Exam4Training

VMware 5V0-23.20 VMware vSphere with Tanzu Specialist Online Training

Question #1

How can a vSphere administrator replace the Supervisor Cluster API endpoint certificate?

  • A . Use the certificate-manager CLI utility to replace the Supervisor Cluster API endpoint certificate.
  • B . Use the vSphere Client to replace the Workload platform MTG certificate.
  • C . Use the vSphere Client to replace the NSX Load Balancer certificate.
  • D . Use kubectl to replace the Supervisor Cluster API endpoint certificate.

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

As a vSphere administrator, you can replace the certificate for the virtual IP address (VIP) to securely connect to the Supervisor Cluster API endpoint with a certificate signed by a CA that your hosts already trust. The certificate authenticates the Kubernetes control plane to DevOps engineers, both during login and subsequent interactions with the Supervisor Cluster.

Prerequisites

Verify that you have access to a CA that can sign CSRs. For DevOps engineers, the CA must be installed on their system as a trusted root.

Procedure

✑ In the vSphere Client, navigate to the Supervisor Cluster.

✑ Click Configure then under Namespaces select Certificates.

✑ In the Workload platform MTG pane, select Actions > Generate CSR.

✑ Provide the details for the certificate.

✑ Once the CSR is generated, click Copy.

✑ Sign the certificate with a CA.

✑ From the Workload platform MTG pane, select Actions > Replace Certificate.

✑ Upload the signed certificate file and click Replace Certificate.

✑ Validate the certificate on the IP address of the Kubernetes control plane.


Question #2

An administrator working in a vSphere with Tanzu environment wants to ensure that all persistent volumes configured by developers within a namespace are placed on a defined subset of datastores. The administrator has applied tags to the required datastores in the vSphere Client

Which action should the administrator take next to meet the requirement?

  • A . Create a storage policy containing the tagged datastores. and apply it to the vSphere Namespace.
  • B . Create a storage class containing the tagged datastores. and apply it to the Supervisor Cluster
  • C . Create a persistent volume claim containing the tagged datastores, and apply it to the vSphere Namespace.
  • D . Create a storage Policy containing the tagged datastores. and apply it to the Supervisor Cluster.

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

Graphical user interface

Description automatically generated

The vSphere administrator defines and assigns VM storage policies to a namespace:

• VM storage policies are translated into Kubernetes storage classes.

• Developers can access all assigned VM storage policies in the form of storage classes.

• Developers cannot manage storage classes.

Storage class names are created in the following way:

• Spaces in VM Storage Policy names are replaced with hyphens (-).

• Special characters are replaced with a digit. A VM Storage Policy called My Gold Policy $ is called my-gold-policy-0 as a storage class.


Question #3

Which statement accurately describes the upgrade of a vSphere with Tanzu Supervisor Cluster?

  • A . vCenter Server performs an in-place upgrade of the Supervisor Cluster control plane VMs.
  • B . vCenter Server orchestrates the rolling upgrade of Supervisory control plane VMs and upgrades the ESXi host spherelet component.
  • C . An administrator manually deploys new Supervisor Cluster control plane VMs and uses vSphere Lifecycle Manager to update the ESXi host spherelet component.
  • D . An administrator downloads and installs new RPMs to the Supervisor Cluster control plane VMs.

Reveal Solution Hide Solution

Correct Answer: C
Question #4

How does Kubernetes implement the vSphere storage policy in vSphere with Tanzu?

  • A . Storage class
  • B . Paravirtual CSl
  • C . Static Persistent Volume
  • D . Persistent Volume

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

When vSphere with Tanzu converts storage policies that you assign to namespaces into Kubernetes storage classes, it changes all upper case letters into lower case and replaces spaces with dashes (-). To avoid confusion, use lower case and no spaces in the VM storage policy names.

Storage Policy Based Management is a vCenter Server service that supports provisioning of persistent volumes and their backing virtual disks according to storage requirements described in a storage policy.

Question #5

To which set of networks are the Supervisor Cluster nodes attached when deploying with an NSX-T network topology?

  • A . Frontend and Workload
  • B . Frontend and Management
  • C . Workload and Management
  • D . Management and NSX Overlay

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

The Network Service has been extended to support the vSphere Distributed Switch (vDS). Start by configuring the switch with appropriate portgroups. Management will carry traffic between vCenter and the Kubernetes Control Plane (Supervisor Cluster control plane). As we will see in a moment, not having the built in Load Balancing capability of NSX means you will need to deploy your own load balancer externally from the cluster. We will give you a choice of integrated load balancers. The first one we support is HAProxy.

