Which step in vSphere with Tanzu enablement using the vSphere Distributed Switch process is done prior to using the Workload Management Enablement Wizard?

A. Deploy the load balancer

B. Choose the Kubernetes content library that should be used in the Supervisor Cluster

C. Define the Primary workload network IP range

D. Define the Management network interfaces for the Supervisor Cluster

How are updates applied to Tanzu Kubernetes clusters?

A. The cluster is shutdown, Update Manager applies patches to VMs, and the cluster is restarted.

B. Worker nodes are shutdown while Controllers are patched and restarted after the update.

C. New nodes are incrementally added with new Kubernetes versions so as a new node is added, an older node is removed.

D. A new cluster is completely configured and runs in parallel to the primary cluster prior to switchover.

Which command should be used by a developer to log in to the vSphere with Tanzu Supervisor Cluster?

A. vmwarectl login –server= –vsphere-username

B. kubectl vsphere login –server= –vsphere-username

C. vmwarectl vsphere login –server- –vsphere-username

D. kubectl login –server= –vsphere-username

Which two actions are orchestrated by the NSX Container Plugin (NCP)? (Choose two.)

A. Creation of an embedded registry

B. Creation of an NSX Edge

C. Creation of a portgroup

D. Creation of a service

E. Creation of a network policy

How would information be found about which Kubernetes cluster and pod are using a given PersistentVolume in vSphere?

A. Through the file browser in the Datastore view within vCenter

B. By querying the CNS API using the esxcli command

C. Using the vSphere Client, go to the Cloud Native Storage view for the datastore

D. By using vmwarectrl get persistentvolumes command

An administrator is tasked with horizontally scaling an existing Tanzu Kubernetes cluster from 6 to 4 nodes.
Which action does the administrator need to complete to ensure the cluster scales successfully when updating the YAML definition?

A. Decrease the number of control plane nodes to 4.

B. Decrease the number of worker nodes to 4.

C. Update the Virtual Machine Class Type.

D. Update the Kubernetes version to the latest supported version.

What can be used to define whether a vSphere pod can be scaled?

A. Deployment

B. Namespaces

C. Persistent Volume

D. Network Policies

A developer is trying to deploy a Kubernetes Application by using an image from the embedded Registry Service into an existing Namespace within a Supervisor Cluster.
Which three steps must be completed to ensure the deployment is successful? (Choose three.)

A. Include the image: //: in the YAML spec.

B. Run kubectl config use-context to switch to the correct namespace.

C. Run kubectl config set-context to switch to the correct namespace.

D. Pull the image into the Registry service with docker pull //:.

E. Include the image: /: in the YAML spec.

F. Push the image to the Registry service with docker push //:.

Which Kubernetes Service Types exposes the service externally using a static port?

A. Headless

B. NodePort

C. ExternalName

D. ClusterIP

Which is a valid version change for a Tanzu Kubernetes cluster running Kubernetes version 1.16.7?

A. Upgrade one major version (e.g., 2.0.1)

B. Upgrade two minor versions (e.g., 1.18.0)

C. Downgrade one patch version (e.g., 1.16.5)

D. Upgrade one minor version (e.g., 1.17.0)

Which statement provides the most accurate description for the Sphere let?

A. The Spherelet allows the ESXi host to become part of the Kubernetes cluster.

B. The Spherelet provides high availability for the Kubernetes cluster.

C. The Spherelets exist as VMs and are load balanced, each with their own IP address.

D. The Spherelet includes a paravirtualized Linux kernel that works together with the hypervisor.

At which three levels of the vSphere Client is information about Kubernetes Persistent Volumes found? (Choose three.)

A. Resource Pool

B. Cluster

C. vCenter

D. Datastore

E. Virtual Machine

F. Network

Which vSphere with Tanzu Workload Network topology provides Layer 2 isolation between Tanzu Kubernetes clusters across namespaces when vSphere Distributed Switches are used?

A. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and separate Workload Networks for each namespace

B. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and a single Workload Network for namespaces

C. A single Workload Network for the Supervisor Cluster control plane VMs and Tanzu Kubernetes clusters

D. Distributed firewall rules to isolate namespaces

What is the proper way to delete a Persistent Volume Claim?

A. By using the kubectl delete persistentvolumeclaim command

B. By using the kubectl remove pvc command

C. Through the SPBM policy engine using the vSphere Client

D. By unmounting the volume from the VM and deleting it from the vSphere datastore

The Gold storage policy has been assigned to the Web namespace, and the DevOps engineer wants to place a persistent volume for the Web application in the Gold storage class.
How should this goal be accomplished?

