JPNTest 5V0-23.20リアル試験問題5V0-23.20練習問題集 [Q32-Q47]

JPNTest 5V0-23.20リアル試験問題5V0-23.20練習問題集

厳密検証された5V0-23.20試験問題集と解答で無料提供の5V0-23.20問題と正解付き

VMware vSphere with Tanzuは、組織がITインフラストラクチャを最適化し、デジタル変革の目標を達成するのに役立つ強力なプラットフォームです。5V0-23.20試験は、Kubernetesの基礎、Tanzuアーキテクチャ、ワークロード管理、ネットワーキング、セキュリティなど、VMware vSphere with Tanzuに関連するさまざまなトピックをカバーしています。この試験に合格することで、VMware vSphere with Tanzuの包括的な理解を持ち、Tanzuクラスタを効果的に展開および管理できることが示されます。

質問 # 32
Which command will show the Tanzu Kubernetes cluster versions available in the vSphere content library?

A. kubect1 get tanzuimages
B. kubect1 get contentlibrary
C. kubect1 get tanzukubernetesreleases
D. kubect1 get rc,services

正解：C

解説：
kubectl get tanzukubernetesreleases
List available Tanzu Kubernetes releases.
kubectl get tkr
Short form version of the preceding command.
kubectl get tkr v1.17.8---vmware.1-tkg.1.5417466 -o yaml
Provides details on the named Tanzu Kubernetes release.
VMware Tanzu distributes Kubernetes software versions as Tanzu Kubernetes releases. To consume these releases, you configure a vSphere Content Library and synchronize the available releases. You can do so using a subscription-based model, or on-demand. If you want to provision Tanzu Kubernetes in an internet restricted environment, you can create a local library and manually import the releases.

質問 # 33
On which network are TKG clusters deployed in vSphere with Tanzu when using the vSphere networking stack?

A. Edge
B. Workload
C. Backend
D. Frontend

正解：B

解説：
Explanation
The Workload Network, such as TKGS-VLAN1000, is where the Tanzu Kubernetes clusters run.
A workload network is a network construct that is used by supervisor control plane VMs and vSphere namespaces:
* The workload network is supported by a vSphere Distributed Switch port group.
* An IP range is defined to allocate an IP address for VMs attached to the workload network.
* A primary workload network must be selected.
* The supervisor control plane VMs attach to the primary workload networks port group.
A workload network can be used by multiple namespaces. A namespace can be assigned only one workload network.

質問 # 34
Which element defines the type of storage backing the Persistent Volume?

A. vVols
B. Persistent Volume Claim
C. Storage Class
D. Datastore Cluster

正解：C

質問 # 35
On which network are TKG clusters deployed in vSphere with Tanzu when using the vSphere networking stack?

A. Edge
B. Workload
C. Backend
D. Frontend

正解：B

質問 # 36

Which capability do persistent volumes provide to containerized applications?

A. Automated disk archival
B. Support for ephemeral workloads
C. Retention of application state and data
D. Support for in-memory databases

正解：C

解説：
Explanation
Certain Kubernetes workloads require persistent storage to store data permanently. To provision persistent storage for Kubernetes workloads, vSphere with Tanzu integrates with Cloud Native Storage (CNS), a vCenter Server component that manages persistent volumes.
Persistent storage is used by vSphere Pods, Tanzu Kubernetes clusters, and VMs. The following example illustrates how persistent storage is used by a vSphere Pod.
vSphere Pods use different types of storage depending on the objects that are stored. The types of storage are ephemeral virtual machine disks (VMDKs), persistent volume VMDKs, and containers image VMDKs:
* Storage policies for container image and ephemeral disks are defined at the cluster level.
* Storage policies for persistent volumes are defined at the namespace level.
* Networking for vSphere Pods uses the topology provided by NSX.

質問 # 37
Which two functions are provided by the NSX Container Rug-in (NCP)? (Choose two.)

A. Implements Kubernetes Ingress with an NSX-T layer 7 load balancer
B. Configures Overlay Transport Zones
C. Creates an NSX-T logical topology for a Kubernetes cluster and a separate logical network for each Kubernetes namespace
D. Integrates with container-based PaaS such as Docker
E. Implements Kubernetes Ingress with an NSX-T layer 4 load balancer

正解：A、C

解説：
NCP provides the following functionalities:
Automatically creates an NSX-T Data Center logical topology for a Kubernetes cluster, and creates a separate logical network for each Kubernetes namespace.
Implements Kubernetes Ingress with NSX-T layer 7 load balancer
Connects Kubernetes pods to the logical network, and allocates IP and MAC addresses.
Supports network address translation (NAT) and allocates a separate SNAT IP for each Kubernetes namespace.Note:When configuring NAT, the total number of translated IPs cannot exceed 1000.
Implements Kubernetes network policies with NSX-T Data Center distributed firewall.
Implements Kubernetes service of type ClusterIP and service of type LoadBalancer.