The Management network will also carry traffic between the supervisor cluster nodes and HAProxy. The Frontend network will carry traffic to the Load Balancer virtual interfaces. It must be routable from any device that will be a client for your cluster. Developers will use this to issue kubectl commands to the Supervisor cluster or their TKG clusters. You can have one or more Workload networks.

The primary Workload network will connect the cluster interfaces of the Supervisor cluster. Namespaces can be defined with their own Workload network allowing for isolation between development teams assigned different Namespaces. The Namespace assigned Workload Networks will connect the TKG cluster nodes in that Namespace.

Question #6

What is the correct process to store images in a project on the Registry Service?

  • A . Use the kubect1 push command
  • B . Use the docker push command
  • C . Use the vSphere Client to upload the image the content library
  • D . Use the vSphere Client to upload the image to the Registry Service

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

https://docs.docker.com/docker-hub/repos/

Graphical user interface, text, application

Description automatically generated

• Registry Service: Developers can store and manage Docker and OCI images using Harbor. Harbor is an open-source container image registry that secures images with role-based access control.

Procedure

✑ Login to Harbor Registry with the vSphere Docker Credential Helper. Note:While providing –user username is acceptable for login, you should use the UserPrincipalName (UPN) syntax ( –user username@domain.com) to login and use docker push commands.

✑ Tag the image that you want to push to the project in Harbor Registry with same name as the namespace, where you want to use it:

For example:

✑ uk.co.certification.simulator.questionpool.PList@d8e88b0

✑ To push an image to a project in Harbor, run the following command:Syntax: For example:

✑ uk.co.certification.simulator.questionpool.PList@d8e8960

Expected result.

✑ uk.co.certification.simulator.questionpool.PList@d8e89b0


Question #7

A user needs to identify the namespaces that may be accessed.

Which command will provide the desired output?

  • A . kubect1 get storageclasses
  • B . kubect1 config use-context
  • C . kubect1 config get-contexts
  • D . kubect1 get contexts

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

A user can have permissions on multiple namespaces. The kubectl commands are typically actioned against the current active namespace.

View the list of available namespaces:

kubectl config get-contexts

Change the current active namespace:

kubectl config use-context <namespace>

Question #8

Which element defines the type of storage backing the Persistent Volume?

  • A . Datastore Cluster
  • B . Storage Class
  • C . vVols
  • D . Persistent Volume Claim

Reveal Solution Hide Solution

Correct Answer: B
Question #9

An organization is preparing to deploy vSphere with Tanzu and will be using the vSphere Networking stack.

How should the administrator allocate management network IP addresses for the Kubernetes Control Plane within the Supervisor Cluster?

  • A . Five IP addresses are required, one for each of the Control Plane VMs. one for the floating IP address of the Control Plane VM, and one spare for performing rolling cluster upgrades
  • B . Four IP addresses are required, one for each of the Control Plane VMs and one spare for performing rolling cluster upgrades
  • C . Three IP addresses are required, one for each of the Control Plane VMs
  • D . Six IP addresses are required, one for each of the Control Plane VMs, one for the floating IP address of the Control Plane VM. one for performing rolling cluster upgrades
    and one for the image Registry VM.

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

Static IPs for Kubernetes control plane VMs

Block of 5A block of 5 consecutive static IP addresses to be assigned to the Kubernetes control plane VMs in the Supervisor Cluster.

Question #10

What is the minimum number of portgroups needed, in addition to the management portgroup. to provide connectivity for external services on a Supervisor Cluster?

  • A . 1
  • B . 4
  • C . 3
  • D . 2

Reveal Solution Hide Solution

Correct Answer: A

Question #11

At which three levels of the vSphere Client is information about Kubernetes Persistent Volumes found? (Choose three.)

  • A . Resource Pool
  • B . Cluster
  • C . vCenter
  • D . Datastore
  • E . Virtual Machine
  • F . Network

Reveal Solution Hide Solution

Correct Answer: B,C,D
Question #12

Which is a valid version change for a Tanzu Kubernetes cluster running Kubernetes version 1.16.7?

