VMware vRealize Suite Lifecycle Manager is deployed in VMware Cloud Foundation-aware mode, and the VMware Cloud Foundation version is 4.4 or higher.
A new release of VMware vRealize Automation is available with features the automation team requires.
What should the VCF administrator consider to upgrade?

A. Install the version of vRealize Automation that is contained in the VMware Cloud Foundation Bill of Materials.

B. Upgrade all vRealize Suite products managed by vRealize Suite Lifecycle Manager to the same version as vRealize Automation.

C. Upgrade vRealize Automation to the version requested by the automation team.

D. Install a version of vRealize Automation compatible with vRealize Suite Lifecycle Manager in the VMware Cloud Foundation Bill of Materials.

During a VCF design workshop, the architect gathered the following customer requirements:
•	There should be two environments: PROD and DEV.
•	PROD and DEV workloads should communicate without traversing the physical network.
•	The PROD workload domain should be separate from the DEV workload domain.
•	The VCF infrastructure design should be flexible and scalable as much as possible.
How many total NSX manager cluster(s) will be deployed as part of the solution?

A. 1

B. 4

C. 2

D. 3

Which two NSX-T Data Center components are present in VMware Cloud Foundation when Application Virtual Networks (AVNs) are deployed? (Choose two.)

A. NSX Load Balancer

B. NSX Global Manager

C. NSX Intelligence

D. NSX Edge Cluster

E. NSX segments

An architect is decommissioning a host from a VI Workload Domain and wants to reuse it in a VMware Cloud Foundation environment.
Which statement accurately describes this process?

A. Use the decommission host workflow against a host with an unassigned state, and then run the commission host workflow.

B. Use the decommission host workflow against a host with an unassigned state, re-image the host, and then run the commission host workflow.

C. Use the decommission host workflow against a host with an assigned state, re-image the host, and then run the commission host workflow.

D. Use the decommission host workflow against a host with an assigned state, and then run the commission host workflow.

An architect needs to enable the workload management for a VCF VI workload domain and plans on using the minimum requirement for deploying a highly available NSX edge cluster.
What is the minimum requirement for this deployment?

A. A cluster of two small NSX edge nodes

B. A cluster of three large NSX edge node

C. A cluster of two large NSX edge nodes

D. A cluster of one large NSX edge node

Which statement is true regarding NSX Manager configuration in a VMware Cloud Foundation environment?

A. NSX Managers can be deployed to different VLANs.

B. The cluster virtual IP address is attached to all NSX Managers.

C. The cluster virtual IP address is used for API and GUI access to NSX Managers.

D. Traffic is load-balanced across all NSX Managers while using the virtual IP address.

An administrator needs to upgrade the current VMware Cloud Foundation (VCF) environment from version 4.1 to 4.3, knowing that the environment has direct access to the internet.
Which steps should be performed to download the online bundles?

A. 1. SDDC Manager checks depot.vmware.com.2. The administrator accesses SDDC Manager.3. The administrator downloads the bundles from SDDC Manager.

B. 1. SDDC Manager checks depot.vmware.com.2. The administrator accesses vSphere Lifecycle Manager.3. The administrator downloads the bundles from vSphere Lifecycle Manager.

C. 1. vSphere Lifecycle Manager checks depot.vmware.com.2. The administrator accesses vSphere Lifecycle Manager.3. The administrator downloads the bundles from vSphere Lifecycle Manager.

D. 1. vSphere Lifecycle Manager checks depot.vmware.com.2. The administrator accesses SDDC Manager.3. The administrator downloads the bundles from SDDC Manager.

In which order should the VMware Cloud Foundation components in a Management Domain be upgraded?

A. vRealize Suite, SDDC Manager and VMware Cloud Foundation services, NSX-T Datacenter, vCenter Server, ESXi servers

B. SDDC Manager and VMware Cloud Foundation services, vRealize Suite, NSX-T Datacenter, vCenter Server, ESXi servers

C. SDDC Manager and VMware Cloud Foundation services, NSX-T Datacenter, vCenter Server, ESXi servers, vRealize Suite

D. SDDC Manager and VMware Cloud Foundation services, vRealize Suite, NSX-T Datacenter, ESXi servers, vCenter Server

Which type of service is provided when deploying a 3-node clustered Workspace ONE Access using vRealize Suite Lifecycle Manager?

