VMware Cloud Foundation 5.2 Administrator

最後更新於 2025 年 6 月 7 日。

Question #1

What is a symptom of an issue with vSphere HA?

A. Snapshots cannot be created or consolidated. B. VMs are not restarted after a host failure. C. VMs are not being migrated using vMotion. D. Hosts frequently disconnect from vCenter Server.

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #2

Which prerequisite task must be completed before deploying VMware Cloud Foundation (VCF) using VMware Cloud Builder?

A. Ensure that all ESXi hosts are connected to a single vCenter Server. B. Verify network configurations and DNS settings for all components. C. Verify configurations on Virtual Distributed Switch on the ESXi hosts that will be used for the deployment. D. Ensure HCX is configured for workload migration.

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #3

The administrator has been tasked with applying asynchronous software updates to the VMware Cloud Foundation (VCF) instance using the VMware Async Patch CLI Tool. Which four steps would an administrator take to complete the task? (Choose four.)

A. Download the bundles from SDDC Manager. B. Download the bundles. C. Upload the confirmation to SDDC Manager. D. Apply the patches directly through the Async Patch CLI Tool. E. Enable the bundles. F. Apply the patches through the SDDC Manager UI. G. Upload the bundles to SDDC Manager.

:::spoiler Correct Answer:

B, D, E, G

Here’s why:

:::

Question #4

While deploying the first VI workload domain in a VMware Cloud Foundation (VCF) solution, which two steps will always be performed by SDDC Manager? (Choose two.)

A. Deploy an NSX Edge cluster and configure BGP routing on the T0 Gateway. B. Deploy a new NSX Manager instance for the VI workload domain. C. Configure vSAN as a principal storage for the VI workload domain. D. Deploy and configure a new vCenter Server instance for the VI workload domain. E. Connect a new vCenter Server instance to the Application Virtual Network.

:::spoiler Correct Answer:

B, D

Here’s why:

:::

Question #5

What is the primary benefit of using HCX Replication Assisted vMotion (RAV) for VM migration?

A. It requires no configuration changes to the VM(s) within the destination environment. B. It performs a test migration to ensure compatibility. C. It ensures zero downtime to the VM(s). D. It provides the fastest migration method by powering off the VM(s) before initiating the migration.

:::spoiler Correct Answer:

C

Here’s why:

:::

Question #6

An administrator has been tasked with deploying a new VMware Cloud Foundation (VCF) environment and is preparing the physical hosts that will be used for the management domain. The administrator has completed the following tasks for all of the physical hosts: The required version of ESXi has been installed. Networking has been configured for the ESXi management interface. DNS entries have been created for forward and reverse name resolution. NTP has been configured and the time synchronized with a centralized time source. VLAN 10 has been presented to the ESXi hosts on the physical network infrastructure for the VCF ESXi management network. A combination of which two additional tasks must the administrator complete before starting the bring-up of the management domain? (Choose two.)

A. Upload the Cloud Builder appliance OVA file to the new shared NFS datastore. B. Create a new vSphere Standard Switch for the VCF ESXi management network on each ESXi host. C. Configure a new shared NFS datastore on each ESXi host. D. Replace the SSL certificate with either a CA signed or self-signed certificate on each ESXi host. E. Configure VLAN 10 on the VM network Port Group of the vSphere Standard Switch on each ESXi host.

:::spoiler Correct Answer:

D, E

Here’s why:

:::

Question #7

How do virtual machine (VM) storage policies in a VMware vSphere environment contribute to optimizing resource utilization, ensuring data availability, and meeting application-specific requirements?

A. By guaranteeing storage IOPs for a particular virtual machine B. By regulating and optimizing storage traffic between virtual machines C. By streamlining the process of automating virtual machine backups D. By defining and enforcing storage requirements, such as performance, availability, and redundancy

:::spoiler Correct Answer:

D

Here’s why:

:::

Question #8

An administrator configures a Local Content Library on vCenter Server A, enables publishing, and creates Subscribed Content Libraries on vCenter Server B and vCenter Server C using the publishing URL. However, the contents of the subscribed libraries on vCenter B and C are not synchronizing with the source library on vCenter A. Which step should the administrator take to troubleshoot the issue?

A. Recreate the Subscribed Content Libraries on vCenter B and C with a new publishing URL from vCenter Server A to reset the synchronization configuration. B. Verify that network connectivity exists between vCenter Server A and the other two vCenters, and ensure that the required ports for Content Library synchronization are open. C. Enable bidirectional synchronization on the Content Library settings to ensure updates are propagated back and forth between vCenter Server A and the subscribed libraries. D. Manually export the library content from vCenter Server A and import it into the subscribed libraries on vCenter B and C to initialize synchronization.

