A vSphere administrator is tasked with enabling Workload Management on a VMware Cloud Foundation Workload Domain.
Which three components are configured as part of the Supervisor Cluster control plane after this task is completed? (Choose three.)

A. Kubernetes Grid Orchestrator

B. Kubernetes Mission Control

C. kubectl-vSphere

D. Spherelet

E. Tanzu Kubernetes Grid Service

F. Container Runtime Executive

An administrator is planning to deploy an edge cluster in a VMware Cloud Foundation environment.
Which three NSX components are automated during this deployment? (Choose three.)

A. Tier-0 VRF gateway configuration

B. Edge VM deployment

C. Segments for VM workloads

D. Edge Uplink Profile configuration

E. Tier-0 and Tier-1 gateway configuration

F. Transport Node Profile configuration

An administrator is tasked with deploying a new VI Workload Domain into an existing VMware Cloud Foundation environment.
Which three initial shared storage types are supported? (Choose three.)

A. vVols

B. NFS v3

C. NFS v4.1

D. vSAN

E. SMB 3.0

F. VMFS on iSCSI

An architect is designing overlay networking and routing for two VMware Cloud Foundation VI workload domains.
The following requirements must be met in the design:
NSX-T Bare Metal Edge nodes are required to satisfy a requirement for extremely low latency.
The costs must be kept to a minimum.
Which design meets these customer requirements?

A. Create separate NSX-T Manager clusters for each workload domain, and then create separate NSX-T Bare Metal Edge clusters for each workload domain.

B. Place the Bare Metal Edge nodes in the same rack as the management domain hosts, and then add the NSX-T Bare Metal Edge cluster to the management domain NSX-T Manager cluster.

C. Share an NSX-T Manager cluster between both workload domains, and then add the NSX-T Bare Metal Edge cluster to the shared NSX-T Manager cluster.

D. Create separate NSX-T Manager clusters for each workload domain, and then create a single NSX-T Bare Metal Edge cluster to be shared between NSX-T Manager clusters.

In which order should the VMware Cloud Foundation components in a Management Domain be upgraded?

A. vRealize Suite, SDDC Manager and VMware Cloud Foundation services, NSX-T Datacenter, vCenter Server, ESXi servers

B. SDDC Manager and VMware Cloud Foundation services, vRealize Suite, NSX-T Datacenter, vCenter Server, ESXi servers

C. SDDC Manager and VMware Cloud Foundation services, NSX-T Datacenter, vCenter Server, ESXi servers, vRealize Suite

D. SDDC Manager and VMware Cloud Foundation services, vRealize Suite, NSX-T Datacenter, ESXi servers, vCenter Server

An administrator is tasked with creating a new VMware Cloud Foundation VI workload Domain using vVOLs as the principal storage.
Which three storage protocols are supported for the new commissioned hosts? (Choose three.)

A. SCSI

B. NFS

C. FCoE

D. FC

E. SAS

F. iSCSI

Which action(s) can a developer perform on Kubernetes storage classes that are mapped from the VM Storage Policies?

A. Access Only

B. Access and Modify

C. Access, Modify, and Delete

D. Access, Create, and Delete

Which three requirements are needed to provision an additional cluster within VMware Cloud Foundation? (Choose three.)

A. Minimum of three hosts using vSAN as a principal storage

B. Valid license specified in SDDC Manager

C. All hosts in maintenance mode with no patches applied

D. Minimum of three hosts using NFS, VMFS on FC, or vVols as a principal storage

E. A new vCenter license to accommodate the additional cluster

F. Minimum of five hosts for any type of principal storage

The vSAN Witness appliance for a VMware Cloud Foundation stretched vSAN cluster stopped working. The administrator needs to roll out a new appliance to replace the old one.
Which tool should the administrator use to perform this task?

A. vSphere Update Manager

B. SDDC Manager

C. vSphere Client

D. vSAN PowerCLI

Which two prerequisites must be met before creating a vSphere with Tanzu Namespace? (Choose two.)

A. Define CPU and Memory limits

B. Create storage policies for persistent storage

C. Enable a cluster with vSphere with Tanzu

D. Enable Harbor Image Registry

E. Assign user and groups access

Which two NSX-T Data Center components are configured when deploying an NSX Edge cluster using SDDC Manager? (Choose two.)

A. NSX Edge VMs

B. NSX Load Balancer

C. NSX Global Manager

D. NSX Local Manager

E. NSX Tier-1 Gateway

Which three components are required to deploy a stretched cluster in a VMware Cloud Foundation environment? (Choose three.)

