89 questions · instant answer feedback · concise explanations · free
Question 1 of 89An organization is evacuating their current datacenter and moving all workloads to a new location. The organization has a total of 800 workloads to move, and the migration must be completed with no downtime within a planned change window that is scheduled to occur in four weeks. What migration method will meet the requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. HCX Replication Assisted vMotion
Replication Assisted vMotion is the correct choice because it pre-replicates data and performs a final live switchover, ensuring no downtime. HCX Bulk Migration involves brief outages during switchover, disqualifying it for strict zero-downtime windows.
Question 2 of 89A solution architect has been assigned to design a VMware Cloud Foundation (VCF)-based private cloud solution for a customer. During the requirements gathering workshop, the customer stated the following: All users must only have access to the solution components to fulfill their defined role. All administrative users must be authenticated to a separate approved identity source for administrator accounts only. All service users must be authenticated to the central approved identity source. All service account passwords must be stored centrally in an approved secrets management platform. When creating the design, how should the Architect classify all the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Security
Role-based access control, strict authentication source separation, and centralized secrets management are foundational elements of a zero-trust architecture. These requirements enforce least privilege and compliance, categorizing them strictly under security rather than availability or manageability.
Question 3 of 89A solution architect has been assigned to design a VMware Cloud Foundation (VCF)-based private cloud for a customer. During the customer requirements gathering workshop, the customer has stated the following: All Platinum applications/services must have an availability SLA of 99.99%. All Gold applications/services must have an availability SLA of 99.9%. All Silver applications/services must have an availability SLA of 99%. The private cloud must have an availability SLA of 99.9%. What should the architect recommend to meet the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. The Platinum service availability requirements must be met by the application.
This recommendation correctly identifies the shared responsibility model because the baseline infrastructure cannot natively guarantee four nines of availability. For the exam, remember that applications requiring ultra high availability must rely on their own clustering or active active architectures rather than the underlying platform alone.
Question 4 of 89As part of a design workshop for a VMware Cloud Foundation (VCF) with stakeholders, the architect was provided with an overview of the current state and other information required to proceed to the design phase. The architect has assumed that the solution will need to support high availability for workloads. Given the assumption, which statement should the architect document as a risk?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. The entire infrastructure is hosted on a single physical site.
Hosting the entire infrastructure on a single physical site is a documented risk because it creates a single point of failure for the site. An RPO of 24 hours is a constraint, not a direct threat to high availability, which relies on surviving site failures.
Question 5 of 89A solution architect has been assigned to recommend a solution for migrating 5000 VMs from an existing vSphere environment to a new VMware Cloud Foundation infrastructure. Which feature or tool can be recommended by the architect to minimize downtime and automate the process?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. VMware HCX
VMware HCX is the correct recommendation because it automates large-scale migrations while minimizing downtime using various transfer methods. Cross vCenter vMotion lacks the bulk automation and orchestration capabilities required for moving thousands of virtual machines efficiently.
Question 6 of 89A solution architect has been assigned to design a Business Continuity Disaster Recovery (BCDR) strategy for a Virtual Cloud Foundation (VCF) environment with a management domain and multiple workload domains deployed in two datacenters located in the same city. During one of the initial workshops with stakeholders, the following information was identified: The Recovery Time Objective (RTO) for workloads is 24 hours. The management domain must remain continuously available with Recovery Point Objective (RPO) of 0. Hardware overhead should be minimized by utilizing standby resources that host test workloads during normal operation. Operational overhead should be minimized. Latency between both datacenters is 2 ms. Which design decision should the architect document to satisfy provided requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Implement vSAN stretched cluster for the management domain and Live Recovery for the workload domains.
A vSAN stretched cluster provides synchronous replication to achieve an RPO of zero, while VMware Live Recovery handles orchestration for the 24-hour RTO workloads. Asynchronous replication fails the zero RPO requirement, making the tiered approach the only valid architecture.
Question 7 of 89A cloud architect has been assigned to design a VMware Cloud Foundation (VCF) Automation solution for an organization. The design must fulfill the following requirements: The design must minimize provider infrastructure lifecycle tasks. The design must minimize infrastructure management overhead. Each tenant must have isolated compute infrastructure. Which of the following deployment models best meets these requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Single VCF instance with dedicated Workload Domains per tenant
A single VCF instance with dedicated workload domains centralizes SDDC Manager lifecycle tasks while providing hard compute isolation per tenant. Separate VCF instances per tenant would unnecessarily increase infrastructure and operational overhead, violating the core design requirements.
Question 8 of 89A cloud architect has been assigned to design a new VMware Cloud Foundation (VCF)-based Private Cloud solution. During the requirements gathering workshop with key customer stakeholders, the following information was captured: The solution must ensure all components meet a software version of N-1. When creating the design document, which design quality should be used to classify the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Manageability
The N-1 software version policy governs how systems are patched and upgraded, directly mapping to manageability. This approach balances feature availability with operational stability, ensuring the environment remains supported without introducing potential risks from unpatched releases.
Question 9 of 89Which VMware tool is critical for managing security policies across virtualized workloads in VMware Cloud Foundation?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. VMware NSX
VMware NSX provides the distributed firewall and micro-segmentation capabilities needed to enforce granular security policies directly on virtualized workloads. vSphere alone lacks these advanced software-defined network security controls, making NSX the required pillar.
Question 10 of 89Which open source project does vSphere Supervisor use to automate the lifecycle management of VMware Kubernetes Service (VKS) clusters?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Cluster API
Cluster API is a Kubernetes project used to declaratively manage the lifecycle of Kubernetes clusters, including provisioning, scaling, upgrading, and deletion. Remember that Kubeadm is for bootstrapping nodes, while Cluster API handles the broader cluster lifecycle automation.
Question 11 of 89As part of a design workshop for a VMware Cloud Foundation (VCF), the customer stated the following requirement: The solution will support secure communication. Which design decision should be included in the logical design for the workload domain?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Use a SHA-2 algorithm or higher for signed certificates.