A. Indicate the Gold storage class in the persistent volume claim specification

B. Assign the persistent volume to the Gold storage class

C. Indicate the Gold storage class in the persistent volume specification

D. Configure tag-based placement for the persistent volume

A user needs to identify the namespaces that may be accessed.
Which command will provide the desired output?

A. kubectl get storageclasses

B. kubectl config use-context

C. kubectl config get-contexts

D. kubectl get contexts

What is the minimum number of virtual distributed portgroups that must be configured on the vSphere Distributed Switch before enabling Workload Management using the vSphere networking stack and a HAProxy load balancer?

A. 2

B. 1

C. 4

D. 3

An administrator needs to get a list of all Tanzu Kubernetes clusters running in the current namespace.
Which command will provide the desired output?

A. kubectl get vmservice

B. kubectl get clusters

C. kubectl get virtualnetwork

D. kubectl get tanzukubernetescluster

A HAProxy appliance has been deployed using a 3 NIC configuration.
Which network will developers and external services use to connect?

A. DMZ

B. Frontend

C. HAProxy

D. Workload

Which step is necessary in order to allocate storage to a newly created namespace?

A. Assign a VM Storage Policy

B. Assign permissions to users

C. Define resource limits

D. Add a content library

Which process should be used to upgrade the vSphere with Tanzu Supervisor Cluster?

A. Use the vSphere Client, navigate to Workload Management, and apply updates.

B. Use kubectl, and apply an update manifest specification to the Supervisor Cluster.

C. Use the vSphere Client, navigate to vSphere Lifecycle Manager, and apply updates.

D. Allow vSphere with Tanzu Supervisor Cluster to upgrade automatically when new versions are available.

How can a vSphere administrator replace the Supervisor Cluster API endpoint certificate?

A. Use the certificate-manager CLI utility to replace the Supervisor Cluster API endpoint certificate.

B. Use the vSphere Client to replace the Workload platform MTG certificate.

C. Use the vSphere Client to replace the NSX Load Balancer certificate.

D. Use kubectl to replace the Supervisor Cluster API endpoint certificate.

The application development team is pushing a Kubernetes application into production. It consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?

A. Yes, by using kubectl to create a Network Policy that only allows pods on the same network segment to talk to each other.

B. Yes, by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database.

C. Yes, by using kubectl to create a policy that disables pod to pod communication in the Namespace.

D. No, Kubernetes Network Policy does not support this action.

Which two networks are used to attach Supervisor Cluster control plane VMs when using the vSphere networking stack? (Choose two.)

A. vMotion

B. Frontend

C. Primary workload

D. Management

E. Non-primary workload

What is automatically created within NSX-T when an administrator creates a new namespace in the vSphere client?

A. A new segment connected to a Tier-1 gateway and a new overlay transport zone

B. A new segment connected to a Tier-0 gateway and a new overlay transport zone

C. A new segment connected to a Tier-0 gateway and an existing overlay transport zone

D. A new segment connected to a Tier-1 gateway and an existing overlay transport zone

Which functionality does the Cloud Native Storage (CNS) component take advantage of to support the creation of container volumes?

A. First Class Disk

B. VMware Disk Encryption

C. Virtual Disk

D. Storage Based Policy Management

What should be increased or reduced in order to scale a Tanzu Kubernetes cluster up or down?

A. The number of Pods that it contains

B. The number of Namespaces that it contains

C. The number of Deployments that it contains

D. The number of worker nodes that it contains

Which object is deployed on the workload network when vSphere with Tanzu is configured with vSphere network stack?

A. Windows Virtual Machines

B. Registry Service

C. Tanzu Kubernetes clusters

D. NSX Edge

An administrator is planning the deployment of a vSphere with Tanzu using an NSX-T environment and must ensure that the control plane VMs and container images are placed onto different datastores. The administrator decides to create two datastores and apply differently named tags to each datastore.
Which additional action would the administrator need to perform to meet this requirement?

A. Create two storage policies with different tag criteria and apply to the Supervisor Cluster using the vSphere Client.

B. Create two storage policies with different tag criteria and apply to the Supervisor Cluster using kubectl commands.

C. Create two storage policies with all tag criteria and apply to the Supervisor Cluster using kubectl commands.

D. Create a single storage policy containing all tag criteria and apply to the Supervisor Cluster using the vSphere Client.

Which statement accurately describes a vSphere with Tanzu Supervisor Cluster?

A. It is a Kubernetes cluster deployed by developers using a YAML specification file.

B. It aggregates hosts across vSphere clusters to form a Kubernetes cluster on vSphere.

C. It enables vSphere High Availability and Distributed Resource Scheduler.

D. It exposes a Kubernetes API for use by DevOps teams.

Which authentication method is supported for logging into the vSphere with Tanzu Supervisor cluster?

