5V0-23.20練習試験テスト最新問題2023年10月 [Q14-Q31]

Share

5V0-23.20練習試験テスト最新問題2023年10月

5V0-23.20試験を一発合格保証問題集！

質問 # 14
An administrator needs to get a list of all Tanzu Kubernetes clusters running in the current namespace.
Which command will provide the desired output?

  • A. kubectl get tanzukubernetescluster
  • B. kubectl get clusters
  • C. kubectl get vmservice
  • D. kubectl get virtualnetwork

正解：B


質問 # 15
An organization is preparing to deploy vSphere with Tanzu and will be using the vSphere Networking stack.
How should the administrator allocate management network IP addresses for the Kubernetes Control Plane within the Supervisor Cluster?

  • A. Six IP addresses are required, one for each of the Control Plane VMs, one for the floating IP address of the Control Plane VM. one for performing rolling cluster upgrades and one for the image Registry VM.
  • B. Four f3 addresses are required, one for each of the Control Plane VMs and one spare for performing rolling cluster upgrades
  • C. Five IP addresses are required, one for each of the Control Plane VMs. one for the floating IP address of the Control Plane VM, and one spare for performing rolling cluster upgrades
  • D. Three P addresses are required, one for each of the Control Plane VMs

正解：C


質問 # 16
Which object is deployed on the workload network when vSphere with Tanzu is configured with vSphere network stack?

  • A. NSX Edge
  • B. Registry Service
  • C. Tanzu Kubernetes clusters
  • D. Windows Virtual Machines

正解：C


質問 # 17
The application development team is pushing a Kubernetes application into production. I consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?

  • A. No, Kubernetes Network Policy does not support this action.
  • B. Yes, by using kubect1 to create a Network Policy that only allows pods on the same network segment to talk to each other.
  • C. Yes. by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database
  • D. Yes, by using kubect1 to create a policy that disables pod to pod communication in the Namespace

正解：B

解説：
Explanation
If you want to control traffic flow at the IP address or port level (OSI layer 3 or 4), then you might consider using Kubernetes NetworkPolicies for particular applications in your cluster. NetworkPolicies are an application-centric construct which allow you to specify how a pod is allowed to communicate with various network "entities" (we use the word "entity" here to avoid overloading the more common terms such as
"endpoints" and "services", which have specific Kubernetes connotations) over the network. NetworkPolicies apply to a connection with a pod on one or both ends, and are not relevant to other connections.


質問 # 18
The Gold storage policy has been assigned to the Web namespace, and the DevOps engineer wants to place a persistent volume for the Web application in the Gold storage class.
How should this goal be accomplished?

  • A. Assign the persistent volume to the Gold storage class
  • B. Configure tag-based placement for the persistent volume
  • C. Indicate the Gold storage class in the persistent volume specification
  • D. Indicate the Gold storage class in the persistent volume claim specification

正解：D


質問 # 19
The application development team is pushing a Kubernetes application into production. I consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?

  • A. No, Kubernetes Network Policy does not support this action.
  • B. Yes, by using kubect1 to create a Network Policy that only allows pods on the same network segment to talk to each other.
  • C. Yes. by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database
  • D. Yes, by using kubect1 to create a policy that disables pod to pod communication in the Namespace

正解：B


質問 # 20
Which three roles does the Spherelet perform? (Choose three )

  • A. Manages node configuration
  • B. Communicates with Kubernetes API
  • C. Provides a key-value store for pod configuration
  • D. Starts vSphere pods
  • E. Determines placement of vSphere pods
  • F. Provisions Tanzu Kubernetes clusters

正解：A、B、D

解説：
Explanation

Spherelet is a kubelet that is ported natively to ESXi. It allows the ESXi host to become part of a Kubernetes cluster. Spherelet performs the following functions:
* Communicates with the control plane VMs
* Manages node configuration
* Starts vSphere Pods
* Monitors vSphere Pods


質問 # 21
Which two functions are provided by the NSX Container Rug-in (NCP)? (Choose two.)

  • A. Configures Overlay Transport Zones
  • B. Implements Kubernetes Ingress with an NSX-T layer 7 load balancer
  • C. Integrates with container-based PaaS such as Docker
  • D. Implements Kubernetes Ingress with an NSX-T layer 4 load balancer
  • E. Creates an NSX-T logical topology for a Kubernetes cluster and a separate logical network for each Kubernetes namespace

正解：B、E


質問 # 22
Which command provides valid syntax to deploy a vSphere Pod?

  • A. kubectl apply -c deployment.yaml
  • B. kubectl apply -t deployment.yaml
  • C. docker run containerName
  • D. tkg apply -c containerName

正解：A


質問 # 23
Which step is necessary in order to allocate storage to a newly created namespace?

  • A. Assign permissions to users
  • B. Assign a VM Storage Policy
  • C. Define resource limits
  • D. Add a content library

正解：B


質問 # 24
Which command would be used to deploy a Tanzu Kubernetes cluster?

  • A. kubectl create -f CLUSTER-NAME.yaml
  • B. kubectl create cluster -f CLUSTER-NAME.yaml
  • C. kubectl apply -f CLUSTER-NAME.yaml
  • D. kubectl apply cluster CLUSTER-NAME.yaml

正解：C


質問 # 25
Which three elements should be configured by a vSphere administrator after creating vSphere Namespace? (Choose three.)

