Question 1
Multiple choice
An organization has a mix of internally developed commercially packaged and open-source applications within their VMware Cloud Foundation (VCF) environment. Management has requested a plan to monitor these applications in a simple, consolidated manner. What two VCF solutions could be implemented to satisfy this request? (Choose two.)
-
A
VCF Operations Service Discovery
-
B
VCF Operations for Applications
-
C
VCF Operations Application Discovery
-
D
-
E
VCF Operations for Logs Content Packs
Reveal answer details
Close answer details
Correct answersA, C
ExplanationVCF Operations Service Discovery provides the service-level view needed to identify services running across the mixed application estate. VCF Operations Application Discovery provides the application-level organization needed to collect those elements into application views. Used together, they cover discovery at both service and application scope and support a consolidated approach to monitoring internally developed, packaged, and open-source applications.
Question 2
Multiple choice
An administrator is tasked to upgrade an existing VMware Cloud Foundation (VCF) 5.2 deployment to VCF 9.0. The existing deployment includes the following components: - Aria Operations
- Aria Automation
Which three components must be upgraded or deployed first? (Choose three.)
-
A
Manually upgrade Aria Operations to VCF Operations 9.0.
-
B
Automatically upgrade Aria Automation to VCF Automation 9.0.
-
C
Deploy of an NSX Manager 9.0 instance.
-
D
Manually upgrade Aria Automation to VCF Automation 9.0.
-
E
Automatically upgrade Aria Operations to VCF Operations 9.0.
-
F
Deploy VCF Installer appliance.
Reveal answer details
Close answer details
Correct answersA, D, F
ExplanationThe existing Aria services must first move to their VCF 9.0 counterparts through manual upgrades: Aria Operations becomes VCF Operations 9.0, and Aria Automation becomes VCF Automation 9.0. The VCF Installer appliance must also be deployed to provide the installation component needed for the VCF 9.0 transition. Automatic upgrades and an additional NSX Manager are not part of these three prerequisites.
As part of a new VMware Cloud Foundation (VCF) fleet, an administrator is tasked to deploy vSphere Supervisor utilizing VMware NSX networking. Which networking connectivity type should the administrator configure?
-
A
Avi Load Balancer Controller Ips
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationvSphere Supervisor using VMware NSX networking requires the Centralized Gateway connectivity type. This places the required connectivity at the centralized gateway boundary for the Supervisor deployment, matching the specified NSX-backed design. A controller address or data subnet is a configuration value, not the requested connectivity type.
Which statement correctly describes cluster API?
-
A
It enables pod networking and enforces network Kubernetes policies.
-
B
It is responsible for scanning language-specific packages in container images, such as Java, Python, Go, and others.
-
C
It is a native Kubernetes certificate management controller that adds certificates and certificate issuers as resource types in Kubernetes clusters.
-
D
It is a specialized toolset to bring declarative cluster creation, configuration, and management in the Kubernetes ecosystem.
Reveal answer details
Close answer details
Correct answerD
ExplanationCluster API is a specialized Kubernetes toolset for declarative cluster creation, configuration, and management. Administrators describe the desired cluster state through Kubernetes-style resources, and the cluster lifecycle is managed toward that state. Pod networking, package scanning, and certificate issuance are separate functions handled by other components.
An administrator must ensure the network team can fully utilize theNetwork Operationsfeature in VCF. What component must be installed and configured?
-
A
VCF Operations for Networks
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerA
ExplanationVCF Operations for Networks is the component that supplies the capabilities exposed through Network Operations. Installing and configuring it gives the network team the network-focused operational data and analysis required by that feature. NSX provides networking itself, but it is not the VCF Operations component that enables the full Network Operations experience.
What is the purpose ofIstio Service Mesh?
-
A
Provides service discovery across multiple clusters.
-
B
Provides an infrastructure layer that makes communication between applications possible, structured, and observable.
-
C
Provides dynamic application load balancing and autoscaling across multiple clusters and sites.
-
D
Provides a centralized, global routing table to simplify and optimize traffic management.
Reveal answer details
Close answer details
Correct answerB
ExplanationIstio Service Mesh supplies an infrastructure layer for communication between applications. It structures service-to-service traffic and makes those interactions observable without defining the applications themselves. Its purpose is therefore broader than service discovery or a routing table and centers on managed, visible application communication.