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #9

An administrator is using VMware Aria Automation to automate the provisioning of virtual machines in their VMware Cloud Foundation (VCF) environment. They notice that the deployment requests are failing frequently. What step should the administrator take in VMware Aria Operations for Logs to diagnose the cause of the failures?

A. Check the Audit Logs to see if there are any unauthorized access attempts. B. Review the Alert Definitions to ensure alerts for request failures are configured and enabled. C. Access the Dashboard page to get an overview of system health and performance metrics. D. Use the Interactive Analytics feature to search for error messages related to the requests.

:::spoiler Correct Answer:

D

Here’s why:

:::

Question #10

Which two steps should an administrator perform to configure the backup of the VMware Cloud Foundation (VCF) SDDC Manager and NSX components to allow them to be recovered in the event of a full site failure? (Choose two.)

A. Backup the NSX Manager configuration by exporting it to an archive file. B. Configure the backup settings in SDDC Manager. C. Configure image-based backup for the NSX Manager cluster. D. Prepare an external SFTP server to store file-based backups. E. Define a scheduled task in vCenter to create a snapshot of the NSX Edge cluster.

:::spoiler Correct Answer:

B, D

Here’s why:

:::

Question #11

A Cloud Administrator has been tasked with verifying all of the prerequisites are in place prior to deploying VMware Aria Suite Lifecycle. The following information has been provided for the Aria Suite Lifecycle implementation: hostname: lcm domain: vcf.company.com

IP address: 10.0.0.150 /24 -

IP gateway: 10.0.0.1 - Which three items must the Cloud Administrator ensure are available prior to deploying VMware Aria Suite Lifecycle? (Choose three.)

A. Connectivity between Application Virtual Networks, Management Network, and network services (DNS and NTP) B. A DNS A Record for lcm.vcf.company.com that points to 10.0.0.150 C. The IP address for the Standalone Tier 1 Load Balancer for VMware Aria components is prepared D. A DNS PTR Record for 10.0.0.1 that points to lcm.vcf.company.com E. A CA-signed SSL certificate for Aria Suite Lifecycle added to SDDC Manager

:::spoiler Correct Answer:

A, B, E

Here’s why:

:::

Question #12

An administrator is configuring a newly provisioned workload domain within a VMware Cloud Foundation (VCF) environment. The workload domain will contain virtual machines hosting applications which are considered business critical, and the administrator wants to ensure that the virtual machines are given priority over other network traffic types. Which three steps should the administrator perform to achieve this goal? (Choose three.)

A. Configure a bandwidth resource allocation for the virtual machine traffic type. B. Enable Network I/O control (NIOC) on the workload domain vSphere Distributed Switch (vDS). C. Create a new vSphere Distributed Switch (vDS) specifically for virtual machine traffic. D. Configure dedicated physical network adapters for the ESXi management traffic. E. Disable bandwidth resource allocations for all other traffic types to ensure virtual machine traffic gets full bandwidth. F. Configure a new network resource pool to assign shares, limits and reservations for the virtual machine traffic.

:::spoiler Correct Answer:

A, B, F

Here’s why:

:::

Question #13

An administrator needs to ensure that all ESXi hosts in a cluster have a consistent configuration. Which three steps are necessary to achieve this? (Choose three.)

A. Attach the host profile to all hosts in the cluster. B. Extract the host profile from the configured reference host. C. Right-click the host profile from the reference host and select duplicate host profile. D. Configure the desired settings on an ESXi host. E. Detach the host profile from all hosts in the cluster. F. Manually configure each host to match the reference host settings.

:::spoiler Correct Answer:

A, B, D

Here’s why:

:::

Question #14

An administrator is tasked to configure a Content Library to share its contents across multiple vCenter Server instances. What are the necessary steps and considerations to ensure the library is accessible for the consumption by the other vCenter instances?

A. Create a Local Content Library on each vCenter Server instance and manually synchronize the content. B. Create a Subscribed Content Library on each vCenter Server instance without enabling synchronization. C. create a Local Content Library on a primary vCenter Server instance and enable the “Publish” option. D. create a Subscribed Content Library on the primary vCenter instance and enable the “Publish” option.

:::spoiler Correct Answer:

C

Here’s why:

:::

Question #15

Which feature of VMware Data Services Manager enhances security and compliance?

