[Full-Version] 2024 New DumpsTests 5V0-23.20 PDF Recently Updated Questions [Q49-Q71]

5V0-23.20 VMware

admin -

January 7, 2024

5/5 - (1 vote)

[Full-Version] 2024 New DumpsTests 5V0-23.20 PDF Recently Updated Questions

5V0-23.20 Exam with Guarantee Updated 126 Questions

VMware vSphere with Tanzu is an enterprise-grade Kubernetes solution that enables organizations to run containerized workloads alongside traditional virtual machine workloads. The solution provides a consistent and secure deployment model for modern applications and offers seamless integration with the existing infrastructure. The VMware 5V0-23.20 certification exam covers topics such as Tanzu Kubernetes Grid Integrated Edition, vSphere with Kubernetes, Tanzu Kubernetes clusters, and application deployment and management.

VMware vSphere with Tanzu Specialist certification is designed for IT professionals who want to demonstrate their expertise in deploying and managing VMware vSphere with Tanzu. VMware vSphere with Tanzu Specialist certification validates the skills required to implement and manage Kubernetes infrastructure on VMware vSphere. The VMware 5V0-23.20 exam is the key to earning this certification. 5V0-23.20 exam is intended for those who are familiar with VMware vSphere, Kubernetes, and container technology.

QUESTION 49
How is information found about all Kubernetes Persistent Volumes in a vSphere environment?

Navigating to the Cloud Native Storage view in vCenter Server

Using: kubectl get persistentvolumes

Accessing the FCD folder on a Datastore

Using: esxcli storage cloud native get

This is the textbook answer, I know kubectl does give you some information.

QUESTION 50
Which role should the vSphere administrator apply for the developer?

Assign the developer user with the “can edit” role at the vSphere Namespace object.

Assign the developer user with the ‘VSphere Kubernetes Manager” role at the vSphere Namespace object.

Assign the developer user with the ‘VSphere Kubernetes Manager” role at the cluster object.

Assign the developer user with the “can edit” role at the cluster object.

Permissions for programmers should be assign at the Namespace level, typically using groups and roles.
You assign roles for the Namespace to Active Directory groups. You can later assign access to users by adding them to these groups. You assign access to separate Active Directory groups for the edit and view roles in the Namespace.

QUESTION 51
Which corresponding object is automatically created in the embedded Registry Service when a new Namespace is created in the Supervisor Cluster?

Pod

Project

Container

Image

QUESTION 52
Which value must be increased or decreased to horizontally scale a Tanzu Kubernetes cluster?

Namespaces

etcd instance

Worker node count

ReplicaSets

Scale a Cluster Horizontally With the Tanzu CLI
To horizontally scale a Tanzu Kubernetes cluster, use the tanzu cluster scale command. You change the number of control plane nodes by specifying the –controlplane-machine-count option. You change the number of worker nodes by specifying the –worker-machine-count option.

QUESTION 53
Which statement accurately describes the Primary Workload Network?

It carries traffic between load balancer and vCenter.

It carries traffic between load balancer and Supervisory control plane.

It is created by developers as part of TKG cluster deployment.

It carries traffic between Supervisory control plane and vCenter.

QUESTION 54
How do Tanzu Kubemetes clusters communicate with Storage Policy Based Management to request PersistentVolumes?

Through a proxy VM

Directly with vCenter Server and the underlying ESXi hosts

Through the Supervisor Cluster

Directly with the vCenter Server

Explanation
The Cloud Native Storage for vSphere with Tanzu workflow is as follows:
1. A developer deploys a pod using the kubectl CLI.
2. The vSphere with Tanzu Cloud Native Storage-Container Storage Interface (CNS-CSI) reads this request from the control plane API server.
3. CNS-CSI informs the vCenter Server CNS of the need for a disk with storage class Gold.
4. CNS interfaces with SPBM for a suitable datastore that satisfies the Gold storage class (storage policy).
5. SPBM decides on a suitable datastore and interfaces with DRS for a suitable ESXi host.
6. Hostd on the ESXi host creates a First Class Disk (VMDK) on the datastore.
7. Spherelet on the ESXi host takes the created VMDK.
8. Spherelet mounts the VMDK to the vSphere Pod.
9. Spherelet reports the mount as a successful event to the control plane API server.

QUESTION 55
A user needs to identify the namespaces that may be accessed.
Which command willprovide the desired output?

kubect1 get storageclasses

kubect1 config use-context

kubect1 config get-contexts

kubect1 get contexts

QUESTION 56
Which two container network interfaces (CNIs) are supported with Tanzu Kubernetes clusters created by the Tanzu Kubernetes Grid Service? (Choose two )

NSX-T

Weave Net

Flannel

Antrea

Calico

Explanation
https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-A7756D67-0B95-447D-A A Tanzu Kubernetes cluster provisioned by the Tanzu Kubernetes Grid Service supports two CNI options:
Antrea (default) and Calico. Both are open-source software that provide networking for cluster pods, services, and ingress.
Tanzu Kubernetes clusters provisioned by the Tanzu Kubernetes Grid Service support the following Container Network Interface (CNI) options:
* Antrea
* Calico

QUESTION 57
How are updates applied to Tanzu Kubernetes clusters?

