2V0-71.23 Online Practice Questions and Answers

Correct Answer: A

The Tanzu CLI is a command-line tool that enables users to interact with VMware Tanzu products and services. It must be installed upfront to deploy VMware Tanzu Kubernetes Grid management cluster, as it provides commands to create, configure, scale, upgrade, and delete management clusters on different platforms. The Tanzu CLI also allows users to create workload clusters from the management cluster, and to perform various operations on both types of clusters. References: VMware Tanzu CLI Documentation, [Deploying Management Clusters with the Tanzu CLI]

Correct Answer: D

The correct resource hierarchy order in VMware Tanzu Mission Control is Organization -> Cluster Groups -> Clusters. An organization is the root of the resource hierarchy and represents a customer account in Tanzu Mission Control. A cluster group is a logical grouping of clusters that can be used to apply policies and manage access. A cluster is a Kubernetes cluster that can be attached or provisioned by Tanzu Mission Control. A cluster belongs to one and only one cluster group, and a cluster group belongs to one and only one organization. References: VMware Tanzu Mission Control Concepts, Resource Hierarchy

Correct Answer: CE

Two configurations that are valid for Zonal Supervisor Deployment are three- zone and one-zone. A Zonal Supervisor Deployment is a way of deploying the vSphere with Tanzu Supervisor Cluster across multiple vSphere clusters that are mapped to vSphere Zones1. A vSphere Zone is a logical grouping of vSphere clusters that share common characteristics, such as network connectivity, power source, or physical location2. A Zonal Supervisor Deployment provides high availability and fault tolerance for Kubernetes workloads by distributing them across different zones1. The supported configurations for Zonal Supervisor Deployment are: Three-zone: The Supervisor Cluster spans three vSphere clusters, each mapped to a different vSphere Zone. This configuration provides the highest level of availability and fault tolerance, as it can tolerate the failure of any one zone1. One-zone: The Supervisor Cluster runs on a single vSphere cluster that is mapped to a single vSphere Zone. This configuration is suitable for development or testing purposes, but does not provide any availability or fault tolerance guarantees1. References: Requirements for Zonal Supervisor Deployment - VMware Docs, Create vSphere Zones for a Multi-Zone Supervisor Deployment - VMware Docs

Correct Answer: A

The purpose of setting ENABLE_AUDIT_LOGGING=true during a cluster deployment is to log metadata about all requests made to the Kubernetes API server. This enables auditing of the cluster activities and helps with security and compliance. The audit logs are stored in /var/log/kubernetes/audit.log on the control plane node and can be accessed by the cluster administrator. The audit logs are generated based on an audit policy file that defines what events should be recorded and what data they should include12 References: 1: https://docs.vmware.com/en/VMware-Tanzu-Kubernetes-Grid/1.6/vmware- tanzu-kubernetes-grid-16/GUID-troubleshooting-tkg-audit-logging.html 2: https://kubernetes.io/docs/tasks/debug/debug-cluster/audit/

Correct Answer: C

A Container Storage Interface (CSI) in VMware Tanzu Kubernetes Grid is a plug-in that allows providers to expose storage as persistent storage for Kubernetes clusters. CSI is a standard interface that defines an abstraction layer for container orchestrators to work with storageproviders3. VMware Tanzu Kubernetes Grid supports StorageClass objects for different storage types, provisioned by Kubernetes internal ("in- tree") or external ("out-of-tree") plug-ins. Two of the supported storage types are vSphere Cloud Native Storage (CNS) and Amazon EBS, which use the vSphere CSI driver and the AWS EBS CSI driver respectively4. References: Tanzu Kubernetes Storage Class Example - VMware Docs, Deploying and Managing Cloud Native Storage (CNS) on vSphere - VMware Docs

Correct Answer: D

The set of tools that can be used to attach a Kubernetes cluster to VMware Tanzu Mission Control are kubectl and VMware Tanzu Mission Control Web Ul. kubectl is a command-line tool that allows users to interact with Kubernetes clusters. VMware Tanzu Mission Control Web Ul is a graphical user interface that allows users to manage their clusters and policies. To attach a cluster, users need to use both tools. First, they need to use the web console to select the cluster group and generate a YAML manifest for the cluster. Then, they need to use kubectl to apply the manifest on the cluster and install the cluster agent extensions that enable communication with Tanzu Mission Control. References: Attach a Cluster -VMware Docs, What Happens When You Attach a Cluster

