Month End Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dumps65

VMware 3V0-21.23 Dumps

Page: 1 / 9
Total 92 questions

VMware vSphere 8.x Advanced Design Questions and Answers

Question 1

An architect is working on the cluster layout design for a new vSphere solution. The resource requirements for the first cluster state that memory demand can experience spikes of up to 20% over the documented average demand during peak business hours and the cluster must be able to handle these spikes without contention.

Which design quality is being referenced?

Options:

A.

Availability

B.

Performance

C.

Recoverability

D.

Manageability

Question 2

An architect is updating the design for a vSphere environment.

During a workshop focused on security, the following has been identified:

It has been determined that any configuration of ESXi hosts can only be completed via VMware vCenter

The Direct Console User Interface (DCUI) service must be disabled on ESXi hosts

The SSH service must be disabled on ESXi hosts

Based on the information from the workshop, which element does the architect need to include in the design?

Options:

A.

Strict Lockdown Mode

B.

Normal Lockdown Mode

C.

Normal Lockdown Mode with a defined Exception User list

D.

Strict Lockdown Mode with a defined Exception User list

Question 3

A company has a requirement that all production applications must have a maximum tolerable downtime (MTD) of one hour per month.

Which statement would be included in the conceptual design to support this requirement?

Options:

A.

Production applications will run in a dedicated Tier 2 cluster.

B.

Server hardware has been allocated for the production applications.

C.

vSphere Fault Tolerance (FT) will not be enabled for the production applications.

D.

vSphere HA Host Failure Response will be set to Restart VMs.

Question 4

An architect is working on the design documentation for a new vSphere solution. The architect has completed a conceptual model based on the following requirement:

REQ001 – The solution must use shared storage

What could the architect include in the logical design to meet this requirement?

Options:

A.

The use of an NFS mount point, including the IP address of the NFS server it is hosted on

B.

The use of an all flash vSAN datastore

C.

The use of an HCI solution for a datastore

D.

The use of File Based Storage, including the list of permissions applied to the share

Question 5

An architect is responsible for the lifecycle management design for a brownfield vSphere-based solution.

The following information has been provided during initial meetings around the new solution:

Existing heterogeneous server hardware will be used to provide the hosting platform.

The available hardware is:

- 10 servers that contain 2 x 20-Core Intel Xeon processors and 512 GB RAM from Vendor A

- 10 servers that contain 2 x 24-Core Intel Xeon processors and 768 GB RAM from Vendor A

- 20 servers that contain 2 x 16-Core AMD EPYC processors and 512 GB RAM from Vendor B

- 10 servers that contain 1 x 24-Core AMD EPYC processors and 256 GB RAM from Vendor B

All of the hardware is currently listed on the VMware Hardware Compatibility List (HCL).

All existing server hardware has 36 months vendor support remaining.

The requirements from the customer are:

REQ001 - The solution must support the hosting of 5,000 workloads spread across two physical sites.

REQ002 - The solution should minimize the number of clusters.

REQ003 - The solution must ensure that there is no impact to service when completing upgrades.

Given the resource requirements needed for the solution, the architect has calculated that all of the existing servers will be required to provide sufficient resources for the new environment. The Intel-based (Vendor A) servers will be deployed to the primary site and both the Intel-based and AMD-based servers (Vendor B) will be deployed to the secondary site.

Which assumption should the architect make to support the lifecycle management of vSphere 8?

Options:

A.

The different processor architectures across both sites will remediate against a shared vSphere Lifecycle Manager baseline.

B.

The different processor architectures will be located in the same cluster to support vSphere Lifecycle Manager image-based remediation.

C.

The different processor architecture within a single site will remediate against a single vSphere Lifecycle Manager image.

D.

The different processor architectures across both sites will remediate against a single vSphere Lifecycle Manager image.

Question 6

An architect is designing a new vSphere solution. The customer has stated that the solution will be used to host different types of applications, some of which have special considerations. The customer has provided the following information in relation to the special considerations:

The applications are sensitive to the time it takes for CPUs to be accessible to process instructions

The applications send and receive large amounts of data across the network

The applications are sensitive to the time it takes for the data to be sent and received at the destination

What could the architect include in the design for these considerations?

Options:

A.

Use vSphere Distributed Resource Scheduler (DRS) with affinity rules to keep the virtual machines on the same ESXi hosts

B.

Use vSphere Distributed Services Engine with Network I/O Control on the distributed switch

C.