A. DHCP on the NSX Edge overlay network

B. vSAN, host overlay and vMotion network stretched across both sites

C. One witness host per site

D. One witness host per vSAN stretched cluster

E. vSAN, host overlay and vMotion network per data site

F. DHCP on the host overlay network

An architect is designing networking for a developer-ready infrastructure on VMware Cloud Foundation. During the discussion with the network team, a question comes up about the use of a routable CIDR range.
Which item uses this type of range?

A. vSphere Pod

B. Ingress

C. Kubernetes services

D. ClusterIP

Which vSphere Lifecycle Manager (LCM) function is supported in VMware Cloud Foundation (VCF)?

A. Manage certificate replacement for ESXi hosts.

B. Rotate passwords for ESXi hosts.

C. Downgrade VM hardware version.

D. Install and update third-party software on ESXi hosts.

An administrator is creating a VMFS on FC-based VI Workload Domain.
Which two licenses must already be present in the SDDC Manager inventory? (Choose two.)

A. VMware NSX-T Data Center

B. VMware vSphere

C. VMware vSAN

D. VMware vRealize Suite Lifecycle Manager

E. VMware Workspace ONE Access

An administrator is tasked with creating a new VMware Cloud Foundation VI Workload Domain.
Which statement is correct when commissioning new ESXi hosts to the SDDC Manager inventory?

A. Hosts with vSAN storage can only be added to vSAN-based and VMFS on FC-based VI Workload domains.

B. Hosts with VMFS on FC storage can only be added to VMFS on FC-based VI Workload domains.

C. Hosts with vVols storage can only be added to NFS-based VI Workload domains.

D. Hosts with NFS storage can only be added to NFS-based and VMFS on FC-based VI Workload domains.

Which two components are required when planning for stretched clusters in a VMware Cloud Foundation environment? (Choose two.)

A. There must be separate Network Pools for each Availability Zone.

B. A third site is required for a witness host.

C. The host overlay network can use static IP addresses.

D. Use shared vSphere vMotion, vSAN, and host overlay networks.

E. The round-trip time (RTT) between sites must be ≤ 15 milliseconds.

An administrator must configure the user authentication for a new VMware Cloud Foundation (VCF) deployment.
Where would the identity provider be configured to reach this goal?

A. vCenter Server

B. SDDC Manager

C. Workspace ONE Access

D. vRealize Suite Lifecycle Manager

Where is the Harbor Image Registry service enabled?

A. vSAN Cluster

B. Supervisor Cluster

C. vSphere Cluster

D. Supervisor Namespace

What is a characteristic about the Credentials Worksheet in the Deployment Parameter Workbook?

A. Passwords can be different per user.

B. Passwords can be common only for appliance users.

C. Passwords must be different per user.

D. Passwords must be common across all users.

Which two requirements are needed to add new hosts to an existing VI workload in a VMware Cloud Foundation environment? (Choose two.)

A. The host uses only the VLAN network.

B. The host uses heterogenous hardware.

C. The host uses a minimum of four network ports.

D. The host uses the same storage type as the existing cluster hosts.

E. The host uses the same network pool.

Which two use cases would require the creation of multiple clusters in a workload domain? (Choose two.)

A. Different virtual machine workload types

B. Different application licensing models

C. Bare-Metal vs. virtual workloads

D. Different host CPU types

E. Different memory requirements

During a design workshop, an architect discussed strategies to backup and restore the SDDC Manager in a VMware Cloud Foundation environment. The customer asks for more clarification about the functionality and need for an external SFTP server.
Which two statements should the administrator share with the customer? (Choose two.)

A. It stores backup for vSAN encryption keys.

B. It provides better protection and decouples NSX-T backup from the SDDC Manager.

C. It is a prerequisite for restoring Cloud Builder file-based backups.

D. It is a prerequisite for restoring SDDC Manager file-based backups.

E. It stores backup for vRealize Suite Lifecycle Manager.

A customer would like to use VCF in two new regional data centers, and they have a hard requirement to stretch layer 2 networks across the two sites. Both sites have a 130ms latency.
What would be the ideal solution?

A. VCF with NSX-T Federation

B. VCD with NSX-T IPSEC

C. VCF with NSX-T Bridging

D. VCF with NSX-T Multi-Site

A systems administrator is tasked with creating a new VI workload domain that will leverage either an external NFS or a VMFS on FC storage as the principal storage.
Which action is required to fulfill this requirement?