A. Automated workload migration B. Network traffic encryption C. Storage replication D. Database level authentication

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #16

An administrator is tasked with deploying a new, highly-available application on a VMware Cloud Foundation (VCF)-based private cloud. The new application will include both virtual machines and containers. Which two components of VCF could the administrator use to complete the task? (Choose two.)

A. HCX B. Aria Suite Lifecycle C. NSX D. Aria operations E. vSphere Supervisor

:::spoiler Correct Answer:

C, E

Here’s why:

:::

Question #17

What are three prerequisites for deploying an NSX Edge cluster in a VMware Cloud Foundation (VCF) solution? (Choose three.)

A. Set up vSAN storage policies for the Edge VMs. B. Verify that the NSX host overlay VLAN and NSX Edge overlay VLAN are routed to each other. C. Create DNS entries for the NSX Edge nodes. D. Use separate VLAN IDs and subnets for the NSX host overlay and NSX Edge overlay networks. E. Configure BGP as a dynamic routing protocol on the physical switches. F. Install Aria Operations and enable Edge Cluster monitoring.

:::spoiler Correct Answer:

B, C, D

Here’s why:

:::

Question #18

What is the primary use case for Aria Operations within VMware Cloud Foundation (VCF)?

A. To provide comprehensive monitoring, analytics, and performance management of the cloud infrastructure B. To automate workload deployments across multiple cloud environments C. To enable network virtualization and security D. To manage and analyze log data from various sources

:::spoiler Correct Answer:

A

Here’s why:

:::

Question #19

An administrator is tasked with enabling Workload Management (vSphere Supervisor) on a VMware Cloud Foundation (VCF) workload domain using the SDDC Manager UI. Which three are prerequisites for enabling Workload Management? (Choose three.)

A. Verify that the vSphere Distributed Switch is configured with sufficient port groups. B. Verify at least one Content Library is available. C. Verify all hosts within the selected Sphere clusters have the proper vSphere with Tanzu licensing to support Workload Management. D. Verify at least one NSX Edge cluster is deployed and available. E. Verify that the cluster is running vSAN.

:::spoiler Correct Answer:

B, C, D

Here’s why:

:::

Question #20

What three steps are required to commission a new host into the SDDC Manager inventory? (Choose three.)

A. Self-signed certificate regenerated based on FQDN of host. B. Four NIC ports with a minimum 10 Gbps speed. C. Delete all disk partitions on HDD/SSD. D. Update the DNS records and add the host directly to the SDDC Manager appliance using the root credentials. E. Manually import the host into the vCenter Server inventory and assign it to a cluster. F. A supported version of ESXi installed on the host.

:::spoiler Correct Answer:

A, C, F

Here’s why:

:::

Question #21

An administrator recently incorrectly deployed a new isolated VI workload domain within an existing VMware Cloud Foundation (VCF) instance. How can the administrator reconfigure the VI workload domain to share the SSO domain from the management workload domain?

A. From the management domain vCenter Server instance, use the rsautil command to add the VI workload domain to the management domain. B. From the VI workload domain vCenter Server instance, add the management domain SSO and remove the isolated SSO. C. From the SDDC Manager console, migrate the VI workload domain to the management domain. D. A new VI workload domain must be created through SDDC Manager.

:::spoiler Correct Answer:

D

Here’s why:

:::

Question #22

Following an internal security audit of the new VMware Cloud Foundation (VCF) instance, the following audit finding was documented for priority remediation: All users from the custom administrators group could access the Direct Console User Interface (DCUI) on all ESXi hosts within the workload domain. RISK=High, IMPACT=High The company IT security policy around accessing ESXi servers states the following: Users within the custom administrators group must access ESXi host configurations from within vCenter Server or the vSphere Web Client only. Only users within the restricted administrators group must be allowed direct access to ESXi hosts. Which two actions should the administrator perform on each of the hosts within the workload domain to remediate the security finding? (Choose two.)

A. Disable SSH and the ESXi Shell. B. Add the custom administrators group to the DCUI.Access advanced system setting. C. Add the restricted administrators group to the DCUI.Access advanced system setting. D. Enable Strict Lockdown Mode. E. Enable Normal Lockdown Mode.

:::spoiler Correct Answer:

C, E

Here’s why:

:::

Question #23

An administrator has been tasked with creating a view of key performance indicators for their VMware Cloud Foundation (VCF) private cloud and an automated monthly report that shows the capacity consumed by each development team who use the environment. Which VCF component should the administrator configure to complete their objectives?

