Free 2V0-11.24 Sample Questions — VMware Cloud Foundation 5.2 Administrator

An administrator needs to ensure that network traffic is protected from interception and tampering during VM migration activities. What feature or setting should the administrator enable to achieve this?

• A. Encrypted vSphere vMotion
• B. vSphere Virtual Machine Encryption
• C. vSphere DRS
• D. vSphere HA

An administrator needs to configure an ESXi host and create a host profile to ensure consistent configuration across multiple hosts in a cluster. Which three steps are necessary to achieve this? (Choose three.)

• A. Configure the desired settings on a reference ESXi host
• B. Extract the host profile from the configured reference host
• C. Manually configure each host to match the reference host settings
• D. Remediate the non-compliant hosts to ensure they match the host profile
• E. Apply the host profile to all hosts in the cluster

An administrator has been tasked with deploying a VCF-Aware VMware Aria Suite Lifecycle within a newly provisioned VMware Cloud Foundation environment. Which four details will the Cloud Administrator require to complete the deployment via SDDC Manager? (Choose four.)

• A. The FQDN of the Aria Suite Lifecycle appliance
• B. The FQDN of the Aria Suite Lifecycle cluster
• C. free IP address on the VMware NSX Tier 0
• D. The password for the root account
• E. free IP Address within the cross-region virtual network segment
• F. The password for the vcfadmin@local account
• G. The password for the admin@local account

An administrator needs to configure Network IO Control (NIOC) on a Virtual Distributed Switch (VDS) to prioritize storage traffic over other types of traffic. Which two steps should be followed? (Choose two.)

• A. Disable all other traffic types to ensure storage traffic gets full bandwidth
• B. Navigate to the VDS settings in the vSphere Client and enable NIOC
• C. Migrate all VM traffic to a standard switch
• D. Create a new port group specifically for storage traffic
• E. Assign shares and limits to the new port group to prioritize the storage traffic

Which feature of VMware Lifecycle Manager allows an administrator to manage the lifecycle of ESXi hosts by applying a consistent image across the hosts in a cluster? (Choose three.)

• A. Configure a Key Management Server (KMS) and add it to vCenter
• B. Create an encryption policy in vCenter
• C. Enable SSH on the ESXi hosts to manage encryption keys
• D. Enable the encryption feature on the ESXi hosts
• E. Apply the encryption policy to the existing VMs

While preparing to enable Application Virtual Networks (AVNs) and deploying Aria Suite components, an administrator plans to deploy an NSX Edge cluster. What is a requirement for deploying the NSX Edge cluster?

• A. The Edge transport nodes must be configured with an MTU of 1500
• B. The Edge cluster must be deployed in the management domain
• C. The Edge transport nodes must be deployed using the 'large' form factor
• D. The Edge cluster must be configured for NSX Federation

An administrator successfully removed a host from a VMware vSphere cluster and decommissioned it in SDDC Manager. What must be done before the host can be recommissioned and added back to the SDDC Manager inventory?

• A. Log in to the host console and select "Reset System Configuration" from the ESXi DCUI
• B. Manually uninstall the NSX VIBs on the host
• C. From the host console, use the /sbin/generate-certifcates command to generate a new self-signed certificate
• D. Reinstall ESXi on the host

The administrator of a VMware Cloud Foundation environment notices that log data from multiple components, including vSphere, NSX, and vSAN, is not being collected properly in Aria Operations for Logs. What two steps should the administrator perform to resolve this issue? (Choose two.)

• A. Check the network connectivity between the Aria Operations for Logs server and the VMware Cloud Foundation components
• B. Increase the storage capacity of the Aria Operations for Logs server to accommodate more log data
• C. Reconfigure the log level settings on all vSphere components to ensure detailed logging
• D. Verify that the Aria Operations for Logs license is still valid and active
• E. Ensure that the syslog configuration on each ESXi host is pointing to the correct Aria Operations for Logs server

A company wants to enhance the network virtualization and security capabilities within their VMware Cloud Foundation environment. The goal is to block traffic even between virtual machines connected to the same logical segment (L2 network) using micro segmentation. Which component can achieve the company's goals?

• A. VMware NSX Intelligence
• B. Network Detection and Response
• C. VMware vDefend
• D. Intrusion Prevention System

An administrator needs to add a new cluster to an existing VI workload domain. The existing cluster in the domain is using NFS as its principal storage. Which principal storage options are available for the new cluster?

• A. vSAN, NFS, or VMFS on Fibre Channel
• B. NFS or vSAN
• C. NFS only
• D. vSAN, NFS, VMFS on Fibre Channel, or vVols

An organization is implementing a downtime avoidance solution and wants to ensure continuous availability of applications across separate sites that are connected via a high bandwidth/low latency link. Which two VMware Cloud Foundation components support this capability with stretched clusters? (Choose two.)

• A. vSAN
• B. vSphere
• C. NSX Firewall
• D. vVOL
• E. vSphere Replication

An administrator has been tasked with expanding an existing VMware Cloud Foundation environment by adding a new workload domain. The environment currently has one management domain and one VI workload domain. What options are available to the administrator for deploying NSX in the second VI workload domain?

• A. The new workload domain can have its own dedicated NSX Fabric or it can join the existing NSX Fabric configured in the existing VI domain
• B. The new workload domain can have a dedicated NSX Fabric or it can join the existing NSX Fabric configured in either the management domain or existing VI domain
• C. The new workload domain can have its own dedicated NSX Fabric or it can join the existing NSX Fabric configured in the management domain
• D. The new workload domain must have a dedicated NSX Fabric

A cloud administrator recently deployed a new VI workload domain. As part of the initial VI domain creation, the administrator created a new SSO domain. However, they reconsidered and now want the domain to use the same SSO domain as the management domain. How can the VI domain be changed from a dedicated SSO domain to sharing the SSO domain with the management domain?

• A. From the SDDC Manager console, use the rsautil command to add the VI workload domain to the management domain SSO ring
• B. The vSphere SSO domain cannot be changed once it has been deployed and a new VI workload domain that is part of the Management SSO domain must be created, and workloads migrated
• C. From the VI Workload Domain vCenter Server instance, use the rsautil command to join the management domain SSO ring
• D. From the Management Domain vCenter Server instance, use the rsautil command to add the VI workload domain to the management domain SSO ring

Which two SDDC Manager operations can be executed on an NSX Edge cluster after it has been deployed? (Choose two.)

• A. Redeploy
• B. Sync
• C. Expand
• D. Delete
• E. Shrink

What is the first step to take when updating the vSAN database in a VMware Cloud Foundation environment?

• A. Place the vSAN cluster in maintenance mode
• B. Download the latest HCL database from VMware
• C. Check the VMware Compatibility Guide for supported versions
• D. Backup the vSAN database