Use vSphere Distributed Services Engine with Data Processing Units (DPUs) in the ESXi host hardware

D.

Use vSphere Distributed Resource Scheduler (DRS) with SmartNICs in the ESXi host hardware

Question 7

Following a review of security requirements, an architect has confirmed the following requirements:

REQ001- A clustered firewall solution must be placed at the perimeter of the hosting platform, and all ingress and egress network traffic will route via this device.

REQ002- A distributed firewall solution must secure traffic for all virtualized workloads.

REQ003- All virtualized workload, hypervisor, firewall and any management component system events must be monitored by security administrators.

REQ004- The hosting platforms security information and event management (SIEM) system must be scalable to 20,000 events per second.

REQ005- The hosting platforms storage must be configured with data-at-rest encryption.

REQ006- The hosting platform limits access to authorized users.

Which three requirements would be classified as technical (formerly non-functional) requirements? (Choose three.)

Options:

A.

A clustered firewall solution must be placed at the perimeter of the hosting platform, and all ingress and egress network traffic will route via this device.

B.

A distributed firewall solution must secure traffic for all virtualized workloads.

C.

The hosting platforms security information and event management (SIEM) system must be scalable to 20,000 events per second.

D.

The hosting platforms storage must be configured with data-at-rest encryption.

E.

The hosting platform limits access to authorized users.

F.

All virtualized workload, hypervisor, firewall and any management component system events must be monitored by security administrators.

Question 8

An architect is conducting interviews to gather requirements for a new vSphere-based private cloud solution.

The following information has been provided by the customer:

The customer, after 10 years within an outsourced managed service contract, has decided to bring application hosting back in-house but lacks the VMware skills to support this.

The customer currently has 5,000 workloads under contract and managed by their partner.

The customer would like to keep IT infrastructure costs at a minimum.

The customer would like to ensure that the solution supports the company's green IT agenda by reducing their carbon footprint.

Which statement is classified as a business factor that would impact the design?

Options:

A.

The customer would like to keep IT infrastructure costs at a minimum.

B.

The customer, after 10 years within an outsourced managed service contract, has decided to bring application hosting back in-house but lacks the VMware skills to support this.

C.

The customer would like to ensure that the solution supports the company's green IT agenda by reducing their carbon footprint.

D.

The customer currently has 5,000 workloads under contract and managed by their partner.

Question 9

An architect is designing a new workload domain in an existing VMware Cloud Foundation environment. The customer requirement is to physically separate the vSAN network traffic from other management network flows.

Which design decision should the architect make to meet this requirement?

Options:

A.

Deploy the new workload domain using a vSAN stretched cluster.

B.

Deploy the new workload domain using multiple physical adapters.

C.

Deploy the new workload domain using SDDC Manager.

D.

Deploy the new workload domain using API.

Question 10

An architect is creating a design for a new vSphere solution to meet the following business requirement:

REQ001 - Reduce operational expenditure

Which design decision could the architect include in the logical design to satisfy this requirement?

Options:

A.

Use vSphere Standard licenses on all clusters.

B.

Use heterogeneous hardware for the hosts in all clusters.

C.

Use vSphere Lifecycle Manager on all clusters.

D.

Use an N + 1 design to define the required capacity on all clusters.

Question 11

An architect will be updating an existing vSphere data center design.

The following information has been provided:

The new design must carry over existing VLANs for workloads.

The networking for storage must not share the data path with workload traffic.

The new design must be able to add additional VLANS.

The new design must reduce management overhead.

The new replacement servers have two 100 GB network cards.

Which design will meet the requirements for existing workload networks and allow scaling of additional networks?

Options:

A.

One vSphere standard switch (VSS) configurationWorkload and storage traffic on separate uplinks

B.

One vSphere standard switch (VSS) configurationWorkload and storage traffic on separate uplinks

C.

Two vSphere distributed switches (VDS)Each VDS uses one uplink as active and the other uplink as passiveExisting and new workload traffic on one VDS and storage traffic on the other VDS

D.

One vSphere distributed switch (VDS) configurationThe VDS uses aggregated uplinksWorkload and storage traffic on the aggregated uplinks

Question 12

Refer to the exhibit.

as

An architect is assigned a new project to design a VMware hybrid cloud solution.

The project is following a proven design methodology following the V-Model of systems engineering and verification. The selected methodology follows these phases: Assess, Design, Deploy and Validate.