A. VMware Aria Operations for Logs B. VMware Aria Operations C. VMware Aria Operations for Networks D. VMware Aria Operations for Applications

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #24

An administrator has deployed a new VI Workload Domain and must deploy a Kubernetes cluster on the vSphere Supervisor. Which three steps should be followed to successfully deploy the Kubernetes cluster? (Choose three.)

A. Configure a vSphere Namespace and assign resource quotas. B. Deploy a vSphere Pod Service. C. Create a new VM template for the Kubernetes nodes. D. Deploy an NSX Edge Cluster. E. Enable Workload Management on the vSphere Cluster within SDDC Manager.

:::spoiler Correct Answer:

A, D, E

Here’s why:

:::

Question #25

An organization is using VMware Aria Automation for automating virtual machine deployments. Recently, some deployment requests have been failing. An administrator needs to use Aria Automation to troubleshoot these failures. Which two steps should be taken? (Choose two.)

A. Disable integrations and re-run deployment. B. Cheek the request logs for error messages. C. Disable all automation policies temporarily. D. Review the provisioning diagrams for patterns of failure. E. Re-run the failed deployments without any changes.

:::spoiler Correct Answer:

B, D

Here’s why:

:::

Question #26

An administrator is responsible for maintaining a VMware Cloud Foundation (VCF) instance. The administrator has been tasked with scaling the CPU and RAM resources of a virtual machine. Which three configuration limitations must the administrator consider when completing the task? (Choose three.)

A. To add Memory to a powered on virtual machine, Memory Hot Add must be enabled. B. To remove Memory to a powered on virtual machine, Memory Hot Add must be enabled. C. To add vCPUs to a powered on virtual machine CPU Hot Add must be enabled. D. To enable Memory Hot Add feature, the virtual machine compatibility must be ESXi 7.0 Update 2 or later. E. To add vCPUs to a powered down virtual machine, CPU Hot Add must be enabled. F. To enable the CPU Hot Add or Memory Hot Add feature, the virtual machine must be powered off.

:::spoiler Correct Answer:

A, C, F

Here’s why:

:::

Question #27

What is the recommended method for IP address allocation for the management interface of VMware ESXi hosts in a VMware Cloud Foundation (VCF) environment?

A. Dynamic IP addresses assigned via DHCP without any reservations B. Dynamic IP addresses assigned via DHCP with a reservation based on MAC address C. Static IP addresses assigned manually D. Static IP address assigned using VMware NSX IP Pools

:::spoiler Correct Answer:

C

Here’s why:

:::

Question #28

An administrator is enabling VMware’s Virtual Machine Encryption for an existing VMware Cloud Foundation (VCF) Workload Domain in order to meet their organization’s compliance regulations. Which three steps should the administrator take to complete this task? (Choose three.)

A. Configure a Key Management Server (KMS) and add it to the vCenter. B. Enable SSH on the ESXi hosts to manage encryption keys. C. Create an encryption policy in vCenter. D. Apply the encryption policy to the ESXi hosts. E. Apply the encryption policy to the existing VMs. F. Enable the encryption feature on the ESXi hosts.

:::spoiler Correct Answer:

A, C, E

Here’s why:

:::

Question #29

An administrator needs to ensure that specific virtual machines within a VMware Cloud Foundation (VCF) environment use storage that can tolerate at least two host failures within a vSAN cluster. Due to financial limitations, the configuration used must prioritize providing the highest level of usable disk space for the datastore. Which three steps should be performed to meet the requirements? (Choose three.)

A. Reconfigure the existing Default Storage Policy in the vSphere Client. B. Apply the storage policy to the target VMs. C. Set Failures to Tolerate to “2 failures - RAID-6 (Erasure Coding)” in the policy configuration. D. Create a new VM Storage Policy in the vSphere Client. E. Set Failures to Tolerate to “2 failures - RAID-1 (Mirroring)” in the policy configuration. F. Configure the policy to use thin provisioning.

:::spoiler Correct Answer:

B, C, D

Here’s why:

:::

Question #30

An administrator is managing a VMware Cloud Foundation (VCF) environment. To support virtual machine backup using a third-party tool, the administrator has been tasked with assigning a service account (srvbackup01) access to the Production Virtual Machine (VM) folder and all child objects. The company security policy dictates that only the minimum required permissions must be assigned to service accounts to ensure they can function as designed. Which three actions should the administrator take in the vSphere Client to complete the objective? (Choose three.)

