Practice on 2023 LATEST 5V0-23.20 Exam Updated 126 Questions [Q52-Q69]

September 27, 2023 admin 0

Categories : 5V0-23.20 , VMware

Rate this post

Practice on 2023 LATEST 5V0-23.20 Exam Updated 126 Questions

Download Latest 5V0-23.20 Dumps with Authentic Real Exam QA’s

VMware 5V0-23.20 certification exam consists of 70 multiple-choice questions that must be completed within 105 minutes. 5V0-23.20 exam covers a wide range of topics, including deploying vSphere with Tanzu, configuring Kubernetes clusters, managing containerized workloads, and troubleshooting common issues. Candidates who pass the exam will be awarded the VMware vSphere with Tanzu Specialist certification, which is recognized globally as a mark of excellence in VMware technologies.

NO.52 The Gold storage policy has been assigned to the Web namespace, and the DevOps engineer wants to place a persistent volume for the Web application in the Gold storage class.
How should this goal be accomplished?

Indicate the Gold storage class in the persistent volume claim specification

Assign the persistent volume to the Gold storage class

Indicate the Gold storage class in the persistent volume specification

Configure tag-based placement for the persistent volume

* VM storage policies are translated into Kubernetes storage classes.
* Developers can access all assigned VM storage policies in the form of storage classes. * Developers cannot manage storage classes.

NO.53 On which network are TKG clusters deployed in vSphere with Tanzu when using the vSphere networking stack?

Workload

Backend

Edge

Frontend

NO.54 A developer is connecting to a Tanzu Kubernetes Cluster using the kubectl vsphere login command Which information must be specified, in addition to both the name of the cluster and the Supervisor Cluster Control Wane IP?

The path to the existing kubeconfig file and the SSO Username

The path to the existing kubeconfig file and the Token D for the SSO credentials

The name of the Supervisor Namespace and the Token ID for the SSO credentials

The name of the Supervisor Namespace and the SSO Username

NO.55 Which description accurately characterizes virtual machine class types for Tanzu Kubernetes cluster (TKC) nodes?

A best-effort class does not provide high availability for TKC nodes.

A best-effort class reserves CPU and Memory resources for TKC nodes.

A guaranteed class provides high availability for TKC nodes.

A guaranteed class reserves CPU and Memory resources for TKC nodes.

NO.56 To which set of networks are the Supervisor Cluster nodes attached when deploying with an NSX-T network topology?

Frontend and Workload

Frontend and Management

Workload and Management

Management and NSX Overlay

The Network Service has been extended to support the vSphere Distributed Switch (vDS). Start by configuring the switch with appropriate portgroups. Management will carry traffic between vCenter and the Kubernetes Control Plane (Supervisor Cluster control plane). As we will see in a moment, not having the built in Load Balancing capability of NSX means you will need to deploy your own load balancer externally from the cluster. We will give you a choice of integrated load balancers. The first one we support is HAProxy.
The Management network will also carry traffic between the supervisor cluster nodes and HAProxy. The Frontend network will carry traffic to the Load Balancer virtual interfaces. It must be routable from any device that will be a client for your cluster. Developers will use this to issue kubectl commands to the Supervisor cluster or their TKG clusters. You can have one or more Workload networks.
The primary Workload network will connect the cluster interfaces of the Supervisor cluster. Namespaces can be defined with their own Workload network allowing for isolation between development teams assigned different Namespaces. The Namespace assigned Workload Networks will connect the TKG cluster nodes in that Namespace.

NO.57 Why would developers choose to deploy an application as a vSphere Pod instead of a Tanzu Kubernetes cluster?

They need the application to run as privileged pods.

The application works with sensitive customer data, and they want strong resource and security isolation.

They want to have root level access to the control plane and worker nodes in the Kubernetes cluster.

The application requires a version of Kubernetes that is above the version running on the supervisor cluster.

