[2023年11月11日] 最新でリアルな5V0-31.22試験問題集解答
あなたを簡単に合格させる5V0-31.22試験問と正確なVMware Cloud Foundation Specialist (v2)のPDF問題
VMware Cloud Foundation Specialist（v2）試験は、VMware Cloud Foundationに関する候補者の知識と専門知識を包括的に評価する試験です。この試験は3つのセクションに分かれており、アーキテクチャ、展開、およびトラブルシューティングが含まれています。アーキテクチャセクションでは、VMware Cloud Foundationの設計とアーキテクチャについて、コンポーネントとその機能について説明します。展開セクションでは、VMware Cloud Foundationコンポーネントのインストール、設定、およびアップグレードに焦点を当てています。最後に、トラブルシューティングセクションでは、候補者がVMware Cloud Foundationソリューションの問題を特定し、解決する能力をテストします。
VMware 5V0-31.22 試験は、60 選択式問題で構成されたコンピュータベースの試験です。受験者は 105 分間試験を受けることができ、300 点以上の合格点が必要です。英語、日本語、簡体字中国語で試験を受けることができます。
質問 # 35
Which two roles are provided by a local NSX Manager appliance? (Choose two.)
- A. Policy
- B. Orchestrator
- C. Controller
- D. Authorization
- E. Compliance
正解：A、C
解説：
Explanation
The NSX Manager is a standalone appliance that hosts the API services, the management plane, control plane, and policy management. As a result of this combined format, you no longer need to install the manager and controllers as separate VMs. The NSX Manager has three built-in roles: policy, manager, and controller 1.
Policy: NSX Manager is responsible for the creation and management of NSX-T policies, which are used to define networking and security configurations and rules.
Controller: NSX Manager also serves as a central management point for NSX-T controllers, which are responsible for implementing and enforcing networking and security policies across the NSX-T environment.
References:
* VMware Cloud Foundation Specialist (v2) Exam Guide, section 2.2
* NSX-T Data Center Administration Guide, section "NSX Manager and NSX-T Controllers"
質問 # 36
During the design phase for a greenfield VMware Cloud Foundation (VCF) deployment, the following design decisions have been agreed upon:
* Stretched Cluster needs to be deployed
* Identity and Access Management for VMware Cloud Foundation needs to be deployed The Infrastructure Architect is working with the client to fill the Planning and Preparation Workbook. The Option for Stretched Cluster has been set to 'Include'. The 'Identity and Access Management' is displaying an error, and its Final Result is stating *Excluded'.
Which option should be enabled in the Planning and Preparation Workbook to address the issue?
- A. Clustered Workspace One Access
- B. Consolidated Management Domain
- C. NSX Routing for Management Domain
- D. Apply Signed Certificates
正解：C
解説：
Explanation
According to About Identity and Access Management for VMware Cloud Foundation23, one of the prerequisites for deploying Identity and Access Management for VMware Cloud Foundation is to enable NSX Routing for Management Domain in SDDC Manager. This allows SDDC Manager to communicate with Active Directory servers across different networks.
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vsan-planning.doc/GUID-AFF133BC-F
質問 # 37
What is required as part of enabling the Harbor Image Registry?
- A. Storage Policy
- B. Resource Limits
- C. Access Control
- D. Tanzu Enabled Cluster
正解：A
解説：
Explanation
This is because according to Dell documentation , to enable the Harbor Image Registry, you need to select the VM Storage Policy that will be used to store the images.
As part of enabling the Harbor Image Registry in VMware Cloud Foundation, a storage policy needs to be defined to specify the storage requirements for the registry. The storage policy should define the storage characteristics for the datastores where the registry will be deployed, including the redundancy level, disk type, and disk space. This is documented in the VMware documentation titled "Enabling Harbor Image Registry in Workload Domains."
質問 # 38
A systems administrator has recently added newly-commissioned hosts in the the VI workload domain, and IP addresses are automatically configured to their associated network pool. The administrator reviews which storage options require only vMotion and NFS networks in the network pool.
