5V0-23.20無料試験学習ガイド！（更新された126問あります)
5V0-23.20問題集にはVMware Certified Specialist - vSphere with Tanzu 2022認証済み試験問題と解答
VMware vSphere with Tanzuは、組織がITインフラストラクチャを最適化し、デジタル変革の目標を達成するのに役立つ強力なプラットフォームです。5V0-23.20試験は、Kubernetesの基礎、Tanzuアーキテクチャ、ワークロード管理、ネットワーキング、セキュリティなど、VMware vSphere with Tanzuに関連するさまざまなトピックをカバーしています。この試験に合格することで、VMware vSphere with Tanzuの包括的な理解を持ち、Tanzuクラスタを効果的に展開および管理できることが示されます。
VMware 5V0-23.20認定試験は、40の複数選択の質問で構成されるオンラインの提案された試験です。試験の時間制限は105分、合格スコアは500分のうち300分です。試験は英語と日本語で利用できます。
質問 # 35
The Gold storage policy has been assigned to the Web namespace, and the DevOps engineer wants to place a persistent volume for the Web application in the Gold storage class.
How should this goal be accomplished?
- A. Indicate the Gold storage class in the persistent volume claim specification
- B. Indicate the Gold storage class in the persistent volume specification
- C. Assign the persistent volume to the Gold storage class
- D. Configure tag-based placement for the persistent volume
正解：A
解説：
Explanation
* VM storage policies are translated into Kubernetes storage classes.
* Developers can access all assigned VM storage policies in the form of storage classes. * Developers cannot manage storage classes.
質問 # 36
Which container network interface (CNI) is supported with Tanzu Kubernetes clusters created by the Tanzu Kubernetes Grid Service? (Choose two )
- A. Antrea
- B. WeaveNet
- C. Cillium
- D. NSX-T
正解：A
質問 # 37
Which vSphere with Tanzu Workload Network topology provides Layer 2 isolation between Tanzu Kubernetes clusters across namespaces when vSphere Distributed Switches are used?
- A. Workload Network for the Supervisor Cluster control plane VMs and a single Workload Network for namespaces
- B. A single Workload Network for the Supervisor Cluster control plane VMs and Tanzu Kubernetes clusters
- C. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and separate Workload Networks for each namespace A dedicated Primary
- D. Distributed firewall rules to isolate namespaces
正解：C
解説：
For a Supervisor Cluster that is configured with the vSphere networking stack, you can provide Layer 2 isolation for your Kubernetes workloads by creating Workload Networks and assigning them to namespaces. Workload Networks provide connectivity to Tanzu Kubernetes clusters in the namespace and are backed by distributed port groups on the switch that is connected to the hosts in the Supervisor Cluster.
質問 # 38
Which object helps maintain copies of a vSphere pod?
- A. Network Policies
- B. Namespaces
- C. ReplicaSets
- D. Persistent Volume
正解：D
質問 # 39
Which object helps maintain copies of a vSphere pod?
- A. ReplicaSets
- B. Network Policies
- C. Namespaces
- D. Persistent Volume
正解：A
解説：
A ReplicaSet declares how the functionality of a pod is made scalable and resilient through redundancy. The ReplicaSet ensures that a specified number of pods is kept running. Example: Deploy a ReplicaSet. * The ReplicaSet name is nginx-replica-demo. * Two replicas are expected to be running. * The ReplicaSet applies to pods with label nginx.
For more information about Kubernetes replica sets, see https://kubernetes.io/docs/concepts/workloads/controllers/replicaset/
質問 # 40
Which three roles does the Spherelet perform? (Choose three )
- A. Provides a key-value store for pod configuration
- B. Manages node configuration
- C. Provisions Tanzu Kubernetes clusters
- D. Determines placement of vSphere pods
- E. Communicates with Kubernetes API
- F. Starts vSphere pods
正解：B、E、F
解説：
Spherelet is a kubelet that is ported natively to ESXi. It allows the ESXi host to become part of a Kubernetes cluster. Spherelet performs the following functions:
* Communicates with the control plane VMs
* Manages node configuration
* Starts vSphere Pods
* Monitors vSphere Pods
質問 # 41
To which network are HA Proxy virtual server IP addresses issued when using the vSphere networking stack default configuration?
- A. Management
- B. Primary workload
- C. Overlay
- D. vMotion
正解：B
解説：
Explanation
* The HAProxy virtual IP range where external services and DevOps users connect. In this configuration, HAProxy is deployed with two virtual NICs ( configuration), one connected to the management network, and a second one connected to the Primary Workload Network. You must plan for allocating Virtual IPs on a separate subnet from the Primary Workload Network.
https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-1F885AAE-92FF-41E6-B
質問 # 42
Which command should be used by a developer to log in to the vSphere with Tanzu Supervisor Cluster?
