VMware 2V0-17.25 Online Practice Questions and Exam Preparation

VMware 2V0-17.25 Online Questions & Answers

• Question 1:

  An administrator wants to deploy Harbor Registry integrated with vSphere with Tanzu to provide trusted images for developers. What is required for the deployment?

  A. NSX Advanced Load Balancer
  B. vSphere Native Load Balancer
  C. vSAN File Services
  D. Content Library replication
  A. NSX Advanced Load Balancer

  ---

  explanation:

  Explanation

  When deploying Harbor as part of vSphere with Tanzu, an NSX Advanced Load Balancer (ALB) instance provides virtual IPs and certificate termination for Harbor endpoints. vSAN File Service and Content Library replication are unrelated; vSphere Native LB is not used in vSphere 7 / 8 Tanzu architecture.

• Question 2:

  An administrator must configure persistent storage for Tanzu Kubernetes clusters using vSAN. Which object type is automatically created when a Storage Policy is assigned to the namespace?

  A. StorageClass
  B. StoragePolicyBinding
  C. VolumeClaimTemplate
  D. PersistentVolume
  A. StorageClass

  ---

  explanation:

  Explanation

  When a vSphere Storage Policy is associated with a Supervisor Namespace, vSphere with Tanzu automatically creates a Kubernetes StorageClass that maps the vSphere Storage Policy to Kubernetes persistent volumes. This enables Tanzu Kubernetes Clusters and vSphere Pods to request storage using standard Kubernetes PVCs.

• Question 3:

  An administrator has created a namespace for developers to deploy containerized workloads. The namespace must enforce a CPU limit of 10 GHz and a memory limit of 32 GB. Which configuration in vSphere with Tanzu achieves this?

  A. Apply Resource Limits on the Namespace
  B. Configure Pod Resource Quotas
  C. Enable CPU Pinning on Supervisor Cluster
  D. Assign a LimitRange YAML manifest
  A. Apply Resource Limits on the Namespace

  ---

  explanation:

  Explanation

  Namespace-level resource limits define the total CPU and memory consumption permitted by workloads running in that namespace.

  In vSphere UI Workload Management > Namespaces, administrators can directly set CPU/memory limits.

  LimitRange (D) and Pod quotas (B) control individual Pod resources, not the namespace's aggregate capacity.

• Question 4:

  An administrator must configure network isolation between multiple namespaces within a single Supervisor Cluster. Which feature should be used?

  A. NSX Distributed Firewall rules
  B. vSphere Role-Based Access Control
  C. Supervisor Namespace Resource Limits
  D. Pod Security Policies
  A. NSX Distributed Firewall rules

  ---

  explanation:

  Explanation

  For Supervisor Clusters backed by NSX networking, NSX Distributed Firewall (DFW) provides micro- segmentation between namespaces, pods, and clusters. RBAC and resource limits do not provide network isolation; PodSecurityPolicies control pod privileges only.

• Question 5:

  Which two steps must be completed before deploying Tanzu Kubernetes Grid (TKG) clusters using vSphere with Tanzu? (Choose two.)

  A. Create a Supervisor Namespace.
  B. Configure a Content Library with the TKG images.
  C. Deploy NSX Edge nodes.
  D. Create a Tanzu Mission Control organization.
  E. Enable vSphere Pod Service.
  A. Create a Supervisor Namespace.
  B. Configure a Content Library with the TKG images.

  ---

  explanation:

  Explanation

  To deploy Tanzu Kubernetes clusters:

  1.A Supervisor Namespace must exist to host the cluster objects.

  2.A Content Library with the TKG OVA images must be subscribed or created so the Supervisor can clone them during cluster provisioning. NSX Edge is needed only for NSX-backed setups but is part of enabling Tanzu, not a per-cluster requirement.

• Question 6:

  An administrator wants to allow developers to deploy Tanzu Kubernetes clusters but restrict them from modifying storage classes. What is the recommended method?

  A. Assign the developer group the Edit role at namespace level.
  B. Use a custom role with only "Create Cluster" permissions in the namespace.
  C. Grant the developers access through the vSphere Administrator role.
  D. Configure vSphere Namespace Permissions to limit storage policy usage.
  D. Configure vSphere Namespace Permissions to limit storage policy usage.

  ---

  explanation:

  Explanation

  vSphere Namespace Permissions control which storage policies (backing StorageClasses) users can consume when deploying clusters. By restricting available storage policies in the namespace permissions, developers can create clusters but cannot modify or add new StorageClasses.

• Question 7:

  Which statement describes the role of the vSphere CNS (Cloud Native Storage) service in vSphere with Tanzu?

  A. It provides file-based backup of Supervisor Cluster VMs.
  B. It monitors, provisions, and manages persistent volumes for containerized workloads.
  C. It synchronizes cluster resource quotas across namespaces.
  D. It manages VM Class templates and resource allocation for workloads.
  B. It monitors, provisions, and manages persistent volumes for containerized workloads.

  ---

  explanation:

  Explanation

  vSphere CNS integrates vSphere storage with Kubernetes, enabling visibility of persistent volumes in vCenter.

  It tracks PV creation, capacity, and compliance with storage policies, giving admins end-to-end monitoring of container storage.

• Question 8:

  An administrator wants to expose applications running in a Tanzu Kubernetes cluster to the external network. Which two objects are required? (Choose two.)

  A. LoadBalancer Service
  B. Ingress Controller
  C. PersistentVolumeClaim
  D. StatefulSet
  E. Secret
  A. LoadBalancer Service
  B. Ingress Controller

  ---

  explanation:

  Explanation

  To provide external access:

  1.A LoadBalancer Service creates a virtual service via NSX ALB or HAProxy.

  2.An Ingress Controller handles HTTP routing for multiple services. Persistent volumes and Secrets are unrelated to external exposure.

• Question 9:

  Which two statements are true regarding vSphere Pods in vSphere with Tanzu? (Choose two.)

  A. They run directly on ESXi using the Spherelet agent.
  B. They require NSX overlay networking.
  C. They run within virtual machines managed by Supervisor Cluster.
  D. They can only use persistent storage backed by NFS.
  E. They support vMotion and DRS placement.
  A. They run directly on ESXi using the Spherelet agent.
  E. They support vMotion and DRS placement.

  ---

  explanation:

  Explanation

  vSphere Pods execute directly on ESXi hosts through the Spherelet (vSphere-native kubelet) without an intermediate VM, providing higher isolation and performance.

  They are scheduled by DRS like VMs and support vMotion.

  They do not require NSX overlay (can use vDS networking), nor are they limited to NFS storage.

• Question 10:

  Which two components are deployed automatically when enabling vSphere with Tanzu on a vSphere Cluster? (Choose two.)

  A. Supervisor Control Plane VMs
  B. NSX Advanced Load Balancer
  C. vSAN File Service
  D. Harbor Registry
  E. vCenter Server Appliance
  A. Supervisor Control Plane VMs
  B. NSX Advanced Load Balancer

  ---

  explanation:

  Explanation

  When vSphere with Tanzu is enabled, vCenter automatically deploys three Supervisor Control Plane VMs and configures NSX Advanced Load Balancer (ALB) for ingress/egress load balancing and virtual service management.

  Harbor (D) and vSAN File Service (C) are optional add-ons; vCenter (E) already exists before enabling Tanzu.

  Therefore, the correct answers are A and

  B.

  References: vSphere with Tanzu Configuration Guide ?Enabling Supervisor Cluster Components.