QUESTION NO: 1
How would an administrator obtain the kubectl config file in the VMware vSphere Kubernetes Service (VKS)?
How would an administrator obtain the kubectl config file in the VMware vSphere Kubernetes Service (VKS)?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 2
An administrator is upgrading an existing VMware vSphere Kubernetes Service (VKS) cluster and receives the following errors:
kubectl get nodes fails with memcache.go and "server is currently unable to handle the request" couldn ' t get resource list for stats.antrea.tanzu.vmware.com/v1alpha1 yaml: mapping values are not allowed in this context The administrator successfully updated the Supervisor, but an attempt to update the VKS cluster failed. Based on the scenario, what is the cause of the problem?
An administrator is upgrading an existing VMware vSphere Kubernetes Service (VKS) cluster and receives the following errors:
kubectl get nodes fails with memcache.go and "server is currently unable to handle the request" couldn ' t get resource list for stats.antrea.tanzu.vmware.com/v1alpha1 yaml: mapping values are not allowed in this context The administrator successfully updated the Supervisor, but an attempt to update the VKS cluster failed. Based on the scenario, what is the cause of the problem?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 3
An administrator is modernizing the internal HR and payroll applications using vSphere Kubernetes Service (VKS). The applications are composed of multiple microservices deployed across Kubernetes clusters, fronted by Ingress controllers that route user traffic through Avi Kubernetes Operator. During testing, it is discovered that manually creating and renewing TLS certificates for each Ingress resource is error-prone and leads to periodic outages when certificates expire. The requirements also mandate that all application endpoints use trusted certificates issued through the corporate certificate authority (CA) with automatic renewal and rotation.
Which requirement can be met by using cert-manager?
An administrator is modernizing the internal HR and payroll applications using vSphere Kubernetes Service (VKS). The applications are composed of multiple microservices deployed across Kubernetes clusters, fronted by Ingress controllers that route user traffic through Avi Kubernetes Operator. During testing, it is discovered that manually creating and renewing TLS certificates for each Ingress resource is error-prone and leads to periodic outages when certificates expire. The requirements also mandate that all application endpoints use trusted certificates issued through the corporate certificate authority (CA) with automatic renewal and rotation.
Which requirement can be met by using cert-manager?
Correct Answer: A
Vote an answer
QUESTION NO: 4
The vSphere Admin creates a vSphere Namespace harbor-project and grants the DevOps Engineer edit permissions. The DevOps Engineer deploys the Harbor service in thisnamespace with the command: kubectl apply -f harbor-svc.yml The Harbor service deploys successfully, but the database data harbor database 0 pods does not come into a Running state.
Click the two locations where the administrator should verify the Access Modes forthis pod ' s PerslstentVolumeClaim (PVC). (Choose two.)
The vSphere Admin creates a vSphere Namespace harbor-project and grants the DevOps Engineer edit permissions. The DevOps Engineer deploys the Harbor service in thisnamespace with the command: kubectl apply -f harbor-svc.yml The Harbor service deploys successfully, but the database data harbor database 0 pods does not come into a Running state.
Click the two locations where the administrator should verify the Access Modes forthis pod ' s PerslstentVolumeClaim (PVC). (Choose two.)
Correct Answer:
Explanation:
Storage
Resources
When a stateful pod (like Harbor's database) is stuck Pending/ContainerCreating or repeatedly failing to attach
/mount storage, one of the first checks is whether the PVC'sAccess Modesmatch what the workload and backing storage support (for example, ReadWriteOnce vs ReadWriteMany). In Kubernetes, the PVC and PV explicitly showAccess Modes(for example Access Modes: RWO) when you inspect them.
In the vSphere Namespace UI, theStoragetab is where namespace storage is managed and reviewed (including storage policy assignments that back storage classes/PVCs), making it the natural place to validate the storage configuration being consumed by the Harbor database PVC. VMware's VCF documentation directs administrators to navigate to a namespace and use theStoragetab for storage-related settings.
TheResourcestab is the Kubernetes-object oriented view for the namespace, where you can locate the PVC object associated with the failing pod and inspect its properties/YAML (including the requested storage class and access mode intent). Namespace permissions explicitly include the ability to view Kubernetes resources within the namespace, which aligns with checking PVC details there.
QUESTION NO: 5
A customer is required to enhance the security for a set of VMware vSphere Kubernetes Service (VKS) clusters that host services interacting with sensitive customer data. The solution must encrypt the transport and communications between services.
The VKS Admin recommends enabling Istio Service Mesh to satisfy the requirement. What type of encryption does Istio Service Mesh provide?
A customer is required to enhance the security for a set of VMware vSphere Kubernetes Service (VKS) clusters that host services interacting with sensitive customer data. The solution must encrypt the transport and communications between services.
The VKS Admin recommends enabling Istio Service Mesh to satisfy the requirement. What type of encryption does Istio Service Mesh provide?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 6
An administrator must assign a storage policy to a VMware vSphere Kubernetes Service (VKS) Cluster.
Which step satisfies the requirement?
An administrator must assign a storage policy to a VMware vSphere Kubernetes Service (VKS) Cluster.
Which step satisfies the requirement?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 7
Which two types of Kubernetes member objects can be used when creating groups to collect and manage objects for service-level networking/security policies (for example, in a service mesh or Kubernetes-aware policy model)? (Choose two.)
Which two types of Kubernetes member objects can be used when creating groups to collect and manage objects for service-level networking/security policies (for example, in a service mesh or Kubernetes-aware policy model)? (Choose two.)
Correct Answer: D,E
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 8
An administrator is deploying vSphere Kubernetes Service (VKS) to support containerized workloads across multiple regions. Each region hosts a dedicated Workload Domain with Supervisor instances deployed on vSphere Distributed Switch (VDS) networking. The organization's security policy requires that pod-to-pod and pod-to-service communications be fully observable and controllable at the Kubernetes layer, without introducing additional licensing or overlay complexity.
When deploying a Supervisor, which CNI should the administrator select as the default supported option?
An administrator is deploying vSphere Kubernetes Service (VKS) to support containerized workloads across multiple regions. Each region hosts a dedicated Workload Domain with Supervisor instances deployed on vSphere Distributed Switch (VDS) networking. The organization's security policy requires that pod-to-pod and pod-to-service communications be fully observable and controllable at the Kubernetes layer, without introducing additional licensing or overlay complexity.
When deploying a Supervisor, which CNI should the administrator select as the default supported option?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 9
What statement describes the vSphere Supervisor in VMware Cloud Foundation (VCF)?
What statement describes the vSphere Supervisor in VMware Cloud Foundation (VCF)?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).