VMware VMware Certifications 2V0-33.22 Questions & Answers

• Question 61:

  A cloud administrator is managing a Google Cloud VMware Engine environment with a single cluster consisting of 28 Hosts. The Administrator and, based on estimates from the application team, requires seven additional hosts. What should the administrator do?

  A. Add seven hosts to the existing cluster.

  B. Provision a new private cloud.

  C. Provision a new cluster.

  D. Nothing; the cluster will scale automatically.

  Correct Answer: C

  https://cloud.google.com/vmware-engine/docs/concepts-vmware-componentsNode Considerations

  You can specify the number of hosts to add or remove to or from their cluster. Private cloud initial setup happens in ~30 minutes.

  Additional hosts can be added in ~15 minutes.

  A three-node cluster is the minimum for production.

  You can have up to 32 hosts per cluster.

  You can have up to 64 hosts per private cloud.

  Reference:

  https://cloud.google.com/vmware-engine/docs/concepts-vmware-components

• Question 62:

  A cloud administrator needs to create a virtual machine that requires layer 2 connectivity to an on-premises workload. Which type of network segment Is required?

  A. Existing

  B. Outbound

  C. Extended

  D. Routed

  Correct Answer: C

  An extended network segment is required for a cloud administrator to create a virtual machine that requires layer 2 connectivity to an on-premises workload. Extended networks allow for the virtual machines to communicate directly with the on-premises workload while remaining isolated from the public cloud. This allows for the virtual machines to access the same services and workloads as the on-premises workloads while still remaining secure.

• Question 63:

  Which logical switching component provides layer 2 forwarding functionality in a VMwareCloud software-defined data center (SDDC).

  A. Segment port

  B. Uplink

  C. N-VDS/VDS

  D. Transport node

  Correct Answer: C

  A VMware Cloud software-defined data center (SDDC) uses a logical switching component called a Network Virtual Distributed Switch (N-VDS) or vSphere Distributed Switch (VDS) to provide layer 2 forwarding functionality [1][2]. A VDS is a network switch that provides centralized network configuration, management, and monitoring. It works with the NSX for vSphere data plane to provide layer 2 forwarding, packet filtering, and traffic monitoring services. A VDS is composed of multiple Segment Ports (which are like individual physical ports on a normal switch), Uplinks, and Transport Nodes. The Segment Ports are used to connect virtual machines to the VDS, while Uplinks are used to connect the VDS to physical networks. Transport Nodes are the physical switches that are associated with the VDS. For more information, see the official VMware documentation here: https://docs.vmware.com/en/VMware-NSX-Data-Center/2.4/nsx_24_sdn_networking/ GUID-A4A6E4A8-FD7C-4B6E-A3D3-6F9B6D0578C2.html.

• Question 64:

  A cloud administrator wants to migrate a virtual machine using VMware vSphere vMotlon from their on-premises data center to their VMware Cloud on AWS software-defined data center (SDDC), using an existing private line to the cloud SDDC.

  Which two requirements must be met before the migration can occur? (Choose two.)

  A. The versions of VMware vSphere need to match between the on-premises data center and the cloud SDDC.

  B. A Layer 2 connection is configured between the on-premises data center and the cloud SDDC.

  C. AWS Direct Connect is configured between the on-premises data center and the cloud SDDC.

  D. IPsec VPN is configured between the on-premises data center and the cloud SDDC.

  E. Cluster-level Enhanced vMotion Compatibility (EVC) is configured in the on-premises data center and the cloud SDDC.

  Correct Answer: CD

  https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws- operations/GUID-1A175E91-2317-4261-A63E-B398D92ECE8D.htmlvMotion Requirements for SDDCs With NSX:Networking speed and latency: Migration

  with vMotion requires sustained minimum bandwidth of 250 Mbps between source and destination vMotion vMkernel interfaces, and a maximum latency of 100 ms round trip between source and destination.

  On-premises vSphere version: Your on-premises vSphere installation must be vSphere 6.7U2 or higher. See VMware Knowledge Base article 56991 for more information.

