NO.16 An administrator is maintaining several Kubernetes clusters deployed through a Supervisor Namespace in a vSphere Kubernetes Service environment. One of the microservices, a containerized API gateway, has started failing intermittently after a recent configuration update. Initial investigation shows that the pod is entering a CrashLoopBackOff state. The administrator needs to collect detailed runtime information directly from the pod, including both the standard output (STDOUT) and standard error (STDERR) streams, to analyze the application ‘ s behavior before the crash. Which command produces the required output?

NO.17 A VI Administrator attempts to upgrade the Supervisor Cluster but the option to upgrade is grayed out or unavailable in the vSphere Client, even though a new version is known to be available.
Which of the following are valid reasons for this state? (Select all that apply.)

NO.18 What is the purpose of a ReplicaSet in the VMware vSphere Kubernetes Service (VKS)?

NO.19 The vSphere Admin creates a vSphere Namespace harbor-project and grants the DevOps Engineer edit permissions. The DevOps Engineer deploys the Harbor service in thisnamespace with the command: kubectl apply -f harbor-svc.yml The Harbor service deploys successfully, but the database data harbor database 0 pods does not come into a Running state.
Click the two locations where the administrator should verify the Access Modes forthis pod ‘ s PerslstentVolumeClaim (PVC). (Choose two.)

NO.20 A VI Administrator needs to configure a new vSphere Namespace called dev-team-a to ensure it uses a specific storage profile for persistent volumes.
Review the following configuration view:
Namespace: dev-team-a
Status: Active
Description: Development Team A Environment
[Resource Limits]
CPU: Unlimited
Memory: Unlimited
Storage: [Add Storage Policy…]
Which action must the administrator take to allow Kubernetes workloads in this namespace to provision persistent volumes using the gold-storage policy?

NO.21 An administrator had deployed a Supervisor cluster on vSphere in a multi-zone-enabled environment and now wants to create a zonal vSphere Namespace so that workloads can be scheduled across zones.
Drag and drop the six actions into the correct order from Configuration Option list on the left and place them Into the Configuration Sequence on the right.
(Choose six.)

NO.22 An administrator is tasked with enabling a Supervisor cluster in VMware Cloud Foundation (VCF).
Arrange the steps below In the correct order to complete the process of enabling a Supervisor In the environment.

NO.23 A Security Architect is designing a Disconnected (Air-Gapped) vSphere with Tanzu environment for a defense contractor. The environment has NO internet access.
Requirements:
1. Developers must be able to provision TKG clusters.
2. Developers must be able to install standard packages (Contour, Prometheus).
3. All images must be scanned and hosted internally.
Which architectural components and configuration steps are strictly required to support this design?
(Select all that apply.)

NO.24 A Platform Engineer is designing a multi-zone Supervisor architecture to support a high-availability requirement for a critical financial application. The design involves three vSphere Zones: Zone-A, Zone- B, and Zone-C.
The engineer needs to create a vSphere Namespace fin-app-ns that can tolerate the failure of any single zone.
Review the following proposed configuration snippet for the Namespace creation:
# Proposed Namespace Configuration Logic
Name: fin-app-ns
Placement:
Zones:
– Zone-A
– Zone-B
Storage Policies:
– gold-storage-policy (assigned to all zones)
Why is this proposed configuration insufficient to meet the “tolerate failure of any single zone” requirement for the Supervisor Control Plane and the workloads within this namespace? (Choose 2.)

NO.25 Which two types of Kubernetes member objects can be used when creating groups to collect and manage objects for service-level networking/security policies (for example, in a service mesh or Kubernetes-aware policy model)? (Choose two.)

NO.26 A cloud operations team is managing multiple Supervisor Clusters across two regions. Each region hosts its own vSphere Kubernetes clusters, integrated through a federated service mesh to enable consistent service connectivity and policy enforcement across environments.
The application team wants to expose a multi-tier microservice named “GovApp”, which includes front-end, API, and database services distributed between the two regions. Uniform traffic routing, identity, and security policies are also needed for these workloads regardless of the cluster or region in which they are deployed.
To meet these requirements, the architects decide to create a Global Namespace that spans both Supervisor Clusters.
Which two statements describe the requirements for a Global Namespace in a vSphere Kubernetes Service Mesh deployment? (Choose two.)

NO.27 A VI Administrator is managing the disk space consumed by the TKR Content Library. Several old versions of Kubernetes (e.g., v1.18, v1.19) are no longer needed.
The administrator deletes the specific OVA files for these versions from the Content Library using the vSphere Client.
However, when developers run kubectl get tkr, the deleted versions are still listed (though with COMPATIBLE: False or Ready: False).
What additional step is required to fully remove these versions from the Kubernetes view? (Choose 2.)

NO.28 What statement describes the vSphere Supervisor in VMware Cloud Foundation (VCF)?

NO.29 A Platform Engineer is designing an auto-scaling strategy for a cluster hosting a machine learning workload. The workload creates transient “Job” pods that require significant GPU resources.
Requirements:
1. The cluster usually runs with 2 worker nodes.
2. When a ML job starts, it might request 10+ pods, each needing a full GPU.
3. The cluster must scale up to satisfy these requests and scale down to 0 or 2 when idle to save costs.
4. There is a limited number of GPU-capable hosts in the vSphere cluster.
Which design considerations are critical for the correct functioning of the Cluster Autoscaler in this scenario? (Choose 2.)

NO.30 Which type of storage is used by VMware vSphere Kubernetes Service (VKS) pods to store non-persistent data?

NO.31 An administrator must assign a storage policy to a VMware vSphere Kubernetes Service (VKS) Cluster.
Which step satisfies the requirement?

NO.32 How would an administrator obtain the kubectl config file in the VMware vSphere Kubernetes Service (VKS)?

NO.33 An administrator is upgrading to VKS 3.4 and encounters the following error during cluster creation using workload, yami:

How should the administrator resolve this issue to successfully complete the upgrade ” ?

NO.34 An administrator is deploying vSphere Kubernetes Service (VKS) to support containerized workloads across multiple regions. Each region hosts a dedicated Workload Domain with Supervisor instances deployed on vSphere Distributed Switch (VDS) networking. The organization’s security policy requires that pod-to-pod and pod-to-service communications be fully observable and controllable at the Kubernetes layer, without introducing additional licensing or overlay complexity.
When deploying a Supervisor, which CNI should the administrator select as the default supported option?

NO.35 An administrator is tasked to install Istio service mesh for the vSphere Kubernetes Service (VKS). What command installs Istio?

NO.36 In the context of vSphere with Tanzu, what is a Supervisor Service (formerly known as a vSphere Pod Service or Embedded Service)?

NO.37 An administrator upgrades a VMware Cloud Foundation (VCF) Supervisor and the upgrade fails. Order the steps the administrator should take to determine the cause of the failure.

NO.38 A Platform Engineer needs to configure a vSphere Namespace to allow a specific Active Directory group, [email protected], to have full administrative access to the Kubernetes namespace, including the ability to create and delete TKG clusters. The solution must follow the principle of least privilege within vSphere.
Which configuration steps in the vSphere Client will achieve this? (Select all that apply.)

NO.39 A Platform Engineer needs to provide a custom Virtual Machine Class to the Data Science team.
They require a VM with exactly 16 vCPUs and 64 GB of RAM for a specific model training workload. The default classes do not match these specifications.
Which sequence of steps allows the engineer to make this specific configuration available to the team’s namespace? (Choose 2.)