Which two storage options have this requirement? (Choose two.)
- A. vSAN and NFS
- B. NFS
- C. vSAN
- D. vVols on NFS
- E. Wols on ISCSI
正解：B、C
解説：
Explanation
According to the VMware Cloud Foundation documentation on network requirements, vSAN requires only the vMotion and NFS networks to be configured in the network pool. This is because vSAN traffic can be carried over the vMotion network, and the NFS network is needed to support the use of NFS datastores [1].
NFS is a file-based storage protocol that can be accessed over IP networks. It does not require any special hardware or software, and can be accessed by any device that supports the NFS protocol [2]. As such, it only requires the NFS network to be configured in the network pool.
Therefore, the correct answers are B. NFS and E. vSAN.
質問 # 39
Which statement is true regarding NSX Manager configuration in a VMware Cloud Foundation environment?
- A. NSX Managers can be deployed to different VLANs.
- B. The cluster virtual IP address is attached to all NSX Managers.
- C. Traffic is load-balanced across all NSX Managers while using the virtual IP address.
- D. The cluster virtual IP address is used for API and GUI access to NSX Managers.
正解：D
解説：
Explanation
According to VMware Cloud Foundation Planning and Preparation Workbook, a statement that is true regarding NSX Manager configuration in a VMware Cloud Foundation environment is:
* The cluster virtual IP address (VIP) address must be used for API and GUI access to NSX Managers
質問 # 40
A VCF architect collected the following requirements when designing the expansion of a new VI Workload Domain with twenty four vSAN Ready nodes, each with a dual-port 25Gbps network interface card:
* Provide scalable high-performance networking with layer-3 termination at top-of-rack
* Protect workloads from switch/NIC/rack failure
* Provide isolation for DMZ workloads
* Provide at-least 25Gbps dedicated bandwidth to backup traffic
* Easily accept workloads on traditional VLAN-backed networks
* Fully-supported by VMware
Which three design considerations meet all of these requirements? (Choose three.)
- A. Core Aggregation network topology
- B. Spine and Leaf network topology with layer-3 at Spine
- C. Two-node Edge Cluster with ECMP
- D. Stretched Clustering
- E. Two-node Edge Cluster with BFD
- F. Spine and Leaf network topology with layer-3 at top of rack
正解：A、B、F
解説：
Explanation
Option B: Spine and Leaf network topology with layer-3 at Spine - A spine and leaf network topology is designed for high scalability and performance, and layer-3 at the spine ensures that there is no single point of failure for the layer-3 termination. This meets several of the requirements, including scalable high-performance networking with layer-3 termination at top-of-rack, protecting workloads from switch/NIC/rack failure, and providing isolation for DMZ workloads.
Option D: Spine and Leaf network topology with layer-3 at top of rack - Similar to Option B, this topology also provides high scalability and performance, and layer-3 at the top of rack meets the requirement for layer-3 termination at top-of-rack.
Option F: Core Aggregation network topology - This topology provides a highly available, redundant core switch for aggregation and routing, which meets the requirement for protecting workloads from switch/NIC/rack failure.
Based on the given choices, the correct answers would be B, D, and F.
Sources: [1] Designing VMware Infrastructure Topology and Architecture; Authors: Russel Nolan, Eiad Al-Aqqad [2] Network Topology Considerations for VMware vSAN;https://docs.vmware.com/en/VMware-vSAN/7.0/com.vmware.vsan.networking.doc/GUID-1A901C10-48 Spine-Leaf Architecture:
Introduction;https://www.cisco.com/c/en/us/products/collateral/switches/nexus-9000-series-switches/datasheet-c
質問 # 41
Which two features are supported when implementing NSX Federation? (Choose two.)
