters

D. Upgrade vCenter Server

An architect needs to create a VMware Cloud Foundation (VCF) VI Workload Domain design with these requirements:
Design blueprint needs to be repeatable for additional regions
Multiple availability zones -
Seven nodes per availability zone to host the workloads
vSAN storage will be used
What is the maximum accepted latency supported by vSAN between the two availability zones?

A. 5 ms

B. 10 ms

C. 100 ms

D. 150 ms

What is a characteristic about the Credentials Worksheet in the Deployment Parameter Workbook?

A. Passwords can be different per user.

B. Passwords can be common only for appliance users.

C. Passwords must be different per user.

D. Passwords must be common across all users.

Which two NSX-T Data Center components are present in VMware Cloud Foundation when Application Virtual Networks (AVNs) are deployed? (Choose two.)

A. NSX Load Balancer

B. NSX Global Manager

C. NSX Intelligence

D. NSX Edge Cluster

E. NSX segments

An administrator needs additional capacity on a vSAN cluster. Each host currently has only one disk group.
Which two approaches can be used to expand storage capacity in this situation? (Choose two.)

A. Add an additional disk group.

B. Increase the number of cache disks in the existing disk group.

C. Increase the number of capacity disks in the existing disk group.

D. Disable compression.

E. Disable deduplication

Which functionality is provided by NSX Global Manager?

A. Global Managers move control plane to a central place.

B. Configurations requiring protection against site failures must be configured in the Global Manager.

C. Global configurations are sent to all Local Managers.

D. Global Managers move all existing Local Manager configuration to the Global Manager.

An administrator wants to delete a VMware Cloud Foundation Workload Domain and re-use the attached ESXi hosts by returning them to the list of unassigned hosts in the SDDC Manager inventory.
Which action needs to be taken to complete this task?

A. ESXi hosts need to be re-imaged and updated.

B. ESXi hosts need to be decommissioned and re-imaged.

C. ESXi hosts need to be re-imaged and rejoined.

D. ESXi hosts need to be decommissioned and updated.

Where is the Harbor Image Registry service enabled?

A. vSAN Cluster

B. Supervisor Cluster

C. vSphere Cluster

D. Supervisor Namespace

An administrator wants to scale an existing VMware Cloud Foundation (VCF) environment by adding a new VI Workload Domain.
Which two storage options can be used for the new VI Workload Domain? (Choose two.)

A. iSCSI principal storage with SMB supplemental storage

B. vSAN principal storage with SMB supplemental storage

C. vSAN principal storage with VMFS on FC supplemental storage

D. vSAN principal storage with NFS supplemental storage

E. vVOL principal storage with SCSI supplemental storage

Which two features are supported when implementing NSX Federation? (Choose two.)

A. NAT operations

B. Identity Firewall

C. DHCP dynamic binding

D. Load Balancer

E. DHCP

An administrator is tasked with replacing the default, self-signed certificates in a VMware Cloud Foundation environment.
The administrator begins by completing the three tasks which must be executed to prepare a Microsoft Active Directory Certificate Services authority to integrate with VMware Cloud Foundation.
Which three tasks were executed by the administrator? (Choose three.)

A. Join the vCenter server instances to the Active Directory domain.

B. Modify the “Web Server” template to include User Authentication.

C. Enable Active Directory authentication for Certificate Services.

D. Assign the “Issue and Manage Certificates” permission to the SDDC Manager service account.

E. Create a new template that supports Server Authentication and proof of origin.

F. Enable Basic authentication for Certificate Services.

What are the minimum hardware requirements to run customer workloads within a cluster in a VI workload domain considering maintenance operations without risking availability?

A. Two vSAN Ready Nodes (ROBO) with two 10GbE NICs, and optionally one 1GbE BMC NIC

B. Four vSAN Ready Nodes with two 25GbE NICs

C. Three vSAN Ready Nodes with two 10GbE NICs, and optionally one 1GbE BMC NIC

D. Three vSAN Ready Nodes with two 25GbE NICs

What is the correct upgrade order for VMware Cloud Foundation (VCF) components for a VI workload domain with a stretched vSAN cluster?

A. 1. NSX-T2. vCenter Server3. ESXi hosts4. vSAN Witness host

B. 1. vCenter Server2. NSX-T3. ESXi hosts4. vSAN Witness host

C. 1. vSAN witness host2. NSX-T3. ESXi hosts4. vCenter Server

D. 1. vSAN witness host2. NSX-T3. vCenter Server4. ESXi hosts

Which two switches can be used to perform log collection using the SoS tool? (Choose two.)