  • A . Upgrade one major version (e.g.. 2.0.1)
  • B . Upgrade two minor versions (e.g., 1.18.0)
  • C . Downgrade one patch version (e.g.. 1.16.5)
  • D . Upgrade one minor version (e.g.. 1.17.0)

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

Be aware of the following constraints when upgrading your cluster.

✑ You can upgrade a cluster up to one minor version of Kubernetes from its current version. If necessary, you can perform subsequent upgrades to move the version forward.

✑ Upgrading your version of Kubernetes is a one-way operation. You cannot subsequently downgrade the Kubernetes version, or undo an upgrade.

Question #13

The virtualization team supports many development teams on a Supervisor cluster. For a specific development team, they would like to limit persistent volumes that can be created on Tanzu Kubernetes clusters to only an NFS based storage array.

Which action should be taken to accomplish this goal?

  • A . Use kubectl to create a storage class in the Supervisor cluster.
  • B . Set a resource quota limiting the number of PVCs for that development team.
  • C . Add a storage policy to that development team’s Supervisor Namespace containing only the NFS datastore
  • D . Disconnect non-NFS datastores from the ESXi hosts that make up the Supervisor cluster.

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

The storage policy would become a storage class in Kubernetes.

Question #14

The Gold storage policy has been assigned to the Web namespace, and the DevOps engineer wants to place a persistent volume for the Web application in the Gold storage class.

How should this goal be accomplished?

  • A . Indicate the Gold storage class in the persistent volume claim specification
  • B . Assign the persistent volume to the Gold storage class
  • C . Indicate the Gold storage class in the persistent volume specification
  • D . Configure tag-based placement for the persistent volume

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

• VM storage policies are translated into Kubernetes storage classes.

• Developers can access all assigned VM storage policies in the form of storage classes. • Developers cannot manage storage classes.


Question #15

Which capability do persistent volumes provide to containerized applications?

  • A . Automated disk archival
  • B . Support for in-memory databases
  • C . Support for ephemeral workloads
  • D . Retention of application state and data

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

Certain Kubernetes workloads require persistent storage to store data permanently. To provision persistent storage for Kubernetes workloads, vSphere with Tanzu integrates with Cloud Native Storage (CNS), a vCenter Server component that manages persistent volumes.

Persistent storage is used by vSphere Pods, Tanzu Kubernetes clusters, and VMs. The following example illustrates how persistent storage is used by a vSphere Pod.

vSphere Pods use different types of storage depending on the objects that are stored. The types of storage are ephemeral virtual machine disks (VMDKs), persistent volume VMDKs, and containers image VMDKs:

• Storage policies for container image and ephemeral disks are defined at the cluster level.

• Storage policies for persistent volumes are defined at the namespace level.

• Networking for vSphere Pods uses the topology provided by NSX.

Question #16

Which command would be used to deploy a Tanzu Kubernetes cluster?

  • A . kubectl create cluster -f CLUSTER-NAME.yaml
  • B . kubectl apply cluster CLUSTER-NAME.yaml
  • C . kubectl apply -f CLUSTER-NAME.yaml
  • D . kubectl create -f CLUSTER-NAME.yaml

Reveal Solution Hide Solution

Correct Answer: C
Question #17

Which statement is true about Kubernetes Network Policies?

  • A . The Supervisor cluster contains a firewall to implement the network policy.
  • B . The policy is created by developers and applied using a YAML specification.
  • C . vSphere administrator adds the Kubernetes Network policy to the Development team’s Namespace to implement the rules.
  • D . vSphere administrator creates the network policy in NSX Manager to restrict app-to-app communication.

Reveal Solution Hide Solution

Correct Answer: B
Question #18

Which requirement is needed to deploy Tanzu Kubernetes clusters but is unnecessary when deploying vSphere Pods?

  • A . Harbor Image Registry
  • B . vSphere Single Sign-On
  • C . vSphere Content Library
  • D . Namespaces

Reveal Solution Hide Solution

Correct Answer: A
Question #19

How is the storage selected for the Harbor pods when the embedded Harbor image registry is enabled?

  • A . vCenter Server automatically selects a local ESXi host datastore.
  • B . An administrator selects a VM storage policy as part of enablement.
  • C . vCenter Server automatically chooses a VM storage policy.
  • D . An administrator selects a specific datastore as part of enablement.

