2024年最新のに更新された検証済みの5V0-23.20問題集と解答で合格保証もしくは全額返金 [Q27-Q47]

2024年最新のに更新された検証済みの5V0-23.20問題集と解答で合格保証もしくは全額返金

5V0-23.20のPDF問題とテストエンジンには126問があります

質問 # 27
A vSphere administrator is required to provide a developer with read/write permissions on a vSphere Namespace.

A. It enables vSphere High Availability and Distributed Resource Scheduler.
B. It is a Kubernetes cluster deployed by developers using a YAML specification file.
C. It exposes a Kubernetes API for use by DevOps teams.
D. It aggregates hosts across vSphere clusters to form a Kubernetes cluster on vSphere.

正解：D

質問 # 28
Which command displays the storage limits that have been set together with the amount of resources consumed?

A. kubect1 list resourcequotas
B. kubect1 describe resourcequotas
C. kubect1 get resourcequotas
D. kubect1 config get-resourcequotas limits

正解：A

質問 # 29
The application development team plans to test a few CPU intensive applications. The virtualization team is concerned about these applications impacting other teams.
How should the team manage this problem?

A. Add a CPU limit to the vSphere Namespace for the development team.
B. Set a network policy to limit network bandwidth within the vSphere Namespace.
C. Set a CPU reservation on the Namespace Resource Pool in vCenter.
D. Add a CPU limit to the Namespace Resource Pool in vCenter.

正解：D

質問 # 30
Which command should be used by a developer to log in to the vSphere with Tanzu Supervisor Cluster?

A. kubectl vsphere login --server=<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <vcENTER-SSO-USER>
B. kubectl login --server=<KUBERNETES-CONTROL-PLANE-lP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>
C. vmwarectl login --server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>
D. vmwarectl vsphere login --server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>

正解：A

質問 # 31
An administrator is tasked with increasing the amount of CPU and memory in an existing Tanzu Kubernetes cluster.
Which change must the administrator complete to ensure the cluster scales successfully when updating the YAML definition?

A. Update the Virtual Machine Class Type
B. Manually update the CPU and memory of the nodes
C. Increase the number of control plane nodes
D. Increase the number of worker nodes

正解：A

質問 # 32
How are updates applied to Tanzu Kubernetes clusters?

A. The cluster is shutdown, Update Manager applies patches to VMs, and the cluster is restarted.
B. Worker nodes are shutdown while Controllers are patched and restarted after the update.
C. A new cluster is completely configured and runs in parallel to the primary cluster prior to switchover.
D. New nodes are incrementally added with new Kubernetes versions so as a new node is added, an older node is removed.

正解：D

質問 # 33
Which two considerations needs to be made when deciding on a virtual machine class type during the process of creating a Tanzu Kubernetes cluster? (Choose two )

A. The amount of CPU. memory, and storage the virtual machine should have
B. The configuration parameters which need to be edited in the cluster
C. Whether the resources provided by the virtual machine class type should be reserved on the host
D. The storage classes which need to be made available to the cluster
E. Connectivity between the Tanzu Kubernetes cluster and the Subscribed Content Library

正解：A、C

解説：

A virtual machine class is a request for resource reservations for processing power on the virtual machine (VM), including CPU and memory (RAM). For example, the VM class type named "guaranteed-large" reserves 4 CPU and 16 GB RAM. See Default Virtual Machine Classes for a list of default VM classes and their corresponding CPU and RAM reservations.
The VM disk size is set by the OVA template, not the VM class definition. For Tanzu Kubernetes releases, the disk size is 16GB. See About Tanzu Kubernetes release Distributions.
There are two reservation types for VM classes: guaranteed and best effort. The guaranteed class fully reserves its configured resources. This means that for a given cluster the spec.policies.resources.requests matches the spec.hardware settings. The best effort class allows resources to be overcommitted. For production workloads it is recommended that you use the guaranteed VM class type.

質問 # 34
At which three levels of the vSphere Client is information about Kubernetes Persistent Volumes found? (Choose three.)

A. vCenter
B. Network
C. Datastore
D. Cluster
E. Virtual Machine
F. Resource Pool

正解：A、C、D

質問 # 35
How can a vSphere administrator replace the Supervisor Cluster API endpoint certificate?

A. Use kubectl to replace the Supervisor Cluster API endpoint certificate.
B. Use the certificate-manager CLI utility to replace the Supervisor Cluster API endpoint certificate.
C. Use the vSphere Client to replace the NSX Load Balancer certificate.
D. Use the vSphere Client to replace the Workload platform MTG certificate.

正解：D

解説：

As a vSphere administrator, you can replace the certificate for the virtual IP address (VIP) to securely connect to the Supervisor Cluster API endpoint with a certificate signed by a CA that your hosts already trust. The certificate authenticates the Kubernetes control plane to DevOps engineers, both during login and subsequent interactions with the Supervisor Cluster.
Prerequisites
Verify that you have access to a CA that can sign CSRs. For DevOps engineers, the CA must be installed on their system as a trusted root.
Procedure
In the vSphere Client, navigate to the Supervisor Cluster.
Click Configure then under Namespaces select Certificates.
In the Workload platform MTG pane, select Actions > Generate CSR.
Provide the details for the certificate.
Once the CSR is generated, click Copy.
Sign the certificate with a CA.
From the Workload platform MTG pane, select Actions > Replace Certificate.
Upload the signed certificate file and click Replace Certificate.
Validate the certificate on the IP address of the Kubernetes control plane.

質問 # 36
The virtualization team supports many development teams on a Supervisor cluster. For a specific development team, they would like to limit persistent volumes that can be created on Tanzu Kubernetes clusters to only an NFS based storage array.
Which action should be taken to accomplish this goal?