- A. Identity Firewall
- B. NAT operations
- C. DHCP
- D. DHCP dynamic binding
- E. Load Balancer
正解：B、E
解説：
Explanation
This is because according to VMware documentation , these are some of the features that are supported when implementing NSX Federation:
* NAT operations: You can configure NAT rules for Tier-0 gateways across locations.
* Load Balancer: You can configure load balancer services for Tier-0 gateways across locations.
質問 # 42
Which two options can be used to create a new VMware Cloud Foundation VI workload domain? (Choose two.)
- A. vCenter Ul
- B. Cloud Builder Ul
- C. REST API
- D. PowerCLI
- E. SDDC Manager Ul
正解：C、E
解説：
Explanation
The SDDC Manager UI provides a single point of control for managing and monitoring your VMware Cloud Foundation instance and for provisioning workload domains. You use the navigation bar to move between the main areas of the user interface 1. The SDDC Manager UI provides an integrated view of the physical and virtual infrastructure and centralized access to manage the physical and logical resources 2.
The REST API can also be used to create a new VI workload domain using VMware Cloud Foundation. The VMware Cloud Foundation API Reference Guide provides information on available operations 3.
質問 # 43
Which license is required to enable Workload Management on VMware Cloud Foundation?
- A. VMware vSphere Enterprise Plus
- B. VMware vSphere Standard
- C. VMware vSphere Evaluation
- D. VMware Tanzu Basic
正解：D
解説：
Explanation
A Tanzu Basic license is required to enable Workload Management on VMware Cloud Foundation. Once enabled, the Supervisor Cluster must be assigned a Tanzu license before the 60-day evaluation period expires.
This license can be added to the license inventory of vSphere if a valid Tanzu Edition license is available.
質問 # 44
A VMware Cloud Foundation administrator created a Tanzu Namespace in one of the workload domains.
Which two functions related to permissions can be performed on the newly created Namespace? (Choose two)
- A. Add permissions to local vSphere with Tanzu users only.
- B. Add a custom role to create more granular permissions.
- C. Add permissions only from the vSphere.local domain.
- D. Add permissions to users from vCenter Single Sign-On identity sources.
- E. Permissions can be set to either view or edit.
正解：B、D
解説：
Explanation
A quote from reference [1] states that, "To add permissions to users or groups from vCenter Single Sign-On identity sources, the Tanzu Kubernetes cluster administrator can use either the vSphere Client or kubectl." Another quote from reference [1] states that, "By default, a Tanzu Kubernetes cluster includes a set of predefined roles that provides granular permission control for Kubernetes objects. The predefined roles enable cluster groups to be created with specific permissions across the Kubernetes namespace hierarchy.
Administrators can also create custom roles to provide more granular permission control that is specific to their organization's requirements." References: [1] Tanzu Kubernetes Cluster or Supervisor Cluster[1]: Which do I choose?
-https://blogs.vmware.com/virtualblocks/2022/06/23/tanzu-kubernetes-cluster-or-supervisor-cluster-which-do-i-c
質問 # 45
What limits can an administrator configure on a vSphere Namespace for a VMware Cloud Foundation Developer-Ready Workload Domain?
- A. Secrets
- B. Tanzu Kubernetes Cluster worker nodes
- C. Tanzu Kubemetes Cluster master nodes
- D. Persistent Volumes
正解：A、D
解説：
Explanation
This is because according to VMware documentation1, these are two of the limits that an administrator can configure on a vSphere Namespace for a VMware Cloud Foundation Developer-Ready Workload Domain. Secrets are used to store sensitive information such as passwords or tokens for Kubernetes workloads
2. Persistent Volumes are used to provide persistent storage for Kubernetes workloads3.
質問 # 46
An administrator wants to scale an existing VMware Cloud Foundation (VCF) environment by adding a new VI Workload Domain. Which two storage options can be used for the new VI Workload Domain? (Choose two.)
