5V0-3221 sample questions

Question 1

During a security audit, an administrator is tasked with replacing the default self-signed SSL certificates for the HTTP and console proxy services on a multi-cell VMware Cloud Director deployment. The administrator has obtained a multi-domain wildcard certificate (*.provider.com) from a trusted Certificate Authority. What is the correct tool and process to implement this certificate across all cells?

Accepted Answer

Copy the certificate files to each cell, then run the `cell-management-tool certificates` command locally on each cell to import the same certificate and key.

Answer

Log in to each cell's VAMI (Port 5480) and upload the certificate and private key via the UI.

Answer

On the primary cell, use the `cell-management-tool certificates` command with the `--install` flag, and the change will automatically replicate to other cells.

Answer

Place the certificate on the shared NFS transfer mount and run a configuration script from the Service Provider Admin Portal to apply it to all cells.

Question 2

A tenant using the VMware Cloud Director Tenant Portal reports that they are unable to create any new VMs in their Organization VDC, receiving a 'quota exceeded' error. The administrator checks the Org VDC quotas and sees that both CPU and Memory have ample capacity remaining. However, the tenant has several powered-off VMs that were used for a temporary project. What is the most likely cause of this issue?

Accepted Answer

The number of VMs quota for the Organization VDC has been reached.

Answer

The Org VDC is configured with a Flex allocation model which is preventing new VM creation.

Answer

The Storage Lease for powered-off VMs has expired, marking the VMs for deletion but not yet removing them.

Answer

The Runtime Lease for the powered-off VMs is still active, reserving their resources.

Question 3

True or False: When configuring an External Network in VMware Cloud Director backed by an NSX-T Data Center, a Tier-1 Logical Router can be used as the backing gateway.

Accepted Answer

False

Answer

True

Question 4

A cloud provider architect is designing a solution for a customer who needs to connect their on-premises data center to their VMware Cloud Director Organization VDC. The customer requires a secure, encrypted connection and wants to extend their local L2 network segment into the cloud to facilitate a seamless VM migration without re-IPing. Which VMware Cloud Director and NSX feature should be configured?

Accepted Answer

A Layer 2 VPN (L2 VPN) service on the tenant's Edge Gateway.

Answer

An IPsec VPN tunnel configured on the tenant's Edge Gateway.

Answer

A direct network connection using a dedicated VLAN.

Answer

Cross-VDC networking within a Data Center Group.

Question 5

A service provider hosts two separate VMware Cloud Director instances, one in New York and one in London, to serve regional customers. They want to create a master catalog of curated OS templates in New York and make them available to tenants in the London instance. The connection between the sites has reliable but high-latency bandwidth. Which configuration should be used to achieve this with optimal performance for the London tenants?

Accepted Answer

Publish the catalog in the New York instance and create a Subscribed Catalog in the London instance that syncs from the published feed.

Answer

Configure the New York catalog as a Shared Catalog and grant access to the London Organization.

Answer

Manually export the OVF templates from New York and import them into a new catalog in London.

Answer

Link both Cloud Director instances to the same vCenter Content Library and share the content directly.

Question 6

An administrator is performing a planned upgrade of a three-cell VMware Cloud Director cluster from version 10.3 to 10.4. The primary cell has been successfully upgraded, but the upgrade fails on the second cell. The administrator has taken snapshots of all appliances and the database prior to starting. What is the immediate, recommended action?

Accepted Answer

Roll back only the failed cell to its pre-upgrade snapshot, analyze the upgrade logs on that cell, and then re-attempt its upgrade.

Answer

Immediately revert the primary cell and the database to their pre-upgrade snapshots to restore service.

Answer

Forcefully remove the failed cell from the server group using the cell-management-tool and proceed with upgrading the third cell.

Answer

Restart the `vmware-vcd` service on all cells to attempt to re-synchronize the cluster state.

Question 7

A cloud provider is configuring a new Provider VDC. The underlying vSphere cluster has access to two datastores: one high-performance 'All-Flash-DS' and one standard 'Hybrid-DS'. The provider's goal is to ensure that by default, all VMs deployed in this Provider VDC land on the 'Hybrid-DS', but to allow tenants to explicitly choose the 'All-Flash-DS' if they purchase a premium offering. How should the storage policies be configured for the Provider VDC?

Accepted Answer

Add both storage policies to the Provider VDC and set the 'Hybrid-DS' policy as the default.

Answer

Add both storage policies to the Provider VDC and set the 'All-Flash-DS' policy as the default.

Answer

Add only the 'Hybrid-DS' storage policy to the Provider VDC.

Answer

Create a datastore cluster containing both datastores and set DRS rules to prefer the Hybrid-DS.

Question 8

Which three of the following are valid Allocation Models for an Organization VDC? (Select THREE)

Accepted Answer

Pay-As-You-Go

Accepted Answer

Reservation Pool

Accepted Answer

Flex

Accepted Answer

Allocation Pool

Answer

On-Demand

Answer

Burstable

Question 9

A system administrator needs to enable tenants to manage their own east-west firewall rules for VMs within the same Organization VDC network. Which feature must be configured first at the provider level to expose this functionality in the Tenant Portal?

```mermaid
graph LR
Provider -- enables --> A[Feature]
A -- is_configured_on --> B(Org VDC)
subgraph Tenant_Portal
B -- allows_management_of --> C{Distributed Firewall Rules}
end
```

Accepted Answer

Create a Data Center Group, add the target Organization VDC to it, and activate the Distributed Firewall service on the group.

Answer

Enable firewall services on the Organization VDC's Edge Gateway.

Answer

Import an NSX-T security group into the Organization VDC.

Answer

Assign the 'NSX-T Firewall Administrator' global role to the Tenant Administrator.

Question 10

A new VMware Cloud Director appliance has been deployed. The administrator needs to configure the location for the shared NFS mount point used for transferring and storing files, such as OVF templates. In which location should this configuration be performed?

Accepted Answer

In the VMware Cloud Director Appliance Management UI (VAMI) on port 5480.

Answer

In the Service Provider Admin Portal under 'General Settings'.

Answer

By editing the `/opt/vmware/vcloud-director/etc/global.properties` file via SSH.

Answer

Using the `cell-management-tool` configure command.

Free 5V0-3221 sample questions

True or False: When configuring an External Network in VMware Cloud Director backed by an NSX-T Data Center, a Tier-1 Logical Router can be used as the backing gateway.

Which three of the following are valid Allocation Models for an Organization VDC? (Select THREE)

A new VMware Cloud Director appliance has been deployed. The administrator needs to configure the location for the shared NFS mount point used for transferring and storing files, such as OVF templates. In which location should this configuration be performed?

10 more free samples are waiting