VMware VCP-VMC 2022 2V0-33.22 Questions & Answers

• Question 121:

  A cloud administrator is looking for a unified solution to collect and analyze security events for troubleshooting from: VMware vSphere Windows Operating Systems Physical servers Web servers Database servers Amazon Web Services Which VMware Cloud service can meet this requirement?

  A. VMware vRealize Automation Cloud

  B. CloudHealth Secure State

  C. VMware vRealize Log Insight Cloud

  D. VMware vRealize Network Insight Cloud

  Correct Answer: C

  https://blogs.vmware.com/management/2022/08/forwarding-vsphere-audit-and-authentication-events-from-vrealize-log-insight-to-a-siem.html

• Question 122:

  On VMware Cloud on AWS, which type of host do you use when you require high local storage requirements and additional cores for your workloads? (Select one option)

  A. ve-standard-72

  B. i3en. metal

  C. i3.metal

  D. AV36

  Correct Answer: C

  when you require high local storage requirements and additional cores for your workloads on VMware Cloud on AWS. i3.metal instances offer up to 4TB of local NVMe storage and up to 96 CPU cores, giving you the power and storage you need to handle large workloads. Additionally, i3.metal instances are great for applications that benefit from high CPU-to-memory ratios, like artificial intelligence, machine learning, big data analysis, and HPC workloads.

• Question 123:

  A cloud administrator is asked to validate a proposed internetworking design that will provide connectivity to a VMware Cloud on AWS environment from multiple company locations.

  The following requirements must be met:

  1.

  Connectivity to the VMware Cloud on AWS environment must support high-throughput data transfer.

  2.

  Connectivity to the VMware Cloud on AWS environment must NOT have a single point of failure.

  3.

  Any network traffic between on-premises company locations must be sent over a private IP address space.

  Which design decisions should be made to meet these network connectivity requirements?

  A. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a secondary, standby Direct Connect from headquarters using a public VIF. Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

  B. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a public VIF for this connection. Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS. Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

  C. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the "Use VPN as Backup to Direct Connect" option. Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

  D. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a policy-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the "Use VPN as Backup to Direct Connect" option. Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

  Correct Answer: C

  Option C is the best design decision that meets the network connectivity requirements. Configuring a Direct Connect from headquarters to VMware Cloud on AWS with a private VIF will ensure high-throughput data transfer and eliminate the single point of failure. To ensure that all network traffic between on-premises company locations is sent over a private IP address space, a route-based IPsec VPN tunnel should be configured as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the "Use VPN as Backup to Direct Connect" option. Finally, dual, redundant, route-based IPsec VPN connections should be configured from each regional office to VMware Cloud on AWS.

• Question 124:

  A cloud administrator needs to create an isolated network segment for use in disaster recovery test. Which type of network segment is required?

  A. Private

  B. Routed

  C. Extended

  D. Disconnected

  Correct Answer: A

  A private network segment is an isolated network segment that is used for disaster recovery testing. Private network segments provide a secure and isolated environment for testing, allowing administrators to test their disaster recovery plans without risking the stability of their production environment. Private network segments also provide additional security, as they are not connected to the public internet, making them less vulnerable to external attacks. [1] [1]https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws.networking/GUID-64D7A8F3-45C9-4A83-8528-A8C2A2C7001D.html

• Question 125:

  Which statement describes the VMware Multi-Cloud vision?

  A. Flexibility to operate globally and consistently

  B. Flexibility to choose any hardware vendor

  C. Flexibility to manage infrastructure through outsourcing

  D. Flexibility to choose any hypervisor

  Correct Answer: A

  https://www.vmware.com/cloud-solutions/multi-cloud.html Multi-Cloud Solutions Redefine the foundation of IT to power every application on any cloud. With Multi-Cloud solutions from VMware, you can migrate to the cloud without recoding your apps, modernize your infrastructure, and operate consistently across the data center, the edge, and any cloud.

• Question 126:

  A cloud administrator needs to configure a VM storage policy for virtual machines that will host a business critical application. The environment consists of a single cluster with six hosts. The application is storage I/O intensive and redundancy must be provided at the highest level possible.

  Which VM storage policy settings should the administrator configure to meet these requirements?

  A. RAID-1 FTT = 3

  B. RAID-1 FTT = 2

  C. RAID-5

  D. RAID-6

  Correct Answer: B

  RAID-1 is a mirror configuration that provides high availability by creating multiple copies of a VMDK. RAID-5 and RAID-6 are erasure coding configurations that provide fault tolerance by distributing data and parity across multiple hosts. The

  number of failures to tolerate (FTT) determines how many copies or parity blocks are created for each VMDK. For example, RAID-1 FTT = 2 means that there are three copies of each VMDK.

  Therefore, based on your requirements, a possible VM storage policy setting could be RAID-1 FTT = 2, which would provide redundancy at the highest level possible with six hosts.

  https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vsphere.vmc-aws-manage-data-center-vms.doc/GUID-EDBB551B-51B0-421B-9C44-6ECB66ED660B.html