An administrator is responsible for managing a VMware Cloud Foundation (VCF) fleet. The administrator has been tasked with the following: - Ensure that newly deployed Virtual Machines create a DNS A and DNS PTR Record in DNS.
- Create the DNS records before each Virtual Machine is deployed.
- If a deployment fails, ensure that the created DNS record is deleted.
- Only remove the DNS records for each Virtual Machine after it is destroyed.
- Every workflow must be allowed to complete before starting any additional workflow for the same event topic.
The administrator has already completed the following tasks: - Created two VCF Operations Orchestrator Workflows with corresponding Event Subscriptions:
Create DNS RecordsDelete DNS Records
- Created a new blueprint to deploy a Virtual Machine:
- Added two string inputs,
hostname and domainName. - Added
hostname: '${input.hostname}' as a custom property of the Virtual Machine resource. - Added
domainName: '${input.domainName}' as a custom property of the Virtual Machine resource.
What must the administrator configure within the Event Subscription to ensure that the DNS record is only created when the domain name is provided?
-
A
Add the Delete DNS Records workflow as the Recovery Workflow of the Add DNS Records subscription.
-
B
Enable the Block execution of events in topic option in the Add DNS Records and Delete DNS Records subscriptions.
-
C
Add the event.data.customProperties['hostname'] != null to the Add DNS Records and Delete DNS Records subscriptions.
-
D
Add the event.data.customProperties['domainName'] != null condition to the Add DNS Records and Delete DNS Records subscriptions.
Reveal answer details
Close answer details
Correct answerD
ExplanationThe subscriptions must test event.data.customProperties['domainName'] != null. The blueprint already places domainName in the VM resource's custom properties, so this condition permits the Add DNS Records and Delete DNS Records workflows only when that value exists. Testing hostname would not establish that the required domain name was supplied.
Question 8
Multiple choice
An administrator is tasked with deploying a new VMware Cloud Foundation (VCF) fleet consisting of two VCF instances. Which two components would the administrator need to install after initial deployment to have a full-stack VCF monitoring solution? (Choose two.)
-
A
-
B
VCF Operations management pack builder
-
C
VCF Operations fleet management
-
D
VCF Operations for networks
-
E
Reveal answer details
Close answer details
Correct answersD, E
ExplanationVCF Operations for networks supplies the network visibility needed for full-stack monitoring, while VCF Operations for logs supplies centralized logging coverage. Both must be installed after the initial deployment to extend monitoring across those layers in the two-instance fleet. Fleet management and the pack builder do not substitute for either data domain.
Which tool does an administrator use to collect and validate the initial inputs for the deployment ofa VMware Cloud Foundation (VCF) fleet?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationVCF Installer is used at the beginning of fleet deployment to collect the required deployment inputs and validate them before installation proceeds. This early validation establishes whether the supplied configuration is suitable for the new VCF fleet. The other listed components serve management or operational roles after that initial preparation.
Question 10
Single choice
Consumers need repeatable self-service access to infrastructure services, while the provider retains approval, policy, and lifecycle control. Which capability fits this requirement?
-
A
VCF Automation for catalog consumption, delegation, governance, and automated provisioning
-
B
Host-local scripts that bypass provider policy and expose unrestricted infrastructure access
-
C
A provider content library alone, with no entitlement or lifecycle controls
-
D
Manual ticket fulfillment because self-service cannot operate within governance boundaries
Reveal answer details
Close answer details
Correct answerA
ExplanationVCF Automation combines a governed catalog with automated provisioning, giving consumers a repeatable way to request infrastructure services. Delegation defines who can consume those services, while approvals, policy, and lifecycle controls remain with the provider. This delivers self-service without bypassing the governance boundary.
Question 11
Single choice
An operations object exposes CPU usage samples every five minutes and a host model value that changes only when the hardware identity changes. How should these fields be classified?
-
A
Both fields are properties
-
B
-
C
CPU usage is a property; host model is a metric
-
D
CPU usage is a metric; host model is a property
Reveal answer details
Close answer details
Correct answerD
ExplanationCPU usage is sampled every five minutes, so it forms a changing time series and is classified as a metric. The host model describes hardware identity and changes only when that identity changes, so it is a property. The distinction is between repeatedly measured operational values and descriptive attributes of the managed object.