A. –psc-logs

B. –vcenter-logs

C. –nsxt-logs

D. –wcp-logs

E. –sddc-logs

A VCF architect collected the following requirements when designing the expansion of a new VI Workload Domain with twenty-four vSAN Ready nodes, each with a dual-port 25Gbps network interface card:
Provide scalable high-performance networking with layer-3 termination at top-of-rack
Protect workloads from switch/NIC/rack failure
Provide isolation for DMZ workloads
Provide at-least 25Gbps dedicated bandwidth to backup traffic
Easily accept workloads on traditional VLAN-backed networks
Fully-supported by VMware -
Which three design considerations meet all of these requirements? (Choose three.)

A. Core Aggregation network topology

B. Spine and Leaf network topology with layer-3 at top of rack

C. Two-node Edge Cluster with ECMP

D. Stretched Clustering

E. Spine and Leaf network topology with layer-3 at Spine

F. Two-node Edge Cluster with BFD

A VCF administrator is preparing to configure scheduled backups for the SDDC Manager.
What must the administrator register as an external component to complete this task?

A. NFS server

B. SMB server

C. iSCSI server

D. SFTP server

Which two functions are served by a storage policy in vSphere with Tanzu Namespace? (Choose two.)

A. Kubernetes Cluster Nodes’ datastore placement

B. Content library created for TKG releases

C. Container Backup volumes

D. NSX-T Tier-0 Gateway placement

E. Container Persistent volumes

During a VCF design workshop, the architect gathered the following customer requirements:
•	There should be two environments: PROD and DEV.
•	PROD and DEV workloads should communicate without traversing the physical network.
•	The PROD workload domain should be separate from the DEV workload domain.
•	The VCF infrastructure design should be flexible and scalable as much as possible.
How many total NSX manager cluster(s) will be deployed as part of the solution?

A. 1

B. 4

C. 2

D. 3

An architect needs to create a VMware Cloud Foundation (VCF) VI Workload Domain design with the following requirements:
•	Design blueprint needs to be repeatable for additional regions
•	Multiple availability zones
•	Seven nodes per availability zone to host the workloads
•	vSAN storage will be used
What is the maximum accepted latency supported by vMotion between the two availability zones?

A. 100 ms

B. 150 ms

C. 10 ms

D. 200 ms

An administrator is creating a VMFS on FC-based VI Workload Domain.
Which two licenses must already be present in the SDDC Manager inventory? (Choose two.)

A. VMware NSX-T Data Center

B. VMware vSphere

C. VMware vSAN

D. VMware vRealize Suite Lifecycle Manager

E. VMware Workspace ONE Access

An architect is decommissioning a host from a VI Workload Domain and wants to reuse it in a VMware Cloud Foundation environment.
Which statement accurately describes this process?

A. Use the decommission host workflow against a host with an unassigned state, and then run the commission host workflow.

B. Use the decommission host workflow against a host with an unassigned state, re-image the host, and then run the commission host workflow.

C. Use the decommission host workflow against a host with an assigned state, re-image the host, and then run the commission host workflow.

D. Use the decommission host workflow against a host with an assigned state, and then run the commission host workflow.

A VMware administrator is tasked to upgrade a VMware Cloud Foundation (VCF) environment that is running on DellEMC PowerEdge servers.
During the ESXi software upgrade for the VI Workload Domain hosts, the administrator receives an error stating that the correct storage driver is not available, although the storage adapters are enabled in the BIOS.
Which action should the administrator take to fix this issue?

A. Use the image for the ESXi build in the VCF bill of materials.

B. Upgrade the storage adapter firmware to the latest version.

C. Upgrade the BIOS firmware to the latest version.

D. Use the Dell EMC customized image for the ESXi build in the VCF bill of materials.

Which two configurations are part of the VMware Cloud Builder validation process? (Choose two.)

A. Passwords: Validates specified passwords. Checks for minimum length, invalid characters, and format

B. License key: Validates format, validity, and expiry for ESX, vSAN, vCenter Server, NSX, vRealize Suite, and Log Insight license keys

C. Network configuration: Validates CIDR to IP address validity, IP addresses in use, gateways, invalid or missing VLANs, invalid or missing MTU, and network spec availability for all components

D. Availability configuration: Validates the access to the configured backup locations

E. Certificates: Validates certificates for ESX, vCenter Server, and NSX

VMware vRealize Suite Lifecycle Manager is deployed in VMware Cloud Foundation-aware mode, and the VMware Cloud Foundation version is 4.4 or higher.
A new release of VMware vRealize Automation is available with features the automation team requires.
What should the VCF administrator consider to upgrade?