Which activity would be conducted during the Design phase?

Options:

A.

The architect conducts a series of group interviews with stakeholders

B.

The architect helps stakeholders learn the mechanics of the solution

C.

The architect resolves configuration issues and addresses concerns

D.

The architect defines the scope of the project

Question 13

An architect is designing the virtual networking components of a vSphere-based solution that will provide an environment for the development of a new latency sensitive stock trading application.

The following information was identified within the initial meeting with the customer:

The customer has vCenter Standard and vSphere Standard licenses left over from a previous project.

The customer's CFO has approved budget for additional purchases, if required.

The following requirements were also identified during the meeting:

The solution must support 500 development workloads concurrently running in the secondary site.

The solution must support the ability to complete all vSphere Operational Management centrally.

The solution must ensure business-critical applications are not impacted by vSphere system-level operations.

Given the requirements, the architect has decided on a single 20-node cluster for development.

Which three additional design decisions should the architect make to meet these requirements? (Choose three.)

Options:

A.

The solution will configure Traffic Shaping policies to restrict network bandwidth on ingress and egress.

B.

The solution will deploy VMware vSphere Enterprise Plus on all hosts within the cluster.

C.

The solution will deploy VMware vSphere Standard on all hosts within the cluster.

D.

The solution will deploy a single VMware Standard Switch that will be configured identically on each host.

E.

The solution will deploy a single vSphere Distributed Switch with each host connected to it.

F.

The solution will configure Network I/O control to ensure that system-level bandwidth does not impact workload network traffic.

Question 14

An architect is designing a new vSphere-based solution for a customer.

During a requirements gathering workshop, the following information is provided:

0The solution must have a primary and secondary (isolated) environment

The solution must support orchestration to address application dependencies

The isolated environment must be able to scale on demand in case of a DR scenario

The solution is managed through a single interface

Which solution should the architect include in this design?

Options:

A.

Site Recovery Manager with dedicated hardware

B.

Disaster Recovery with VMware Cloud on AWS

C.

vSAN stretched cluster

D.

A dedicated fault domain

Question 15

An architect is reviewing the security and compliance requirements for a new application that will be hosted on a vSphere 8 environment.

The following information has been noted about the new application:

The application stores and processes confidential data

The supporting virtual infrastructure is shared with other departments

No other application stores or processes confidential data

The application virtual machines must be able to run on any ESXi host in the cluster

The storage layer is a iSCSI attached SAN

Data at Rest Encryption is in place for each presented LUN validated to FIPS 140-2

No budget is available for additional infrastructure components or software

Application data must not be accessible outside of the application's virtual machines

The architect has been tasked with providing a secure virtual machine design to host the application.

Which three design elements must the architect include to meet the requirements? (Choose three.)

Options:

A.

Virtual Machine Encryption

B.

The vSphere Native Key Provider

C.

A new encrypted iSCSI LUN

D.

External Key Management Service (KMS) provider

E.

A new local VMFS volume

F.

VMware vSAN

Question 16

An architect is tasked with designing a new vSphere environment for a customer. The new environment must:

Be standardized, repeatable, and consistent

Contain the same common heterogenous components that run from commercial hardware across an on-premises, edge, and broad hybrid cloud eco-system

Provide intrinsic and intelligent security in every component from the hypervisor to the storage, networking, and management layers

Which VMware solution will satisfy these requirements?

Options:

A.

VMware Cloud Foundation

B.

VMware Validated Design

C.

VMware

D.

VMware Validated Solutions

Question 17

An architect is documenting the logical design for a new vSphere solution. The following requirements have been provided to the architect by the customer for the design:

The solution must be deployed in two locations: DC1 and DC2

The solution must limit the impact radius of accidental changes by administrators

The solution must meet a recovery time objective (RTO) of four (4) hours and recovery point objective (RPO) of 24 hours

The solution must allow workloads to run in both DC1 and DC2 during normal operations

The solution must allow workloads to be moved bi-directionally between DC1 and DC2

The solution must use hyper-converged infrastructure for the virtual machine storage

The customer has also confirmed that the network connection between DC1 and DC2 has a 10 Gbps bandwidth with a maximum round trip latency of 4 ms.

The architect recommends the following design decision:

Use separate clusters in DC1 and DC2 to form a multi-region design

What should the architect include as justification for this design decision?

Options:

A.

Sufficient capacity must be deployed in both DC1 and DC2 to support all running virtual machines.