The cluster is shutdown, Update Manager applies patches to VMs, and the cluster is restarted.

Worker nodes are shutdown while Controllers are patched and restarted after the update.

New nodes are incrementally added with new Kubernetes versions so as a new node is added, an older node is removed.

A new cluster is completely configured and runs in parallel to the primary cluster prior to switchover.

QUESTION 58
On which network are TKG clusters deployed in vSphere with Tanzu when using the vSphere networking stack?

Workload

Backend

Edge

Frontend

Explanation
The Workload Network, such as TKGS-VLAN1000, is where the Tanzu Kubernetes clusters run.
A workload network is a network construct that is used by supervisor control plane VMs and vSphere namespaces:
* The workload network is supported by a vSphere Distributed Switch port group.
* An IP range is defined to allocate an IP address for VMs attached to the workload network.
* A primary workload network must be selected.
* The supervisor control plane VMs attach to the primary workload networks port group.
A workload network can be used by multiple namespaces. A namespace can be assigned only one workload network.

QUESTION 59
Which open-source project extends the Docker registry source code to provide an enterprise-class registry server?

Namespace

Manifest

Harbor

Github

VMware Harbor Registry
VMware Harbor Registry is an enterprise-class registry server that stores and distributes container images. Harbor allows you to store and manage images for use with VMware Tanzu Kubernetes Grid Integrated Edition (TKGI).
Overview
Harbor extends the open source Docker Distribution by adding the functionalities usually required by an enterprise, such as security, identity, and management. As an enterprise private registry, Harbor offers enhanced performance and security. Deploying a registry alongside the TKGI environment improves image management efficiency.

QUESTION 60
Which container network interface (CNI) is supported with Tanzu Kubernetes clusters created by the Tanzu Kubernetes Grid Service? (Choose two )

NSX-T

WeaveNet

Antrea

Cillium

QUESTION 61
Where is a storage policy applied to enable Persistent Volumes?

Namespace

Datastore

Virtual Machine

Cluster

The vSphere administrator defines and assigns VM storage policies to a namespace:
* VM storage policies are translated into Kubernetes storage classes.
* Developers can access all assigned VM storage policies in the form of storage classes.
* Developers cannot manage storage classes.
Developers can list the available storage classes in their namespace by running the kubectl describe ns <namespace-name> command.

QUESTION 62
Where are the virtual machine images stored that are used to deploy Tanzu Kubernetes clusters?

Content Library

Supervisor Cluster

Harbor Image Registry

Namespace

The vSphere administrator configures a Subscribed Content Library on the Supervisor Cluster. The virtual machine image that is used for the Tanzu Kubernetes cluster nodes is pulled from this library. A Subscribed Content Library originates from a Published Content Library. After the subscription is created, the system synchronizes it with the published library. To create the Tanzu Kubernetes cluster nodes, VMware publishes a Photon OS OVA library to which you subscribe. After the subscriber is synchronized with the publisher, you associate the content library with the Supervisor Cluster.

QUESTION 63
An organization is preparing to deploy vSphere with Tanzu and will be using the vSphere Networking stack.
How should the administrator allocate management network IP addresses for the Kubernetes Control Plane within the Supervisor Cluster?

Five IP addresses are required, one for each of the Control Plane VMs. one for the floating IP address of the Control Plane VM, and one spare for performing rolling cluster upgrades

Four IP addresses are required, one for each of the Control Plane VMs and one spare for performing rolling cluster upgrades

Three IP addresses are required, one for each of the Control Plane VMs

Six IP addresses are required, one for each of the Control Plane VMs, one for the floating IP address of the Control Plane VM. one for performing rolling cluster upgrades and one for the image Registry VM.

Static IPs for Kubernetes control plane VMs
Block of 5A block of 5 consecutive static IP addresses to be assigned to the Kubernetes control plane VMs in the Supervisor Cluster.

QUESTION 64
The virtualization team supports many development teams on a Supervisor cluster. For a specific development team, they would like to limit persistent volumes that can be created on Tanzu Kubernetes clusters to only an NFS based storage array.
Which action should be taken to accomplish this goal?

Use kubectl to create a storage class in the Supervisor cluster.

Set a resource quota limiting the number of PVCs for that development team.

Add a storage policy to that development team’s Supervisor Namespace containing only the NFS datastore

Disconnect non-NFS datastores from the ESXi hosts that make up the Supervisor cluster.

The storage policy would become a storage class in Kubernetes.

QUESTION 65
How is information found about all Kubernetes Persistent Volumes in a vSphere environment?

Navigating to the Cloud Native Storage view in vCenter Server

Using: kubectl get persistentvolumes

Accessing the FCD folder on a Datastore

Using: esxcli storage cloud native get

Explanation

This is the textbook answer, I know kubectl does give you some information.