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

Enabling Harbor Image Registry

The vSphere administrator uses the vSphere Client to enable Harbor. To enable this component, select a cluster, select Configure > Namespaces > Image Registry, and click ENABLE HARBOR:

• A VM Storage Policy is required to allocate storage for the Harbor pods.

• An IP Address, based on the ingress CIDR range, is allocated for the Harbor management interface.

• After a few minutes, Harbor is deployed and running. 184

Question #20

Which kubectl command should be used to change the active vSphere namespace to namespace-01?

  • A . kubectl config use-context namespace-01
  • B . kubectl describe ns namespace-01
  • C . kubectl get ns namespace-01
  • D . kubectl config change-context namespace-01

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

A context element in a kubeconfig file is used to group access parameters under a convenient name. Each context has three parameters: cluster, namespace, and user. By default, the kubectl command-line tool uses parameters from the current context to communicate with the cluster.

To choose the current context:

✑ kubectl config use-context ctx001

Question #21

An administrator needs to get a list of all Tanzu Kubernetes clusters running in the current namespace.

Which command will provide the desired output?

  • A . kubectl get vmservice
  • B . kubectl get clusters
  • C . kubectl get virtualnetwork
  • D . kubectl get tanzukubernetescluster

Reveal Solution Hide Solution

Correct Answer: B
Question #22

How can the vSphere administrator purge unused images from the image registry?

  • A . Enable the garbage collector service to purge all unreferenced images from the corresponding namespace.
  • B . From the Harbor UI, navigate to the project associated with namespace, and select the option to purge unreferenced images.
  • C . Download the vSphere Docker Credential Helper CLI Tool, and use it to purge all unreferenced images from the corresponding namespace.
  • D . From vSphere Client, navigate to the namespace, and select the option to purge unreferenced images.

Reveal Solution Hide Solution

Correct Answer: B
Question #23

Which kubectl command is used to list the Kubernetes services in the current active namespace?

  • A . kubectl get services
  • B . kubectl get loadbalancer
  • C . kubectl services get ip
  • D . kubectl list services

Reveal Solution Hide Solution

Correct Answer: A
Question #24

Which object provides user access to applications running on vSphere with Tanzu?

  • A . External load balancer
  • B . vSphere Distributed Switch
  • C . Round-robin DNS
  • D . Internal load balancer

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

External HTTP(S) Load Balancing is a proxy-based Layer 7 load balancer that enables you to run and scale your services behind a single external IP address.



Question #25

On which cluster can a Supervisor Namespace be created?

  • A . A Tanzu Kubernetes Grid Integrated cluster
  • B . A vSphere 7 cluster enabled with Workload Management
  • C . A Tanzu Kubernetes cluster
  • D . A vSphere 6.7 cluster enabled with Workload Management

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

A Supervisor Cluster namespace is a combination of resource allocations and permissions set within the Supervisor Cluster. When you create a Supervisor Namespace, you’ll assign who has access to use it, and how many of the ESXi cluster’s resources you can use (much like a resource pool).

When you enabled the Workload Management components, you created a special Kubernetes cluster called the “Supervisor Cluster”. You can continue to deploy virtual machines in this cluster, and you can also deploy kubernetes pods as a “pod vm” which is basically a container with some special wrapping so they are better isolated, like a virtual machine is.



Question #26

What is the minimum number of virtual distributed portgroups that must be configured on the vSphere Distributed Switch before enabling Workload Management using the vSphere networking stack and a HAProxy load balancer?

  • A . 2
  • B . 1
  • C . 4
  • D . 3

Reveal Solution Hide Solution

Correct Answer: A
Question #27

Which open-source project extends the Docker registry source code to provide an enterprise-class registry server?

  • A . Namespace
  • B . Manifest
  • C . Harbor
  • D . Github

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

VMware Harbor Registry

VMware Harbor Registry is an enterprise-class registry server that stores and distributes container images. Harbor allows you to store and manage images for use with VMware Tanzu Kubernetes Grid Integrated Edition (TKGI). Overview

Harbor extends the open source Docker Distribution by adding the functionalities usually required by an enterprise, such as security, identity, and management. As an enterprise private registry, Harbor offers enhanced performance and security. Deploying a registry alongside the TKGI environment improves image management efficiency.

Question #28

Which command will show the Tanzu Kubernetes cluster versions available in the vSphere content library?