Specifying a SHA two algorithm or higher directly defines how to achieve secure communication by establishing a required cryptographic standard. Hardware compatibility lists and Trusted Platform Modules are physical design considerations, whereas this decision guides logical security configurations.
Question 12 of 89What is the default selected Container Network Interface (CNI) in a VMware Kubernetes Service (VKS) workload cluster?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Antrea
Project Antrea is the default container network interface for VMware Kubernetes Service because it provides deep integration with vSphere and NSX. While Cilium and Calico are popular open source alternatives, Antrea is the expected default for VMware exam topics.
Question 13 of 89What is the primary role of VMware vSphere in the Broadcom VMware Cloud Foundation (VCF) integration?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Provides compute virtualization
vSphere provides the compute virtualization layer through the ESXi hypervisor and vCenter Server management. Storage and networking are handled by other components like vSAN and NSX, so focus on the foundational compute role when evaluating architectural integration.
Question 14 of 89Which VMware Cloud Foundation (VCF) 9.0 Storage Model can be deployed to scale storage capacity independent of compute and network?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. vSAN Capacity Cluster Model
The vSAN Capacity Cluster Model allows organizations to scale storage capacity independently of compute resources. This disaggregated architecture is a key design concept for optimizing resource allocation without unnecessarily provisioning additional hypervisor hosts.
Question 15 of 89A solution architect has been assigned to design a new VMware Cloud Foundation (VCF)-based Private Cloud solution. During the requirements gathering workshop with key customer stakeholders, the following information was captured: The solution must ensure that all workloads running on the platform comply with the Payment Card Industry Data Security Standard (PCI-DSS). When creating the design document, which design quality should be used to classify the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Security
Security is the correct design quality because PCI-DSS compliance mandates specific controls to protect sensitive data. Recoverability focuses on restoring systems after a failure, which does not address the active prevention of unauthorized access.
Question 16 of 89The below requirements were identified in architecture workshop for a VMware Cloud Foundation (VCF) design project utilizing vSAN for its primary storage solution: REQ001: Application must maintain a minimum of 1,000 transactions per second (TPS) during business hours excluding disaster recovery (DR) scenarios. REQ002: Automatic DRS and HA must be utilized. REQ003: Planned maintenance must be executed outside of business hours. Which of the following test scenarios should be added and performed to validate these requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Trigger a failure of an ESXi host.
Triggering a failure of an ESXi host is the correct test scenario because it directly validates both HA integration and the remaining cluster performance. Triggering a vMotion only tests planned maintenance without stressing the automatic recovery requirements.
Question 17 of 89A cloud architect has been assigned to design a private cloud infrastructure based on VMware Cloud Foundation (VCF) for a client. The architect documented the following requirements and constraints from the client: The client has three datacenters, all located within a 1 mile radius of the headquarter campus with high speed LAN connectivity between them. The private cloud must be hosted within the client's on-premise datacenter at their headquarters. The client would like to protect against outages with no data loss in the event of losing a single datacenter. Which design model would meet these requirements and constraints?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. VCF fleet with fault domains on a stretched cluster model
A stretched cluster synchronously replicates data between two datacenters to ensure zero data loss during a site failure. The third nearby datacenter acts as the witness host to maintain quorum, preventing split-brain scenarios and ensuring automated recovery.
Question 18 of 89A solution architect has been assigned to design a private cloud infrastructure for two departments (HR and Finance) based on VMware Cloud Foundation (VCF) and has been given the following requirements: HR and Finance superusers require access to VCF Operations. VCF Operations access, monitoring, and logging information must not be shared across departments. Which design decision would meet the requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Configure two sets of scopes and index partitions within VCF Operations, one for HR and one for Finance.
Configuring dedicated scopes and index partitions isolates access and logging data within a single VCF Operations instance. Deploying separate instances or fleets would impose massive infrastructure and licensing overhead, failing the efficiency test for departmental segregation.
Question 19 of 89Which VMware tool allows administrators to manage vSphere environments via a web interface?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. vSphere Client
The vSphere Client is the official web-based interface used to connect to and manage vCenter Server and the associated ESXi hosts and virtual machines. Be careful not to confuse administrative tools with infrastructure features like Distributed Switches or vMotion.
Question 20 of 89Which VMware feature supports disaster recovery automation in VMware Cloud Foundation?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. VMware Site Recovery Manager
Site Recovery Manager is the primary solution for orchestrating disaster recovery failover and failback workflows. Do not confuse this with vSphere High Availability, which only provides local resilience against host failures rather than full site recovery automation.
Question 21 of 89As part of a design workshop for a VMware Cloud Foundation (VCF), the security team provides the following requirement for the VMware Cloud Foundation (VCF) Automation deployment: All Virtual Machine images must be reviewed and vetted by the security team prior to consumption. Which Content Library type supports the requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Local Content Library
A local content library enables central security vetting before consumption, but provider-managed is the strongest distractor. In Aria Automation terms, local libraries act as the secure provider repository, though this terminology creates ambiguity for test-takers.
Question 22 of 89Which Broadcom hardware solutions help provide storage redundancy in VMware Cloud Foundation?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Broadcom RAID controllers
Broadcom RAID controllers are correct because hardware RAID levels provide direct storage redundancy for local ESXi boot devices. NVMe SSDs offer performance without inherent data redundancy, making them incorrect for protecting against drive failures.
Question 23 of 89As part of a design workshop for a VMware Cloud Foundation (VCF) deployment, the customer expressed a plan to use Aria Operations Continuous Availability. The customer identified two datacenters that meet the network requirements to support Continuous Availability; however, they are unsure which of the following datacenters would be suitable for the Witness Node. Which datacenter meets the minimum network requirements for the Witness Node?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Datacenter A
Datacenter A meets the requirements perfectly by providing under thirty milliseconds latency and ten megabits per second bandwidth. This makes it ideal for handling witness traffic like heartbeat and quorum signals across a continuous availability deployment.