A. Use kubectl to create a storage class in the Supervisor cluster.
B. Set a resource quota limiting the number of PVCs for that development team.
C. Disconnect non-NFS datastores from the ESXi hosts that make up the Supervisor cluster.
D. Add a storage policy to that development team's Supervisor Namespace containing only the NFS datastore

正解：B

質問 # 37
Which statement provides the most accurate description for the Sphere let?

A. The Spherelet provides high availability for the Kubernetes cluster.
B. The Spherelet includes a paravirtualized Linux kernel that works together with the hypervisor.
C. The Spherelets exist as VMs and are load balanced, each with their own IP address.
D. The Spherelet allows the ESXi host to become part of the Kubernetes cluster.

正解：C

質問 # 38
Which two networks are used to attach Supervisor Cluster control plane VMs when using the vSphere networking stack? (Choose two.)

A. Non-primary workload
B. Frontend
C. Management
D. vMotion
E. Primary workload

正解：A、C

質問 # 39
Which kubectl command should be used to change the active vSphere namespace to namespace-01?

A. kubectl config change-context namespace-01
B. kubectl config use-context namespace-01
C. kubectl get ns namespace-01
D. kubectl describe ns namespace-01

正解：B

解説：
Explanation
A context element in a kubeconfig file is used to group access parameters under a convenient name. Each context has three parameters: cluster, namespace, and user. By default, the kubectl command-line tool uses parameters from the current context to communicate with the cluster.
To choose the current context:
* kubectl config use-context ctx001

質問 # 40
A Namespace contains multiple Tanzu Kubernetes clusters.
How is access granted to a single Tanzu Kubernetes cluster?

A. Use the vSphere Client to grant access to the Namespace.
B. Create a custom Role and RoleBinding, and then apply to the Namespace using kubectl commands.
C. Create a custom Role and RoleBinding, and then apply to the Tanzu Kubernetes cluster using kubectl commands.
D. Use the vSphere Client to grant access to the Tanzu Kubernetes cluster.

正解：C

質問 # 41
Which open-source project extends the Docker registry source code to provide an enterprise-class registry server?

A. Github
B. Manifest
C. Namespace
D. Harbor

正解：D

解説：
Explanation
VMware Harbor Registry
VMware Harbor Registry is an enterprise-class registry server that stores and distributes container images.
Harbor allows you to store and manage images for use with VMware Tanzu Kubernetes Grid Integrated Edition (TKGI).
Overview
Harbor extends the open source Docker Distribution by adding the functionalities usually required by an enterprise, such as security, identity, and management. As an enterprise private registry, Harbor offers enhanced performance and security. Deploying a registry alongside the TKGI environment improves image management efficiency.

質問 # 42
A developer is trying to deploy a Kubernetes Application into a namespace within a Supervisor Cluster The deployment must utilize the latest assets that have been pushed into the Registry Service.
What should the developer add to the YAML file to ensure that the deployment is successful?

A. image: /<namespace>/<image name>:latest
B. template: /<namespace name>/<image name>:latest
C. image: <image registry url>/<namespace name>/<image name>:latest
D. template: <image registry url>/<namespace name>/<image name> : latest

正解：B

質問 # 43
How are quotas and permissions guaranteed by vSphere with Tanzu for Tanzu Kubernetes (TKG) clusters that are deployed within a namespace?

A. By routing quota and permission API calls to vCenter Server via the Supervisor Cluster
B. By ensuring each TKG cluster has a quotas and permissions system built into it natively which enforces all requests
C. By having the Supervisor Cluster poll the TKG cluster periodically to ensure adherence to quotas and permissions
D. By deploying an external authentication solution

正解：A

質問 # 44
Which two items must be provided before a vSphere with Tanzu Supervisor Namespace can be created? (Choose two.)

A. DNS-compliant Name
B. Resource Limits
C. vSphere with Tanzu Enabled Cluster
D. Storage Policy
E. Permissions

正解：C、D

解説：
Prerequisites
Configure a cluster with vSphere with Tanzu.
Create users or groups for all DevOps engineers who will access the namespace.
Create storage policies for persistent storage. Storage policies can define different types and classes of storage, for example, gold, silver, and bronze.
Create VM classes and content libraries for stand-alone VMs.
Create a content library for Tanzu Kubernetes releases for use with Tanzu Kubernetes clusters. See Creating and Managing Content Libraries for Tanzu Kubernetes releases.
Required privileges:
Namespaces.Modify cluster-wide configuration
Namespaces.Modify namespace configuration

質問 # 45
Which step in vSphere with Tanzu enablement using the vSphere Distributed Switch process is done prior to using the Workload Management Enablement Wizard?

A. Define the Management network interfaces for the Supervisor Cluster
B. Define the Primary workload network P range
C. Deploy the load balancer
D. Choose the Kubernetes content library that should be used in the Supervisor Cluster

正解：A

解説：
Explanation
As a vSphere administrator, you can enable the Workload Management platform on a vSphere cluster by configuring the vSphere networking stack to provide connectivity to workloads. A Supervisor Cluster that is configured with vSphere networking supports the deployment of Tanzu Kubernetes clusters created by using the Tanzu Kubernetes Grid Service. It does not support running vSphere Pod or using the embedded Harbor Registry.

質問 # 46
A company needs to provide global visibility and consistent policy management across multiple Tanzu Kubernetes Clusters, namespaces, and clouds Which VMvare solution will meet these requirements'?

A. vCenter Server
B. Tanzu Kubernetes Grid Service
C. Tanzu Mission Control
D. vSphere with Tanzu Supervisor Cluster

正解：C

解説：
Explanation
Graphical user interface Description automatically generated

VMware Tanzu Mission Control is a centralized management platform for consistently operating and securing your Kubernetes infrastructure and modern applications across multiple teams and clouds.