- A. iSCSI principal storage with SMB supplemental storage
- B. vSAN principal storage with VMFS on FC supplemental storage
- C. vSAN principal storage with NFS supplemental storage
- D. vVOL principal storage with SCSI supplemental storage
- E. vSAN principal storage with SMB supplemental storage
正解：B、C
解説：
Explanation
This is because according to VMware documentation, these are some of the storage options that can be used for a new VI Workload Domain:
* vSAN principal storage with VMFS on FC supplemental storage: You can use vSAN as your primary storage platform and add VMFS on FC as an additional storage option.
* vSAN principal storage with NFS supplemental storage: You can use vSAN as your primary storage platform and add NFS as an additional storage option.
質問 # 47
Which two steps must be performed to create a vSphere with Tanzu namespace? (Choose two.)
- A. Assign permissions
- B. Enable Harbor Image Registry
- C. Deploy a vSphere Cluster
- D. Use a DNS-compliant name
- E. Define resource limits
正解：D、E
解説：
Explanation
According to How to Create a vSphere with Tanzu Namespace and Create and Configure a vSphere Namespace2, two of the steps required to create a vSphere with Tanzu namespace are:
* Define resource limits: You can specify CPU, memory, and storage limits for each namespace to control how much resources are available for the workloads running in that namespace.
* Use a DNS-compliant name: You must provide a unique name for each namespace that is compliant with DNS naming conventions.
質問 # 48
Which two options are only available when using vSphere Lifecycle Manager Images? (Choose two.)
- A. Upgrade and patch ESXi hosts.
- B. Upgrade VM Hardware Compatibility versions.
- C. Check the hosts and clusters against the vSAN Hardware Compatibility List.
- D. Install and update third-party software on all ESXi hosts in a cluster.
- E. Update the firmware of all ESXi hosts in a cluster.
正解：D、E
解説：
Explanation
This is because vSphere Lifecycle Manager images can include firmware updates and third-party software components that can be applied to all hosts in a cluster12. These options are only available when using vSphere Lifecycle Manager images, not when using vSphere Lifecycle Manager baselines2.
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere-lifecycle-manager.doc/GUID-9A11223
質問 # 49
Which two configuration steps must a VMware Cloud Foundation administrator apply to achieve north/south connectivity while setting up an edge VM node for a workload domain from the SDDC Manager user interface? (Choose two.)
- A. ToR Switches VRFs
- B. OSPF Configuration
- C. vSphere VDS Uplinks
- D. NSX VDS Uplinks
- E. BGP Configuration
正解：C、D
解説：
Explanation
According to Deployment Model for the NSX-T Edge Nodes for a Virtual Infrastructure Workload Domain1, an NSX-T Edge node is an appliance that provides centralized networking services such as load balancing, NAT, VPN, and physical network uplinks. To achieve north/south connectivity for a workload domain from the SDDC Manager user interface, you need to configure two types of uplinks:
* vSphere VDS Uplinks: These are used to connect the NSX-T Edge node to the vSphere Distributed Switch (VDS) that provides network connectivity for all ESXi hosts in the workload domain cluster.
* NSX VDS Uplinks: These are used to connect the NSX-T Edge node to the external networks via physical network interfaces on the ESXi host where it runs.
質問 # 50
Which two configurations are part of the VMware Cloud Builder validation process? (Choose two.)
- A. Certificates: Validates certificates for ESX, vCenter Server, and NSX
- B. Network configuration: Validates CIDR to IP address validity, IP addresses in use, gateways, invalid or missing VLANs. invalid or missing MTU, and network spec availability for all components
- C. License key Validates format, validity, and expiry for ESX, vSAN, vCenter Server, NSX, vRealize Suite, and Log Insight license keys
- D. Availability configuration: Validates the access to the configured backup locations
- E. Passwords: Validates specified passwords Checks for minimum length, invalid characters, and format
正解：C、E
解説：
Explanation
According to VMware Cloud Foundation Planning and Preparation Workbook, two of the configurations that are part of the VMware Cloud Builder validation process are:
* License key: Validates format, validity, and expiry for ESX, vSAN, vCenter Server, NSX, vRealize Suite, and Log Insight license keys
* Passwords: Validates specified passwords Checks for minimum length, invalid characters, and format
質問 # 51
An administrator is tasked with preparing hosts for the deployment of a new Workload Domain in a VMware Cloud Foundation environment.The ESXi hosts have HBA cards that require the installation of a separate and the most recent VMware Installation Bundles (VIBs).