Question 24 of 89In an NSX VPC Full Services Model for a single tenant, preventing BGP advertisements from being dropped due to loop detection. Which element should be considered in the physical network design?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Use a unique, private BGP AS number for each Tier-0 gateway.
Assigning a unique BGP autonomous system number to each Tier-0 gateway ensures the physical network does not drop route advertisements due to loop detection. Using iBGP instead of eBGP would fail to properly segment the routing topology across multiple gateways.
Question 25 of 89What is the primary function of vSphere Lifecycle Manager (vLCM) in VCF 9.0?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Automate ESXi host image compliance and remediation
vSphere Lifecycle Manager uses a declarative desired state model to enforce host image compliance and automate remediation. For the exam, associate basic tasks like taking snapshots or monitoring performance with standard administrative operations rather than lifecycle management features.
Question 26 of 89A solution architect has been assigned to design a VMware Cloud Foundation (VCF)-based solution for a customer. The customer has the following requirement: There should be no single points of failure within the solution. To comply with the customer requirement, the architect has decided to include physical NIC teaming for all ESX servers in the design. When documenting this design decision, which consideration should the architect make?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Each NIC team must include NICs from different physical NIC Cards.
Distributing team members across different physical cards removes the adapter itself as a single point of failure. Options suggesting ports on the same card fail this requirement because a single hardware fault would sever all connectivity.
Question 27 of 89A VCF administrator is installing VMware Cloud Foundation 9.0 (VCF) in an enterprise environment. During a series of workshops with stakeholders, the following requirements were identified: The network solution must be capable of complete logical isolation. The network solution must be capable of supporting independent upgrade cycles for network stacks. The network solution must be capable of tenant-specific customization of NSX configurations. The architect has made the following design decisions: The solution will consist of a single VCF instance. The solution will include a management domain and two workload domains. Based on the scenario, which additional design decision meets all of the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Deploy a dedicated NSX instance per workload domain.
Deploying a dedicated NSX instance per workload domain meets all requirements by creating entirely separate, autonomous networking environments within the single VCF instance. Shared NSX instances or global Federation configurations fail the requirements because they inherently share upgrade cycles and limit tenant isolation.
Question 28 of 89A solution architect has been assigned to design a VMware Cloud Foundation (VCF)-based private cloud solution for a customer. The customer has stated the following requirement: All management tooling must be resilient against a single ESXi host failure When considering the design decisions for VMware Aria Suite components, what should the Architect document to support the stated requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. The solution will deploy three VCF Automation appliances in a clustered topology.
Deploying three Aria Automation appliances in a clustered topology provides native high availability, allowing the service to survive a single ESXi host failure. Clustered Aria Lifecycle appliances do not exist, making that distractor technically invalid for providing infrastructure resilience.
Question 29 of 89For a new VCF project, during a requirements gathering workshop, several business and technical requirements were captured from the customer. Which requirement will be classified as a Business Requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. The solution must provide the best end-user experience.
Business requirements focus on high level outcomes like user experience, revenue, or market share rather than technical implementation details. Watch out for security or migration options because those are usually technical constraints or functional requirements disguised as business needs.
Question 30 of 89A solution architect has been assigned to design a VMware Cloud Foundation (VCF) deployment to meet the following design requirements: Tenants need dedicated external network access. The number of NSX Edge clusters should be minimized. To fulfill these requirements, the architect made a design decision to use a Workload Networking VPC with Full Services Model. Which additional design decision should be considered by the architect as part of the logical network design to fulfill these requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Use Virtual Routing and Forwarding (VRF) lite to create a separate VRF TO Gateway for each tenant.
Virtual Routing and Forwarding provides isolated routing tables on a shared gateway, granting tenants dedicated external access. Avoid provisioning dedicated bare metal edges, as that violates the requirement to minimize the total number of edge clusters.
Question 31 of 89A solution architect gathered the following requirements for a Supervisor image store: The repository must support image scanning, replication, and image signing. What component would the architect recommend?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Harbor
Harbor is an open source enterprise registry that natively supports vulnerability scanning, cross registry replication, and content signing. Standard developer tools or public cloud registries may lack these integrated enterprise security features without additional third party plugins.
Question 32 of 89A VMware Cloud Foundation (VCF) 9.0 design incorporates the below list of technical requirements: All management components must have their login sessions timeout after 2 minutes of inactivity. Communication between management components should be limited to required ports only. Modifications required by compliancy should not impact the management components functionality. What would be the recommendation from a design perspective that would aid in achieving the above requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Consult the Compliance Kit for VMware Cloud Foundation
The compliance kit for Cloud Foundation provides tested, non-default security configurations that enforce strict timeouts and network isolation without breaking functionality. A standard vSphere security tool would miss ecosystem-wide components like NSX or SDDC Manager.
Question 33 of 89A solution architect has been assigned to design a new VMware Cloud Foundation (VCF)-based Private Cloud solution. During the requirements gathering workshop with key customer stakeholders, the following information was captured: The solution must support the monitoring of up to 10,000 objects. The solution must support 24 months retention for all monitoring data. When creating the design document, which design quality should be used to classify the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Manageability
Monitoring and retention requirements define the system's operational scope and data handling. For the exam, associate capacities like object limits and data retention with manageability rather than performance.
Question 34 of 89A cloud architect has been assigned to design a VMware Cloud Foundation (VCF)-based Private Cloud solution. During the requirements gathering workshop with customer stakeholders, the following information was captured: The solution must be capable of deploying 50 concurrent workloads. The solution must ensure that once submitted, each service does not take longer than 6 hours to provision. When creating the design documentation, which design quality should be used to classify the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Performance
Concurrency limits map to throughput, while provisioning time limits map to latency. When you see specific timing and simultaneous workload limits on the exam, always classify them under performance rather than manageability.
