2V0-71.23 practice test

1. Question 1 · 1

   What two steps are required to visualize API connectivity and enable API protection in VMware Tanzu Service Mesh? (Choose two.)

   Choose all answers that apply.

   • Activate API Discovery for the Global Namespace
   • Create API Security Policy for the Global Namespace
   • Enable Threat Detection Policy for the Global Namespace
   • Set a Distributed Firewall policy for the Global Namespace
   • Create an Autoscaling policy for API for the Global Namespace

2. Question 2 · 1

   The Supervisor Service in Tanzu Kubernetes Grid exposes three layers of controllers to manage the lifecycle of a Tanzu Kubernetes Grid cluster. Which layer of controllers is correct?

   Choose one answer.

   • Virtual Machine Service, Tanzu Kubernetes Grid and Cluster API
   • Authentication webhook, Container Storage Support, Cloud Provider Implementation
   • Aria integration Service, Tanzu Cluster API and Tanzu Container Network Controller
   • VMware Tanzu Mission Control Connection agent, Cluster API and Kubernetes Connection Agent

3. Question 3 · 1

   Which two Kubernetes Service types are fulfilled natively by Kubernetes without requiring external integrations? (Choose two.)

   Choose all answers that apply.

   • ExternalName
   • Ingress
   • LoadBalancer
   • NodePort
   • ClusterIP

4. Question 4 · 1

   Which two methods can be used to install Fluent Bit on a VMware Tanzu Kubernetes Grid cluster? (Choose two.)

   Choose all answers that apply.

   • Install Fluent Bit using Tanzu CLI login plugin
   • Install Fluent Bit using VMware Tanzu Kubernetes Grid Installer Interface
   • Install Fluent Bit from VMware Tanzu Mission Control
   • Install Fluent Bit from VMware vSphere Client
   • Install Fluent Bit using Tanzu CLI package plugin

5. Question 5 · 1

   Which two resources can External DNS create records for? (Choose two.)

   Choose all answers that apply.

   • Virtual machines
   • Kubernetes pods
   • Kubernetes services
   • Kubernetes nodes
   • Contour HTTPProxy

6. Question 6 · 1

   Which set of tools can be used to attach a Kubernetes cluster to VMware Tanzu Mission Control?

   Choose one answer.

   • Tanzu CLI and VMware vSphere Web UI
   • Tanzu CLI and VMware Tanzu Mission Control Web UI
   • kubectl and VMware vSphere Web UI
   • kubectl and VMware Tanzu Mission Control Web UI

7. Question 7 · 1

   A Tanzu Mission Control administrator would like to enforce the following container controls: Only allows container images that match the specified names or tags. Ensure that the container image is not tampered with. Which type of policy can be used?

   Choose one answer.

   • Access
   • Security
   • Image Security
   • Image Registry
   • Network

8. Question 8 · 1

   An administrator was requested to create a pod with two interfaces to separate the application and management traffic for security reasons. Which two packages have to be installed in VMware Tanzu Kubernetes Grid cluster to satisfy the requirement? (Choose two.)

   Choose all answers that apply.

   • multus
   • external-dns
   • cert-manager
   • grafana
   • contour

9. Question 9 · 1

   Which kinds of objects does the Kubernetes RBAC API declare?

   Choose one answer.

   • CloudPolicyObject
   • Role, ClusterRole, RoleBinding and ClusterRoleBinding
   • Container type and Container object
   • ClusterObject and ClusterNode

10. Question 10 · 1

    An administrator set the following value: ENABLE_AUDIT_LOGGING=true during a cluster deployment. What was the purpose of this setting?

    Choose one answer.

    • Log metadata about all requests made to the Kubernetes API server.
    • Enable log redirection to external logging server by Fluent Bit.
    • Run scripts that collect Kubernetes API output, node logs, and node command-line output.
    • Activate the kubectl describe command for CustomResourceDefinitions (CRDs) introduced by Cluster API.

11. Question 11 · 1

    Which statement describes how VMware Tanzu Mission Control and VMware Aria Operations for Applications integrate?

    Choose one answer.

    • An administrator can enable VMware Aria Operations for Applications using the integrations tab in VMware Tanzu Mission Control.
    • VMware Aria Operations for Applications is enabled by default in VMware Tanzu Mission Control. No integration is required.
    • An administrator can login to VMware Aria Operations for Applications and enable VMware Tanzu Mission Control integration from the administration menu.
    • An administrator can download and install the VMware Aria Operations Observations agent from Tanzu CLI.

12. Question 12 · 1

    What is the purpose of a service mesh?

    Choose one answer.

    • Provides dynamic application load balancing and autoscaling across multiple clusters and multiple sites.
    • Provides a centralized, global routing table to simplify and optimize traffic management.
    • Provides service discovery across multiple clusters.
    • Provides an infrastructure layer that makes communication between applications possible, structured, and observable.

13. Question 13 · 1

    Which statement is true about Tanzu package CLI plugin?

    Choose one answer.

    • It cannot be used to add additional package repositories apart from tanzu-standard.
    • It can be used to manage packages in public repositories.
    • It is intended only for CLI-managed packages.
    • It can be used to install auto-managed packages.

14. Question 14 · 1

    Which L7 ingress mode leverages the integration between NSX Advanced Load Balancer and Antrea?

    Choose one answer.

    • L7 ingress in NodePort mode
    • L7 ingress in ClusterIP mode
    • L7 ingress in NodePortLocal mode
    • L7 ingress in NodeIntegration mode

15. Question 15 · 1

    What is the role of Prometheus in a VMware Tanzu Kubernetes Grid cluster?

    Choose one answer.

    • Provide the functionality of a lightweight log processor and forwarder that allows you to collect data and logs from different sources.
    • Collect metrics from target clusters at specified intervals, evaluate rule expressions, display the results, and trigger alerts if certain conditions arise.
    • Inject time-series database (TSDB) data into high-quality graphs and visualizations.
    • Extend the open-source Docker distribution by adding the functionalities usually required by users such as security and identity control and management.

Paid access to all 57 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.