Question 12
Single choice
An administrator is tasked to replace a certificate of a component in a VMware Cloud Foundation (VCF) environment with an external Certificate Authority (CA)-signed certificate. What format should the administrator use when creating the certificate?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationThe external CA-signed certificate must be created in PEM format for the VCF component certificate replacement. The signature establishes trust, while PEM supplies the required certificate representation for the replacement workflow. A valid CA signature alone is insufficient when the certificate is packaged in a different format than the component expects.
Question 13
Multiple choice
A VMware Cloud Foundation (VCF) administrator is preparing to create a new workload domain within an existing VCF instance. Which two of the following tasks must be completed before starting the workload domain deployment workflow? (Choose two.)
-
A
Commission the new ESX hosts into the existing VCF instance from VCF Installer.
-
B
Commission the new ESX hosts into the existing VCF instance from the new workload domain vCenter.
-
C
Commission the new ESX hosts into the existing VCF instance from the management domain vCenter.
-
D
Pre-install a supported ESX version onto the server using a valid .ISO image.
-
E
Pre-install a supported ESX version onto the server with VCF Installer.
Reveal answer details
Close answer details
Correct answersA, D
ExplanationThe servers must already have a supported ESX version before the workload domain workflow can consume them, so ESX is pre-installed from a valid .ISO image. After installation, the new ESX hosts must be commissioned into the existing VCF instance through VCF Installer. This sequence makes the prepared hosts part of the available VCF inventory before workload domain deployment begins.
Question 14
Single choice
An administrator is responsible for managing a VMware Cloud Foundation (VCF) solution. A 3-node vSAN Express Storage Architecture (ESA) cluster currently runs workloads using a storage policy configured with RAID-5. The administrator has been tasked with enabling auto-policy management in vSAN ESA. Given the scenario, what is the minimum number of hosts required for running workloads with RAID-5?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationThe existing three-node vSAN ESA cluster already runs workloads under a RAID-5 policy. Enabling auto-policy management does not raise the minimum host count for that RAID level in this scenario. Therefore, three hosts remain sufficient for the workloads, while larger host counts may provide additional capacity or resilience but are not the minimum requested.
Question 15
Single choice
An administrator must configure persistent storage for Tanzu Kubernetes clusters using vSAN. Which object type is automatically created when a Storage Policy is assigned to the namespace?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerA
ExplanationAssigning a Storage Policy to a namespace automatically makes that policy available as a Kubernetes StorageClass. Workloads in the namespace can reference the StorageClass when requesting persistent storage backed by vSAN. A PersistentVolume is created for an actual storage request, not merely because the policy was assigned.
Question 16
Multiple choice
An administrator has been tasked with creating a region to provide resources to an Organization in VMware Cloud Foundation (VCF) Automation. The following information has been provided to the administrator for this task: - The workload domains are configured and will integrate with the region.
- All workload domains are configured to share a VMware NSX Manager.
- All workload domains are configured with VMware vSAN storage.
- All workload domain VMware vCenter instances have a Supervisor enabled.
Before creating the region, what two additional configurations should the administrator validate? (Choose two.)
-
A
A VCF Automation Organization for VMware (VM) Applications has been created.
-
B
All required storage classes are present and have the same names across the VMware vCenter instances.
-
C
A Region Quota has been created and associated with the Organization.
-
D
All required Reserved VMware (VM) classes are present and have the same names across all VMware vCenter instances.
-
E
All required VMware (VM) classes are present and have the same names across all VMware vCenter instances.
Reveal answer details
Close answer details
Correct answersB, E
ExplanationThe shared NSX configuration, vSAN storage, and enabled Supervisors are already present. Before creating the region, verify that all required storage classes have identical names across the vCenter instances. Also verify that all required VMware VM classes are present and have the same names everywhere. Consistent class names let one regional definition resolve the intended resources in each workload domain.
Question 17
Single choice
Multiple VCF components require an upgrade. Bundles are downloaded, but compatibility and health prechecks have not run. What should happen next?
