VCF ADMIN EXAM UPDATED ACTUAL QUESTIONS AND CORRECT ANSWERS

VCF ADMIN EXAM UPDATED ACTUAL QUESTIONS AND
CORRECT ANSWERS

Question:
1. An administrator needs to scale out the VMware Cloud Foundation (VCF) Automation node from a
small to a medium form factor. The environment is currently deployed using the Simple VCF Automation
Model. Which action should the administrator take to achieve this?
A. Deploy a separate VCF Automation instance in the environment.
B. Scale out the VCF Automation deployment to a High Availability model with medium form factor.
C. Scale up the VCF Automation node to medium form factor using the VCF Operations Console.
D. Redeploy the VCF Automation node as a single medium form factor using the VCF Operations
Console.
Answer:
B

Question:
2. Which Kubernetes object is used to grant permissions to a cluster-wide resource?
A. RoleBinding
B. ClusterRoleAccess
C. ClusterRoleBinding
D. RoleReference
Answer:
C

Question:
3. An administrator is responsible for managing a VMware Cloud Foundation (VCF) fleet. The
administrator has been tasked with creating a solution that allows Kubernetes development teams to
complete the self-service creation of Active Directory (AD) accounts with the following requirements:
- Only users within the Development tenant should be able to create user accounts.
- Users must be able to create and destroy user accounts in the development AD only.
- The administrator has already deployed a dedicated VCF Operations Orchestrator for the Development
tenant. What four additional tasks must the administrator complete to meet the stated objective? (Choose
four.)
Answer:
Publish the Active Directory User creation action to the self-service catalog in VCF Automation through
the Content Hub. (Wrong)
Configure the VCF Operations Orchestrator Active Directory plugin to connect to the production Active
Directory. (Wrong)
Configure the VCF Operations Orchestrator integration to connect to the dedicated VCF Operations
Orchestrator. (Correct)
Create a Custom Resource object and select the appropriate VCF Operations Orchestrator workflows for
object creation and destruction. (Correct)
Configure the VCF Operations Orchestrator Active Directory plugin to connect to the development Active
Directory. (Correct)
Publish the Active Directory User creation workflow to the self-service catalog in VCF Automation
through the Content Hub. (Correct)

,Question:
4. An administrator of a VMware Cloud Foundation (VCF) fleet is tasked to delegate the resource
management of a group of Virtual Machines (VMs) to another department. The following information is
provided:
- VMs should power on only if resources are available.
- The VMs are within development and production environments.
- The production VMs require guaranteed levels of resources.
- The VMs support a three-tier application within each environment.
- Each tier of the application has varying levels of demand. What VCF feature should the administrator use
to manage these VMs?
A. VCF Operations
B. vSphere Availability
C. vSphere Dynamic Resource Scheduling
D. vSphere Resource Pools
Answer:
D

Question:
5. Which three tasks are performed by Cloud Builder during the bring-up process of a VMware Cloud
Foundation solution? (Choose three.)
A. vCenter and NSX Manager cluster deployment
B. Aria Suite Lifecycle Manager deployment
C. vSphere HA/DRS cluster creation and configuration
D. vVols storage configuration for all management hosts
E. SDDC manager deployment
F. NSX Edge cluster deployment
Answer:
A, E, F

Question:
6. An administrator is preparing to deploy a new VMware Cloud Foundation (VCF) fleet to an
environment that does not have Internet access. Which two binaries must be uploaded to the VCF Installer
appliance before initiating the deployment? (Choose two.)
A. VCF Operations
B. ESX
C. Lifecycle Manager
D. NSX
E. Identity Broker
Answer:
A, D

,Question:
7. A company wants to enhance the network virtualization and security capabilities within their VMware
Cloud Foundation environment. The goal is to block traffic even between virtual machines connected to
the same logical segment (L2 network) using micro segmentation. Which component can achieve the
company's goals?
A. Intrusion Prevention System
B. VMware NSX Intelligence
C. VMware vDefend
D. Network Detection and Response
Answer:
B

Question:
8. A security team informed an administrator that a VMware vCenter root password was compromised. As
a precaution, the password was changed directly in vCenter. What should an administrator do to regain
management capability of this vCenter by VCF Operations?
A. Enter the new root password using the Remediate password function in VCF Operations.
B. Enter the new root password using the Reset password function in VCF Operations.
C. Enter the new root password using the Update password function in VCF Operations.
D. Use the Rotate password function in VCF Operations.
Answer:
A

Question:
9. An administrator must replace a component's certificate in VCF with an external CA-signed certificate.
What format must be used when creating the certificate?
A. P7B
B. PEM
C. PFX
D. DER
Answer:
B

Question:
10. An administrator is deciding on a storage solution to create the first management workload domain for
a new VMware Cloud Foundation (VCF) instance. Which three storage solutions can be used as principal
storage? (Choose three.)
A. NVMe/TCP
B. NFSv3
C. VMFS on Fibre Channel (FC)
D. Virtual Volumes (vVols)
E. vSAN OSA
Answer:
B, C, E

, Question:
11. What is the required update interval for VMware Cloud Foundation (VCF) licenses in connected mode
to maintain the entitlement?
A. 90 days
B. 180 days
C. 270 days
D. 365 days
Answer:
B

Question:
12. Which VMware vSphere feature provides the ability to define and apply datastore capabilities to
ensure virtual machines meet specific performance and availability requirements?
A. Storage Policies
B. Host Profiles
C. Storage Policy Components
D. Performance Service
Answer:
A

Question:
13. An administrator has been tasked with configuring the external connectivity for a Virtual Private Cloud
(VPC) within a new VMware NSX project. The Transit Gateway (TGW) associated with the project will
use VLAN(s) and external subnets to connect the VPC to the physical routers. What prerequisite must the
administrator ensure is completed before starting the configuration of the external connection?
A. All the hosts running VPC workloads must have access to the VLAN(s) used by the Distributed TGW.
B. The vSphere cluster must have a Transport Node Profile (TNP) attached to it.
C. All the hosts running VPC workloads must have access to the Edge TEP network.
D. TWO BGP Peers must be set up on the Distributed TGW for dynamic routing.
Answer:
A

Question:
14. An administrator has been tasked to create a new cluster in an existing VMware Cloud Foundation
(VCF) instance. The hosts within the cluster have different generation Intel processors. What feature must
be configured on the cluster to ensure VMware Distributed Resource Scheduler (DRS) is able to
automatically move Virtual Machines within the cluster?
A. Enhanced vMotion Compatibility
B. vSphere Availability
C. vSphere Fault Tolerance
D. Host Affinity Rules
Answer:
A