A. Create a new network pool for vMotion and NFS networks.

B. Create a new network pool for vMotion, vSAN, and NFS networks.

C. Create a new network pool only for vMotion network.

D. Create a new network pool for vMotion and vSAN networks.

An administrator has registered an external identity source in a consolidated architecture and would like to make sure that any subsequent workload domains can be accessed using the same identity sources.
How can this goal be achieved with VMware Cloud Foundation?

A. By configuring LDAPS as an identity source

B. By configuring IWA as an identity source

C. By replicating vSphere SSO configuration

D. By keeping the pre-configured defaults

An architect is presented with a Bill of Material for different vSAN ready nodes:
8 identical nodes with 1 vSAN disk group
8 identical nodes with 2 vSAN disk groups
What is the ideal design of VMware Cloud Foundation domains that the architect should recommend?

A. 1 Management Domain of 6 Nodes, 1 Workload Domain of 4 nodes, and 1 Workload Domain of 6 nodes

B. 1 Management Domain of 6 nodes and 1 Workload Domain of 10 nodes

C. 1 Domain of 16 nodes deployed on a Consolidated Architecture model

D. 1 Management Domain of 4 nodes, 1 Workload Domain of 4 nodes, and 1 Workload Domain of 8 nodes

Which two roles are played by a Spherelet in a Tanzu-enabled VCF workload domain? (Choose two.)

A. It starts and monitors vSphere pods running on the workload domain cluster.

B. It communicates with the vSphere with Tanzu embedded Harbor registry.

C. It runs as a VIB on all Supervisor Cluster ESXi hosts configured with the vSphere Networking Stack.

D. It enables an ESXi hypervisor to act as a Kubernetes master node.

E. It enables an ESXi hypervisor to act as a Kubernetes worker node.

What do VM Storage Policies match to when using vSphere with Tanzu?

A. Kubernetes storage classes in the Supervisor Cluster

B. Kubernetes datastores in a namespace

C. Kubernetes storage classes in a namespace

D. Kubernetes datastores in the Supervisor Cluster

VCF design workshops have been conducted, and the architect collected the following customer requirements for the newly planned VCF infrastructure:
•	The new VCF infrastructure is targeting two zones: DEV/UAT and DMZ.
•	The infrastructure team requested that the number of management components be minimized as much as possible.
•	Eight hosts should be ordered for the DEV/UAT environment.
•	Four hosts should be ordered for the DMZ environment.
•	The DEV/UAT workloads must comply with an erasure coding vSAN storage policy and have the ability to tolerate the failure of two hosts.
Which workload domain sizing will be required to achieve these requirements?

A. 12-hosts workload domain for both zones, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ cluster

B. 8-hosts DEV/UAT workload domain, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

C. 8-hosts DEV/UAT workload domain, having a 4-hosts DEV cluster, and a 4-hosts UAT cluster, in addition to a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster

D. 12-hosts workload domain for both zones, having a 4-hosts DEV cluster, a 4-hosts UAT cluster, and a 4-hosts DMZ cluster

A VMware administrator is deploying a NSX Edge cluster using SDDC Manager. The manager wants to know if the NSX Edge nodes can be removed at a later time, knowing that there is no budget for adding additional hardware to the VMware Cloud Foundation (VCF) infrastructure.
Which three statements accurately answer this manager’s question about NSX Edge nodes? (Choose three.)

A. They can be removed at any time if they are in a powered-off state.

B. They can only be removed if the NSX Edge cluster is available in the SDDC Manager inventory and is active.

C. They can only be removed if the NSX Edge cluster is not stretched.

D. They can be removed if there are at least two nodes in the NSX Edge cluster.

E. They can only be removed if the NSX Edge node is available in the SDDC Manager inventory.

F. They can only be removed if the NSX Edge node was deployed from NSX-T Manager directly.

An administrator is planning to enable vSphere with Tanzu on an existing VI workload domain. The following information is known:
•	There is one vSphere cluster in that domain where all ESXi hosts have two uplinks.
•	The NSX edge cluster will be deployed on the same vSphere cluster.
•	Both System and NSX traffic will use the same uplinks of the VDS switch spanning the ESXi hosts.
Which statement accurately describes the deployment of this NSX edge cluster?

A. Two VLANs are needed for ESXi and edge TEP traffic.

B. Additional NICs will have to be added to the ESXi hosts to separate the system and NSX traffic.

C. One VLAN can be used for both ESXi and edge TEP traffic.

D. Host overlay IP pool can be shared with the Edge overlay IP pool.

Which two health checks can be performed using the SoS tool? (Choose two.)

