VMware 2V0-71.23 Exam Questions & Answers

Correct Answer: A

VMware Aria Operations for Applications is a SaaS solution that provides observability for modern applications across multiple clouds and platforms. It collects and analyzes traces, metrics, and logs from various sources, including Tanzu

Kubernetes Grid clusters managed by Tanzu Mission Control. To enable the integration between VMware Aria Operations for Applications and Tanzu Mission Control, an administrator can use the integrations tab in Tanzu Mission Control UI

and follow the steps to configure the connection.

The other options are incorrect because:

VMware Aria Operations for Applications is not enabled by default in Tanzu Mission Control. An administrator has to explicitly enable the integration and provide the required credentials and settings.

An administrator cannot login to VMware Aria Operations for Applications and enable Tanzu Mission Control integration from the administration menu. The integration has to be initiated from Tanzu Mission Control UI. An administrator cannot

download and install the VMware Aria Operations Observations agent from Tanzu CLI. The Observations agent is automatically installed on the clusters managed by Tanzu Mission Control once the integration is enabled.

References: Configure Integration with Tanzu Mission Control, Introducing the Tanzu Mission Control Integration for VMware Aria Automation

Correct Answer: B

Antrea is the default CNI for new Tanzu Kubernetes Grid workload clusters8. Antrea is an open-source Kubernetes networking solution that implements the Container Network Interface (CNI) specification and uses Open vSwitch (OVS) as the

data plane9. Antrea supports various features such as network policies, service load balancing, NodePortLocal, IPsec encryption, IPv6 dual-stack, and more10.

The other options are incorrect because:

Multus CNI is an open-source container network interface plugin for Kubernetes that enables attaching multiple network interfaces to pods11. It is not the default CNI for Tanzu Kubernetes Grid workload clusters. Flannel is an open-source

simple and easy-to-use overlay network that satisfies the Kubernetes requirements12. It is not the default CNI for Tanzu Kubernetes Grid workload clusters.

Calico is an open-source network and network security solution for containers, virtual machines, and native host-based workloads13. It is not the default CNI for Tanzu Kubernetes Grid workload clusters.

References: Tanzu Kubernetes Grid Cluster Networking, Antrea, Antrea Features, Multus CNI, Flannel, Calico

Correct Answer: CD

Two services that require Transport Layer Security (TLS) certificates to provide encryption in VMware Tanzu Service Mesh are:

Certificate Authority (CA) Service: A service that issues certificates to services in the service mesh to enable mutual TLS (mTLS) communication between them. The CA service uses a root certificate to sign the certificates for the services,

and verifies the identity of the services using the certificates. The CA service also rotates the certificates periodically to ensure security8. Public Service: A service that exposes an internal service in the service mesh to external clients over

HTTPS. The public service uses a TLS certificate to encrypt the traffic between the external clients and the internal service, and to authenticate itself to the clients. The TLS certificate must match the domain name of the public service9.

The other options are incorrect because:

Internal Service: A service that runs inside the service mesh and communicates with other services using mTLS. The internal service does not require a TLS certificate, but rather uses a certificate issued by the CA service to enable mTLS10.

Proxy Service: A service that acts as an intermediary between an internal service and an external service, such as a database or an API. The proxy service does not require a TLS certificate, but rather uses a certificate issued by the CA

service to enable mTLS with the internal service. The proxy service also uses the external service's certificate to verify its identity11.

External Service: A service that runs outside the service mesh and communicates with an internal service over HTTPS or TCP. The external service does not require a TLS certificate from Tanzu Service Mesh, but rather uses its own

certificate to encrypt the traffic with the internal service, and to authenticate itself to the internal service.

References: Certificate Authority (CA) Service, Public Services, Internal Services, Proxy Services,