B.

Using separate clusters mitigates the risk of an accidental change at the cluster level in DC1 from impacting DC2.

C.

Using separate clusters is the only configuration available that supports the RTO of four (4) hours.

D.

The network connection between DC1 and DC2 does not support the use of stretched clusters.

Question 18

An architect is discussing recoverability considerations for a new vSphere solution as part of a requirements workshop. The customer has informed the architect that the company policy is to not perform backups of ESXi hosts due to their selected backup software not supporting the ESXi software. In the past, when hosts have experienced failures, the hosts have been reinstalled from the VMware provided ESXi image and manually configured by an administrator. The customer asks the architect to design a solution that will reduce the manual effort required by the administrator to return a failed host to service.

What could the architect include in the design to meet the customer's request?

Options:

A.

Use the ESXi command line to perform backups of the ESXi hosts to a central location

B.

Configure a host profile per cluster

C.

Create a custom iso image of ESXi and update it each time VMware releases a new update

D.

Configure ESXi hosts with RAID1 boot volumes

Question 19

An architect is designing an upgrade to an existing vSphere environment. The project has been created to provide options for enabling growth and scalability, without increasing the data center footprint. The CIO has also tasked the architect with updating data protection operations, from the current agent-based backup approach.

During a workshop with key stakeholders, the following information has been noted:

The existing vSphere environment uses an external fibre attached storage array for the vSphere environment

The storage array is connected via 4 Gbps fibre cards host bus adaptors (HBAs)

The storage array does not support VMware Storage APIs—Data Protection (VADP)

The architecture must support scaling virtual machines CPU, memory, and storage

The environment will grow by an additional 20% virtual machines year over year

Only two additional racks of equipment can be provisioned

Which design choice will meet these requirements?

Options:

A.

The architecture will extend the Fibre Channel external storage array, scaling out storage and compute by buying additional storage or server capacity as required.

B.

The architecture will replace the Fibre Channel storage array with an updated model, scaling out storage capacity as required.

C.

The architecture will be based on vSAN Ready Nodes, scaling out storage and compute by buying additional hyper-converged servers as required.

D.

The architecture will be based on stretched vSAN Ready Nodes, scaling out storage and compute by buying additional hyper-converged servers as required.

Question 20

An architect is discussing the design of a vSphere solution with a customer. The following requirements have been defined for the solution:

The solution must provide data encryption at rest

The solution must provide the ability to reduce the amount of storage consumed from duplicate data

The solution must minimize the amount of resources consumed by the encryption process.

The architect has made a design decision that VM Encryption will be used to meet these requirements.

Which two implications should the architect include in the design in relation to this design decision? (Choose two.)

Options:

A.

Encryption is a CPU-intensive feature. Resource Pools should be used to assign shares to the encrypted VMs.

B.

When data is encrypted by the storage device, the effectiveness of de-duplication on the storage will be unaffected.

C.

Encryption is a CPU-intensive feature. The ESXi hosts should use the AES-NI BIOS setting to improve the performance of encryption and reduce CPU utilization.

D.

Encryption is a memory-intensive feature. The ESXi hosts should use the AES-NI BIOS setting to improve the performance of encryption and reduce memory utilization.

E.

When data is encrypted by the ESXi host, the effectiveness of de-duplication on the storage may be reduced.

Question 21

An architect is documenting the design for a new multi-site vSphere solution. The customer has informed the architect that the workloads hosted on the solution are managed by application teams who must perform a number of steps to return the application to service following a failover of the workloads to the secondary site. These steps are defined as the Work Recovery Time (WRT). The customer has provided the architect with the following information about the workloads, including the recovery time objective (RTO) and recovery point objective (RPO):

Critical workloads have a WRT of 12 hours

Production workloads have a WRT of 24 hours

Development workloads have a WRT of 24 hours

All workloads have an RPO of 4 hours

Critical workloads have an RTO of 1 hour

Production workloads have an RTO of 12 hours

Development workloads have an RTO of 24 hours

The customer has also confirmed that production and development workloads are managed by the same team and the disaster recovery solution will not begin the recovery of the development workloads until all critical and production workloads have been recovered at the secondary site.

Which three statements would the architect document as the maximum tolerable downtime (MTD) for workloads within the design? (Choose three.)

Options:

A.

Critical Workloads: 12 hours

B.

Development Workloads: 24 hours

C.

Production Workloads: 36 hours

D.