A. Install the version of vRealize Automation that is contained in the VMware Cloud Foundation Bill of Materials.

B. Upgrade all vRealize Suite products managed by vRealize Suite Lifecycle Manager to the same version as vRealize Automation.

C. Upgrade vRealize Automation to the version requested by the automation team.

D. Install a version of vRealize Automation compatible with vRealize Suite Lifecycle Manager in the VMware Cloud Foundation Bill of Materials.

Which option is supported to upgrade the ESXi 7.x hosts for a vSAN stretched cluster in a VMware Cloud Foundation environment?

A. vSphere Update Manager Baselines

B. vSphere Lifecycle Manager Baselines

C. vRealize Suite Lifecycle Manager

D. vSphere Lifecycle Manager Images

A VMware architect has been tasked to deploy a VCF environment for a large federal organization. Security, availability, and redundancy are key requirements for the deployment. The administrator has been asked to keep the cost down as well.
A standard deployment of VCF is being planned for the headquarters. The first VI domain is estimated to have 5,000 VMs.
Which vCenter Server appliance sizing should the architect use for the VI workload domain?

A. Large vCenter Server appliance with default storage size

B. Small vCenter Server appliance with X-Large storage size

C. Medium vCenter Server appliance with large storage size

D. Medium vCenter Server appliance with default storage size

VCF design workshops were conducted, and the architect collected the following customer requirements for the newly planned VCF infrastructure:
The new VCF infrastructure must target two zones: DEV/UAT and DMZ.
The security team would like to have full management and network isolation between these two zones.
12 hosts have been ordered for the solution.
DEV/UAT workloads must comply with an erasure coding vSAN storage policy with the ability to tolerate the failure of two hosts.
Which workload domain sizing will be required to achieve these requirements?

A. 12-hosts workload domain for both zones, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ cluster

B. 8-hosts DEV/UAT workload domain, having a 4-hosts DEV cluster, and a 4-hosts UAT cluster, in addition to a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

C. 8-hosts DEV/UAT workload domain, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

D. 12-hosts workload domain for both zones, having a 4-hosts DEV cluster, a 4-hosts UAT cluster, and a 4-hosts DMZ cluster

Which two configuration steps must a VMware Cloud Foundation administrator apply to achieve north/south connectivity while setting up an edge VM node for a workload domain from the SDDC Manager user interface? (Choose two.)

A. ToR Switches VRFs

B. vSphere VDS Uplinks

C. NSX VDS Uplinks

D. OSPF Configuration

E. BGP Configuration

Which two steps must be performed to create a vSphere with Tanzu namespace? (Choose two.)

A. Deploy a vSphere Cluster

B. Enable Harbor Image Registry

C. Use a DNS-compliant name

D. Assign permissions

E. Define resource limits

What do VM Storage Policies match to when using vSphere with Tanzu?

A. Kubernetes storage classes in the Supervisor Cluster

B. Kubernetes datastores in a namespace

C. Kubernetes storage classes in a namespace

D. Kubernetes datastores in the Supervisor Cluster

Which two functionalities does a NSX Tier-0 Gateway provide to a vSphere with Tanzu deployment? (Choose two.)

A. Connectivity to physical networks and routers

B. Downlink Connections to Segments

C. Layer 2 Switching

D. Gateway for Segments

E. Connectivity to all Tier-1 Gateways

What is a valid procedure to replace an expired vSAN license in a VMware Cloud Foundation environment?

A. 1. Add a new vSAN license to the SDDC Manager and vCenter Server.2. Reassign the vSAN license to the cluster in the vCenter Server.3. Remove the expired vSAN license from the SDDC Manager and vCenter Server.

B. 1. Add a new vSAN license to the vCenter Server.2. Connect to SDDC Manager via SSH, and then restart Lifecycle Management using systemctl restart lcm.3. Verify in the vCenter Server whether a new vSAN license has been assigned to the cluster.

C. 1. Add a new vSAN license to the SDDC Manager.2. Connect to SDDC Manager via SSH, and then restart Domain Manager using systemctl restart domainmanager.3. Verify in the SDDC Manager whether a new vSAN license has been assigned to the cluster.

D. 1. Add a new vSAN license to the SDDC Manager.2. Reassign the vSAN license to the cluster in the SDDC Manager.3. Remove the expired vSAN license from the SDDC Manager.