VMware 3V0-12.26 시험

Question No : 1

A VCF Platform Administrator is reviewing logs after a failed attempt to power on a deep learning virtual machine equipped with an NVIDIA vGPU.
The VM fails to start, and the administrator observes the following output.
INFO [vpxd-task] Task PowerOnVM_Task started for VM: AI-Training-Node-05
WARN [vpxd-vGPU] Insufficient available vGPU resources on selected host
ERROR [vpxd-task] Failed to power on VM: The host does not have sufficient resources to satisfy the reservation.
INFO [vpxd-drs] DRS cannot find a host to power on or migrate the virtual machine.
Which TWO of the following conditions could cause this specific failure? (Choose 2.)

• A.The virtual machine's configured vGPU profile does not match the physical GPU type installed in the ESXi host.
• B.NSX Distributed Firewall is blocking communication between vCenter Server and NVIDIA License System.
• C.The selected ESXi host's physical GPU memory is already fully allocated to other powered-on virtual machines.
• D.The vSAN datastore backing the virtual machine lacks required free space to accommodate the GPU memory swap file.

답을 확인하기

정답:

Question No : 2

An NSX Network Engineer is troubleshooting a failed HCX Network Extension between a legacy on-premises data center and a VCF instance. The HCX Interconnect tunnel is up, but the Network Extension appliance repeatedly fails to establish its data path.
The engineer reviews the HCX Manager task output:
[HCX-Task-ID: 88492]
Operation: Establish Network Extension
Status: FAILED
Details:
- Control Plane: ESTABLISHED
- Data Plane: DOWN
- IPSec Tunnel State: Phase 1 Complete, Phase 2 Failed
- Encapsulation Check: DROP_MTU_EXCEEDED observed on uplink interface vmnic1
Which TWO actions should the engineer take to resolve the Network Extension data path failure? (Choose 2.)

• A.Adjust the HCX Compute Profile to use a different vSphere Distributed Switch that supports Jumbo Frames.
• B.Disable HCX WAN Optimization, as it interferes with the IPSec Phase 2 key exchange process.
• C.Increase the MTU on the physical underlay network path between the sites to accommodate the HCX encapsulation overhead.
• D.Verify that UDP port 500 and UDP port 4500 are not blocked by the physical firewall between the sites.

답을 확인하기

정답:

Question No : 3

A Security and Compliance Analyst is implementing VMware Live Cyber Recovery. They must ensure that the recovery snapshots stored in the cloud file system cannot be modified or deleted prematurely by a compromised on-premises administrator account.
Review the proposed configuration snippet for the protection group:
[Snapshot_Protection_Policy]
Policy_Name = Tier1_Patient_Data
RPO_Target = 4_Hours
Cloud_Retention = 180_Days
Immutability_Lock = True
Storage_Tier = Standard
Which mechanism provides the architectural guarantee that the Immutability_Lock cannot be bypassed by an attacker who has gained full administrative access to the on-premises vCenter Server?

• A.The on-premises vSAN fault domains automatically mirror the policy attributes, ensuring a local quorum must approve any deletion request.
• B.The NSX Distributed Firewall prevents outbound API calls from the vCenter Server to the Live Recovery Cloud Connector.
• C.The Live Recovery Cloud Connector uses a read-only service account to access the cloud file system, preventing any write or delete operations.
• D.The cloud-based Scale-Out Cloud File System (SCFS) enforces the retention policy independently of the on-premises vSphere permissions.

답을 확인하기

정답:

Question No : 4

A VCF Platform Administrator is troubleshooting the initial deployment of the Live Recovery Cloud Connector within the management domain. The appliance powers on, but registration with the VMware Live Cyber Recovery cloud service fails.
The administrator executes a diagnostic network test from the connector's CLI:
admin@cloud-connector [ ~ ]$ curl -v https://vlr-api.vmware.com/health
* Trying 198.51.100.45:443...
* connect to 198.51.100.45 port 443 failed: Connection timed out
* Failed to connect to vlr-api.vmware.com port 443 after 130544 ms: Timeout
curl: (28) Failed to connect to vlr-api.vmware.com port 443 after 130544 ms: Timeout
Which TWO conditions could cause this specific timeout error during the Cloud Connector registration process? (Choose 2.)

• A.The physical perimeter firewall is dropping outbound TCP port 443 traffic originating from the Cloud Connector's IP address.
• B.The VMware Live Cyber Recovery subscription has expired, causing the cloud API endpoint to return an HTTP 401 Unauthorized error.
• C.An NSX Distributed Firewall rule applied to the management network is explicitly dropping HTTPS traffic destined for the internet.
• D.The DNS server configured on the Cloud Connector appliance cannot resolve the FQDN vlr-api.vmware.com.