-
A
Follow the supported compatibility path, resolve prechecks, sequence updates, and verify health
-
B
Upgrade each component independently to any available version because bundles ensure compatibility
-
C
Skip environment checks because post-update validation can repair unsupported version combinations
-
D
Apply all bundles simultaneously because dependency order matters only during initial deployment
Reveal answer details
Close answer details
Correct answerA
ExplanationDownloaded bundles provide update content, but they do not replace compatibility and environment validation. The upgrade should follow the supported version path, and failed prechecks must be resolved before changes begin. Components are then updated in dependency-aware sequence, followed by health verification to confirm the environment remains operational.
Question 18
Single choice
An expiring VCF endpoint certificate must be replaced under organizational policy. Which workflow preserves service trust?
-
A
Install any certificate with a future expiry date, regardless of endpoint identities
-
B
Replace the certificate directly and assume dependent services discover the new chain
-
C
Change the endpoint password because credential rotation also renews certificates
-
D
Apply a trusted certificate with correct identities and chain, then verify dependents
Reveal answer details
Close answer details
Correct answerD
ExplanationService trust requires more than a future expiration date. Apply a trusted certificate whose identities match the endpoint and whose certificate chain can be validated. After replacement, verify dependent services so their connections and trust relationships are confirmed with the new certificate. Password rotation does not renew certificate identity or trust.
Question 19
Single choice
Which component is used to provision Kubernetes workload clusters?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationCluster API provides the cluster lifecycle interface used to provision Kubernetes workload clusters. It represents cluster infrastructure through declarative resources and drives creation and management from those definitions. Carvel handles packaging, cert-manager handles certificates, and Harbor provides a registry, so those components do not perform cluster provisioning.
Question 20
Multiple choice
An administrator is deciding on a storage solution to create the first management workload domain for a new VMware Cloud Foundation (VCF) instance. Which three storage solutions can the administrator use as principal storage? (Choose three.)
-
A
-
B
VMFS on Fibre Channel (FC)
-
C
-
D
-
E
Reveal answer details
Close answer details
Correct answersB, C, D
ExplanationVMFS on Fibre Channel provides supported block-based principal storage for the management workload domain. NFSv3 provides a supported network file storage choice, and vSAN OSA provides supported software-defined principal storage. These three can serve as the first domain's principal storage, unlike the other listed alternatives in this scenario.
Question 21
Single choice
Which environment demonstrates a private-cloud operating model rather than only an on-premises virtualized estate?
-
A
Individually configured virtual servers with no service catalog or usage controls
-
B
Privately owned hosts on which every request requires an ungoverned manual build
-
C
Controlled pooled resources delivered through policy-governed self-service
-
D
Dedicated hardware that excludes automation, elasticity, and measured consumption
Reveal answer details
Close answer details
Correct answerC
ExplanationA private-cloud operating model combines controlled pooled resources with policy-governed self-service. Pooling makes capacity available as a managed service, self-service lets authorized consumers request it, and policy applies organizational controls to delivery. Privately owned virtualized hardware alone does not provide that service-oriented operating model.
Question 22
Single choice
Which VMware Cloud Foundation (VCF) Automation component provides a self-service catalog in the VM Apps tenant?
-
A
VCF Operations Orchestrator
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationVCF Service Broker provides the consumer-facing self-service catalog in the VM Apps tenant. It presents approved content so users can request available services through a catalog experience. VCF Operations Orchestrator executes workflows, while the other listed components do not provide the tenant's self-service catalog function.
Question 23
Single choice
An administrator has been tasked with configuring the external connectivity for a Virtual Private Cloud (VPC) within a new VMware NSX project. The Transit Gateway (TGW) associated with the project will use VLAN(s) and external subnets to connect the VPC to the physical routers. What prerequisite must the administrator ensure is completed before starting the configuration of the external connection?
-
A
TWO BGP Peers must be set up on the Distributed TGW for dynamic routing.
-
B
The vSphere cluster must have a Transport Node Profile (TNP) attached to it.
-
C
All the hosts running VPC workloads must have access to the VLAN(s) used by the Distributed TGW.
-
D
All the hosts running VPC workloads must have access to the Edge TEP network.
Reveal answer details
Close answer details
Correct answerC
ExplanationThe Distributed TGW uses VLANs and external subnets to reach the physical routers, so every host running VPC workloads must be able to access those VLANs. That host-to-VLAN reachability is required before configuring the external connection because the distributed traffic path originates from the workload hosts.
|