VMware 3V0-12.26 real exam prep : Advanced VMware Cloud Foundation 9.0 Architect

An architect is defining the management-plane identity architecture for a VMware Cloud Foundation (VCF) platform. Requirements include:
* Single sign-on (SSO) across VCF Components.
* Integration to a corporate Identity Provider that supports SAML 2.0 or OIDC.
* Eliminate the dependency on local, per-domain identity silos.
Which identity architecture should the architect select?

• A. Use VCF Identity Broker to federate VCF SSO to the corporate IdP.
• B. Use AD/LDAP as the identity source per component without federation.
• C. Use VCF Identity Broker and integrate the corporate IdP using OAuth2 only.
• D. Use local SSO identities per domain with standardized password policy.

The following information has been collected from an architect during initial VMware Cloud Foundation (VCF) design discussions:
* Applications must be designed to tolerate the failure of a single data center.
* Service account passwords must be stored and retrieved from the company password vault.
* The self service catalog must meet the Service Level Objective (SLO) of 75% successful requests measured over a 12 month period.
* Management plane applications must return to operation (RTO) in under 10 minutes.
* Third-party pen testing must be executed against the solution yearly with a pass rate of 80 percent or higher.
* The solution must provide the ability for users to view and track the progress of their requests.
* All Identity management must use an external SAML based identity provider.
Which four statements are Functional Requirements? (Choose four.)

• A. The solution must provide the ability for users to view and track the progress of their requests.
• B. The self service catalog must meet the Service Level Objective (SLO) of 75% successful requests measured over a 12 month period.
• C. All Identity management must use an external SAML based identity provider.
• D. Service account passwords must be stored and retrieved from the company password vault.
• E. Applications must be designed to tolerate the failure of a single datacenter.
• F. Third-party pen testing must be executed against the solution yearly with a pass rate of 80 percent or higher.
• G. Management plane applications must return to operation (RTO) in under 10 minutes.

An architect is designing a vSphere Kubernetes Service (VKS) solution that provides high availability for VKS Clusters.
The environment contains:
* One Workload Domain
* Three Clusters
* Six ESX hosts in each Cluster
* One vSphere Namespace across three vSphere Zones
The solution must provide cluster-level failure tolerance. In the event that one cluster goes offline, cluster- level failure tolerance must still be in place.
Which VKS Cluster design solution fits this requirement?

• A. VKS Cluster worker nodes are automatically balanced across vSphere Zones.
• B. Use a Service type NodePort with Antrea.
• C. Map each vSphere Zone to FailureDomain within the NodePools.
• D. Use vSphere High Availability to restart the worker nodes.

A customer plans to deploy VMware Cloud Foundation (VCF) across two availability zones (AZs) within the same region.
The customer requires:
* Failover of NSX North/South routing with minimal loss of forwarding.
* No loss of functionality due to host failures and Edge Node maintenance.
* No cross-availability-zone stretched clusters are allowed for compliance.
Which two design decisions correctly address the design trait of availability? (Choose two.)

• A. Use Edge Node anti-affinity rules to ensure routing services survive a single host failure.
• B. Configure all Tier-0 uplinks to share a single Bidirectional Forwarding Detection (BFD) profile to simplify failover signaling.
• C. Pin all Tier-0 gateway services to a single Edge Cluster to reduce control plane transitions.
• D. Run NSX Global Manager in Primary/Secondary mode across AZs to maintain policy continuity.
• E. Deploy multiple Tier-0 gateways in Active/Active Equal-Cost Multi-Path (ECMP) mode with Edge Nodes distributed across fault domains.

As part the VMware Cloud Foundation (VCF) logical design, the architect has determined that the VCF Private Cloud will encompass multiple VCF instances contained within a single VCF Fleet. The architect documented the following requirements when using VCF Operations:
* Monitoring downtime must be minimized.
* Alerting downtime must be minimized.
Which design decision supports these requirements?

• A. Deploy VCF Operations using the Simple model with Collector nodes at remote sites.
• B. Deploy a single VCF Operations instance across a multi-VCF instance fleet.
• C. Deploy VCF Operations using the High Availability model with Collector nodes at remote sites.
• D. Deploy two VCF Operations instances and configure the Aggregator Management Pack.