  On-premises DVS version: 6.0 or higher.

  On-premises NSX version: any

  Note: SDDCs configured with NSX do not support hot vMotion to or from on-premises VXLAN encapsulated networks (NSX for vSphere) or Geneve Datacenter Overlay networks (NSX).

  IPsec VPN: Configure an IPsec VPN for the management gateway. See Configure a VPN Connection Between Your SDDC and On-Premises Data Center in the VMware Cloud on AWS Networking and Security guide. Direct Connect: Direct

  Connect over a private virtual interface between your on-premise data center and your VMware Cloud on AWS SDDC is required for migration with vMotion. See Using AWS Direct Connect with VMware Cloud on AWS. Hybrid Linked Mode:

  Hybrid Linked Mode is required to initiate migration from the vSphere Client. It is not required to initiate migration using the API or PowerCLI. See "Hybrid Linked Mode" in Managing the VMware Cloud on AWS Data Center. L2 VPN: Configure

  a Layer 2 VPN to extend virtual machine networks between your on- premises data center and cloud SDDC. Routed networks are not supported. See VMware Cloud on AWS Networking and Security. VMware Cloud on AWS firewall rules

  Ensure that you have created the necessary firewall rules as described in Required Firewall Rules for vMotion.

  On-premises firewall rules: Ensure that you have created the necessary firewall rules as described in Required Firewall Rules for vMotion.

  Virtual machine hardware and settings: Ensure that these requirements are met for virtual machine hardware.

  Virtual machine hardware version 9 or later is required for migration with vMotion from the on-premises data center to the cloud SDDC. EVC is not supported in the VMware Cloud on AWS SDDC. VMs that are created in the cloud SDDC or

  that have been power-cycled after migration to the cloud SDDC can't be migrated back to the on-premises data centerwith vMotion unless the on-premises EVC baseline is Broadwell. You can relocate these VMs after powering them off, as

  long as their virtual machine hardware version is compatible with the on-premises data center. Migration of VMs with DRS or HA VM overrides is not supported. For more information on VM overrides, see Customize an Individual Virtual

  Machine.

  Important: Source switch configurations (including NIOC, spoofguard, distributed firewall, and Switch Security) and runtime state are not applied at the destination as part of migration in either direction. Before you initiate vMotion, apply the

  source switch configuration to the destination network.

  In order for a virtual machine to be migrated using VMware vSphere vMotion, the versions of VMware vSphere need to match between the on-premises data center and the cloud SDDC, and a Layer 2 connection needs to be configured

  between them. Additionally, cluster-level Enhanced vMotion Compatibility (EVC) must be configured in both the on- premises data center and the cloud SDDC. IPsec VPN and AWS Direct Connect do not need to be configured for the

  migration to occur.

• Question 65:

  Which three types of gateways can be found in VMware cloud on AWS (Choose three?)

  A. Distributed Tier-1

  B. Standard Tier-1

  C. Tire-0

  D. Compute Tier-1

  E. Management Tire-1

  F. Management Tire-0

  Correct Answer: ABD

  The three types of gateways that can be found in VMware Cloud on AWS are Option A: Distributed Tier-1, Option B: Standard Tier-1, and Option D: Compute Tier-1. Distributed Tier-1 gateways are used for secure access between on-premises networks and the VMware Cloud on AWS SDDC network. Standard Tier-1 gateways are used for secure access between the VMware Cloud on AWS SDDC network and the public internet. Compute Tier-1 gateways are used for secure access between the workloads running on the VMware Cloud on AWS SDDC and the public internet. For more information, please refer to the official VMware documentation on VMware Cloud on AWS Gateways:https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws.networking/GUID1F2D1BFC-F5C7-4534-8B49-39F9D08E7F1A.html

• Question 66:

  A customer identifies consumption-based ransomware protection as a primary business requirement. Which VMware solution offers long-term immutable point-in-time recovery options?