  • A . kubect1 get rc,services
  • B . kubect1 get contentlibrary
  • C . kubect1 get tanzukubernetesreleases
  • D . kubect1 get tanzuimages

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

✑ kubectl get tanzukubernetesreleases List available Tanzu Kubernetes releases.

✑ kubectl get tkr

Short form version of the preceding command.

✑ kubectl get tkr v1.17.8—vmware.1-tkg.1.5417466 -o yaml Provides details on the named Tanzu Kubernetes release.

VMware Tanzu distributes Kubernetes software versions as Tanzu Kubernetes releases. To consume these releases, you configure a vSphere Content Library and synchronize the available releases. You can do so using a subscription-based model, or on-demand. If you want to provision Tanzu Kubernetes in an internet restricted environment, you can create a local library and manually import the releases.

Text

Description automatically generated


Question #29

Which statement accurately describes a characteristic of load balancers in vSphere with Tanzu using the vSphere networking stack?

  • A . A load balancer balances pods between Tanzu Kubernetes cluster nodes.
  • B . A load balancer distributes Tanzu Kubernetes cluster nodes between ESXi hosts.
  • C . A load balancer provides external access to Supervisor Clusters and Tanzu Kubernetes clusters.
  • D . A load balancer performs authentication and authorization for Supervisor Clusters and Tanzu Kubernetes clusters.

Reveal Solution Hide Solution

Correct Answer: C
Question #30

Which kubectl command is used to deploy the application when using a Kubernetes deployment specification file, my-app.yaml?

  • A . kubectl run my-app.yaml
  • B . kubectl apply -f my-app.yaml
  • C . kubectl create my-app.yaml
  • D . kubectl apply spc my-app.yaml

Reveal Solution Hide Solution

Correct Answer: B

Question #31

An administrator needs to configure a Supervisor Cluster with the vSphere networking stack (vSphere Distributed Switch) and HAProxy appliance using default configuration. The administrator has already connected all hosts in the cluster to a vSphere Distributed Switch and created distributed portgroups.

Which designation must be mapped to a distributed portgroup?

  • A . Primary Workload Network
  • B . Load Balancer Network
  • C . Frontend Network
  • D . Supervisor Cluster Network

Reveal Solution Hide Solution

Correct Answer: D
Question #32

Which command displays the storage limits that have been set together with the amount of resources consumed?

  • A . kubect1 get resourcequotas
  • B . kubect1 config get-resourcequotas limits
  • C . kubect1 list resourcequotas
  • D . kubect1 describe resourcequotas

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

Create the ResourceQuota:

✑ kubectl apply -f https://k8s.io/examples/admin/resource/quota-mem-cpu.yaml — namespace=quota-mem-cpu-example

View detailed information about the ResourceQuota:

✑ kubectl get resourcequota mem-cpu-demo –namespace=quota-mem-cpu-example –output=yaml

Question #33

Which three roles does the Spherelet perform? (Choose three )

  • A . Determines placement of vSphere pods
  • B . Manages node configuration
  • C . Starts vSphere pods
  • D . Provides a key-value store for pod configuration
  • E . Communicates with Kubernetes API
  • F . Provisions Tanzu Kubernetes clusters

Reveal Solution Hide Solution

Correct Answer: B,C,E
B,C,E

Explanation:

Spherelet is a kubelet that is ported natively to ESXi. It allows the ESXi host to become part of a Kubernetes cluster.

Spherelet performs the following functions:

• Communicates with the control plane VMs

• Manages node configuration

• Starts vSphere Pods

• Monitors vSphere Pods


Question #34

Which two considerations needs to be made when deciding on a virtual machine class type during the process of creating a Tanzu Kubernetes cluster? (Choose two)

  • A . Whether the resources provided by the virtual machine class type should be reserved on the host
  • B . The configuration parameters which need to be edited in the cluster
  • C . The amount of CPU. memory, and storage the virtual machine should have
  • D . Connectivity between the Tanzu Kubernetes cluster and the Subscribed Content Library
  • E . The storage classes which need to be made available to the cluster

Reveal Solution Hide Solution

Correct Answer: A,C
A,C

Explanation:

A virtual machine class is a request for resource reservations for processing power on the virtual machine (VM), including CPU and memory (RAM). For example, the VM class type named "guaranteed-large" reserves 4 CPU and 16 GB RAM. See Default Virtual Machine Classes for a list of default VM classes and their corresponding CPU and RAM reservations.