  • A. Namespace name
  • B. Storage Policy
  • C. Permissions
  • D. Capacity and Usage limits
  • E. NSX Segment
  • F. License

正解：B、C、D

解説：
Creating a Namespace
A vSphere administrator configures permissions and storage before a namespace can be used:
* Assign edit or view permissions to users. Users must be present in a configured single sign-on (SSO) identity source.
* Must assign a VM storage policy to the namespace.
* Can define resource limits (optional).
* Must add a content library to enable the Tanzu Kubernetes Grid Service.


質問 # 26
A developer is trying to deploy a Kubernetes Application by using an image from the embedded Registry Service into an existing Namespace within a Supervisor Cluster.
Which three steps must be completed to ensure the deployment is successful? (Choose three.)

  • A. Include the image: /: in the YAML spec.
  • B. Pull the image into the Registry service with docker pull //:.
  • C. Include the image: //: in the YAML spec.
  • D. Push the image to the Registry service with docker push //:.
  • E. Run kubectl config set-context to switch to the correct namespace.
  • F. Run kubectl config use-context to switch to the correct namespace.

正解：B、C、F


質問 # 27
Which command should be used by a developer to log in to the vSphere with Tanzu Supervisor Cluster?

  • A. vmwarectl login --server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>
  • B. kubectl login --server=<KUBERNETES-CONTROL-PLANE-lP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>
  • C. kubectl vsphere login --server=<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <vcENTER-SSO-USER>
  • D. vmwarectl vsphere login --server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>

正解：C

解説：
Authenticating Using kubectl
In vSphere with Tanzu, authentication is performed using vCenter Single Sign-On. You run the command kubectl vsphere login to authenticate a user through vCenter Single Sign-On to Kubernetes clusters.
kubectl vsphere login --server <kubernetes control plane> -u <username> The --insecure-skip-tls-verify flag is required if the certificate presented by the vSphere with Tanzu control plane is not trusted by the client machine. The control plane is signed by the vCenter Server VMware CA by default. You can replace the control plane certificate with a trusted certificate if needed. Alternatively, install the vCenter Server VMware CA root certificate into your client machine to remove the need for the --insecure-skip-tls-verify flag.


質問 # 28
Which functionality does the Cloud Native Storage (CNS) component take advantage of to support the creation of container volumes?

  • A. Storage Based Policy Management
  • B. VMware Disk Encryption
  • C. Virtual Disk
  • D. First Class Disk

正解：D

解説：
The Cloud Native Storage server resides in vCenter Server:
* Provisions and manages life cycle operations for container volumes
* Creates First Class Disks (FCDs) to support the container volumes
* First Class Disks exist as .vmdk and -flat.vmdk files on a vSphere datastore * Integrates with storage policy based management (SPBM) for the placement of disks A First Class Disk (FCD) is also called an improved virtual disk. It is a named virtual disk that is unassociated with a VM. These disks reside on a VMFS, NFS, or vSAN datastore and support container volumes.
Storage policy based management (SPBM) is a vCenter Server service that supports provisioning of persistent volumes according to specified storage requirements. After provisioning, the service monitors compliance of the volume with the required policy characteristics.


質問 # 29
Where is a storage policy applied to enable Persistent Volumes?

  • A. Namespace
  • B. Datastore
  • C. Virtual Machine
  • D. Cluster

正解：A

解説：
Explanation
The vSphere administrator defines and assigns VM storage policies to a namespace:
* VM storage policies are translated into Kubernetes storage classes.
* Developers can access all assigned VM storage policies in the form of storage classes.
* Developers cannot manage storage classes.
Developers can list the available storage classes in their namespace by running the kubectl describe ns
<namespace-name> command.


質問 # 30
A company needs to provide global visibility and consistent policy management across multiple Tanzu Kubernetes Clusters, namespaces, and clouds Which VMvare solution will meet these requirements'?

  • A. vSphere with Tanzu Supervisor Cluster
  • B. Tanzu Mission Control
  • C. vCenter Server
  • D. Tanzu Kubernetes Grid Service

正解：B

解説：

VMware Tanzu Mission Control is a centralized management platform for consistently operating and securing your Kubernetes infrastructure and modern applications across multiple teams and clouds.


質問 # 31
......


VMware 5V0-23.20 認定試験は、VMware vSphere with Tanzu におけるスキルと専門知識を検証したい IT プロフェッショナル向けに設計されています。この認定試験は、vSphere with Tanzu 環境を展開、管理、トラブルシューティングする能力を試験することを目的としています。この試験は、VMware vSphere、Kubernetes、Tanzu に関する経験を持つ個人を対象としています。

 

VMware Certified Specialist - vSphere with Tanzu 2022無料認定試験材料はGoShikenが提供された126問題：https://www.goshiken.com/VMware/5V0-23.20-mondaishu.html

5V0-23.20問題集完全版問題試験学習ガイド：https://drive.google.com/open?id=1bM4PrdbqRlODt7KTs3DhNAcZ787BqkT_

関するブログ

もっと
5V0-23.20無料問題集