Question 35 of 89During a requirements gathering workshop for VMware Cloud Foundation (VCF), the customer has provided a list of business and technical requirements. Which requirement should be classified as a business requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. The solution should reduce operational costs.
Reducing operational costs is a strategic financial goal driving the project's initial investment. Technical requirements like scalability and availability describe how the system functions, whereas this option directly addresses the business objective.
Question 36 of 89As part of the initial design workshop, one of the stakeholders has stated the following: According to the hardware standards, all new host server hardware must be deployed using our selected hardware vendor and server model. How would the architect classify this statement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. A constraint
A constraint limits design choices by forcing the architect to use specific hardware vendors or models. Distinguish this from a requirement, which defines a necessary capability the design must achieve rather than a strict design limitation.
Question 37 of 89A solution architect is creating a design document in preparation for the deployment of a new VMware Cloud Foundation (VCF) solution. To minimize costs, the customer has asked that the VCF solution utilize the existing vSphere infrastructure. The customer has migrated all virtual machines off this infrastructure in preparation for the deployment of VCF. The following information has been provided about the existing vSphere infrastructure: There are three separate vSphere clusters, each consisting of five hosts. All networking is vSphere based, with a vSphere Distributed Switch (vDS) configured per vSphere cluster. All clusters use NFSv3 for shared storage. A single vCenter manages the three vSphere clusters. Based on this information, the architect makes a decision to create a new VCF fleet with a single VCF instance. What design implication should the architect document for this decision?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. NSX will be automatically deployed during the creation of the VCF fleet.
Converting an existing standard vSphere environment into a VCF fleet requires deploying a fresh NSX instance. NSX is a mandatory component for the software defined networking stack, whereas storage and lifecycle management configurations require manual intervention.
Question 38 of 89For designing a VMware Cloud Foundation (VCF) solution, a Solution Architect has documented the following dependencies and constraints: CONS001 – Internet access will not be permitted from anywhere within the VCF solution. CONS002 – The password must not be stored in plain text anywhere within the VCF solution. DEP001 – The customer must make the required VCF binaries accessible to the VCF Installer appliance during the deployment phase. Which design decision should the architect include in the design for the download of the VCF binaries?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: E. The VCF Installer appliance will be configured to connect to an offline depot.
Configuring the VCF Installer appliance to connect to an offline depot directly satisfies the strict no-internet and secure authentication constraints. Remember that the Bundle Transfer Utility is only used for post-deployment lifecycle management updates via SDDC Manager, not for the initial installer bringup process.
Question 39 of 89Which of the following statements would the architect document as a design decision within the logical design?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. vSphere High Availability (HA) will be enabled.
Stating that vSphere High Availability will be enabled is a specific, actionable choice that defines how the architecture meets a higher-level resiliency requirement. Watch out for options that describe business rules, physical configurations, or service levels, as those belong to different design phases.
Question 40 of 89During an architectural design workshop for VMware Cloud Foundation (VCF), one of the stakeholders made the following comment: "The company has just used the remaining budget to purchase eight vSAN Ready Nodes for this project." How would the architect classify this statement within the conceptual model document?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Constraint
This statement represents a constraint because the pre-purchased hardware and spent budget limit the architect's available design choices. Do not confuse this with a requirement, which describes a needed capability, or a risk, which is only a potential future event.
Question 41 of 89A cloud architect has been assigned to work on a VMware Cloud Foundation (VCF) architecture design and identified the following requirements: The organization is using a third-party virtual appliance that does not support overlay networks. The virtual appliance must reside on the same L2 domain as an external physical firewall. The virtual appliance also needs access to workloads that are currently hosted on overlay segments provided by NSX. Which design decision should the architect make to meet these requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: E. Connect the virtual appliance to a VLAN-backed segment and configure NSX bridging to allow access to overlay segments.
Using a VLAN-backed segment with NSX bridging solves the interoperability challenge by providing Layer 2 extension between legacy hardware and modern overlays. Remember that requesting vendor certification is not an immediate design decision, and static routing cannot provide the required Layer 2 adjacency.
Question 42 of 89ABC company is deploying a new VMware Cloud Foundation 9.0 (VCF) environment to support their growing infrastructure requirements. The company is planning to scale their environment over time by adding more workload domains as new applications and departments are onboarded. The company requires that the architecture must be highly scalable and flexible, able to accommodate both current and future demands. They also require a seamless transition when adding new workload domains. Which design decision should the architect make to meet the stated scalability requirements and facilitate the future growth?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Use multiple workload domains for each department and ensure that each workload domain is independently scaled.
Creating multiple workload domains and scaling them independently provides the exact scalability, fault isolation, and management boundaries required by the customer. Consolidating departments into a single massive workload domain creates unnecessary risk and limits lifecycle flexibility, violating the core tenets of VCF architecture.
Question 43 of 89A cloud architect has been assigned to design a greenfield VMware Cloud Foundation (VCF) solution. This would be the first VCF Operations instance in the VCF solution, and the customer would like to start with a minimal footprint with the option to scale up and out later. Which VCF Operations deployment model should the architect choose?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Simple
The Simple deployment model co-locates management and analytics capabilities into a single smaller appliance, making it perfect for a minimal footprint greenfield deployment. For the exam, remember that the Standard or High Availability models require significantly more compute resources and are meant for larger, scaled-out environments.
Question 44 of 89As part of the initial design workshop for a VMware Cloud Foundation (VCF), one of the customer stakeholders has stated the following: All Virtual Machines must be encrypted. How would the architect classify this statement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. A Requirement
The statement is classified as a requirement because it mandates a specific, mandatory condition that the final solution must deliver. For the exam, remember that requirements state what the system must do, whereas constraints limit design choices and assumptions are unproven beliefs.