A. Select the necessary privileges for the backup_service role. B. Assign the backup_service role to the srvbackup01 user on the Production VM folder only. C. Assign the Administrator role to the srvbackup01 user on the Production VM folder and propagate to all child objects. D. Create a new Role called backup_service. E. Assign the backup_service role to the srvbackup01 user on the Production VM folder and propagate to all child objects. F. Clone the Administrator Role to create the backup_service role.

:::spoiler Correct Answer:

A, D, E

Here’s why:

:::

Question #31

A virtual private cloud administrator is regularly tasked to provision and manage new application workloads with dedicated subnets. Which two capabilities of VMware Cloud Foundation (VCF) can be used to alleviate the workload of the administrator with minimal interaction with the networking team? (Choose two.)

A. Configure vSAN storage policies for each application. B. Deploy Aria Automation to enable self-service provisioning. C. Use vSphere Resource Pools to allocate networking resources to different applications. D. Use of NSX overlay networks.

:::spoiler Correct Answer:

B, D

Here’s why:

:::

Question #32

While troubleshooting a vSphere HA c luster issue, an administrator observes that a host is in the Network Isolated state. The host is unable to ping the configured isolation address and cannot access any other vSphere HA agents. Which step would resolve this issue while minimizing downtime for running virtual machines (VMs)?

A. Power off all VMs on the isolated host, remove the host from the cluster, and add it back after the network is fixed. B. Reconfigure the host’s HA agent to bypass the isolation check and allow VM operations to continue. C. Reconfigure the isolation addresses to ensure the host can ping the default gateway or other configured IPs. D. Restart the vSphere HA services on the isolated host to trigger the election of a new primary agent.

:::spoiler Correct Answer:

C

Here’s why:

:::

Question #33

Which step must an administrator take to configure Application Virtual Networks (AVNs) from SDDC Manager while preparing to deploy VMware Aria Suite Lifecycle?

A. Deploy NSX Edge Cluster. B. Ensure that an NSX load balancer is available. C. Enable AVNs in the vCenter Server. D. Assign AVNs to specific ESXi hosts.

:::spoiler Correct Answer:

A

Here’s why:

:::

Question #34

An administrator needs to scale an NSX Edge cluster by adding additional Edge nodes. Which three steps must be taken before scaling an Edge cluster from SDDC Manager? (Choose three.)

A. Assign a unique management IP for each Edge node. B. Assign two Tunnel Endpoint (TEP) addresses for each Edge node. C. Add an additional NSX VDS uplink for each Edge node being added. D. Verify DNS records have been added for each new Edge node. E. Place the Edge cluster in maintenance mode prior to expanding.

:::spoiler Correct Answer:

A, B, D

Here’s why:

:::

Question #35

An organization is planning to manage a diverse set of databases across multiple VMware Cloud Foundation (VCF) environments using Data Services Manager. Which three capabilities of Data Services Manager would help the organization managing these databases efficiently? (Choose three.)

A. Centralized monitoring and alerting for all managed databases B. Automated database migration between on-premises and cloud environments C. Policy-based backup and recovery for databases D. Integration with vSAN for optimized storage management E. Automated database provisioning and deployment

:::spoiler Correct Answer:

A, C, E

Here’s why:

:::

Question #36

An administrator is troubleshooting a high CPU usage issue of the SDDC Manager VM. Access to SDDC Manager UI is exhibiting degraded performance. What two steps should the administrator take to diagnose the issue? (Choose two.)

A. Reboot the SDDC Manager VM to clear any temporary issues. B. Login to SDDC Manager using console with root credentials, run the top command to identify any services that may be consuming high %CPU. C. Upgrade the vSphere version to the latest release. D. Review the CPU usage of the ESXi management domain hosts to identify any that are overcommitted. E. Reconfigure the DRS settings to be more aggressive in load balancing.

:::spoiler Correct Answer:

B, D

Here’s why:

:::

Question #37

An administrator needs to perform lifecycle management for their VMware Cloud Foundation (VCF) components, including upgrading SDDC Manager. Which three steps should be followed to upgrade VCF? (Choose three.)

A. Perform a pre-check to ensure that all components are compatible with the new version. B. Backup all VMware Cloud Foundation components before starting the upgrade. C. Use the SDDC Manager UI to initiate the upgrade process. D. Manually download the update bundles with a secure browser from the VMware website. E. Disable DRS and HA on all clusters before initiating the upgrade.

:::spoiler Correct Answer:

A, B, C

Here’s why:

:::

Question #38

An administrator is deploying a new VMware Cloud Foundation (VCF) environment. After uploading the completed Deployment Parameter Workbook, the validation task fails and an error message is displayed within the VMware Cloud Builder GUI. Which log file can the administrator use to identify the cause of the validation error?