A. Runtime Services

B. Operations Management Services

C. Identity and Access Management Services

D. Automation Services

Which license is required to enable Workload Management on VMware Cloud Foundation?

A. VMware Tanzu Basic

B. VMware vSphere Enterprise Plus

C. VMware vSphere Evaluation

D. VMware vSphere Standard

An administrator is tasked with deploying a new VI Workload Domain into an existing VMware Cloud Foundation environment.
Which three initial shared storage types are supported? (Choose three.)

A. vVols

B. NFS v3

C. NFS v4.1

D. vSAN

E. SMB 3.0

F. VMFS on iSCSI

An architect is designing overlay networking and routing for two VMware Cloud Foundation VI workload domains.
The following requirements must be met in the design:
NSX-T Bare Metal Edge nodes are required to satisfy a requirement for extremely low latency.
The costs must be kept to a minimum.
Which design meets these customer requirements?

A. Create separate NSX-T Manager clusters for each workload domain, and then create separate NSX-T Bare Metal Edge clusters for each workload domain.

B. Place the Bare Metal Edge nodes in the same rack as the management domain hosts, and then add the NSX-T Bare Metal Edge cluster to the management domain NSX-T Manager cluster.

C. Share an NSX-T Manager cluster between both workload domains, and then add the NSX-T Bare Metal Edge cluster to the shared NSX-T Manager cluster.

D. Create separate NSX-T Manager clusters for each workload domain, and then create a single NSX-T Bare Metal Edge cluster to be shared between NSX-T Manager clusters.

A VMware architect has been tasked to deploy a VCF environment for a large federal organization. Security, availability, and redundancy are key requirements for the deployment. The administrator has been asked to keep the cost down as well.
A standard deployment of VCF is being planned for the headquarters. The first VI domain is estimated to have 5,000 VMs.
Which vCenter Server appliance sizing should the architect use for the VI workload domain?

A. Large vCenter Server appliance with default storage size

B. Small vCenter Server appliance with X-Large storage size

C. Medium vCenter Server appliance with large storage size

D. Medium vCenter Server appliance with default storage size

A VMware Cloud Foundation administrator has been tasked with replacing self-signed certificates with those signed by a third-party Certificate Authority. A security policy disallows the integration and use of Microsoft Active Directory Certificate Services and prefers an external provider.
Which two steps must be taken in order to configure these certificates? (Choose two.)

A. Generate Certificate Signing Requests from SDDC Manager.

B. Ensure that the external provider has Administrator rights in vCenter.

C. Create and package the certificates in a domain_name.tar.gz file.

D. Use the sddcmanager-ssl-util.sh utility to list and delete existing certificates.

E. Generate public-private key pairs using the external provider.

A systems administrator wants to integrate Microsoft Certificate Authority with SDDC Manager and has already established a connection between the components.
Which pre-requisite step is required for this integration to work?

A. Verify that the Microsoft Certificate Authority Server has the RBAC roles configured on the same machine where the Certificate Authority role is installed.

B. Verify that the Microsoft Certificate Authority Server has been configured for basic authentication.

C. Verify that a customized certificate template has been configured on the SDDC Manager.

D. Verify that the self-signed certificates have been replaced with signed certificates from Microsoft Certificate Authority.

A VMware Cloud Foundation administrator created a Tanzu Namespace in one of the workload domains.
Which two functions related to permissions can be performed on the newly created Namespace? (Choose two.)

A. Add permissions to local vSphere with Tanzu users only.

B. Permissions can be set to either view or edit.

C. Add a custom role to create more granular permissions.

D. Add permissions only from the vSphere.local domain.

E. Add permissions to users from vCenter Single Sign-On identity sources.

Which two options can be used to create a new VMware Cloud Foundation VI workload domain? (Choose two.)

A. REST API

B. SDDC Manager UI

C. Cloud Builder UI

D. PowerCLI

E. vCenter UI

An administrator has registered an external identity source in a consolidated architecture and would like to make sure that any subsequent workload domains can be accessed using the same identity sources.
How can this goal be achieved with VMware Cloud Foundation?

A. By configuring LDAPS as an identity source

B. By configuring IWA as an identity source

C. By replicating vSphere SSO configuration

D. By keeping the pre-configured defaults

VCF design workshops have been conducted, and the architect collected the following customer requirements for the newly planned VCF infrastructure:
•	The new VCF infrastructure is targeting two zones: DEV/UAT and DMZ.
•	The infrastructure team requested that the number of management components be minimized as much as possible.
•	Eight hosts should be ordered for the DEV/UAT environment.
•	Four hosts should be ordered for the DMZ environment.
•	The DEV/UAT workloads must comply with an erasure coding vSAN storage policy and have the ability to tolerate the failure of two hosts.
Which workload domain sizing will be required to achieve these requirements?

A. 12-hosts workload domain for both zones, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ cluster

B. 8-hosts DEV/UAT workload domain, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

C. 8-hosts DEV/UAT workload domain, having a 4-hosts DEV cluster, and a 4-hosts UAT cluster, in addition to a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

D. 12-hosts workload domain for both zones, having a 4-hosts DEV cluster, a 4-hosts UAT cluster, and a 4-hosts DMZ cluster

Which action(s) can a developer perform on Kubernetes storage classes that are mapped from the VM Storage Policies?

A. Access Only

B. Access and Modify

C. Access, Modify, and Delete

D. Access, Create, and Delete

A VMware architect has been asked to design a VMware Cloud Foundation solution for an online gaming company.
The Chief Information Officer (CIO) of the company has asked the architect to focus on these requirements:
The environment should be optimized for maximum hardware utilization.
The environment should be highly available.
Which method meets these requirements and is supported for vCenter Server with VMware Cloud Foundation?

A. Storage level snapshots

B. vCenter HA

C. vSphere HA

D. vSphere FT

What is a valid way to replace the expiring evaluation Tanzu license for a vSphere with Tanzu cluster?

A. 1. Connect to the SDDC Manager.2. In the navigation pane, click Solutions.3. Find the cluster, click “Update Workload Management license”, and select the appropriate license.

B. 1. Connect to the SDDC Manager.2. Go to Administration > Licensing.3. Add the license key for vSphere with Tanzu.

C. 1. Connect to the vCenter Web Console.2. Go to Menu > Home > Administration > Licenses3. Click “Add New Licenses”, and enter the license key.

D. 1. Connect to the vCenter Web Console.2. Go to “Hosts and Clusters”, and right click on the cluster that supports namespace creation.3. Click “Assign license”, and select the appropriate license.

An administrator is tasked with creating a new VMware Cloud Foundation VI Workload Domain.
Which statement is correct when commissioning new ESXi hosts to the SDDC Manager inventory?

A. Hosts with vSAN storage can only be added to vSAN-based and VMFS on FC-based VI Workload domains.

B. Hosts with VMFS on FC storage can only be added to VMFS on FC-based VI Workload domains.

C. Hosts with vVols storage can only be added to NFS-based VI Workload domains.

D. Hosts with NFS storage can only be added to NFS-based and VMFS on FC-based VI Workload domains.

Which two use cases would require the creation of multiple clusters in a workload domain? (Choose two.)

A. Different virtual machine workload types

B. Different application licensing models

C. Bare-Metal vs. virtual workloads

D. Different host CPU types

E. Different memory requirements

Where is the Harbor Image Registry service enabled?

A. vSAN Cluster

B. Supervisor Cluster

C. vSphere Cluster

D. Supervisor Namespace

An administrator needs to upgrade the current VMware Cloud Foundation (VCF) environment from version 4.1 to 4.3, knowing that the environment does not have direct access to the internet.
Which steps should be performed to download the online bundles?

A. 1. Setup a proxy server.2. Define the credentials to access the proxy server.3. Allow bidirectional traffic on the firewall.

B. 1. Setup a proxy server.2. Configure the proxy in SDDC Manager.3. Restart the LCM service.

C. 1. Setup a proxy server.2. Define the credentials to access the proxy server.3. Configure the proxy server in vSphere Lifecycle Manager (vLCM).4. Restart vSphere Lifecycle Manager (vLCM).

D. 1. Setup a proxy server.2. Define the credentials to access the proxy server.3. Allow bidirectional traffic on the firewall.4. Configure the proxy server in SDDC Manager.

An administrator is tasked with replacing the default, self-signed certificates in a VMware Cloud Foundation environment.
The administrator begins by completing the three tasks which must be executed to prepare a Microsoft Active Directory Certificate Services authority to integrate with VMware Cloud Foundation.
Which three tasks were executed by the administrator? (Choose three.)

A. Join the vCenter server instances to the Active Directory domain.

B. Modify the “Web Server” template to include User Authentication.

C. Enable Active Directory authentication for Certificate Services.

D. Assign the “Issue and Manage Certificates” permission to the SDDC Manager service account.

E. Create a new template that supports Server Authentication and proof of origin.

F. Enable Basic authentication for Certificate Services.

An administrator is deploying a new VMware Cloud Foundation workload domain.
Which three options are supported for supplemental storage? (Choose three.)

A. VMFS on iSCSI

B. SMB

C. VMFS on FC

D. vVols

E. NFS v.3

F. NFS v.2

During a VCF design workshop, the architect gathered the following customer requirements:
There must be two environments: PROD and DEV.
PROD and DEV should be administratively separated.
PROD will use two different hardware server types, and DEV will only use one hardware server type.
The VCF infrastructure design should be flexible and scalable as much as possible.
How many NSX local managers in total will be provisioned after deploying the full VCF infrastructure?

A. 9

B. 6

C. 3

D. 12

A VCF architect collected the following requirements when designing the expansion of a new VI Workload Domain with twenty-four vSAN Ready nodes, each with a dual-port 25Gbps network interface card:
Provide scalable high-performance networking with layer-3 termination at top-of-rack
Protect workloads from switch/NIC/rack failure
Provide isolation for DMZ workloads
Provide at-least 25Gbps dedicated bandwidth to backup traffic
Easily accept workloads on traditional VLAN-backed networks
Fully-supported by VMware -
Which three design considerations meet all of these requirements? (Choose three.)

A. Core Aggregation network topology

B. Spine and Leaf network topology with layer-3 at top of rack

C. Two-node Edge Cluster with ECMP

D. Stretched Clustering

E. Spine and Leaf network topology with layer-3 at Spine

F. Two-node Edge Cluster with BFD

What is a valid procedure to replace an expired vSAN license in a VMware Cloud Foundation environment?

A. 1. Add a new vSAN license to the SDDC Manager and vCenter Server.2. Reassign the vSAN license to the cluster in the vCenter Server.3. Remove the expired vSAN license from the SDDC Manager and vCenter Server.

B. 1. Add a new vSAN license to the vCenter Server.2. Connect to SDDC Manager via SSH, and then restart Lifecycle Management using systemctl restart lcm.3. Verify in the vCenter Server whether a new vSAN license has been assigned to the cluster.

C. 1. Add a new vSAN license to the SDDC Manager.2. Connect to SDDC Manager via SSH, and then restart Domain Manager using systemctl restart domainmanager.3. Verify in the SDDC Manager whether a new vSAN license has been assigned to the cluster.

D. 1. Add a new vSAN license to the SDDC Manager.2. Reassign the vSAN license to the cluster in the SDDC Manager.3. Remove the expired vSAN license from the SDDC Manager.

Which two features are supported when implementing NSX Federation? (Choose two.)

A. NAT operations

B. Identity Firewall

C. DHCP dynamic binding

D. Load Balancer

E. DHCP

Which two configurations are validated during the VMware Cloud Foundation bring-up process? (Choose two.)

