2V0-71-23 sample questions

Question 1

An administrator is configuring a Supervisor Cluster in a vSphere with Tanzu environment. They need to provide developers with three standardized T-shirt sizes for Kubernetes nodes: small, medium, and large. Which vSphere with Tanzu construct should the administrator create to define these standardized node sizes?

Accepted Answer

VM Class

Answer

Storage Policy

Answer

vSphere Namespace

Answer

Resource Pool

Question 2

A security team wants to enforce a policy in Tanzu Mission Control that prevents any container image with a 'High' or 'Critical' CVE from being deployed to production clusters. They also want to ensure that only images from the company's approved Harbor registry can be used. Which TWO policy types in TMC should be configured to meet these requirements? (Select TWO)

Accepted Answer

Image registry policy

Accepted Answer

Security policy

Answer

Network policy

Answer

Quota policy

Answer

Access policy

Question 3

True or False: When a vSphere with Tanzu Supervisor Cluster is enabled on a vSphere cluster, the ESXi hosts in that cluster become worker nodes that can run native Kubernetes pods scheduled directly by the Supervisor Cluster's control plane.

Accepted Answer

True

Answer

False

Question 4

A platform operator is deploying a new Tanzu Kubernetes Grid (TKG) management cluster to a vSphere environment using the CLI. The deployment fails during the provider resource creation step. Upon reviewing the logs, the operator suspects an issue with the credentials used to connect to vCenter. Which command should the operator use to verify and, if necessary, regenerate the vSphere credentials stored in the local Tanzu configuration?

Accepted Answer

tanzu management-cluster create --ui

Answer

tanzu login --server

Answer

tanzu config set env.VSPHERE_USERNAME

Answer

tanzu management-cluster-pinniped-auth-info get --name

Question 5

A financial services company has deployed Tanzu Service Mesh across their hybrid environment, which includes TKG clusters on-premises and in AWS. They have created a Global Namespace (GNS) for their 'trading-app' to facilitate secure, cross-cluster communication. A new regulation requires that all traffic between the 'market-data' service and the 'order-processing' service within this GNS must be mutually authenticated using mTLS. How should an administrator enforce this requirement?

Accepted Answer

Set an authentication policy within the Global Namespace to enforce STRICT mTLS for all services.

Answer

Configure a Kubernetes NetworkPolicy in each cluster to require TLS.

Answer

Deploy cert-manager to each cluster to issue certificates for the services.

Answer

Create a Public Key Infrastructure (PKI) rule at the Tanzu Service Mesh global level.

Question 6

During the deployment of a TKG cluster on vSphere, the process fails. An operator runs `tanzu cluster get ` and observes that the control plane nodes are stuck in the 'Provisioning' phase. Which underlying technology is responsible for the declarative reconciliation of the cluster's state against the vSphere infrastructure?

Accepted Answer

Cluster API

Answer

Kubeadm

Answer

VM Operator

Answer

Tanzu CLI

Question 7

**Case Study:**

A healthcare organization is modernizing its patient portal application using VMware Tanzu for Kubernetes Operations. They have a vSphere 7.0U3 environment with vSAN as the primary datastore. A Supervisor Cluster has been successfully deployed, and a vSphere Namespace called 'patient-portal-prod' has been created for the development team.

The application consists of several microservices, including a stateful database component that requires persistent storage with high availability. The security team mandates that all application traffic must be routed through a centralized ingress point with TLS termination, and developers must not have permissions to create their own ingress objects.

The operations team needs to ensure they can back up the entire 'patient-portal-prod' namespace, including persistent volumes, to an S3-compatible object store for disaster recovery. They also need to provide developers with a simple way to deploy the application stack without managing complex Kubernetes YAML manifests.

Which combination of Tanzu components and configurations best meets all the stated requirements?

Accepted Answer

Configure a vSphere Storage Policy for vSAN, use Contour as the ingress controller, integrate Velero with TMC for backups, and package the application as a Carvel package in the TMC Catalog.

Answer

Use NFS for persistent storage, configure NSX Advanced Load Balancer for ingress, use vSphere Replication for backups, and provide developers with Helm charts.

Answer

Configure a vSphere Storage Policy, use Antrea for ingress, integrate Velero directly in the cluster without TMC, and use standard Kubernetes YAML manifests.

Answer

Use vSAN Direct for storage, deploy the NGINX Ingress Controller, use VMware Site Recovery Manager for DR, and use Kustomize for application deployments.

Question 8

An SRE is troubleshooting application latency in a Kubernetes cluster that is monitored by Aria Operations for Applications (formerly Tanzu Observability). The SRE needs to identify which specific microservice call in a distributed transaction is causing the slowdown. Which capability of Aria Operations for Applications is essential for this type of analysis?

Accepted Answer

Distributed Tracing

Answer

Log Management

Answer

Metrics-based Alerting

Answer

Kubernetes Events Correlation

Question 9

A platform administrator is configuring a new TKG cluster that will host applications requiring high-performance, low-latency storage. The underlying vSphere environment uses vSAN. To meet the application's performance requirements, the administrator needs to ensure that all PersistentVolumes created for this application use a specific vSAN policy that enables RAID-1 mirroring and a high number of IOPS reservations. What Kubernetes object must the administrator create and configure to make this vSAN policy available for developers to request via PersistentVolumeClaims?

Accepted Answer

A StorageClass

Answer

A PersistentVolume

Answer

A StoragePool

Answer

A VolumeAttachment

Question 10

A company is using NSX Advanced Load Balancer (Avi) with Tanzu Kubernetes Grid. An administrator notices that when a new Service of type LoadBalancer is created, a new virtual service is not being created on the Avi Controller. The administrator has confirmed that the Avi Controller is reachable from the TKG cluster. Which component is responsible for watching the Kubernetes API for new Services and Ingresses and communicating with the Avi Controller to create the necessary virtual services?

```mermaid
graph TD
subgraph TKG Cluster
K8S_API[Kubernetes API Server]
AKO[Avi Kubernetes Operator]
end
subgraph NSX ALB
Controller[Avi Controller]
SE[Service Engines]
end

K8S_API -- Watches for Services/Ingress --> AKO
AKO -- Translates & sends API calls --> Controller
Controller -- Instructs --> SE
```

Accepted Answer

Avi Kubernetes Operator (AKO)

Answer

Contour

Answer

The Service Engine (SE)

Answer

Antrea

Free 2V0-71-23 sample questions

True or False: When a vSphere with Tanzu Supervisor Cluster is enabled on a vSphere cluster, the ESXi hosts in that cluster become worker nodes that can run native Kubernetes pods scheduled directly by the Supervisor Cluster's control plane.

10 more free samples are waiting