Which ESXi imaging method should the administrator use?
- A. Download and burn the base ESXi Installer ISO Image to a DVD
- B. VMware vSphere Auto Deploy
- C. VMware vSphere Lifecycle Manager Images
- D. VMware Imaging Appliance
正解：D
解説：
Explanation
This is because according to VMware documentation1, the VMware Imaging Appliance (VIA) is a tool that automates ESXi host imaging and configuration for VCF deployments. It supports custom ESXi images that include additional drivers or VIBs that are not part of the base ESXi image2. You can download ESXi software and VIBs from VMware or third-party sources and upload them to VIA for creating custom images3.
質問 # 52
What is a characteristic about the Credentials Worksheet in the Deployment Parameter Workbook?
- A. Passwords can be different per user.
- B. Passwords can be common only for appliance users.
- C. Passwords must be different per user.
- D. Passwords must be common across all users.
正解：C
解説：
Explanation
According to VMware Cloud Foundation Planning and Preparation Workbook, when filling out the Credentials Worksheet in the Deployment Parameter Workbook, you must provide differentpasswords for each user account that will be created during deployment. This ensures security and compliance for your environment.
質問 # 53
Which order of steps should an administrator use to replace a failed host in a stretched cluster?
- A. Remove the host using cluster APIs
2. Decommission the failed host.
3. Add the newly commissioned host to the cluster using cluster APIs.
4. Commission the new host with the correct network - B. Decommission the failed host.
2. Remove the host using cluster APIs.
3. Add the newly commissioned host to the cluster using cluster APIs. 4 Commission the new host with the correct network. - C. 1 Remove the host using cluster APIs.
2. Decommission the failed host.
3. Commission the new host with the correct network.
4. Add the newly commissioned host to the cluster using cluster APIs. - D. 1 Decommission the failed host
2. Remove the host using cluster APIs.
3. Commission the new host with the correct network.
4. Add the newly commissioned host to the cluster using cluster APIs.
正解：B
解説：
Explanation
This is because according to VMware documentation1, these are the steps to replace a failed host in a stretched cluster:
* Run the compact cluster API to remove any stale data from vSAN.
* Decommission the host to be removed using SDDC Manager UI or API.
* Commission the replacement host to the same network pool as the removed host using SDDC Manager UI or API.
* Add the newly commissioned host to the cluster using SDDC Manager UI or API.
* Explanation: According to the VMware documentation, when replacing a failed host in a stretched cluster, the first step is to decommission the failed host. This should be followed by removing the host using cluster APIs, commissioning the new host with the correct network, and then adding the newly commissioned host to the cluster using cluster APIs.
質問 # 54
An administrator is tasked with deploying an additional cluster within VI Workload Domain which has been created with vSAN as a principal storage Which types of principal storage may the administrator configure during this process?
- A. NFS v4.1, VMFSon FC, vSAN
- B. vSAN, iSCSI, SMB3.0
- C. Wols, vSAN, NFS v3, VMFS on FC
- D. iSCSI, Wols, vSAN; NFS v4 1
正解：A
解説：
Explanation
According to VMware Cloud Foundation Planning and Preparation Workbook, when adding an additional cluster within VI Workload Domain that has been created with vSAN as principal storage, you can choose from three types of principal storage:
* NFS v4.1: You can use NFS version 4.1 datastores as principal storage if you have external NFS servers available.
* VMFS on FC: You can use VMFS datastores on Fibre Channel (FC) SAN devices as principal storage if you have external FC SAN devices available.