A. vcf-bringup-debug.log B. sos.log C. domainmanager.log D. jsongenerator-<timestamp>.log

:::spoiler Correct Answer:

A, B, C

Here’s why:

:::

Question #39

Which tool is most appropriate for diagnosing and resolving a disk failure when using VMware vSAN with Deduplication enabled?

A. vSphere Client B. Aria Operations C. vSphere CLI (esxcli) D. vSAN Skyline Health

:::spoiler Correct Answer:

D

Here’s why:

:::

Question #40

An administrator is tasked with ensuring the security of network traffic during the migration of virtual machines (VMs) to prevent any potential interception or tampering of data. What specific feature or configuration should the administrator enable to safeguard the integrity and confidentiality of the network traffic involved in VM migration?

A. Encrypted vSphere vMotion B. vSphere Virtual Machine Encryption C. vSphere High Availability (HA) D. vSphere Distributed Resource Scheduler (DRS)

:::spoiler Correct Answer:

A

Here’s why:

:::

Question #41

An administrator can set resource limits and container defaults on a vSphere Namespace. Which three resource limits can be set? (Choose three.)

A. Storage B. Memory C. CPU D. Number of containers E. Network

:::spoiler Correct Answer:

A, B, C

Here’s why:

:::

Question #42

What are two benefits of enabling workload Management on a vSphere Cluster within a VI Workload Domain using SDDC Manager? (Choose two.)

A. It allows the deployment of traditional VMs with enhanced performance. B. It integrates the vSphere supervisor with NSX Networking. C. It enhances the security of the vSphere cluster. D. It integrates vSphere with third-party cloud providers. E. It enables the use of Kubernetes for container orchestration on the vSphere cluster.

:::spoiler Correct Answer:

B, E

Here’s why:

:::

Question #43

An administrator finds that one of the VMs in the vSphere environment cannot reach its default gateway. The VM is configured with a static IP address, and other VMs on the same port group and VLAN are not experiencing any issues. What should the administrator check to resolve the issue?

A. Check the subnet mask configured on the VM. B. Ensure that the VM’s network adapter is set to DHCP. C. Check if the VM has the correct DNS server settings. D. Confirm that the DVS port group is configured correctly.

:::spoiler Correct Answer:

A

Here’s why:

:::

Question #44

When setting up a new port group on a Virtual Distributed Switch (VDS), what role does configuring a VLAN ID play in network management and traffic isolation?

A. To improve the performance of virtual machines by distributing network traffic across multiple uplinks B. To logically segment network traffic by assigning the port group to a specific VLAN, ensuring that traffic is isolated C. To configure storage replication settings for virtual machines connected to the port group D. To enable the automatic assignment of IP addresses to virtual machines in the port group

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #45

An administrator has been tasked with adding a new VI workload Domain to an instance of VMware Cloud Foundation (VCF). The administrator only has two prepared ESXi host servers showing in SDDC Manager. The new VI Workload Domain must use vSphere Lifecycle Images. Which three supported principal storage options are available to the administrator when configuring the new VI Workload Domain? (Choose three.)

A. VSAN B. vVols C. iSCSI D. NFS v3 E. VMFS on FC F. VMFS on local disk

:::spoiler Correct Answer:

B, D, E

Here’s why:

:::

Question #46

What are the three prerequisites an administrator must meet to deploy VMware Aria Suite Lifecycle using SDDC Manager? (Choose three.)

A. Ensure the Management Domain was deployed using vSphere Lifecycle Manager Images. B. Ensure the VMware Software Install Bundle for VMware Aria Suite Lifecycle is in the local bundle repository. C. Ensure that a custom SSL certificate specifying the FQDN of the appliance is available. D. Ensure that the NTP and DNS settings specified in SDDC Manager are valid for all management components. E. Ensure that the Application Virtual Networks have been configured.

:::spoiler Correct Answer:

B, D, E

Here’s why:

:::

Question #47

A company plans to enhance its DevOps practices by implementing Kubernetes as part of a VMware Cloud Foundation (VCF) environment. Which three steps must an administrator perform to achieve this integration? (Choose three.)

A. Configure Aria Automation to automate the deployment of Kubernetes clusters. B. Enable IaaS control plane on existing vSphere clusters. C. Deploy HCX to migrate existing VMs to Kubernetes. D. Configure storage policies for Kubernetes cluster namespace consumption. E. Deploy NSX to manage the networking for Kubernetes clusters.