  A. VMware vSphere Replication

  B. VMware Site Recovery

  C. VMware Cloud Disaster Recovery

  D. VMware vSphere Data Protection

  Correct Answer: C

  The VMware solution that offers long-term immutable point-in-time recovery options is VMware Cloud Disaster Recovery (CDR). CDR offers continuous data protection and point-in-time recovery options with up to 30 days of retention. It also provides a secure and immutable copy of your data that is stored in the cloud and can be used to recover from ransomware attacks.

• Question 67:

  Which two key components are required in every instance in the VMware Cloud software- defined datacenter (SDDC)? (Choose two.)

  A. VMware vSphere

  B. VMware vRealize Operations

  C. VMware Tanzu Kubernetes Grid

  D. VMware NSX-T

  E. CloudHealth by VMWare

  Correct Answer: AD

  The correct answers are A and D. Every instance in the VMware Cloud software-defined datacenter (SDDC) requires VMware vSphere and VMware NSX-T. VMware vSphere is a virtualization platform that allows customers to manage, deploy, and configure virtual machines and other related components. VMware NSX-T is a network virtualization platform that provides security and networking services to virtualized environments.

• Question 68:

  A cloud administrator is tasked with migrating workloads from an on-premises environment to a VMware Cloud on AWS software-defined datacenter (SDDC) with no downtime while retaining their IP Address. Which connectivity type should be used?

  A. Private policy-based IPsec VPN

  B. Private route-based IPsec VPN

  C. Open VPN

  D. Private Layer 2 VPN

  Correct Answer: D

  Private L2 VPN: To migrate running VMs between SDDCs in different geographical locations.

  You use a private layer 2 (L2) VPN to extend an on-premises network to your cloud SDDC. This extended network is a single subnet with a single broadcast domain. You can use L2 VPNs to migrate VMs to and from your cloud SDDC, for

  disaster recovery, or for dynamic access to cloud computing resources (often called cloud bursting). VM migrations across an L2 VPN support VLAN tagging and GENEVE frame encapsulation when migrating between a cloud SDDC to

  another SDDC. The L2 VPN tunnel extends layer 2 networks across geographic sites. VMs can move across sites (using vSphere vMotion) and keep the same IP addresses using an L2 VPN.

• Question 69:

  As per company policy, all administrator level accounts need to have their password changed on a regular basis. The [email protected] account password is changed by an administrator from the vSphere Client.

  Another administrator is using the credentials in the VMware Cloud console and gets an 'access denied' error.

  What could be the problem?

  A. The password change email confirmation has NOT been approved by the organization owner.

  B. The password should only be changed through the VMware Cloud console.

  C. The new password is NOT synchronized with the password that is displayed for the Default vCenter user account.

  D. The password should be changed by escalation of privileges.

  Correct Answer: C

  The problem could be that the new password is not synchronized with the password that is displayed for the Default vCenter user account. The administrator must make sure that the same password is used in both the vSphere Client and the VMware Cloud console in order for the user to access the account. Changing the password in one place does not automatically change it in the other, so this must be done manually.

• Question 70:

  Which statement most accurately describes the service features of VMware Cloud on Dell EMC? (Select one option)

  A. Dell technicians perform all software maintenance, as well as hardware fixes.

  B. When an onsite response is required to fix a problem related to a host, a Dell technician must arrive on site within 24 hours.

  C. An SDDC includes a minimum of one rack with three hosts. You can add hosts to the rack, up to the maximum supported by the rack.

  D. VMwareSite Recovery is included as part of the initial service offering.

  Correct Answer: C

  The statement that most accurately describes the service features of VMware Cloud on Dell EMC is C. An SDDC includes a minimum of one rack with three hosts. You can add hosts to the rack, up to the maximum supported by the rack. An SDDC consists of a rack with a minimum of three hosts, which can then be expanded up to the maximum supported by the rack. VMware Site Recovery is not included as part of the initial service offering. VMware Cloud on Dell EMC provides a service that enables customers to run their VMware-based workloads on Dell EMC's hardware, in a jointly-engineered and fully- supported environment. The service allows customers to deploy a fully-configured VMware SDDC on Dell EMC VxRail or VxRack SDDC systems, with the option to add more hosts to the rack as needed.