- A. kubectl login --server=<KUBERNETES-CONTROL-PLANE-lP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>
- B. kubectl vsphere login --server=<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <vcENTER-SSO-USER>
- C. vmwarectl vsphere login --server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>
- D. vmwarectl login --server-<KUBERNETES-CONTROL-PLANE-IP-ADDRESS> --vsphere-username <VCENTER-SSO-USER>
正解：B
質問 # 43
The application development team is pushing a Kubernetes application into production. I consists of an application server and a database. The team wants to ensure that only the production application server can access the production database.
Can the development team meet this requirement using Kubernetes Network Policy?
- A. Yes, by using kubect1 to create a Network Policy that only allows pods on the same network segment to talk to each other.
- B. No, Kubernetes Network Policy does not support this action.
- C. Yes, by using kubect1 to create a policy that disables pod to pod communication in the Namespace
- D. Yes. by logging in to NSX Manager and creating a firewall rules to only allow the production application server pod to talk to the database
正解：A
質問 # 44
Which Kubernetes Service Types exposes the service externally using a static port?
- A. ClusterIP
- B. NodePort
- C. Headless
- D. ExternalName
正解：B
質問 # 45
Which command will show the Tanzu Kubernetes cluster versions available in the vSphere content library?
- A. kubect1 get tanzukubernetesreleases
- B. kubect1 get contentlibrary
- C. kubect1 get tanzuimages
- D. kubect1 get rc,services
正解：A
解説：
Explanation
* kubectl get tanzukubernetesreleases
List available Tanzu Kubernetes releases.
* kubectl get tkr
Short form version of the preceding command.
* kubectl get tkr v1.17.8---vmware.1-tkg.1.5417466 -o yaml
Provides details on the named Tanzu Kubernetes release.
VMware Tanzu distributes Kubernetes software versions as Tanzu Kubernetes releases. To consume these releases, you configure a vSphere Content Library and synchronize the available releases. You can do so using a subscription-based model, or on-demand. If you want to provision Tanzu Kubernetes in an internet restricted environment, you can create a local library and manually import the releases.
Text Description automatically generated
質問 # 46
Which step is necessary in order to allocate storage to a newly created namespace?
- A. Assign permissions to users
- B. Assign a VM Storage Policy
- C. Add a content library
- D. Define resource limits
正解：B
質問 # 47
Where is a storage policy applied to enable Persistent Volumes?
- A. Datastore
- B. Namespace
- C. Cluster
- D. Virtual Machine
正解：B
解説：
Explanation
The vSphere administrator defines and assigns VM storage policies to a namespace:
* VM storage policies are translated into Kubernetes storage classes.
* Developers can access all assigned VM storage policies in the form of storage classes.
* Developers cannot manage storage classes.
Developers can list the available storage classes in their namespace by running the kubectl describe ns
<namespace-name> command.
質問 # 48
What provides a declarative, Kubernetes-style API for cluster creation, configuration, and management?
- A. Virtual Machine Service
- B. kubectl
- C. vSphere REST API
- D. Tanzu Kubernetes Grid Service
正解：D
質問 # 49
Which is a valid version change for a Tanzu Kubernetes cluster running Kubernetes version 1.16.7?
- A. Upgrade one major version (e.g.. 2.0.1)
- B. Upgrade two minor versions (e.g., 1.18.0)
- C. Upgrade one minor version (e.g.. 1.17.0)
- D. Downgrade one patch version (e.g.. 1.16.5)
正解：C
質問 # 50
A developer is connecting to a Tanzu Kubernetes Cluster using the kubectl vsphere login command Which information must be specified, in addition to both the name of the cluster and the Supervisor Cluster Control Wane IP?
- A. The name of the Supervisor Namespace and the Token ID for the SSO credentials
- B. The name of the Supervisor Namespace and the SSO Username
- C. The path to the existing kubeconfig file and the Token D for the SSO credentials
- D. The path to the existing kubeconfig file and the SSO Username
正解：B
解説：
To connect to the Supervisor Cluster, run the following command.
kubectl vsphere login --server=SUPERVISOR-CLUSTER-CONTROL-PLANE-IP
--tanzu-kubernetes-cluster-name TANZU-KUBERNETES-CLUSTER-NAME
--tanzu-kubernetes-cluster-namespace SUPERVISOR-NAMESPACE-WHERE-THE-CLUSTER-IS-DEPLOYED
--vsphere-username VCENTER-SSO-USER-NAME
For example:
kubectl vsphere login --server=10.92.42.137
--tanzu-kubernetes-cluster-name tanzu-kubernetes-cluster-01
--tanzu-kubernetes-cluster-namespace tanzu-ns-1
--vsphere-username [email protected]
質問 # 51
Which two container network interfaces (CNIs) are supported with Tanzu Kubernetes clusters created by the Tanzu Kubernetes Grid Service? (Choose two )
- A. Antrea
- B. Weave Net
- C. Flannel
- D. Calico
- E. NSX-T
正解：A、D
解説：
Explanation
https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-A7756D67-0B95-447D-A A Tanzu Kubernetes cluster provisioned by the Tanzu Kubernetes Grid Service supports two CNI options:
Antrea (default) and Calico. Both are open-source software that provide networking for cluster pods, services, and ingress.