Question 45 of 89Which Broadcom components should be used to ensure optimal VMware vMotion performance?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Broadcom 25GbE Ethernet Adapter
High bandwidth Ethernet adapters provide the low latency and dedicated throughput essential for optimal vMotion performance. Remember that the distributed switch is a VMware software layer, so if a question specifically asks for hardware, select the network adapter.
Question 46 of 89A solution architect has made an assumption that existing support staff are adequately skilled to operate the proposed infrastructure design. The risk associated with this assumption would be that existing support staff are inadequately skilled to operate the proposed infrastructure design. How would the architect mitigate this risk?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Allocate the necessary time and budget to train existing support staff on the necessary skills required to operate.
Allocating explicit time and budget for training directly resolves the defined operational skill gap before deployment. While conducting a skills assessment seems logical, that merely identifies the gap without actively mitigating the risk of staff being unable to operate the environment.
Question 47 of 89A solution architect has been assigned to work on higher scale NSX Grouping and security design requirements for Management and VI Workload Domain in VMware Cloud Foundation 9.0. Which NSX manager appliance size will be considered for use?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Large
The large appliance size provides the compute resources necessary to handle dynamic group calculations and distributed firewall rules. Medium is only suitable for small labs or standard environments without heavy security group scaling requirements.
Question 48 of 89What is the main use case for the VMware Content Library?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Store and distribute VM templates
The Content Library stores and distributes virtual machine templates across multiple vCenter instances. It handles template synchronization rather than monitoring performance, allocating resources, or providing virtual machine replication.
Question 49 of 89Which VMware Cloud Foundation (VCF) tool assists in managing infrastructure health?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. VCF Operations
VCF Operations is the dedicated cloud management platform that collects telemetry and uses analytics to monitor infrastructure health, performance, and capacity. While vSphere and vSAN provide localized tabs, VCF Operations delivers comprehensive day-two observability across the entire software-defined data center stack.
Question 50 of 89Which statement defines the purpose of Technical Requirements for VCF design?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. They define how the goals and objectives can be achieved.
Technical requirements define exactly how overarching business goals and objectives will be achieved through specific implementation details. Functional requirements define what the system must do, making them a distinct architectural concept from the technical how on the exam.
Question 51 of 89A VMware Cloud Foundation (VCF) 9.0 design is focused on IaaS control plane security, where the below requirements are present: Support for Kubernetes Network Policies. Cluster-wide network policy support. Multiple Kubernetes distribution(s) support. Which of the following should be the design decision that meets the requirements for VMware Container Networking?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Antrea
Antrea is the correct Container Network Interface plugin because it natively enforces standard and cluster-wide Kubernetes network policies across multiple distributions. The other options represent unrelated services for container registry, backup, or multi-tenant isolation rather than core pod networking.
Question 52 of 89A solution architect has been assigned to design a new VMware Cloud Foundation (VCF) solution. During the discovery workshops with the customer, the following information was shared: The company is structured into multiple business units. Some business units were formed through the acquisition of other companies. As the acquisitions were completed recently, these business units use their own Active Directory (AD) instances for authentication. All business units operate independently of each other, and need their own dedicated development environments. The customer wants to use VCF Automation to provide its employees with the ability to self-service the provisioning and ongoing management of their resources within defined boundaries. Which two design decisions should the architect include in the design when documenting the configuration of VCF Automation? (Choose two.)
Select 2 answers.
Show answer & explanation
Correct answer: F. Which two design decisions should the architect include in the design when documenting the configuration of VCF Automation? (Choose two.) · G. A VCF Automation tenant will be created for each business unit.
Each tenant requires its dedicated Active Directory instance because identity sources are configured at the tenant level to maintain isolation. Projects cannot have independent identity providers, so assigning separate projects fails to meet the strict authentication requirement.
Question 53 of 89Which Broadcom solution is needed to secure VMware network traffic?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. VMware NSX
VMware NSX is the correct choice because it provides micro-segmentation, distributed firewalls, and encryption capabilities specifically designed to secure network traffic. The other options are foundational data center technologies but do not provide the advanced software-defined network security controls required.
Question 54 of 89A solution architect is tasked with the design of a new VMware Cloud Foundation (VCF)-based private cloud solution. During a requirements gathering workshop, key stakeholders provided the following requirement: The solution must identify any configuration changes made to the Management Infrastructure every 30 days. Which three design decisions should the architect make to meet the stated requirements? (Choose three.)
Select 3 answers.
Show answer & explanation
Correct answer: B. Which three design decisions should the architect make to meet the stated requirements? (Choose three.) · C. Schedule Configuration Drift to Check the configuration every 30 days.
You must create configuration templates for vCenter and NSX Manager to establish a known good baseline. SDDC Manager then uses these templates to periodically check for configuration drift, whereas remediation would improperly change configurations automatically.
Question 55 of 89Which Broadcom components improve the overall scalability of a VMware environment?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Broadcom 25GbE Ethernet Adapter
A high speed network adapter improves scalability by providing the necessary bandwidth for massive throughput across large clusters. Storage components improve capacity, but network bottlenecks limit virtual machine density and cluster scaling.
Question 56 of 89As part of a design workshop for VMware Cloud Foundation (VCF), the architect documented the following requirement: The solution must be able to support latency-sensitive workloads. Which two physical design decisions will meet this performance requirement in the workload domain? (Choose two.)
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. NSX Enhanced Data Path: Enabled
Enabling NSX Enhanced Data Path reduces network latency by bypassing the hypervisor kernel for packet processing, making it crucial for telco and high-frequency trading workloads. Be careful not to confuse pure performance features like Enhanced Data Path with capacity-saving mechanisms like vSAN deduplication, which add computational overhead.
Question 57 of 89As part of an initial stakeholder meeting for designing a VMware Cloud Foundation (VCF), one of the stakeholders has stated the following: The initial design must be completed within the next 3 months so that hardware can be ordered within the current budget cycle. How would the architect classify and record this statement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. A constraint
A constraint restricts the options available to the architect, such as a fixed deadline. When studying for the exam, look for keywords like must or time limits, which are classic indicators of constraints rather than requirements or risks.