답을 확인하기

정답:

Question No : 5

An Enterprise IT Strategist is establishing standardized VM sizing guidelines for a new developer self-service portal running on VCF. The underlying ESXi hosts feature dual-socket 16-core processors (32 physical cores total).
Which TWO of the following developer requests represent significant anti-patterns regarding ESXi host hardware sizing and NUMA alignment? (Choose 2.)

• A.Requesting a "Monster VM" with 30 vCPUs and 24 GB RAM for an application that is inherently single-threaded.
• B.Requesting a VM with 18 vCPUs and 128 GB RAM to run a monolithic database application that requires maximum memory locality.
• C.Requesting multiple small VMs with 4 vCPUs and 16 GB RAM each to distribute a microservices application.
• D.Requesting a VM with 8 vCPUs and 64 GB RAM for a compiled language build server.

답을 확인하기

정답:

Question No : 6

A VCF Solutions Architect is architecting a comprehensive strategy for an enterprise expanding its data center. The business requires the introduction of Private AI Foundation for generative AI workloads, while simultaneously ensuring that legacy applications can be non-disruptively migrated to the new infrastructure. Review the compatibility matrix below regarding the proposed architectural components.
Component | AI Workload Domain | Migration Target Domain
------------------------------|--------------------|------------------------
Physical GPUs | NVIDIA A100 | None
NSX Architecture | Tier-0/Tier-1 | Tier-0/Tier-1
HCX Service Mesh | Deployed | Deployed
vSphere Version | 8.0 U2 | 8.0 U2
Live Migration (vMotion) | Supported | Supported
Storage | vSAN ESA | vSAN OSA
Which THREE statements correctly evaluate the interaction and constraints between the Private AI Foundation deployment and the workload mobility strategy? (Select all that apply.)

• A.HCX Network Extension must be configured with high-throughput appliances to synchronize vGPU states during cross-cluster migrations.
• B.Legacy applications can be migrated to the Migration Target Domain using HCX, avoiding contention with the GPU-intensive workloads.
• C.NSX Federation is required to stretch the Layer 2 networks between the AI Workload Domain and the Migration Target Domain.
• D.Virtual machines configured with vGPU profiles cannot be seamlessly migrated using HCX if the destination hosts lack compatible physical GPUs.
• E.Separating the AI Workload Domain from the Migration Target Domain isolates storage IOPS, ensuring training tasks are not impacted by legacy workload migrations.

답을 확인하기

정답:

Question No : 7

A Disaster Recovery Coordinator must select the appropriate HCX migration profiles for various application tiers moving to a VCF environment. The organization imposes strict SLA constraints on the migration windows.
| Application Tier | Total Data Size | Maximum Permitted Downtime | Data Churn Rate |
|------------------|-----------------|----------------------------|-----------------|
| Tier 1 (DB) | 15 TB | 5 Minutes | High (100GB/hr) |
| Tier 2 (App) | 2 TB | 2 Hours | Low (5GB/hr) |
| Tier 3 (Web) | 500 GB | 12 Hours | Minimal |
Based on the provided constraints, which TWO migration strategies represent the most optimal trade-offs? (Select all that apply.)
A. Use HCX Bulk Migration for the Tier 1 Database to utilize high parallelism, accepting that the cutover reboot will exceed the 5-minute downtime SLA.
B. Use HCX vMotion for the Tier 1 Database to ensure zero downtime, as it seamlessly transfers active memory and the 15TB disk state simultaneously.
C. Use HCX Bulk Migration for the Tier 3 Web servers, optimizing WAN bandwidth while easily fitting within the generous 12-hour downtime window.
D. Use HCX Replication Assisted vMotion (RAV) for the Tier 1 Database, allowing the 15TB disk to replicate in the background while achieving minimal downtime during cutover.
E. Use HCX Cold Migration for the Tier 2 Application servers to guarantee data consistency, despite the 2-hour downtime limitation.

답을 확인하기

정답: C, D

Question No : 8

A VCF Solutions Architect is finalizing the multi-region image distribution topology for a global financial institution.
[Multi-Region Content Topology]
Management Domain (Site A): Publisher Content Library
Workload Domain 1 (Site A): Subscribed Content Library
Workload Domain 2 (Site B): Subscribed Content Library
SSO Architecture: Each Domain has an independent vCenter SSO domain.
Which THREE architectural principles dictate how this distributed Content Library topology functions across the isolated VCF domains? (Select all that apply.)