The VM disk size is set by the OVA template, not the VM class definition. For Tanzu Kubernetes releases, the disk size is 16GB. See About Tanzu Kubernetes release Distributions.

There are two reservation types for VM classes: guaranteed and best effort. The guaranteed class fully reserves its configured resources. This means that for a given cluster the spec.policies.resources.requests matches the spec.hardware settings. The best effort class allows resources to be overcommitted. For production workloads it is recommended that you use the guaranteed VM class type.


Question #35

A HAProxy appliance has been deployed using a 3 NIC configuration.

Which network will developers and external services use to connect?

  • A . DMZ
  • B . Frontend
  • C . HAProxy
  • D . Workload

Reveal Solution Hide Solution

Correct Answer: B
Question #36

A developer is trying to deploy a Kubernetes Application by using an image from the embedded Registry Service into an existing Namespace within a Supervisor Cluster.

Which three steps must be completed to ensure the deployment is successful? (Choose three.)

  • A . Include the image: //: in the YAML spec.
  • B . Run kubectl config use-context to switch to the correct namespace.
  • C . Run kubectl config set-context to switch to the correct namespace.
  • D . Pull the image into the Registry service with docker pull //:.
  • E . Include the image: /: in the YAML spec.
  • F . Push the image to the Registry service with docker push //:.

Reveal Solution Hide Solution

Correct Answer: A,B,D
Question #37

What provides the North-South connectivity from NSX-T Data Center to the physical infrastructure?

  • A . Tier-1 uplink
  • B . vSphere Distributed Switch
  • C . Tier-0 uplink segment
  • D . Transport Zones

Reveal Solution Hide Solution

Correct Answer: C
Question #38

What can be used to define whether a vSphere pod can be scaled?

  • A . Deployment
  • B . Namespaces
  • C . Persistent Volume
  • D . Network Policies

Reveal Solution Hide Solution

Correct Answer: A
Question #39

What should be increased or reduced in order to scale a Tanzu Kubernetes cluster up or down?

  • A . The number of Pods that it contains
  • B . The number of Namespaces that it contains
  • C . The number of Deployments that it contains
  • D . The number of worker nodes that it contains

Reveal Solution Hide Solution

Correct Answer: D
Question #40

What is true of a Tanzu Kubernetes Cluster?

  • A . It is a Kubernetes cluster deployed by developers using a YAML specification file.
  • B . It use resources from hosts across vSphere clusters to form a Kubernetes cluster on vSphere.
  • C . It enables vSphere High Availability and Distributed Resource Scheduler.
  • D . It removes the Kubernetes API for use by DevOps teams.

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

Tanzu Kubernetes Cluster is a Kubernetes cluster deployed by developers using a YAML specification file. It uses resources from hosts across vSphere clusters to form a Kubernetes cluster on vSphere. It also enables vSphere High Availability and Distributed Resource Scheduler, which allows for load balancing and high availability of resources in the cluster. It does not remove the Kubernetes API for use by DevOps teams.

Question #41

Which three elements should be configured by a vSphere administrator after creating vSphere Namespace? (Choose three.)

  • A . Permissions
  • B . Capacity and Usage limits
  • C . License
  • D . Namespace name
  • E . Storage Policy
  • F . NSX Segment

Reveal Solution Hide Solution

Correct Answer: A,B,E
A,B,E

Explanation:

Creating a Namespace

A vSphere administrator configures permissions and storage before a namespace can be used:

• Assign edit or view permissions to users. Users must be present in a configured single sign-on (SSO) identity source.

• Must assign a VM storage policy to the namespace.

• Can define resource limits (optional).

• Must add a content library to enable the Tanzu Kubernetes Grid Service.

Question #42

Which three characteristics are true of Control Plane VMs? (Choose three.)

  • A . They can be resized by administrators directly through vCenter Inventory View.
  • B . They each run the Spherelet.
  • C . They each expose the Kubernetes API.
  • D . They do not run any Kubernetes Pods.
  • E . They are connected to a Management portgroup.
  • F . They are deployed via a vCenter Service.

Reveal Solution Hide Solution

Correct Answer: A,B,E
Question #43

Which Kubernetes Service Types exposes the service externally using a static port?