A vSphere Pod is a VM with a small footprint that runs one or more Linux containers. With vSphere Pods, workloads have the following capabilities:
* Strong isolation from a Linux kernel based on Photon OS
* Resource management using DRS
* Same level of resource isolation as VMs
* Open Container Initiative (OCI) compatible
* Equivalent to a Kubernetes Container Host
vSphere Pods are not compatible with vSphere vMotion. When an ESXi host is placed into maintenance mode, running vSphere Pods are drained and redeployed on another ESXi host, but only if the vSphere Pod is part of a ReplicaSet.

NO.58 Which three roles does the Spherelet perform? (Choose three )

Determines placement of vSphere pods

Manages node configuration

Starts vSphere pods

Provides a key-value store for pod configuration

Communicates with Kubernetes API

Provisions Tanzu Kubernetes clusters

Spherelet is a kubelet that is ported natively to ESXi. It allows the ESXi host to become part of a Kubernetes cluster. Spherelet performs the following functions:
* Communicates with the control plane VMs
* Manages node configuration
* Starts vSphere Pods
* Monitors vSphere Pods

NO.59 Which type of service is created by default when publishing a Kubernetes service?

Cluster IP

Node Port

LoadBalancer

ExternalName

Explanation
For some parts of your application (for example, frontends) you may want to expose a Service onto an external IP address, that’s outside of your cluster.
Kubernetes ServiceTypes allow you to specify what kind of Service you want. The default is ClusterIP.

NO.60 Which two container network interfaces (CNIs) are supported with Tanzu Kubernetes clusters created by the Tanzu Kubernetes Grid Service? (Choose two )

NSX-T

Weave Net

Flannel

Antrea

Calico

Explanation
https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-A7756D67-0B95-447D-A A Tanzu Kubernetes cluster provisioned by the Tanzu Kubernetes Grid Service supports two CNI options:
Antrea (default) and Calico. Both are open-source software that provide networking for cluster pods, services, and ingress.
Tanzu Kubernetes clusters provisioned by the Tanzu Kubernetes Grid Service support the following Container Network Interface (CNI) options:
* Antrea
* Calico

NO.61 An administrator is tasked with increasing the amount of CPU and memory in an existing Tanzu Kubernetes cluster.
Which change must the administrator complete to ensure the cluster scales successfully when updating the YAML definition?

Manually update the CPU and memory of the nodes

Update the Virtual Machine Class Type

Increase the number of worker nodes

Increase the number of control plane nodes

Explanation
Virtual Machine Class Types for Tanzu Kubernetes Clusters
A virtual machine class defines the resource sizing for Tanzu Kubernetes cluster VMs: * CPU * Memory * Storage Virtual machine class types range from extra small (xsmall) to extra large (xlarge). Class types are categorized as guaranteed or best effort:
* Guaranteed: Reserve all CPU and memory allocations. * Best effort: Allocate the same CPU and memory but do not reserve the resources.
The class type guaranteed-small allocates 2 CPU, 4 GB of memory, and 16 GB of storage and reserves CPU and memory allocations. Custom virtual machine class types cannot be defined.

NO.62 How can you remove unreferenced container images from a project in an embedded Registry Service?

Delete images in Content Library.

Use kubectl to delete the images.

Delete the namespace using the vSphere Client.

Purge a namespace using the vSphere Client.

NO.63 The Gold storage policy has been assigned to the Web namespace, and the DevOps engineer wants to place a persistent volume for the Web application in the Gold storage class.
How should this goal be accomplished?

Indicate the Gold storage class in the persistent volume claim specification

Assign the persistent volume to the Gold storage class

Indicate the Gold storage class in the persistent volume specification

Configure tag-based placement for the persistent volume

NO.64 Which step in vSphere with Tanzu enablement using the vSphere Distributed Switch process is done prior to using the Workload Management Enablement Wizard?

Deploy the load balancer

Choose the Kubernetes content library that should be used in the Supervisor Cluster

Define the Primary workload network P range

Define the Management network interfaces for the Supervisor Cluster

As a vSphere administrator, you can enable the Workload Management platform on a vSphere cluster by configuring the vSphere networking stack to provide connectivity to workloads. A Supervisor Cluster that is configured with vSphere networking supports the deployment of Tanzu Kubernetes clusters created by using the Tanzu Kubernetes Grid Service. It does not support running vSphere Pod or using the embedded Harbor Registry.