質問 # 55
An administrator needs to upgrade the current VMware Cloud Foundation (VCF) environment from version
4.1 to 4.3, knowing that the environment has direct access to the internet.
Which steps should be performed to download the online bundles?
- A. 1 vSphere Lifecycle Manager checks depot.vmware.com.
2. The administrator accesses vSphere Lifecycle Manager.
3. The administrator downloads the bundles from vSphere Lifecycle Manager. - B. 1. SDDC Manager checks depot.vmware com.
2. The administrator accesses SDDC Manager.
3. The administrator downloads the bundles from SDDC Manager. - C. 1. vSphere Lifecycle Manager checks depot vmware.com
2. The administrator accesses SDDC Manager.
3. The administrator downloads the bundles from SDDC Manager. - D. 1 SDDC Manager checks depot.vmware com.
2. The administrator accesses vSphere Lifecycle Manager
3. The administrator downloads the bundles from vSphere Lifecycle Manager
正解：B
解説：
Explanation
This is because according to VMware documentation , SDDC Manager is responsible for checking and downloading the online bundles for VCF upgrades from depot.vmware.com. The administrator can access SDDC Manager and download the bundles from Inventory > Workload Domains > MGMT > Update/Patches.
質問 # 56
VCF design workshops were conducted, and the architect collected the following customer requirements for the newly planned VCF infrastructure:
* The new VCF infrastructure must target two zones: DEV/UAT and DMZ.
* The security team would like to have full management and network isolation between these two zones
* 12 hosts have been ordered for the solution.
* DEV/UAT workloads must comply with an erasure coding vSAN storage policy with the ability to tolerate the failure of two hosts.
Which workload domain sizing will be required to achieve these requirements?
- A. 12-hosts workload domain for both zones, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ cluster
- B. 8-hosts DEV/UAT workload domain, having an 8-hosts DEV/UAT cluster, and a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster
- C. 12-hosts workload domain for both zones, having a 4-hosts DEV cluster a 4-hosts UAT cluster, and a
4-hosts DMZ cluster - D. 8-hosts DEV/UAT workload domain, having a 4-hosts DEV cluster and a 4-hosts UAT cluster, in addition to a 4-hosts DMZ workload domain, having a 4-hosts DMZ cluster
正解：B
解説：
Explanation
erasure coding vSAN storage policy with the ability to tolerate two host failures requires at least six fault domains (hosts) in a cluster. Therefore, an 8-hosts cluster can meet this requirement for DEV/UAT workloads.
Additionally, creating separate workload domains for DEV/UAT and DMZ can provide full management and network isolation between these two zones.
https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.virtualsan.doc/GUID-AD408FA8-5898
質問 # 57
A systems administrator is tasked with creating a new VI workload domain that will leverage either an external NFS or a VMFS on FC storage as the principal storage.
Which action is required to fulfill this requirement?
- A. Create a new network pool for vMotion and NFS networks.
- B. Create a new network pool for vMotion, vSAN, and NFS networks.
- C. Create a new network pool for vMotion and vSAN networks.
- D. Create a new network pool only for vMotion network.
正解：A
解説：
Explanation
This is because a network pool is a collection of subnets within an layer-2 network domain that includes information about subnets reserved for the vMotion and NFS networks that are required for adding a host to the SDDC Manager inventory2. The other options are not correct because they either include vSAN network, which is not needed for external NFS or VMFS on FC storage , or they do not include NFS network, which is needed for external NFS storage1
https://infohub.delltechnologies.com/l/dell-storage-with-vmware-cloud-foundation-1/vmware-cloud-foundation-n
質問 # 58
......
5V0-31.22認証試験問題集の解答を提供しています：https://drive.google.com/open?id=14cHZ5agVGbrTD5ebGzhzZDVhe1KB8ccf
更新された5V0-31.22試験練習テスト問題：https://www.passtest.jp/VMware/5V0-31.22-shiken.html