A. –system-check

B. –esxi-health

C. –health-check

D. –credential-health

E. –password-heath

Which two configurations are part of the VMware Cloud Builder validation process? (Choose two.)

A. Passwords: Validates specified passwords. Checks for minimum length, invalid characters, and format

B. License key: Validates format, validity, and expiry for ESX, vSAN, vCenter Server, NSX, vRealize Suite, and Log Insight license keys

C. Network configuration: Validates CIDR to IP address validity, IP addresses in use, gateways, invalid or missing VLANs, invalid or missing MTU, and network spec availability for all components

D. Availability configuration: Validates the access to the configured backup locations

E. Certificates: Validates certificates for ESX, vCenter Server, and NSX

Which order of steps should an administrator use to replace a failed host in a stretched cluster?

A. 1.Decommission the failed host.2. Remove the host using cluster APIs.3. Add the newly commissioned host to the cluster using cluster APIs.4. Commission the new host with the correct network.

B. 1. Decommission the failed host.2. Remove the host using cluster APIs.3. Commission the new host with the correct network.4. Add the newly commissioned host to the cluster using cluster APIs.

C. 1. Remove the host using cluster APIs.2. Decommission the failed host.3. Commission the new host with the correct network.4. Add the newly commissioned host to the cluster using cluster APIs.

D. 1. Remove the host using cluster APIs.2. Decommission the failed host.3. Add the newly commissioned host to the cluster using cluster APIs.4. Commission the new host with the correct network.

Which two features are supported when implementing NSX Federation? (Choose two.)

A. NAT operations

B. Identity Firewall

C. DHCP dynamic binding

D. Load Balancer

E. DHCP

An administrator is creating a VI Workload Domain where NSX-T must be configured to allow for dynamic routing.
Which pre-requisites are required?

A. Two MPLS peers on ToR switches with an interface IP and an iBGP Autonomous System Number

B. Two BGP peers on ToR switches with an interface IP and BGP Autonomous System Number

C. Separate VLANs and subnets available for NSX-T Host Overlay TEP VLAN and NSX-T Edge Overlay TEP VLAN

D. Reserved BGP Autonomous System Number to use for the NSX-T Edge cluster’s Tier-0 gateway

What are the correct steps to grant the DevOps team permissions to a vSphere Namespace in a VMware Cloud Foundation (VCF) developer-ready workload domain while following the principle of least privilege access?

A. At the Permissions setting, add the DevOps group and assign the “Editor” permission

B. At the Global Permissions setting, add the DevOps group and assign the vSphere Kubernetes Manager role

C. At the Global Permissions setting, add the DevOps group and assign the SupervisorService Cluster Operator role

D. At the Permissions setting, add the DevOps group and assign the “Can edit” permission

A VMware administrator, who works for the U.S defense department, has been asked to upgrade the VMware Cloud Foundation software in a secure location. Due to security concerns, the VCF environment does not have any internet access.
The administrator can connect a laptop to the SDDC manager network but is not allowed to carry any storage media into the facility. To complete this work, the administrator has been given access to a network port where the laptop can be connected for internet access.
Which steps can the administrator follow to download the latest VCF software bundles?

A. 1. Download the latest VCF software bundles on the laptop.2. Copy the bundles to SDDC manager using file sharing.

B. 1. Download all required OVAs onto the laptop.2. Copy them to a USB drive.3. Attach the drive to the SDDC manager appliance.

C. 1. Copy the bundle transfer utility from SDDC manager onto the laptop.2. Use the utility to download the latest software bundles for the upgrade.3. Copy the bundles to SDDC manager using file sharing.

D. 1. Download the latest bundle transfer utility from myvmware.com.2. Use the utility to download the latest software bundles for the upgrade.3. Copy the bundles to SDDC manager using file sharing.

Which type of storage entity is used as the backing disks for persistent volumes in vSphere with Tanzu?

A. Thick provisioned VMDK

B. Raw Device Mapping (RDM)

C. First Class Disk (FCD)

D. Virtual Volumes (vVOLs)

An administrator wants to scale an existing VMware Cloud Foundation (VCF) environment by adding a new VI Workload Domain.
Which two storage options can be used for the new VI Workload Domain? (Choose two.)