Tanzu Kubernetes clusters provisioned by the Tanzu Kubernetes Grid Service support the following Container Network Interface (CNI) options:
* Antrea
* Calico
質問 # 52
Which role should the vSphere administrator apply for the developer?
- A. Assign the developer user with the 'VSphere Kubernetes Manager" role at the vSphere Namespace object.
- B. Assign the developer user with the "can edit" role at the vSphere Namespace object.
- C. Assign the developer user with the 'VSphere Kubernetes Manager" role at the cluster object.
- D. Assign the developer user with the "can edit" role at the cluster object.
正解：B
解説：
Permissions for programmers should be assign at the Namespace level, typically using groups and roles.
You assign roles for the Namespace to Active Directory groups. You can later assign access to users by adding them to these groups. You assign access to separate Active Directory groups for the edit and view roles in the Namespace.
質問 # 53
Which statement describes a characteristic of Supervisor Cluster control plane VMs?
- A. Host developer workloads
- B. Are manually created by a vSphere administrator
- C. Run system and infrastructure pods
- D. Manage the lifecycle of ESXi hosts
正解：C
解説：
The Supervisor Cluster provides the management layer on which Tanzu Kubernetes clusters are built. The Tanzu Kubernetes Grid Service is a custom controller manager with a set of controllers that is part of the Supervisor Cluster. The purpose of the Tanzu Kubernetes Grid Service is to provision Tanzu Kubernetes clusters.
While there is a one-to-one relationship between the Supervisor Cluster and the vSphere cluster, there is a one-to-many relationship between the Supervisor Cluster and Tanzu Kubernetes clusters. You can provision multiple Tanzu Kubernetes clusters within a single Supervisor Cluster. The workload management functionality provided by the Supervisor Cluster gives you control over the cluster configuration and lifecycle, while allowing you to maintain concurrency with upstream Kubernetes.
質問 # 54
An administrator is tasked with increasing the amount of CPU and memory in an existing Tanzu Kubernetes cluster.
Which change must the administrator complete to ensure the cluster scales successfully when updating the YAML definition?
- A. Increase the number of control plane nodes
- B. Update the Virtual Machine Class Type
- C. Manually update the CPU and memory of the nodes
- D. Increase the number of worker nodes
正解：B
質問 # 55
Which three characteristics are true of Control Plane VMs? (Choose three.)
- A. They are deployed via a vCenter Service.
- B. They each run the Spherelet.
- C. They are connected to a Management portgroup.
- D. They each expose the Kubernetes API.
- E. They can be resized by administrators directly through vCenter Inventory View.
- F. They do not run any Kubernetes Pods.
正解：B、C、E
質問 # 56
Which external load balancer is supported in vSphere 7 U1 using the vSphere networking stack?
- A. Seesaw
- B. Nginx
- C. HAProxy
- D. Loadmaster
正解：C
解説：
Explanation
When using vSphere with Tanzu with vDS networking, HAProxy provides load balancing for developers accessing the Tanzu Kubernetes control plane, and for Kubernetes Services of Type Load Balancer. Review the possible topologies that you can implement for the HAProxy load balancer.
https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-1F885AAE-92FF-41E6-B The HAProxy appliance is an open-source solution developed by HAProxy Technologies and chosen by VMware as the first supported open-source load balancer for use with vSphere with Tanzu. With the HAProxy, external network traffic is routed to Kubernetes pods running in the vSphere with Tanzu environment.
質問 # 57
A HAProxy appliance has been deployed using a 3 NIC configuration.
Which network will developers and external services use to connect?
- A. DMZ
- B. HAProxy
- C. Frontend
- D. Workload
正解：C
質問 # 58
......
Tanzu Specialist Certification ExamとのVMware VSphereは、業界の他のIT専門家から際立っているのに役立つ世界的に認められた認定です。それはあなたがあなたのキャリアを前進させ、専門的な成長と開発のための新しい機会を開くのに役立つ貴重な資格です。この認定により、Tanzu Solutionsを使用してVSphereの展開と管理に関する専門知識を実証できます。これにより、同僚やクライアントの信頼と自信を得ることができます。
実際問題を使って5V0-23.20問題集で100%無料5V0-23.20試験問題集：https://www.jpntest.com/shiken/5V0-23.20-mondaishu