NO.65 Which two networks are used to attach Supervisor Cluster control plane VMs when using the vSphere networking stack? (Choose two.)

vMotion

Frontend

Primary workload

Management

Non-primary workload

NO.66 A developer is connecting to a Tanzu Kubernetes Cluster using the kubectl vsphere login command Which information must be specified, in addition to both the name of the cluster and the Supervisor Cluster Control Wane IP?

The path to the existing kubeconfig file and the SSO Username

The path to the existing kubeconfig file and the Token D for the SSO credentials

The name of the Supervisor Namespace and the Token ID for the SSO credentials

The name of the Supervisor Namespace and the SSO Username

To connect to the Supervisor Cluster, run the following command.
kubectl vsphere login –server=SUPERVISOR-CLUSTER-CONTROL-PLANE-IP
–tanzu-kubernetes-cluster-name TANZU-KUBERNETES-CLUSTER-NAME
–tanzu-kubernetes-cluster-namespace SUPERVISOR-NAMESPACE-WHERE-THE-CLUSTER-IS-DEPLOYED
–vsphere-username VCENTER-SSO-USER-NAME
For example:
kubectl vsphere login –server=10.92.42.137
–tanzu-kubernetes-cluster-name tanzu-kubernetes-cluster-01
–tanzu-kubernetes-cluster-namespace tanzu-ns-1
–vsphere-username [email protected]

NO.67 Which command should be used by a developer to log in to the vSphere with Tanzu Supervisor Cluster?

vmwarectl login –server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> –vsphere-username <VCENTER-SSO-USER>

kubectl vsphere login –server=<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> –vsphere-username <vcENTER-SSO-USER>

vmwarectl vsphere login –server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> –vsphere-username <VCENTER-SSO-USER>

kubectl login –server=<KUBERNETES-CONTROL-PLANE-lP-ADDRESS> –vsphere-username <VCENTER-SSO-USER>

Authenticating Using kubectl
In vSphere with Tanzu, authentication is performed using vCenter Single Sign-On. You run the command kubectl vsphere login to authenticate a user through vCenter Single Sign-On to Kubernetes clusters.
kubectl vsphere login –server <kubernetes control plane> -u <username> The –insecure-skip-tls-verify flag is required if the certificate presented by the vSphere with Tanzu control plane is not trusted by the client machine. The control plane is signed by the vCenter Server VMware CA by default. You can replace the control plane certificate with a trusted certificate if needed. Alternatively, install the vCenter Server VMware CA root certificate into your client machine to remove the need for the –insecure-skip-tls-verify flag.

NO.68 Which command provides valid syntax to deploy a vSphere Pod?

tkg apply -c containerName

docker run containerName

kubectl apply -f deployment.yaml

kubectl apply -t deployment.yaml

Explanation
You can deploy an application on a namespace on a Supervisor Cluster. Once the application is deployed, the respective number of vSphere Pods are created on the Supervisor Cluster within the namespace.
Common kubectl commands include the apply, get, describe, and delete commands:
* The kubectl apply command applies the contents of a YAML file. Typically, this command is used to create a pod or deployment: – kubectl apply -f /path/to/my.yaml
* The kubectl get command returns basic information about an object: – kubectl get pod <pod_name_name>

NO.69 To which network are HA Proxy virtual server IP addresses issued when using the vSphere networking stack default configuration?

vMotion

Overlay

Primary workload

Management

Explanation
* The HAProxy virtual IP range where external services and DevOps users connect. In this configuration, HAProxy is deployed with two virtual NICs (Default configuration), one connected to the management network, and a second one connected to the Primary Workload Network. You must plan for allocating Virtual IPs on a separate subnet from the Primary Workload Network.
https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-1F885AAE-92FF-41E6-B

Loading …