A. iSCSI principal storage with SMB supplemental storage

B. vSAN principal storage with SMB supplemental storage

C. vSAN principal storage with VMFS on FC supplemental storage

D. vSAN principal storage with NFS supplemental storage

E. vVOL principal storage with SCSI supplemental storage

A systems administrator is implementing stretched clusters in an environment with multiple Availability Zones (AZs).
Which statement accurately describes this design?

A. The Layer 3 gateway for the workload domain and Edge overlay networks must be highly available across the AZs.

B. Layer 3 networks must be stretched between the AZs by the physical infrastructure.

C. If VLAN is stretched between AZ1 and AZ2, the Layer 3 network must also be stretched between the two AZs.

D. For VLANs that are stretched between AZs, configure load balancing in the Layer 3 gateway between AZs.

An administrator needs to upgrade the current VMware Cloud Foundation (VCF) environment from version 4.1 to 4.3, knowing that the environment does not have direct access to the internet.
Which steps should be performed to download the online bundles?

A. 1. Setup a proxy server.2. Define the credentials to access the proxy server.3. Allow bidirectional traffic on the firewall.

B. 1. Setup a proxy server.2. Configure the proxy in SDDC Manager.3. Restart the LCM service.

C. 1. Setup a proxy server.2. Define the credentials to access the proxy server.3. Configure the proxy server in vSphere Lifecycle Manager (vLCM).4. Restart vSphere Lifecycle Manager (vLCM).

D. 1. Setup a proxy server.2. Define the credentials to access the proxy server.3. Allow bidirectional traffic on the firewall.4. Configure the proxy server in SDDC Manager.

An architect is designing networking for a developer-ready infrastructure on VMware Cloud Foundation.
Which use case would require the architect to consider a CIDR range larger than /27 for Egress?

A. More than 30 services are required

B. More than 30 pods are required

C. More than 30 load balancers are required

D. More than 30 namespaces are required

A VMware administrator is tasked to upgrade a VMware Cloud Foundation (VCF) environment that is running on DellEMC PowerEdge servers.
During the ESXi software upgrade for the VI Workload Domain hosts, the administrator receives an error stating that the correct storage driver is not available, although the storage adapters are enabled in the BIOS.
Which action should the administrator take to fix this issue?

A. Use the image for the ESXi build in the VCF bill of materials.

B. Upgrade the storage adapter firmware to the latest version.

C. Upgrade the BIOS firmware to the latest version.

D. Use the Dell EMC customized image for the ESXi build in the VCF bill of materials.

Which two options are only available when using vSphere Lifecycle Manager Images? (Choose two.)

A. Upgrade VM Hardware Compatibility versions.

B. Check the hosts and clusters against the vSAN Hardware Compatibility List.

C. Upgrade and patch ESXi hosts.

D. Update the firmware of all ESXi hosts in a cluster.

E. Install and update third-party software on all ESXi hosts in a cluster.

An architect is decommissioning a host from a VI Workload Domain and wants to reuse it in a VMware Cloud Foundation environment.
Which statement accurately describes this process?

A. Use the decommission host workflow against a host with an unassigned state, and then run the commission host workflow.

B. Use the decommission host workflow against a host with an unassigned state, re-image the host, and then run the commission host workflow.

C. Use the decommission host workflow against a host with an assigned state, re-image the host, and then run the commission host workflow.

D. Use the decommission host workflow against a host with an assigned state, and then run the commission host workflow.

A systems administrator is tasked to configure MTUs for the VCF components and plans on using the recommended MTU size of the Management VLAN for the two Availability Zones in implementing the stretched cluster.
What is the recommended MTU size?

A. 1500

B. 9000

C. 1600

D. 1492

A developer is deploying pods with Persistent Volumes (PV) on vSphere with Tanzu.
Which component determines the datastore that the PV will be placed on?

A. CNS-CSI

B. Hostd

C. SPBM

D. Spherelet

What is a valid way to replace the expiring evaluation Tanzu license for a vSphere with Tanzu cluster?

A. 1. Connect to the SDDC Manager.2. In the navigation pane, click Solutions.3. Find the cluster, click “Update Workload Management license”, and select the appropriate license.

B. 1. Connect to the SDDC Manager.2. Go to Administration > Licensing.3. Add the license key for vSphere with Tanzu.

C. 1. Connect to the vCenter Web Console.2. Go to Menu > Home > Administration > Licenses3. Click “Add New Licenses”, and enter the license key.

D. 1. Connect to the vCenter Web Console.2. Go to “Hosts and Clusters”, and right click on the cluster that supports namespace creation.3. Click “Assign license”, and select the appropriate license.