• A.Subscribed libraries can be successfully configured across different, isolated vCenter SSO domains, provided standard HTTPS communication is permitted between the vCenter Server appliances.
• B.A single Published library in the Management Domain should act as the master repository, centrally feeding the Subscribed libraries in the isolated Workload Domains to guarantee uniform image compliance.
• C.Enhanced Linked Mode (ELM) is a strict prerequisite; Subscribed libraries cannot be created unless all vCenter Servers participate in the exact same SSO domain.
• D.Subscribed libraries automatically acquire active write permissions, allowing administrators at the remote Site B to permanently modify global templates stored in the Publisher.
• E.Content Library synchronization traffic securely utilizes standard vCenter HTTPS (TCP 443), simplifying cross-site Gateway Firewall requirements compared to custom replication protocols.

답을 확인하기

정답:

Question No : 9

What is the primary technical distinction that sets VMware HCX apart from traditional vSphere vMotion when migrating workloads into a VMware Cloud Foundation (VCF) environment?

• A.HCX enables migrations across different vSphere versions and underlying hardware architectures without shared storage between sites.
• B.HCX relies entirely on standard NSX Tier-0 gateways to stretch Layer 2 networks, eliminating the need for dedicated virtual appliances.
• C.HCX strictly requires the source and destination vCenter Servers to be joined to the same Enhanced Linked Mode (ELM) domain before any migrations can occur.
• D.HCX mandates the use of VMware Live Recovery to orchestrate the migration workflows, adding a required layer of disaster recovery protection.

답을 확인하기

정답:

Question No : 10

A Cloud Operations Engineer is preparing to upgrade a VCF 5.x Workload Domain. Before scheduling the maintenance window, the engineer navigates to the SDDC Manager UI and initiates an Upgrade Pre-Check for the target domain.
What is the fundamental architectural purpose of SDDC Manager validating the target infrastructure against the VCF Bill of Materials (BOM) during this pre-check phase?

• A.To enforce strict version lock-step across the software-defined data center, preventing administrators from asynchronously upgrading individual components (e.g., vCenter or ESXi) to unvalidated versions that would fracture the management plane APIs.
• B.To scan the vSAN datastores for orphaned virtual machine files and delete them to free up the required 20% slack space necessary for the vCenter Server upgrade ISO extraction.
• C.To dynamically generate vSphere Lifecycle Manager (vLCM) custom vendor add-ons by querying the hardware vendor's public support matrix online.
• D.To automatically download and install the required firmware updates for the physical Top-of-Rack (ToR) switches to ensure routing compatibility with the new NSX version.

답을 확인하기

정답:

Question No : 11

An Enterprise IT Strategist is analyzing an SDDC Manager pre-check failure log for a Workload Domain upgrade. The pre-check specifically failed during the NSX Manager validation phase.
The strategist queries the internal SDDC Manager API to retrieve the raw validation response payload.
[Data-NSX_API_Response_Snippet]
"checkName": "NSX_CLUSTER_HEALTH",
"status": "FAILED",
"details": "NSX Edge cluster degraded; Control cluster majority unstable."
Based on VCF upgrade constraints, which THREE specific NSX architectural states will cause SDDC Manager to actively block a planned upgrade to protect the network fabric? (Select all that apply.)

• A.An NSX Edge Node VM has suffered a kernel panic and is disconnected, placing the Edge Cluster in a degraded state where a subsequent reboot could drop the remaining active BGP sessions.
• B.The NSX Advanced Load Balancer (Avi) Controller cluster has not been upgraded to match the target VCF BOM version.
• C.One of the three NSX Manager virtual appliances is currently powered off, reducing the control plane to a 2-node state and compromising database quorum safety during the upgrade.
• D.The NSX Manager backup configuration is pointing to an SFTP server that is currently out of disk space, meaning SDDC Manager cannot trigger the mandatory pre-upgrade backup snapshot.
• E.The NSX Distributed Firewall is actively blocking TCP port 80 (HTTP) traffic between the tenant virtual machines, violating the open-communication mandate required for Geneve encapsulation.

답을 확인하기

정답:

Question No : 12

A VCF Platform Administrator intends to convert a legacy VCF 4.x cluster―currently managed by vSphere Update Manager (VUM) baselines―to the modern vSphere Lifecycle Manager (vLCM) Single Image model.
Before executing the conversion within the vCenter UI, the administrator must ensure the cluster meets the strict architectural prerequisites for Single Image management.
Which THREE cluster configurations or states will absolutely block the transition from baselines to a vLCM Single Image? (Select all that apply.)