  • A . Headless
  • B . NodePort
  • C . ExternalName
  • D . ClusterIP

Reveal Solution Hide Solution

Correct Answer: B
Question #44

The network topology for a Supervisor Cluster deployed using the vSphere networking stack, and a HAProxy load balancer is being planned.

In addition to the control plane management IP range and services P range, how many non-overlapping P address ranges are needed?

  • A . 3
  • B . 1
  • C . 4
  • D . 2

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

✑ A dedicated IP range for virtual IPs. The HAProxy VM must be the only owner of this virtual IP range. The range must not overlap with any IP range assigned to any Workload Network owned by any Supervisor Cluster.

Question #45

An administrator is planning the deployment of a vSphere with Tanzu using an NSX-T environment and must ensure that the control plane VMs and container images are placed onto different datastores. The administrator decides to create two datastores and apply differently named tags to each datastore.

Which additional action would the administrator need to perform to meet this requirement?

  • A . Create two storage policies with different tag criteria and apply to the Supervisor Cluster using the vSphere Client.
  • B . Create two storage policies with different tag criteria and apply to the Supervisor Cluster using kubectl commands.
  • C . Create two storage policies with all tag criteria and apply to the Supervisor Cluster using kubectl commands.
  • D . Create a single storage policy containing all tag criteria and apply to the Supervisor Cluster using the vSphere Client.

Reveal Solution Hide Solution

Correct Answer: D
Question #46

Which description accurately characterizes virtual machine class types for Tanzu Kubernetes cluster (TKC) nodes?

  • A . A best-effort class does not provide high availability for TKC nodes.
  • B . A best-effort class reserves CPU and Memory resources for TKC nodes.
  • C . A guaranteed class provides high availability for TKC nodes.
  • D . A guaranteed class reserves CPU and Memory resources for TKC nodes.

Reveal Solution Hide Solution

Correct Answer: D
Question #47

Which step in vSphere with Tanzu enablement using the vSphere Distributed Switch process is done prior to using the Workload Management Enablement Wizard?

  • A . Deploy the load balancer
  • B . Choose the Kubernetes content library that should be used in the Supervisor Cluster
  • C . Define the Primary workload network P range
  • D . Define the Management network interfaces for the Supervisor Cluster

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

As a vSphere administrator, you can enable the Workload Management platform on a vSphere cluster by configuring the vSphere networking stack to provide connectivity to workloads. A Supervisor Cluster that is configured with vSphere networking supports the deployment of Tanzu Kubernetes clusters created by using the Tanzu Kubernetes Grid Service. It does not support running vSphere Pod or using the embedded Harbor Registry.

Question #48

What provides a declarative, Kubernetes-style API for cluster creation, configuration, and

management?

  • A . Tanzu Kubernetes Grid Service
  • B . kubectl
  • C . vSphere REST API
  • D . Virtual Machine Service

Reveal Solution Hide Solution

Correct Answer: A
Question #49

Which kubectl command is used to list al pods in the current active namespace?

  • A . kubectl get nodes
  • B . kubectl get pods
  • C . kubectl get services
  • D . kubectl list pods

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

Fetch all Pods in all namespaces using kubectl get pods –all-namespaces

Pods

Shortcode = po

List one or more pods

✑ kubectl get pod

Delete a pod

✑ kubectl delete pod <pod_name>

Display the detailed state of a pods

✑ kubectl describe pod <pod_name>

Create a pod

✑ kubectl create pod <pod_name>

Execute a command against a container in a pod

✑ kubectl exec <pod_name> -c <container_name> <command>

Get interactive shell on a a single-container pod

✑ kubectl exec -it <pod_name> /bin/sh

Display Resource usage (CPU/Memory/Storage) for pods

✑ kubectl top pod

Add or update the annotations of a pod

✑ kubectl annotate pod <pod_name> <annotation>

Add or update the label of a pod

✑ kubectl label pod <pod_name>

Question #50

Which type of service is created by default when publishing a Kubernetes service?

  • A . Cluster IP
  • B . Node Port
  • C . LoadBalancer
  • D . ExternalName

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

For some parts of your application (for example, frontends) you may want to expose a Service onto an external IP address, that’s outside of your cluster.

Kubernetes ServiceTypes allow you to specify what kind of Service you want. The default is ClusterIP.

Exit mobile version