Critical Workloads: 13 hours

E.

Development Workloads: 60 hours

F.

Production Workloads: 24 hours

Question 22

An architect is tasked with designing a solution to monitor the operational state of a VMware Cloud Foundation environment through ad-hoc reporting and custom dashboards, alerts, and notifications.

Using VMware Validated Solutions, which validated solution can the architect leverage to meet this requirement?

Options:

A.

Private Cloud Automation for VMware Cloud Foundation

B.

Intelligent Operations Management for VMware Cloud Foundation

C.

VMware Validated Design for VMware Cloud Foundation

D.

Heath Reporting and Monitoring for VMware Cloud Foundation

Question 23

An architect is tasked with helping a customer develop a design that meets the following requirements:

Must have no single point of failure

Must include thorough standard operating procedure documentation

Must use VMXNET3 virtual network interface card

Must have 99.9% uptime Service Level Agreement

Must use the latest version of VMware vSphere

Which two are considered constraints? (Choose two.)

Options:

A.

Must use the latest version of VMware

B.

Must have no single point of failure

C.

Must use VMXNET3 virtual network interface card

D.

Must include thorough standard operating procedure documentation

E.

Must have 99.9% uptime Service Level Aqreement

Question 24

An architect is responsible for designing a new vSphere-based solution to meet the following customer requirements:

The solution must support component-level redundancy.

The solution must support physical segregation of management and workload traffic.

Any traffic from virtual infrastructure-level operations (such as migrations of workloads between hosts within a cluster) must not impact any workload.

The solution should react to any substantial impact of physical network traffic to ensure workload traffic is unaffected.

In response to this requirement, the architect makes the following logical design decisions:

The solution will separate vSphere management traffic from all other network traffic.

The solution will ensure that all replication and vMotion traffic will be separated from all other traffic.

The solution will separate workload traffic from all other network traffic.

The customer has a hardware standard for physical VMware ESXi host servers that includes 6 x 10 GbE network.

Which three physical design decisions should the architect make to meet the requirements? (Choose three.)

Options:

A.

The solution will configure the Route Based on Source MAC Hash load balancing method.

B.

The solution will deploy three (3) vSphere standard switches each with a single uplink port group.

C.

The solution will configure the six (6) available network connections into load balanced pairs.

D.

The solution will deploy a vSphere distributed switch with three (3) uplink port groups.

E.

The solution will configure the six (6) available network connections into a single load balanced group.

F.

The solution will configure the Route Based on Physical NIC Load load balancing method.

Question 25

An architect is tasked with creating a design for a vSphere-based solution.

Reviewing requirements with the security team, the architect makes the following design decision:

ESXi hosts in the environment will enable shell sandbox for SSH connections and the local ESXi shell

What is an implication of the design decision to enable shell sandboxing?

Options:

A.

Only certain commands can be executed in the sandboxed shell

B.

Only administrative accounts can access the sandbox shell

C.

All commands executed in the sandbox shell will be logged

D.

The vSphere 8 hosts will operate in strict lockdown mode

Question 26

An architect is creating the design for a vSphere platform that will be used as the target for a migration from multiple legacy vSphere platforms that are being decommissioned. The customer has provided the following information:

Each legacy platform has its own set of virtual machine templates stored in OVF format.

All of the templates need to be migrated to the new platform.

After migration, the templates should be centralized into a single location.

The templates must be accessible to all clusters in the new platform vCenter instance.

Any new templates added to the central location must be automatically available to all clusters.

Administrators must be able to deploy new virtual machines directly from the template instances.

The customer also confirmed that after the migrations are complete, the new platform will be the only vSphere solution available.

Which design choice should the architect evaluate in the logical design for the storage and management of virtual machine templates?

Options:

A.

Use a dedicated datastore on each vSphere cluster

B.

Use a shared datastore on each vSphere cluster

C.

Use a subscribed content library

D.

Use a local content library

Question 27

An architect is tasked with designing a new workload domain in an existing VMware Cloud Foundation environment. The customer requirement is to physically separate the NSX host overlay network traffic from other management networks flows.

Which design decision should the architect make to meet this requirement?

Options:

A.

Deploy the new workload domain with NSX Federation.

B.

Deploy the new workload domain using multiple physical adapters.

C.

Deploy the new workload domain using SDDC Manager.

D.

Deploy the new workload domain using API.

Page: 1 / 9
Total 92 questions