Question 58 of 89A VCF administrator has a new initiative to build a private cloud based on VMware Cloud Foundation (VCF). The administrator is presenting an overview of the current state of the infrastructure as well as describing what the expectations are for the private cloud. Based on the notes captured by the architect, which statement should be documented as a constraint?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. No funding exists for a new storage array. Therefore, existing storage hardware must be used.
A constraint restricts design choices, such as a lack of funding forcing the reuse of legacy hardware. A common exam trap is confusing this with requirements, which state what the system must do, rather than what limits the architect.
Question 59 of 89A solution architect has been assigned to design a VMware Cloud Foundation (VCF)-based solution. The company policy mandates that all VCF patches and upgrades must be tested in a development environment before applying to production. Which VCF construct design decision would comply with this mandate?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Deploy two VCF Instances within a VCF Fleet.
Deploying two VCF Instances within a Fleet provides complete lifecycle isolation for separate testing. Avoid using separate domains, because a single SDDC Manager would still tightly couple the lifecycle operations across both environments.
Question 60 of 89A solution architect has been assigned to design a new VMware Cloud Foundation (VCF)-based Private Cloud solution. During the requirements gathering workshop with key customer stakeholders, the following information was captured: In the event of a disaster affecting the primary site, all tier 1 production services must be restored to the secondary site within 1 hour. In the event of a disaster affecting the primary site, all tier 3 production services must be restored to the secondary site within 8 hours. When creating the design document, which design quality should be used to classify the stated requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Recoverability
Recoverability deals with restoring services after a disaster, making Recovery Time Objectives fit perfectly here. Availability focuses on keeping systems running continuously, whereas recoverability specifically addresses restoring them within a defined window.
Question 61 of 89A solution architect has been assigned to expand an existing private cloud infrastructure based on VMware Cloud Foundation (VCF). The requirement is to deploy two additional instances of VCF at two separate datacenters within the existing private cloud with minimal additional footprint. Datacenter A is 90 miles from the existing VCF fleet instance with a network round trip time of 90ms. Datacenter B is 120 miles from the existing VCF fleet instance with a network round trip time of 120ms. Which design decision would meet the requirement for this expansion?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Deploy an additional VCF fleet in datacenter B and an additional VCF instance within the existing VCF fleet in datacenter A.
The 90ms latency in Datacenter A stays under the 100ms limit, allowing it to join the existing fleet. Datacenter B exceeds the threshold, requiring a separate fleet to maintain stability and minimize management overhead.
Question 62 of 89A solution architect had been given a constraint to use an existing storage array to support the virtual infrastructure design project. The architect documents the following: Assumption01: The existing storage array has sufficient capacity and performance to support the intended virtual infrastructure workloads. Risk01: There is a risk that the performance and capacity of the existing storage array may not be sufficient for the solution. How would the architect mitigate the risk?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Ensure that the customer allocates budget for new hardware in case the risk is realized.
The correct option represents a classic contingency planning strategy by securing funding for new hardware if the storage assumption fails. Ignoring the constraint violates design principles, while changing RAID configurations or buying switches does not resolve underlying capacity limits.
Question 63 of 89As part of a design workshop for a VMware Cloud Foundation (VCF) Operations deployment, the architect must ensure that VCF Operations is capable of monitoring the customer's infrastructure made up of a central datacenter and multiple remote sites in different countries. During a design workshop, the following requirements were identified: REQ-001: Corporate IT users must be able to review performance, alerts, and capacity details from a single management point. REQ-002: The monitoring solution must support local data collection at remote sites to prevent data loss from unstable WAN connections. REQ-003: The monitoring solution must comply with local data sovereignty regulations. Which deployment model fulfills all design requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Single VCF fleet with Cloud Proxies in each remote site
A single fleet with Cloud Proxies provides centralized management while ensuring resilient local data collection over unstable WAN connections. Deploying separate fleets per site would violate the single management point requirement and increase operational overhead.
Question 64 of 89A solution architect has compiled a list of design choices following a design workshop with the business stakeholders. Which statement represents a logical design decision?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Synchronous data replication will be used to meet the stated Recovery Point Objective (RPO) between site A and B.
A logical design decision explains how a requirement is met functionally without naming specific physical products. Exam tip: always separate the functional method, like synchronous replication, from the physical hardware used to achieve it.
Question 65 of 89Which VCF component is important for security and compliance in VMware Cloud Foundation?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. VMware NSX
VMware NSX provides the core network security capabilities, including micro-segmentation and distributed firewalls. While vSphere offers foundational security, NSX is the designated VCF tool for controlling east-west traffic and deep compliance.
Question 66 of 89Which design defines how to arrange and use components and features of the infrastructure to satisfy service dependencies and other relationships specified in the Conceptual Model?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Logical Design
The logical design bridges business requirements and physical hardware by defining functional relationships. Remember that the conceptual design focuses on overarching business goals, while the physical design dictates exact vendor products.
Question 67 of 89Which statement would be classified as a functional requirement?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. The solution must provide the ability for users to view and track the progress of their requests.
A functional requirement describes a specific capability or action the system must perform for its users. The strongest distractors are non-functional requirements, which focus on performance, security, or availability metrics instead of features.
Question 68 of 89When designing a backup and recovery solution for VKS clusters, which tool can be used to back up and restore workloads?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Velero
Velero is the standard tool for backing up and restoring Kubernetes workloads and persistent volumes. For the exam, associate Velero directly with data protection for VKS clusters, whereas Site Recovery Manager is designed for traditional virtual machine disaster recovery.