• A.The cluster contains a mix of ESXi hosts that boot from local NVMe drives and ESXi hosts that boot stateless via Auto Deploy (PXE).
• B.The ESXi hosts in the cluster are currently running a mix of different ESXi versions (e.g., two hosts on 7.0 U2 and two hosts on 7.0 U3).
• C.The cluster contains standalone (unclustered) ESXi hosts that are registered in the vCenter Server inventory but reside outside the cluster boundary.
• D.The cluster contains ESXi hosts from completely different hardware vendors (e.g., a mix of Dell PowerEdge and HPE ProLiant servers) operating in the same cluster.
• E.The cluster has vSphere Distributed Resource Scheduler (DRS) configured in "Fully Automated" mode, which conflicts with vLCM remediation scheduling.

답을 확인하기

정답:

Question No : 13

A Cloud Operations Engineer is participating in a design workshop to determine whether to deploy a new VCF Workload Domain into a single dense physical rack or scale it across multiple adjacent racks. The decision will impact both storage availability and physical networking requirements.
[Proposed_Design_Comparison]
Option 1 (Single-Rack): 16 ESXi hosts in Rack 10. Single ToR pair. Dual PDUs.
Option 2 (Multi-Rack): 16 ESXi hosts spread across Racks 11, 12, 13, 14 (4 hosts each).
When evaluating the physical and logical trade-offs between a single-rack versus a multi-rack VCF deployment, which THREE statements are architecturally accurate? (Select all that apply.)

• A.Single-rack topologies eliminate the need for redundant power supplies within the individual ESXi hosts, as the rack-level PDU redundancy provides sufficient hardware protection.
• B.Single-rack topologies significantly increase the required number of NSX Edge nodes because all east-west routing traffic is concentrated within a single physical failure domain.
• C.Multi-rack topologies allow storage administrators to configure explicit vSAN fault domains, ensuring data availability even if an entire rack loses facility power.
• D.Single-rack topologies concentrate the physical failure domain, meaning a catastrophic PDU or top-of-rack switch failure could take down the entire workload domain simultaneously.
• E.Multi-rack topologies inherently require a scalable Leaf-Spine physical network architecture to provide predictable, non-blocking bandwidth between the ESXi hosts located in different racks.

답을 확인하기

정답:

Question No : 14

A VCF Automation Developer is reviewing the conceptual differences between Distributed Routing and Centralized Routing within an NSX environment to optimize a self-service blueprint. The blueprint needs to deploy multi-tier applications with the lowest possible latency between tiers.
Which statement accurately differentiates Distributed Logical Routing from Centralized Routing in a VMware Cloud Foundation (VCF) workload domain?

• A.Distributed routing is exclusively used for north-south traffic egressing to the physical network, while centralized routing handles all east-west communication between virtual machines on the same ESXi host.
• B.Distributed routing occurs within the ESXi hypervisor kernel for east-west traffic, while centralized routing routes traffic through an NSX Edge node for stateful services or north-south egress.
• C.Distributed routing relies on dedicated physical router appliances deployed outside the VCF rack, while centralized routing uses virtual machines known as NSX Edge nodes for all packet forwarding.
• D.Distributed routing requires all east-west traffic flows between virtual machines to exit the ESXi host and traverse the physical Top-of-Rack switch infrastructure, whereas centralized routing processes all packets entirely within the vSphere Distributed Switch (vDS) data plane.

답을 확인하기

정답:

Question No : 15

A VCF Platform Administrator receives an urgent escalation regarding a newly deployed "Monster VM" (configured with 48 vCPUs) used for data analytics. The users report that the application is running significantly slower than it did on its previous, less powerful hardware.
The administrator connects to the ESXi host via SSH and runs esxtop.
[esxtop - CPU Panel Snippet]
PCPU USED(%): 42.1 PCPU UTIL(%): 45.3
ID GID NAME NWLD %USED %RUN %SYS %WAIT %VMWAIT %RDY %IDLE %CSTP %MLMTD
3245 3245 Analytics-VM-1 50 145.20 146.10 1.10 4800.00 0.05 1.20 4600.00 18.50 0.00
6789 6789 Web-Server-01 4 15.40 15.40 0.10 380.00 0.00 8.50 365.00 0.00 0.00
Based strictly on the provided esxtop metrics, which TWO architectural flaws are responsible for the performance degradation of the analytics application? (Choose 2.)

• A.The Analytics VM is drastically oversized for its actual workload, evidenced by the extremely high Co-Stop (%CSTP) value combined with relatively low actual CPU usage.
• B.The Analytics VM is actively thermal-throttling the physical CPUs, shown by the discrepancy between the %USED and %RUN metrics.
• C.The hypervisor is struggling to simultaneously schedule the massive 48 vCPU footprint across the physical cores, forcing the VM's active threads to wait for synchronized execution.
• D.The ESXi host is severely overcommitted, as indicated by the high CPU Ready (%RDY) time on the Web-Server-01 workload, which is starving the Monster VM of resources.

답을 확인하기

정답: