Which process should be used to upgrade the vSphere with Tanzu Supervisor Cluster?

A. Use the vSphere Client, navigate to Workload Management, and apply updates.

B. Use kubectl, and apply an update manifest specification to the Supervisor Cluster.

C. Use the vSphere Client, navigate to vSphere Lifecycle Manager, and apply updates.

D. Allow vSphere with Tanzu Supervisor Cluster to upgrade automatically when new versions are available.

An administrator needs to configure a Supervisor Cluster with the vSphere networking stack (vSphere Distributed Switch) and HAProxy appliance using default configuration. The administrator has already connected all hosts in the cluster to a vSphere Distributed Switch and created distributed portgroups.
Which designation must be mapped to a distributed portgroup?

A. Primary Workload Network

B. Load Balancer Network

C. Frontend Network

D. Supervisor Cluster Network

The application development team is pushing a Kubernetes application into production. It consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?

A. Yes, by using kubectl to create a Network Policy that only allows pods on the same network segment to talk to each other.

B. Yes, by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database.

C. Yes, by using kubectl to create a policy that disables pod to pod communication in the Namespace.

D. No, Kubernetes Network Policy does not support this action.

A company needs to provide global visibility and consistent policy management across multiple Tanzu Kubernetes Clusters, namespaces, and clouds.
Which VMware solution will meet these requirements?

A. vSphere with Tanzu Supervisor Cluster

B. vCenter Server

C. Tanzu Mission Control

D. Tanzu Kubernetes Grid Service

An administrator needs to assign access to a vSphere Namespace.
Which two valid roles may be assigned to a user or a group of users? (Choose two.)

A. Create

B. Modify

C. Delete

D. View

E. Edit

Which object is deployed on the workload network when vSphere with Tanzu is configured with vSphere network stack?

A. Windows Virtual Machines

B. Registry Service

C. Tanzu Kubernetes clusters

D. NSX Edge

Why would an organization set up private image registries?

A. Role-based access control can be assigned by integrating the image registry with user identity management.

B. DevOps engineers are able to store virtual machine images in a central location.

C. Open source registry server projects enable organizations to modify them as necessary.

D. Public image registries lack enterprise support.

Which corresponding object is automatically created in the embedded Registry Service when a new Namespace is created in the Supervisor Cluster?

A. Pod

B. Project

C. Container

D. Image

How are updates applied to Tanzu Kubernetes clusters?

A. The cluster is shutdown, Update Manager applies patches to VMs, and the cluster is restarted.

B. Worker nodes are shutdown while Controllers are patched and restarted after the update.

C. New nodes are incrementally added with new Kubernetes versions so as a new node is added, an older node is removed.

D. A new cluster is completely configured and runs in parallel to the primary cluster prior to switchover.

Which name is a valid namespace name?

A. name$pace01

B. namespace-01

C. namespace_01

D. NameSpace 01

How do Tanzu Kubernetes clusters communicate with Storage Policy Based Management to request PersistentVolumes?

A. Through a proxy VM

B. Directly with vCenter Server and the underlying ESXi hosts

C. Through the Supervisor Cluster

D. Directly with the vCenter Server

A vSphere administrator is required to provide a developer with read/write permissions on a vSphere Namespace.
Which role should the vSphere administrator apply for the developer?

A. Assign the developer user with the “can edit” role at the vSphere Namespace object.

B. Assign the developer user with the “vSphere Kubernetes Manager” role at the vSphere Namespace object.

C. Assign the developer user with the “vSphere Kubernetes Manager” role at the cluster object.

D. Assign the developer user with the “can edit” role at the cluster object.

Which three elements should be configured by a vSphere administrator after creating vSphere Namespace? (Choose three.)

A. Permissions

B. Capacity and Usage limits

C. License

D. Namespace name

E. Storage Policy

F. NSX Segment

A company needs its administrators to be able to manage access, apply security policies, and inspect Kubernetes clusters for security and configuration risks across multiple platforms.
Which solution will meet these requirements?

A. Kubernetes Security Contexts

B. Kubernetes Role Based Access Control (RBAC)

C. Tanzu Kubernetes Grid Service

D. Tanzu Mission Control

Which statement provides the most accurate description for the Sphere let?

A. The Spherelet allows the ESXi host to become part of the Kubernetes cluster.

B. The Spherelet provides high availability for the Kubernetes cluster.

C. The Spherelets exist as VMs and are load balanced, each with their own IP address.

D. The Spherelet includes a paravirtualized Linux kernel that works together with the hypervisor.

What is required to enable Workload Management?

A. vSphere Distributed Switch

B. Windows Network Load Balancer

C. Github repository

D. NSX-V

Which description accurately characterizes virtual machine class types for Tanzu Kubernetes cluster (TKC) nodes?

A. A best-effort class does not provide high availability for TKC nodes.

B. A best-effort class reserves CPU and Memory resources for TKC nodes.

C. A guaranteed class provides high availability for TKC nodes.

D. A guaranteed class reserves CPU and Memory resources for TKC nodes.

Which object provides user access to applications running on vSphere with Tanzu?

A. External load balancer

B. vSphere Distributed Switch

C. Round-robin DNS

D. Internal load balancer

Which two configurations are needed to meet the minimum vSphere with Tanzu on vSphere Distributed Switch Network Requirements? (Choose two.)

A. Network Interface Cards with Single Root IO Virtualization support (SR-IOV)

B. vCenter Server connected to the workload network

C. Non-overlapping subnets on workload networks

D. One workload network designated as the primary workload network

E. Physical Network MTU set to 1600 Bytes

Which two functions are provided by the NSX Container Plug-in (NCP)? (Choose two.)

A. Implements Kubernetes Ingress with an NSX-T layer 7 load balancer

B. Integrates with container-based PaaS such as Docker

C. Creates an NSX-T logical topology for a Kubernetes cluster and a separate logical network for each Kubernetes namespace

D. Configures Overlay Transport Zones

E. Implements Kubernetes Ingress with an NSX-T layer 4 load balancer

Which statement accurately describes the upgrade of a vSphere with Tanzu Supervisor Cluster?

A. vCenter Server performs an in-place upgrade of the Supervisor Cluster control plane VMs.

B. vCenter Server orchestrates the rolling upgrade of Supervisory control plane VMs and upgrades the ESXi host spherelet component.

C. An administrator manually deploys new Supervisor Cluster control plane VMs and uses vSphere Lifecycle Manager to update the ESXi host spherelet component.

D. An administrator downloads and installs new RPMs to the Supervisor Cluster control plane VMs.

How does Kubernetes implement the vSphere storage policy in vSphere with Tanzu?

A. Storage class

B. Paravirtual CSI

C. Static Persistent Volume

D. Persistent Volume

Which statement is true about Kubernetes Network Policies?

A. The Supervisor cluster contains a firewall to implement the network policy.

B. The policy is created by developers and applied using a YAML specification.

C. vSphere administrator adds the Kubernetes Network policy to the Development team’s Namespace to implement the rules.

D. vSphere administrator creates the network policy in NSX Manager to restrict app-to-app communication.

Which command provides valid syntax to deploy a vSphere Pod?

A. tkg apply -c containerName

B. docker run containerName

C. kubectl apply -c deployment.yaml

D. kubectl apply -f deployment.yaml

How are quotas and permissions guaranteed by vSphere with Tanzu for Tanzu Kubernetes (TKG) clusters that are deployed within a namespace?

A. By routing quota and permission API calls to vCenter Server via the Supervisor Cluster

B. By ensuring each TKG cluster has a quotas and permissions system built into it natively which enforces all requests

C. By having the Supervisor Cluster poll the TKG cluster periodically to ensure adherence to quotas and permissions

D. By deploying an external authentication solution

Which command will show the Tanzu Kubernetes cluster versions available in the vSphere content library?

A. kubectl get rc,services

B. kubectl get contentlibrary

C. kubectl get tanzukubernetesreleases

D. kubectl get tanzuimages

Which statement accurately describes a vSphere with Tanzu Supervisor Cluster?

A. It is a Kubernetes cluster deployed by developers using a YAML specification file.

B. It aggregates hosts across vSphere clusters to form a Kubernetes cluster on vSphere.

C. It enables vSphere High Availability and Distributed Resource Scheduler.

D. It exposes a Kubernetes API for use by DevOps teams.

On which network are TKG clusters deployed in vSphere with Tanzu when using the vSphere networking stack?

A. Workload

B. Backend

C. Edge

D. Frontend

How would information be found about which Kubernetes cluster and pod are using a given PersistentVolume in vSphere?

A. Through the file browser in the Datastore view within vCenter

B. By querying the CNS API using the esxcli command

C. Using the vSphere Client, go to the Cloud Native Storage view for the datastore

D. By using vmwarectrl get persistentvolumes command

Which three roles does the Spherelet perform? (Choose three.)

A. Determines placement of vSphere pods

B. Manages node configuration

C. Starts vSphere pods

D. Provides a key-value store for pod configuration

E. Communicates with Kubernetes API

F. Provisions Tanzu Kubernetes clusters

What provides the North-South connectivity from NSX-T Data Center to the physical infrastructure?

A. Tier-1 uplink

B. vSphere Distributed Switch

C. Tier-0 uplink segment

D. Transport Zones

A development team has deployed a Tanzu Kubernetes cluster and would like to verify the version of Kubernetes that is running.
Which command will show this information?

A. kubectl describe tkc dev-cluster

B. kubectl explain tkg dev-cluster

C. kubectl get version

D. kubectl get vm dev-cluster

When creating a Supervisor Namespace, which item must be added to ensure that the end user can consume the namespace?

A. Content Library

B. Permissions

C. Storage

D. Limits

What is the primary purpose of the Cloud Native Storage component within VMware vCenter Server?

A. Enabling the configuration of Public Cloud Storage in vCenter

B. Replacing Storage Policy Based Management for container volumes

C. Importing vSphere metadata into Kubernetes

D. Provisioning and lifecycle operations for persistent volumes

A Namespace contains multiple Tanzu Kubernetes clusters.
How is access granted to a single Tanzu Kubernetes cluster?

A. Create a custom Role and RoleBinding, and then apply to the Namespace using kubectl commands.

B. Use the vSphere Client to grant access to the Namespace.

C. Create a custom Role and RoleBinding, and then apply to the Tanzu Kubernetes cluster using kubectl commands.

D. Use the vSphere Client to grant access to the Tanzu Kubernetes cluster.

Kubernetes object types are going to be limited by an administrator within a vSphere with Tanzu namespace.
Which three Kubernetes object types may be limited? (Choose three.)

A. Number of Persistent Volume Claims

B. Number of Pods

C. Number of Operators

D. Number of DaemonSets

E. Number of Ingress frontends

F. Number of Load Balancer Services

Which requirement is needed to deploy Tanzu Kubernetes clusters but is unnecessary when deploying vSphere Pods?

A. Harbor Image Registry

B. vSphere Single Sign-On

C. vSphere Content Library

D. Namespaces

How can a vSphere administrator replace the Supervisor Cluster API endpoint certificate?

A. Use the certificate-manager CLI utility to replace the Supervisor Cluster API endpoint certificate.

B. Use the vSphere Client to replace the Workload platform MTG certificate.

C. Use the vSphere Client to replace the NSX Load Balancer certificate.

D. Use kubectl to replace the Supervisor Cluster API endpoint certificate.

An administrator is configuring a vSphere with Tanzu Supervisor Cluster with the vSphere networking stack.
Which two minimum requirements must be met for the compute and networking components? (Choose two.)

A. The cluster configured with vSphere High Availability enabled

B. A DHCP IP address range for the Kubernetes control plane VMs

C. A DHCP IP address range for the HA Proxy virtual IPs

D. A minimum of three distinct subnets

E. The cluster configured with vSphere DRS enabled and automation level set to Fully Automated

What is the minimum number of portgroups needed, in addition to the management portgroup, to provide connectivity for external services on a Supervisor Cluster?

A. 1

B. 4

C. 3

D. 2

Which statement accurately describes the Primary Workload Network?

A. It carries traffic between load balancer and vCenter.

B. It carries traffic between load balancer and Supervisory control plane.

C. It is created by developers as part of TKG cluster deployment.

D. It carries traffic between Supervisory control plane and vCenter.

How do vSphere Namespaces allow different teams to share a Kubernetes cluster?

A. Attaches authorization and policy to a subsection of the cluster

B. Installs Calico CNI

C. Installs a network policy provider

D. Advertises extended resources for a node

Which statement describes a characteristic of Supervisor Cluster control plane VMs?

A. Manage the lifecycle of ESXi hosts

B. Are manually created by a vSphere administrator

C. Host developer workloads

D. Run system and infrastructure pods

Which is a valid version change for a Tanzu Kubernetes cluster running Kubernetes version 1.16.7?

A. Upgrade one major version (e.g., 2.0.1)

B. Upgrade two minor versions (e.g., 1.18.0)

C. Downgrade one patch version (e.g., 1.16.5)

D. Upgrade one minor version (e.g., 1.17.0)

Which external load balancer is supported in vSphere 7 U1 using the vSphere networking stack?

A. Nginx

B. Seesaw

C. Loadmaster

D. HAProxy

Which authentication method is supported for logging into the vSphere with Tanzu Supervisor cluster?

A. Key-based authentication

B. Workspace ONE access

C. Static username and password

D. vCenter Single Sign-On

Which capability do persistent volumes provide to containerized applications?

A. Automated disk archival

B. Support for in-memory databases

C. Support for ephemeral workloads

D. Retention of application state and data

Which kubectl command is used to list the Kubernetes services in the current active namespace?

A. kubectl get services

B. kubectl get loadbalancer

C. kubectl services get ip

D. kubectl list services

Which two networks are used to attach Supervisor Cluster control plane VMs when using the vSphere networking stack? (Choose two.)

A. vMotion

B. Frontend

C. Primary workload

D. Management

E. Non-primary workload

What is the proper way to delete a Persistent Volume Claim?

A. By using the kubectl delete persistentvolumeclaim command

B. By using the kubectl remove pvc command

C. Through the SPBM policy engine using the vSphere Client

D. By unmounting the volume from the VM and deleting it from the vSphere datastore