:::spoiler Correct Answer:

B, D, E

Here’s why:

:::

Question #48

An administrator has been tasked with updating the version of VMware Tools on virtual machines that have been migrated into a VMware Cloud Foundation (VCF) instance so that they are compliant with the company’s security policies. The following information is shared with the administrator about this task: The VMs have been migrated from environments running earlier releases of vSphere. The VMs are spread across multiple clusters within a single workload domain in the VCF instance. The upgrade must not initiate a reboot of the VMs to avoid downtime to the business. Which three steps should the administrator perform in order to complete this task? (Choose three.)

A. Select the VI workload domain so that all VMs across all clusters are automatically selected. B. Use vSphere Lifecycle Manager in the VI workload domain vCenter to initiate the upgrade. C. Select the cluster hosting the VMs to upgrade. D. Select the Upgrade to Match Host option. E. Use SDDC Manager in the management domain to initiate the upgrade. F. Select the Set Auto Update option and set its value to On.

:::spoiler Correct Answer:

B, D, F

Here’s why:

:::

Question #49

An administrator is tasked with deploying a new VMware Cloud Foundation (VCF) instance. The management domain is designed to be created with three virtual distributed switches (VDS) configured as follows: VDS1 - used for management and vMotion traffic

VDS2 - used for vSAN traffic - VDS3 - used for NSX Overlay traffic What action would the administrator take to deploy the designed configuration?

A. A JSON file must be prepared with the defined configuration and used to run the bring-up process. B. vSphere Distributed Switch Profile 2 must be selected in the VCF Deployment parameter workbook. C. The design must be changed to ensure vSAN and NSX overlay traffic are on the same VDS. D. The ESXi hosts have to be configured with twelve physical NICs to ensure redundancy.

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #50

Which two operations can be completed in the SDDC Manager UI on an NSX Edge cluster after it has been deployed into a workload domain? (Choose two.)

A. Redeploy B. Expand C. Sync D. Delete E. Shrink

:::spoiler Correct Answer:

B, E

Here’s why:

:::

Question #51

An administrator is unable to log in to the SDDC Manager UI on their local workstation. After entering the correct URL, the login page does not load and the administrator is unable to enter their credentials in order to view the SDDC Manager inventory. They confirm that the SDDC Manager appliance responds to a ping command from their local workstation against both its FQDN and IP address. After checking the VM console of the SDDC Manager appliance in the management vCenter UI, they determine that the operating system is online and they can log in to it with the relevant administrator level accounts. What two actions could the administrator take whilst logged in to the SDDC Manager VM via the VM console to help identify the root cause of the UI not loading? (Choose two.)

A. Verify that port 80 is open and listening for connections using the command netstat. B. Perform a restart of the network adapter using the command systemctl restart. C. Verify the health of the SDDC Manager services using the command sos –get-vcf-services-summary. D. Perform a restart of the services using the command systemctl restart. E. Verify that there is free disk space remaining using the command df -h.

:::spoiler Correct Answer:

C, E

Here’s why:

:::

Question #52

A single VM is unable to communicate with other VMs on the same network. An administrator needs to identify and resolve the network connectivity issue. What three steps should the administrator follow? (Choose three.)

A. Verify that the networking within the VMs guest OS is correct. B. Restart the VM to reset its network connections. C. Verify that the virtual network adapter is present and connected. D. Ensure that the Port Group name(s) associated with the VMs network adapter(s) exists in the vSwitch or VDS and is spelled correctly. E. Use the ESXi command line to check the status of the VM Kernel adapter.

:::spoiler Correct Answer:

A, C, D

Here’s why:

:::

Question #53

An organization is integrating VMware vCenter with Active Directory (AD) to streamline user authentication. As part of this process, the administrator needs to add AD as an identity source in vCenter. Which three steps must be performed to successfully add AD as an identity source? (Choose three.)

A. Enter the Domain Name and the credentials of an AD user with a minimum of read-only access to Base DN for users and groups. B. Select ‘Identity Sources’ and choose ‘Active Directory Domain’. C. Configure DNS settings on all ESXi hosts to point to the AD DNS servers. D. Navigate to the vCenter Single Sign-On configuration in the vSphere Client. E. Create an Active Directory object for the vCenter Server Appliance. F. Reboot the vCenter to apply the identity source settings.

:::spoiler Correct Answer:

A, B, D

Here’s why:

:::

Question #54

Which three tools could identify and assist with troubleshooting a misconfigured vSAN network? (Choose three.)