A. Key-based authentication

B. Workspace ONE access

C. Static username and password

D. vCenter Single Sign-On

Which requirement is valid for vSphere with Tanzu on vSphere Distributed Switch Network?

A. Workload networks that are routable to the primary workload network

B. HAProxy Virtual Server IP range that is allocated to NSX-T edge router external interface

C. Network Interface Cards with Single Root IO Virtualization Support (SR-IOV)

D. HAProxy Frontend Interface that has a common subnet and bridged interface to workload networks

Which command will display the container image(s) used in a vSphere pod deployment name nginx-deployment?

A. kubectl get deployment nginx-deployment

B. kubectl get pod nginx

C. kubectl describe deployment nginx-deployment

D. docker ps

On which network are TKG clusters deployed in vSphere with Tanzu when using the vSphere networking stack?

A. Workload

B. Backend

C. Edge

D. Frontend

When creating a Supervisor Namespace, which item must be added to ensure that the end user can consume the namespace?

A. Content Library

B. Permissions

C. Storage

D. Limits

Which description accurately characterizes virtual machine class types for Tanzu Kubernetes cluster (TKC) nodes?

A. A best-effort class does not provide high availability for TKC nodes.

B. A best-effort class reserves CPU and Memory resources for TKC nodes.

C. A guaranteed class provides high availability for TKC nodes.

D. A guaranteed class reserves CPU and Memory resources for TKC nodes.

How does Kubernetes implement the vSphere storage policy in vSphere with Tanzu?

A. Storage class

B. Paravirtual CSI

C. Static Persistent Volume

D. Persistent Volume

Which three elements should be configured by a vSphere administrator after creating vSphere Namespace? (Choose three.)

A. Permissions

B. Capacity and Usage limits

C. License

D. Namespace name

E. Storage Policy

F. NSX Segment

Which kubectl command is used to list the Kubernetes services in the current active namespace?

A. kubectl get services

B. kubectl get loadbalancer

C. kubectl services get ip

D. kubectl list services

Kubernetes object types are going to be limited by an administrator within a vSphere with Tanzu namespace.
Which three Kubernetes object types may be limited? (Choose three.)

A. Number of Persistent Volume Claims

B. Number of Pods

C. Number of Operators

D. Number of DaemonSets

E. Number of Ingress frontends

F. Number of Load Balancer Services

Which statement accurately describes the Primary Workload Network?

A. It carries traffic between load balancer and vCenter.

B. It carries traffic between load balancer and Supervisory control plane.

C. It is created by developers as part of TKG cluster deployment.

D. It carries traffic between Supervisory control plane and vCenter.

Which command provides valid syntax to deploy a vSphere Pod?

A. tkg apply -c containerName

B. docker run containerName

C. kubectl apply -c deployment.yaml

D. kubectl apply -f deployment.yaml

Which corresponding object is automatically created in the embedded Registry Service when a new Namespace is created in the Supervisor Cluster?

A. Pod

B. Project

C. Container

D. Image

Where are the virtual machine images stored that are used to deploy Tanzu Kubernetes clusters?

A. Content Library

B. Supervisor Cluster

C. Harbor Image Registry

D. Namespace

The creation of which object by an administrator in the vSphere client automatically results in the creation of a new segment within NSX-T?

A. Service

B. Pod

C. Network policy

D. Namespace

Which summary page should an administrator use in the vSphere Client to identify the CPU resources consumed in a namespace?

A. ESXi host

B. Namespace

C. vSphere cluster

D. Supervisor Cluster

Which kubectl command should be used to change the active vSphere namespace to namespace-01?

A. kubectl config use-context namespace-01

B. kubectl describe ns namespace-01

C. kubectl get ns namespace-01

D. kubectl config change-context namespace-01

Which capability do persistent volumes provide to containerized applications?

A. Automated disk archival

B. Support for in-memory databases

C. Support for ephemeral workloads

D. Retention of application state and data

An administrator needs to limit resource consumption within a vSphere with Tanzu namespace.
Which three actions should be taken to meet this goal? (Choose three.)

A. Limit the capacity of the storage able to be consumed.

B. Change the size of the Supervisor Control Plane nodes.

C. Limit the number of load balancers able to be deployed.

D. Limit the CPU and Memory able to be consumed.

E. Limit the number of Operators able to be deployed.

F. Limit the number of vSphere Pods able to be provisioned.

The application development team plans to test a few CPU intensive applications. The virtualization team is concerned about these applications impacting other teams.
How should the team manage this problem?

A. Set a CPU reservation on the Namespace Resource Pool in vCenter.

B. Add a CPU limit to the Namespace Resource Pool in vCenter.

C. Set a network policy to limit network bandwidth within the vSphere Namespace.

D. Add a CPU limit to the vSphere Namespace for the development team.