Question 69 of 89A solution architect has been assigned to prepare a VI Workload Domain design with a dedicated NSX instance. The workload domain is planned to grow up to 300 ESXi hosts within the next six months. Which is the minimum NSX Manager form factor that should be recommended by the architect for this VI Workload Domain to support the forecasted growth?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Large
The Large form factor is the only option that accommodates the planned scale of 300 hosts. Medium and Small sizes have lower host limits, making them inadequate. Always verify NSX manager scale limits before submitting workload domain designs.
Question 70 of 89A solution architect is designing a new VMware Cloud Foundation instance that has to support management, VDI, DB, and general workloads. The DB workloads will stay the same in terms of resources over time. However, the general workloads and VDI environments are expected to grow over the next 3 years. What should the architect include in the documentation?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. An assumption that the DB workload resource requirements will remain static.
Documenting that the database requirements remain static is a design assumption that guides capacity planning. A constraint restricts choices like hardware, and a risk involves uncertainties, whereas expected growth is typically planned for.
Question 71 of 89A large financial company is designing a VMware Cloud Foundation (VCF) solution. During the initial discovery meetings, the customer detailed the following requirements: Management of the physical network environment is handled by an outsourced team. The virtualization team cannot re-configure the physical network. All hosts must use Link Aggregation. The storage environment is disaggregated. NFS will be used as principal storage. The customer provided the bill-of-materials for the physical servers that are being purchased. Each server will have four 25 GbE physical NICs, with two connected to the network fabric for Management, vMotion, and virtual machine traffic. The other two NICs will be connected to the storage fabric hosting the NFS server. How does the information provided impact the overall design?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Multiple Link Aggregation Groups are not support.
VMware Cloud Foundation automation restricts a single vDS to only one Link Aggregation Group. The scenario requires two separate LAGs for different traffic types, making this design unsupported without architectural changes.
Question 72 of 89A solution architect has been assigned to design a VMware Cloud Foundation (VCF) Fleet and the following risk has been identified: RISK001: There is a risk that frequent infrastructure design changes may break Disaster Recovery (DR) plans and Service Level Objectives. What should the architect suggest to mitigate this risk?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Develop a process to review and update DR plans between changes and schedule monthly end to end DR tests.
The correct option directly mitigates the risk by instituting a governance process to keep recovery plans synchronized with infrastructure changes. Restricting changes or simply configuring monitoring fails to address the core issue that the recovery plan itself might become invalid.
Question 73 of 89A cloud architect has been assigned to design a VMware Cloud Foundation (VCF)-based solution for a customer. During a discovery workshop, the following requirements were stated by the customer: All applications/workloads designated as business critical have a Recovery Point Objective (RPO) of 1 business hour. The infrastructure components of the VCF solution must have a Recovery Time Objective (RTO) of 4 business hours. In the context provided, what does the RPO measure?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. It determines the maximum amount of data loss that can be tolerated.
RPO measures the maximum amount of data loss a business can tolerate, dictating how frequently you must perform backups or replications. Recovery Time Objective is a different metric that focuses entirely on the maximum tolerable downtime allowed before an application is recovered.
Question 74 of 89What is the role of a resource pool in vSphere?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. Organize and allocate resources
Resource pools logically group virtual machines to hierarchically allocate CPU and memory. Distractors like high availability are features of VMware HA, not resource pools, which strictly focus on resource delegation and management.
Question 75 of 89What is the default port that the vSphere Client uses to connect to vCenter Server?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: C. 443
The vSphere Client uses port 443 for secure HTTPS connections to vCenter Server. While port 902 is used for specific backend data transfers, standard web client access relies exclusively on the default HTTPS port.
Question 76 of 89A cloud architect has been assigned to design a VMware Cloud Foundation (VCF) fleet. The following information has been provided by the customer: Due to budget constraints, the solution must utilize the existing server hardware. The existing server hardware consists of server models from the same vendor but different generations. There are ten servers available for use in this solution. Management and Business workloads should be hosted in different clusters. What design decision should the architect make for the lifecycle management of the solution based on this information?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Use a single vSphere Lifecycle Manager composite image for the management and workload domain clusters.
A single vSphere Lifecycle Manager composite image ensures consistent ESXi versions and drivers across mixed hardware generations. This architecture leverages vendor add-ons within the image to handle heterogeneous clusters, rendering legacy baselines obsolete and unnecessary.
Question 77 of 89For a VMware Cloud Foundation (VCF) 9.0 logical design, the architect has determined that the VCF Private Cloud will encompass multiple VCF instances contained within a single VCF Fleet. The architect documented the following requirements when using VCF Operations: Monitoring downtime must be minimized. Alerting downtime must be minimized. Which design decision supports above requirements?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Deploy VCF Operations using the High Availability model with Collector nodes at remote sites.
The High Availability model protects the central analytics cluster, minimizing monitoring and alerting downtime. Collector nodes at remote sites continuously gather data from distributed instances, making this the only option that directly satisfies both resilience requirements.
Question 78 of 89Which Broadcom solutions are crucial when designing a new VCF deployment focused on data security?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. vSAN
vSAN provides data security through native encryption features like data-at-rest and data-in-transit encryption. Hardware components and basic availability features like HA do not inherently provide the cryptographic protections needed for strict data security.
Question 79 of 89Why would a solution architect specify the default NSX segment profiles in a VMware Cloud Foundation (VCF) design?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: A. Default segment profiles provide sufficient security and operational baseline settings for most common workloads and simplify lifecycle management.
Default segment profiles are preconfigured with operational and security best practices to provide a reliable baseline for most workloads. They also simplify lifecycle management and reduce design complexity, unlike custom profiles which require continuous manual tuning and validation.
Question 80 of 89Which file type stores the actual data of a virtual machine?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. .vmdk
The virtual machine disk file acts as the virtual hard drive, storing the guest operating system, applications, and all user data. Configuration settings and BIOS states are stored in separate files, but the actual data payload relies entirely on the disk file.