A. Network Configuration validation

B. Network Connectivity validation

C. Stretched Cluster validation

D. Cloud Builder Log Configuration validation

E. NSX Edge validation

A customer would like to use VCF in two new regional data centers, and they have a hard requirement to stretch layer 2 networks across the two sites. Both sites have a 130ms latency.
What would be the ideal solution?

A. VCF with NSX-T Federation

B. VCD with NSX-T IPSEC

C. VCF with NSX-T Bridging

D. VCF with NSX-T Multi-Site

What limits can an administrator configure on a vSphere Namespace for a VMware Cloud Foundation Developer-Ready Workload Domain?

A. Secrets

B. Tanzu Kubernetes Cluster worker nodes

C. Tanzu Kubernetes Cluster master nodes

D. Persistent Volumes

An administrator is tasked with enabling workload management for a VMware Cloud Foundation Management Workload Domain.
This set of requirements was collected during the design workshops:
Developers should be able to utilize vSphere Pods feature.
Embedded harbor registry feature should be supported.
Developers need to utilize persistent volumes across multiple provisioned vSphere Pods.
Which three actions will meet the requirements for this deployment? (Choose three.)

A. Configure NSX Advanced Load Balancer.

B. Enable vSphere HA and DRS in partially-automated mode.

C. Configure NSX-T Networking.

D. Enable vSphere HA and DRS in fully-automated mode.

E. Configure HA Proxy.

F. Enable vSAN File Services.

Which two health checks can be performed using the SoS tool? (Choose two.)

A. –system-check

B. –esxi-health

C. –health-check

D. –credential-health

E. –password-heath

Which service is integrated with VMware Cloud Foundation and enables a centralized and simplified lifecycle management of ESXi host?

A. vRealize Suite Lifecycle Manager

B. vCenter Lifecycle Manager

C. Solutions Manager

D. vSphere Lifecycle Manager

An administrator is tasked with deploying a VMware Cloud Foundation environment that consists of three VI Workload Domains. Each VI Workload Domain is comprised of two clusters, with 18 hosts in each cluster.
Which option fulfills this requirement while minimizing the number of NSX-T Manager instances?

A. Deploy one medium-sized NSX-T Manager cluster per VI Workload Domain.

B. Deploy one medium-sized NSX-T Manager cluster for all VI Workload Domains.

C. Deploy one large-sized NSX-T Manager cluster per VI Workload Domain.

D. Deploy one large-sized NSX-T Manager cluster for all VI Workload Domains.

Which two steps must be performed to create a vSphere with Tanzu namespace? (Choose two.)

A. Deploy a vSphere Cluster

B. Enable Harbor Image Registry

C. Use a DNS-compliant name

D. Assign permissions

E. Define resource limits

Which vSphere Lifecycle Manager (LCM) function is supported in VMware Cloud Foundation (VCF)?

A. Manage certificate replacement for ESXi hosts.

B. Rotate passwords for ESXi hosts.

C. Downgrade VM hardware version.

D. Install and update third-party software on ESXi hosts.

Which functionality does a NSX Tier-1 Gateway provide to a vSphere with Tanzu deployment?

A. Downlink connection to segments

B. Downlink connection to Tier-0 gateway

C. Layer 2 Switching

D. Static or dynamic routing

Which functionality is provided by NSX Global Manager?

A. Global Managers move control plane to a central place.

B. Configurations requiring protection against site failures must be configured in the Global Manager.

C. Global configurations are sent to all Local Managers.

D. Global Managers move all existing Local Manager configuration to the Global Manager.

An administrator is tasked with preparing hosts for the deployment of a new Workload Domain in a VMware Cloud Foundation environment. The ESXi hosts have HBA cards that require the installation of a separate and the most recent VMware Installation Bundles (VIBs).
Which ESXi imaging method should the administrator use?

A. VMware Imaging Appliance

B. VMware vSphere Auto Deploy

C. Download and burn the base ESXi Installer ISO Image to a DVD

D. VMware vSphere Lifecycle Manager Image

Which order of steps should an administrator use to replace a failed host in a stretched cluster?