Correct Answer: BD

Two components that are installed on the target cluster when VMware Tanzu Mission Control Data Protection is enabled are Velero and data protection extension. VMware Tanzu Mission Control Data Protection is a feature that allows users to backup and restore Kubernetes resources and persistent volumes across clusters using a centralized management platform6. To enable data protection for a cluster, users need to install Velero and data protection extension on the cluster7. Velero is an open source tool that performs backup and restore operations using custom resource definitions and controllers6. Data protection extension is a component that enhances Velero's functionality by providing additional features such as backup scheduling, retention policy, backup hooks, restore hooks, and backup encryption8. References: Data Protection - VMware Docs, Protecting Data - VMware Docs, Enable Data Protection for a Cluster - VMware Docs

Correct Answer: CE

VMware Tanzu Mission Control and Tanzu CLI package plugin are two methods that can be used to install Fluent Bit on a VMware Tanzu Kubernetes Grid cluster. VMware Tanzu Mission Control is a centralized management platform for Kubernetes clusters across different environments. It allows users to install Fluent Bit on any attached cluster from the web console or the CLI, and configure the output plugins for log forwarding. Tanzu CLI package plugin is a command-line tool that enables users to interact with VMware Tanzu packages and services. It allows users to install Fluent Bit from a package repository on any standalone management or workload cluster, and configure the output plugins for log forwarding. References: Install Fluent Bit for Log Forwarding - VMware Docs, Implement Log Forwarding with Fluent Bit - VMware Docs

Correct Answer: BE

Two statements about the NSX Advanced Load Balancer are correct: It can be configured as the VIP endpoint for the management cluster on vSphere. The VIP endpoint is the IP address that clients use to access the Kubernetes API server on the management cluster. By default, this IP address is assigned by DHCP, but it can also be configured manually or by using a load balancer. Using a load balancer provides high availability and scalability for the VIP endpoint. NSX Advanced Load Balancer can be used as the load balancer provider for the VIP endpoint by creating a virtual service that points to the control plane nodes of the management cluster5. It can be configured as a load balancer for workloads in the clusters that are deployed on vSphere. Workload clusters are Kubernetes clusters that run user workloads on vSphere with Tanzu. Workload clusters require a load balancer to expose services of type LoadBalancer to external clients. NSX Advanced Load Balancer can be used as the load balancer provider for workload clusters by deploying an Avi Kubernetes Service (AKS) pod on each cluster node. The AKS pod acts as an ingress controller that communicates with the NSX Advanced Load Balancer Controller and creates virtual services for each service of type LoadBalancer6. The other options are incorrect because: It can only be used if Antrea CNI is installed on the workload cluster is false. Antrea is one of the supported Container Network Interface (CNI) plugins for workload clusters on vSphere with Tanzu, but it is not mandatory to use it with NSX Advanced Load Balancer. Other CNI plugins, such as Calico or Flannel, can also work with NSX Advanced Load Balancer7. It only supports the service type LoadBalancer is false. NSX Advanced Load Balancer supports other service types as well, such as ClusterIP and NodePort. These service types can be used to expose services within or across clusters without requiring an external load balancer8. It is natively integrated with Tanzu Kubernetes Grid Amazon Web Services EC2 deployments is false. NSX Advanced Load Balancer is not natively integrated with Tanzu Kubernetes Grid Amazon Web Services EC2 deployments. Tanzu Kubernetes Grid on AWS uses the AWS Elastic Load Balancing service as the default load balancer provider for both management and workload clusters9. References: Configure the VIP Endpoint for the Management Cluster, Deploy and Configure NSX Advanced Load Balancer as a Load Balancer for Workload Clusters, Supported CNI Plugins, Service Types, Load Balancing on AWS

Correct Answer: CDF

A VM class in VMware vSphere with Tanzu specifies the CPU, memory, and resource reservations for a VM10. vSphere with Tanzu offers several preconfigured VM classes which you can use as is, edit, or delete. You can also create custom

VM classes in your vCenter Server instance and it will be available to all Supervisor Clusters and the namespaces created in these clusters11.

When you create or edit a VM class, you can configure the following attributes:

Name: A unique DNS compliant name that identifies the VM class. vCPU Count: The number of virtual CPUs (vCPUs) for a VM. This is a VM hardware configuration.

CPU Resource Reservation: The guaranteed minimum CPU resource allocation for a VM. This value is expressed in percentage (%). Memory: The memory configured for a VM in MB, GB, or TB. This is a VM hardware configuration.

Memory Resource Reservation: The guaranteed minimum memory resource allocation for a VM. This value is expressed in percentage (%). Storage: The storage configured for a VM in MB, GB, or TB. This is a VM hardware configuration.

The other options are incorrect because:

Network is not an attribute that can be configured in a VM class. Network configuration is done at the namespace level by using network policies12. Operating system is not an attribute that can be configured in a VM class. Operating system

configuration is done at the image level by using content libraries.

PCI devices are not an attribute that can be configured in a VM class. PCI devices are not supported by vSphere with Tanzu.

References: VM Classes, Create a Custom VM Class, Network Policies, [Content Libraries]