Question 81 of 89As part of the design for VMware Cloud Foundation (VCF) solution: Which configuration should the architect recommend to ensure optimal performance in a multi-tenant environment?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. Implement vSAN with tiered storage policies to ensure high I/O performance and low latency for tenant workloads.
Implementing vSAN with tiered storage policies provides granular, per-VM performance control using Storage Policy-Based Management. Single large datastores or unlimited VMs create severe noisy neighbor contention, directly degrading multi-tenant I/O performance and availability.
Question 82 of 89A cloud architect has been assigned to design a VMware Cloud Foundation (VCF)-based solution for a customer. During a discovery workshop, the customer stated the following requirements: All applications and workloads designated as business critical have a Recovery Point Objective of one business hour. The infrastructure components of the VCF solution must have a Recovery Time Objective of four business hours. In the context provided, what does the RTO determine?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. The maximum tolerable amount of time allowed before an application/service should be recovered to a usable state
The Recovery Time Objective determines the maximum tolerable downtime before a service must be restored. Remember that RTO is always about service availability time, whereas RPO is specifically focused on the maximum acceptable amount of data loss.
Question 83 of 89A solution architect has been assigned to design a new VMware Cloud Foundation (VCF) solution. During the discovery workshops, the customer explained that the solution will initially be used to host a single business application and some internal management tooling. The customer provided the following background information: The business application consists of two virtual machines. The business application is sensitive to changes in its storage I/O. The business application must be available during the company's business hours of 9 AM – 5 PM on weekdays. The architect has made the following design decisions in response to the customer's requirements and the additional information provided during discovery: The solution will use the VCF consolidated architecture model. A single cluster will be created, consisting of six ESXi hosts. Which design decision should the architect include in the design to mitigate the risk of impacting the business application?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: H. Perform ESXi host maintenance activities outside of the stated business hours.
Entering maintenance mode triggers a massive vSAN data evacuation, generating heavy storage I/O. Scheduling host maintenance outside business hours prevents this activity from impacting the application. While DRS anti-affinity rules protect availability, they do nothing to mitigate storage I/O contention.
Question 84 of 89As part of a design workshop for a VMware Cloud Foundation (VCF) deployment, the customer stated the following requirement: The solution must comply with the organization's security standards. Which two design decisions should be included in the logical design for the workload domain? (Choose two.)
Select 2 answers.
Show answer & explanation
Correct answer: C. Establish an operations practice to capture and update the thumbprint of the NSX Local Manager certificate on the NSX Global Manager every time the certificate is updated.
Using SHA-2 algorithms and maintaining NSX Federation certificate thumbprints are direct security controls. Edge appliance sizing and routing protocols address performance and availability, while VM monitoring handles restarts, meaning they do not satisfy strict security compliance requirements.
Question 85 of 89During an initial design workshop with stakeholders, a solution architect was provided with an overview of the current state and other information required to proceed to the design phase. Business requirements indicated support for operations of a different business unit. As a result, the architect makes the decision to enable multi-tenancy within VCF Automation, and a multi-tenancy statement should be documented. A combination of which two design implications would also need to be documented? (Choose two.)
Select 2 answers.
Show answer & explanation
Correct answer: B. A multi-tenancy statement should be documented. · E. The Provider Tenant must use the embedded VCF Operations orchestrator instance.
The provider tenant leverages the embedded orchestrator, while individual tenants require dedicated external orchestrators. Sharing instances violates isolation because workflows and credentials must remain logically and physically separated across business units.
Question 86 of 89The below design decisions were made relating to storage design: Which two design decisions would a solution architect include within the physical design? (Choose two.)
Select 2 answers.
Show answer & explanation
Correct answer: D. Encryption at rest capable disk drives · E. Dual 10Gb or faster storage network adapters
Physical design decisions specify actual hardware capabilities, such as self-encrypting drives and physical network adapters. Logical design decisions, like vSAN disk group configurations or storage policy fault domain definitions, are applied within the software layer and do not represent the hardware bill of materials.
Question 87 of 89A cloud architect has been assigned to design a VMware Cloud Foundation (VCF) Private Cloud. During a requirements gathering workshop with key customer stakeholders, the following information was captured: The service catalog solution must meet a minimum availability SLA of 99.9%. The performance of the service catalog solution must not be impacted by maintenance activities or a single physical ESX host failure. During the logical design phase of the project, the following design decisions were made: The solution will deploy VCF Automation using the highly available deployment model. Which two corresponding physical design decisions should the architect make to meet the stated requirements? (Choose two.)
Select 2 answers.
Show answer & explanation
Correct answer: F. The solution will create a VM-host anti-affinity rule to ensure all nodes of the VCF Automation cluster are located on different ESX hosts.
The correct option uses a VM-host anti-affinity rule to physically separate the automation nodes, ensuring a single hardware failure does not take down the cluster. An external load balancer is also required to intelligently route traffic away from failed nodes, satisfying the strict availability and performance requirements.
Question 88 of 89A VMware Cloud Foundation (VCF) architect is responsible for planning the expansion of an existing VCF instance. The existing VCF instance is deployed with a single workload domain. The number of ESXi hosts has grown to the maximum number the existing vCenter can support. Which design decision would the architect need to make to allow the existing VCF instance to add more ESXi hosts?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: B. Deploy a second workload domain within the existing VCF Instance
Deploying a second workload domain provides a new dedicated vCenter Server, directly solving the scaling limitation. A workload domain is bound by single vCenter capacity limits, so adding clusters inside the same domain fails to bypass those hard architectural constraints.
Question 89 of 89Which vSphere component is responsible for providing high availability within a cluster?
Tap an answer — you get instant feedback and the reasoning.
Show answer & explanation
Correct answer: D. VMware HA Agent
The VMware HA Agent, specifically the Fault Domain Manager service, directly monitors host health and restarts failed virtual machines. While vCenter configures this service, agents operate independently to ensure failover capabilities even during vCenter outages.
More free practice tests at certpunch.com and new video rounds on @CertPunch.