A. 1.Decommission the failed host.2. Remove the host using cluster APIs.3. Add the newly commissioned host to the cluster using cluster APIs.4. Commission the new host with the correct network.

B. 1. Decommission the failed host.2. Remove the host using cluster APIs.3. Commission the new host with the correct network.4. Add the newly commissioned host to the cluster using cluster APIs.

C. 1. Remove the host using cluster APIs.2. Decommission the failed host.3. Commission the new host with the correct network.4. Add the newly commissioned host to the cluster using cluster APIs.

D. 1. Remove the host using cluster APIs.2. Decommission the failed host.3. Add the newly commissioned host to the cluster using cluster APIs.4. Commission the new host with the correct network.

VCF design workshops were conducted, and the architect collected the following customer requirements for the newly planned VCF infrastructure:
The new VCF infrastructure must target two zones: DEV/UAT and DMZ.
The security team would like to have full management and network isolation between these two zones.
12 hosts have been ordered for the solution.
DEV/UAT workloads must comply with an erasure coding vSAN storage policy with the ability to tolerate the failure of two hosts.
Which workload domain sizing will be required to achieve these requirements?

A. 12-hosts workload domain for both zones, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ cluster

B. 8-hosts DEV/UAT workload domain, having a 4-hosts DEV cluster, and a 4-hosts UAT cluster, in addition to a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

C. 8-hosts DEV/UAT workload domain, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

D. 12-hosts workload domain for both zones, having a 4-hosts DEV cluster, a 4-hosts UAT cluster, and a 4-hosts DMZ cluster

Which two configurations are part of the VMware Cloud Builder validation process? (Choose two.)

A. Passwords: Validates specified passwords. Checks for minimum length, invalid characters, and format

B. License key: Validates format, validity, and expiry for ESX, vSAN, vCenter Server, NSX, vRealize Suite, and Log Insight license keys

C. Network configuration: Validates CIDR to IP address validity, IP addresses in use, gateways, invalid or missing VLANs, invalid or missing MTU, and network spec availability for all components

D. Availability configuration: Validates the access to the configured backup locations

E. Certificates: Validates certificates for ESX, vCenter Server, and NSX

The architect of a multi-site VMware Cloud Foundation solution is tasked with ensuring that the prerequisites for vSAN data at rest encryption have been achieved. The existing design calls for use of the vSphere Native Key Provider. NSX-T is configured with Federation, and both sites benefit from a stretched T0 and T1 network topology.
A new security policy requires the use of vSphere Virtual Machine encryption, in addition to the at-rest encryption already configured. During a failover test from Site-A to Site-B using Site Recovery Manager, the virtual machines were unable to power-on.
How does the design need to be changed to support the new requirement?

A. Ensure that a TPM 2.0 certified module is installed on all ESXi hosts at Site-B.

B. Use a third-party KMS solution at each site.

C. Use a third-party KMS solution that allows for key replication.

D. Ensure that the Site Recovery Manager service account has Cryptographer.ReadKeyServersInfo privileges.

Which order of operations deletes a VI Workload Domain from a VMware Cloud Foundation environment?

A. 1. Migrate VMs.2. Remove NSX Edge clusters.3. Remove the Workload Domain.4. Decommission hosts.5. Delete the network pool.

B. 1. Migrate VMs.2. Remove NSX Edge clusters.3. Remove the Workload Domain.4. Delete the network pool.5. Decommission hosts.

C. 1. Migrate VMs.2. Remove the Workload Domain.3. Decommission hosts.4. Delete the network pool.

D. 1. Migrate VMs.2. Decommission hosts.3. Remove the Workload Domain.4. Delete the network pool.

An administrator is planning to deploy an edge cluster in a VMware Cloud Foundation environment.
Which three NSX components are automated during this deployment? (Choose three.)

A. Tier-0 VRF gateway configuration

B. Edge VM deployment

C. Segments for VM workloads

D. Edge Uplink Profile configuration

E. Tier-0 and Tier-1 gateway configuration

F. Transport Node Profile configuration