A. vCheck B. Supportability and Serviceability (SoS) C. Direct Console User Interface (DCUI) D. esxcli E. vmkping F. Ruby vSphere Console (RVC) commands

:::spoiler Correct Answer:

D, E, F

Here’s why:

:::

Question #55

To help troubleshoot an issue with the vSphere Supervisor, an administrator must log into the Supervisor Control Plane VMs. Which three actions should the administrator take to meet the objective? (Choose three.)

A. Log into the vCenter Server Appliance using SSH. B. Log into the Supervisor Control Plane VM using the admin user and <password>. C. Log into the SDDC Manager appliance using SSH. D. Log into the Supervisor Control Plane VM using the root user and <password>. E. Update the <password> by running /usr/lib/vmware/auth/bin/chpw admin. F. Obtain the <password> by running /usr/lib/vmware-wcp/decryptK8Pwd.py.

:::spoiler Correct Answer:

A, B, F

Here’s why:

:::

Question #56

What option should be selected when placing a vSAN host into maintenance mode to ensure that all data remains accessible throughout the maintenance process while also minimizing the duration of the operation?

A. Ensure Data Accessibility B. Ensure Accessibility C. Full Data Migration D. No Data Migration

:::spoiler Correct Answer:

B

Here’s why:

:::

Question #57

Following an update to the Information Security policy, an administrator has been reviewing the status SSL certificates within the VMware Cloud Foundation (VCF) solution. The new Information Security Policy states: All SSL certificates must be generated and signed from the shared Microsoft Certificate Authority (CA). The administrator has discovered the following: All Aria Suite Components already use CA-signed Subject Alternate Name (SAN) SSL certificates. All other VCF-based SSL certificates are either self-signed or generated using the VMware Certificate Authority (VMCA). Which three steps must the administrator take to ensure the VCF solution remains compliant and managed by SDDC Manager? (Choose three.)

A. In VMware vCenter, replace the ESXi SSL certificates. B. Integrate the OpenSSL CA into SDDC Manager. C. Integrate the Microsoft CA into SDDC Manager. D. In SDDC Manager, replace the SSL certificates for vCenter, NSX Manager, SDDC Manager and Aria Suite Lifecycle. E. In Aria Suite Lifecycle, replace the VMware Identity Manager, Aria Automation, Aria Operations and Aria Operations for Logs SSL certificates. F. In SDDC Manager, replace the SSL certificates for vCenter, ESXi, NSX Manager, SDDC Manager and Aria Suite Lifecycle.

:::spoiler Correct Answer:

A, C, D

Here’s why:

:::

Question #58

The administrator of a VMware Cloud Foundation environment notices that log data from multiple components, including vSphere, NSX, and vSAN, is not being collected in Aria Operations for Logs. What two steps should the administrator perform to resolve this issue? (Choose two.)

A. Reconfigure the log level settings on all vSphere components to ensure detailed logging. B. Check the network connectivity between the Aria Operations for Logs server and the VMware Cloud Foundation components. C. Verify that the Aria Operations for Logs license is still valid and active. D. Increase the storage capacity of the Aria Operations for Logs server to accommodate more log data. E. Ensure that the syslog configuration on each component is pointing to the correct Aria Operations for Logs server.

:::spoiler Correct Answer:

D, E

Here’s why:

:::

Question #59

An organization has 3 data center sites and is implementing a solution to achieve a Recovery Point Objective (RPO) of 0 to ensure continuous availability of storage in the event of a single site failure. The sites are connected via a high bandwidth/low latency link. Which two VMware Cloud Foundation (VCF) components can be used to support this capability? (Choose two.)

A. vSphere B. Aria Operations C. NSX D. vSphere Replication E. vSAN

:::spoiler Correct Answer:

A, E

Here’s why:

:::

Question #60

An administrator has deployed the VMware Cloud Builder appliance in preparation for the deployment of a new VMware Cloud Foundation (VCF) environment. While performing the bring-up of the Management Domain, one of the tasks fails. The administrator is unable to identify the root cause of the failure and needs to generate a support bundle to send to VMware support. Which tool should the administrator use to generate the support bundle for the failed bring-up?

A. Generate support Bundle option on the vCenter server Management Interface B. Generate Support Bundle option on the vSphere Host Client Interface C. Supportability and Serviceability (SoS) Utility on the VMware Cloud Builder appliance D. Supportability and Serviceability (SoS) Utility on the SDDC Manager appliance

:::spoiler Correct Answer:

C

Here’s why:

:::