5V0-31.22 Exam Dumps - VMware Certified Specialist - Cloud Foundation 2023 Questions and Answers

 This is because when deploying a stretched cluster in a VMware Cloud Foundation environment, you must ensure that:

• The vSAN network, the host overlay network and the vMotion network are stretched across both availability zones12. These networks enable data replication, communication and migration between hosts in different sites.
• The host overlay network has DHCP enabled to provide IP addresses to hosts1. This simplifies the configuration and management of hosts in different sites.
• Each vSAN stretched cluster has one witness host deployed in a separate location from both availability zones12. The witness host acts as a tie-breaker in case of a site failure or split-brain scenario.

https://docs.vmware.com/en/VMware-Cloud-Foundation/4.5/vcf-admin/GUID-7B4CC729-20BD-4CC9-B855-B38F02F74D40.html

A quote from reference [1] states that, "To add permissions to users or groups from vCenter Single Sign-On identity sources, the Tanzu Kubernetes cluster administrator can use either the vSphere Client or kubectl."

Another quote from reference [1] states that, "By default, a Tanzu Kubernetes cluster includes a set of predefined roles that provides granular permission control for Kubernetes objects. The predefined roles enable cluster groups to be created with specific permissions across the Kubernetes namespace hierarchy. Administrators can also create custom roles to provide more granular permission control that is specific to their organization's requirements."

References: [1] Tanzu Kubernetes Cluster or Supervisor Cluster[1]: Which do I choose? -https://blogs.vmware.com/virtualblocks/2022/06/23/tanzu-kubernetes-cluster-or-supervisor-cluster-which-do-i-choose/

erasure coding vSAN storage policy with the ability to tolerate two host failures requires at least six fault domains (hosts) in a cluster. Therefore, an 8-hosts cluster can meet this requirement for DEV/UAT workloads. Additionally, creating separate workload domains for DEV/UAT and DMZ can provide full management and network isolation between these two zones.

https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.virtualsan.doc/GUID-AD408FA8-5898-4541-9F82-FE72E6CD6227.html

According to Deployment Model for the NSX-T Edge Nodes for a Virtual Infrastructure Workload Domain1, an NSX-T Edge node is an appliance that provides centralized networking services such as load balancing, NAT, VPN, and physical network uplinks. To achieve north/south connectivity for a workload domain from the SDDC Manager user interface, you need to configure two types of uplinks:

• vSphere VDS Uplinks: These are used to connect the NSX-T Edge node to the vSphere Distributed Switch (VDS) that provides network connectivity for all ESXi hosts in the workload domain cluster.
• NSX VDS Uplinks: These are used to connect the NSX-T Edge node to the external networks via physical network interfaces on the ESXi host where it runs.