QUESTION 66
On which network are TKG clusters deployed in vSphere with Tanzu when using the vSphere networking stack?

Workload

Backend

Edge

Frontend

QUESTION 67
An administrator is tasked with horizontally scaling an existing Tanzu Kubernetes cluster from 6 to 4 nodes.
Which action does the administrator need to complete to ensure the cluster scales successfully when updating the YAML definition?

Decrease the number of control plane nodes to 4.

Decrease the number of worker nodes to 4.

Update the Virtual Machine Class Type.

Update the Kubernetes version to the latest supported version.

QUESTION 68
The application development team is pushing a Kubernetes application into production. I consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?

Yes, by using kubect1 to create a Network Policy that only allows pods on the same network segment to talk to each other.

Yes. by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database

Yes, by using kubect1 to create a policy that disables pod to pod communication in the Namespace

No, Kubernetes Network Policy does not support this action.

If you want to control traffic flow at the IP address or port level (OSI layer 3 or 4), then you might consider using Kubernetes NetworkPolicies for particular applications in your cluster. NetworkPolicies are an application-centric construct which allow you to specify how a pod is allowed to communicate with various network “entities” (we use the word “entity” here to avoid overloading the more common terms such as “endpoints” and “services”, which have specific Kubernetes connotations) over the network. NetworkPolicies apply to a connection with a pod on one or both ends, and are not relevant to other connections.

QUESTION 69
What is the correct process to store images in a project on the Registry Service?

Use the kubect1 push command

Use the docker push command

Use the vSphere Client to upload the image the content library

Use the vSphere Client to upload the image to the Registry Service

Explanation
https://docs.docker.com/docker-hub/repos/
Graphical user interface, text, application Description automatically generated

* Registry Service: Developers can store and manage Docker and OCI images using Harbor. Harbor is an open-source container image registry that secures images with role-based access control.
Procedure
* Login to Harbor Registry with the vSphere Docker Credential Helper.
* docker-credential-vsphere login <container-registry-IP> –user [email protected] Note:While providing –user username is acceptable for login, you should use the UserPrincipalName (UPN) syntax ( –user [email protected]) to login and use docker push commands.
* Tag the image that you want to push to the project in Harbor Registry with same name as the namespace, where you want to use it:
* docker tag <image-name>[:TAG] <container-registry-IP>/<project-name>/<image-name>[:TAG] For example:
* docker tag hello-world:latest 10.179.145.77/tkgs-cluster-ns/hello-world:latest
* docker images
* REPOSITORY TAG IMAGE ID CREATED SIZE
* 10.179.145.77/tkgs-cluster-ns/hello-world latest bf756fb1ae65 10 months ago 13.3kB
* hello-world latest bf756fb1ae65 10 months ago 13.3kB
* To push an image to a project in Harbor, run the following command:Syntax:
* docker push <container-registry-IP>/<namespace-name>/<image_name>
For example:
* docker push 10.179.145.77/tkgs-cluster-ns/hello-world:latest
Expected result.
* The push refers to repository [10.179.145.77/tkgs-cluster-ns/hello-world]
* 9c27e219663c: Pushed
* latest: digest: sha256:90659bf80b44ce6be8234e6ff90a1ac34acbeb826903b02cfa0da11c82cbc042 size: 525

QUESTION 70
How do Tanzu Kubemetes clusters communicate with Storage Policy Based Management to request PersistentVolumes?

Through a proxy VM

Directly with vCenter Server and the underlying ESXi hosts

Through the Supervisor Cluster

Directlywith the vCenter Server

QUESTION 71
How can the vSphere administrator generate a certificate signing request for the Supervisor Cluster API endpoint certificate?

Use kubectl to generate a certificate signing request for the Supervisor Cluster API endpoint certificate.

Use the certificate-manager CLI utility to generate a certificate signing request for the Supervisor Cluster API endpoint certificate.

Use the vSphere Client to generate a certificate signing request for the NSX Load Balancer certificate.

Use the vSphere Client to generate a certificate signing request for the Workload platform MTG certificate.

Loading …

Latest 5V0-23.20 Pass Guaranteed Exam Dumps Certification Sample Questions: https://www.dumpstests.com/5V0-23.20-latest-test-dumps.html

#5V0-23.20 exam questions and answers 5V0-23.20 exam simulator free 5V0-23.20 reliable exam guide materials 5V0-23.20 reliable test papers 5V0-23.20 test simulator online new 5V0-23.20 test questions pdf

previous post Free HP2-I47 Sample Questions and 100% Cover Real Exam Questions (Updated 32 Questions) [Q14-Q30]

next post SAP Certified Application Associate Certified Official Practice Test C-ARCIG-2302 – Jan-2024 [Q10-Q26]

[Full-Version] 2024 New DumpsTests 5V0-23.20 PDF Recently Updated Questions [Q49-Q71]

No Responses

Leave a Reply Cancel reply

Related Certifications

5V0-23.20 Practice Tests

Recent Posts

Recent Comments

Categories