質問 # 38
Which type of service is created by default when publishing a Kubernetes service?

A. Cluster IP
B. ExternalName
C. LoadBalancer
D. Node Port

正解：A

解説：
Explanation
For some parts of your application (for example, frontends) you may want to expose a Service onto an external IP address, that's outside of your cluster.
Kubernetes ServiceTypes allow you to specify what kind of Service you want. The default is ClusterIP.

質問 # 39
An administrator needs to configure a Supervisor Cluster with the vSphere networking stack (vSphere Distributed Switch) and HAProxy appliance using default configuration. The administrator has already connected all hosts in the cluster to a vSphere Distributed Switch and created distributed portgroups.
Which designation must be mapped to a distributed portgroup?

A. Supervisor Cluster Network
B. Load Balancer Network
C. Frontend Network
D. Primary Workload Network

正解：A

質問 # 40
Which three roles does the Spherelet perform? (Choose three )

A. Manages node configuration
B. Provisions Tanzu Kubernetes clusters
C. Determines placement of vSphere pods
D. Starts vSphere pods
E. Provides a key-value store for pod configuration
F. Communicates with Kubernetes API

正解：C、D、E

質問 # 41
Which two capabilities are associated with vSphere Pod? (Choose two.)

A. Compatibility with vSphere vMotion
B. Compatibility with NSX-V Datacenter
C. Compatibility with vSphere HA and DRS
D. Compatibility with Windows and Linux kernels
E. Compatibility with vSphere performance charts

正解：B、C

解説：
vSphere Pods are only supported on Supervisor Clusters that use NSX-T Data Center as their networking stack.
Resource Management. vSphere DRS handles the placement of vSphere Pods on the Supervisor Cluster.

質問 # 42
Why would an organization set up private image registries?

A. Role-based access control can be assigned by integrating the image registry with user identity management.
B. Open source registry server projects enable organizations to modify them as necessary.
C. DevOps engineers are able to store virtual machine images in a central location.
D. Public image registries lack enterprise support.

正解：A

質問 # 43
Which command displays the storage limits that have been set together with the amount of resources consumed?

A. kubect1 describe resourcequotas
B. kubect1 config get-resourcequotas limits
C. kubect1 get resourcequotas
D. kubect1 list resourcequotas

正解：C

解説：
Create the ResourceQuota:
kubectl apply -f https://k8s.io/examples/admin/resource/quota-mem-cpu.yaml --namespace=quota-mem-cpu-example View detailed information about the ResourceQuota:
kubectl get resourcequota mem-cpu-demo --namespace=quota-mem-cpu-example --output=yaml

質問 # 44
How are quotas and permissions guaranteed by vSphere with Tanzu for Tanzu Kubernetes (TKG) clusters that are deployed within a namespace?

A. By routing quota and permission API calls to vCenter Server via the Supervisor Cluster
B. By having the Supervisor Cluster poll the TKG cluster periodically to ensure adherence to quotas and permissions
C. By deploying an external authentication solution
D. By ensuring each TKG cluster has a quotas and permissions system built into it natively which enforces all requests

正解：A

質問 # 45
Which vSphere with Tanzu Workload Network topology provides Layer 2 isolation between Tanzu Kubernetes clusters across namespaces when vSphere Distributed Switches are used?

A. A single Workload Network for the Supervisor Cluster control plane VMs and Tanzu Kubernetes clusters
B. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and separate Workload Networks for each namespace A dedicated Primary
C. Distributed firewall rules to isolate namespaces
D. Workload Network for the Supervisor Cluster control plane VMs and a single Workload Network for namespaces

正解：B

解説：
Explanation
For a Supervisor Cluster that is configured with the vSphere networking stack, you can provide Layer 2 isolation for your Kubernetes workloads by creating Workload Networks and assigning them to namespaces.
Workload Networks provide connectivity to Tanzu Kubernetes clusters in the namespace and are backed by distributed port groups on the switch that is connected to the hosts in the Supervisor Cluster.

質問 # 46
Why would an organization set up private image registries?

A. Role-based access control can be assigned by integrating the image registry with user identity management.
B. Open source registry server projects enable organizations to modify them as necessary.
C. DevOps engineers are able to store virtual machine images in a central location.
D. Public image registries lack enterprise support.

正解：A

解説：
Explanation

VMware created Harbor in 2014. Harbor was shared with the community through an open-source license in 2016 and donated to the Cloud Native Computing Foundation (CNCF) in 2018.
Harbor is integrated into VMware products: vSphere Integrated Containers, Tanzu Kubernetes Grid Integrated Edition, and vSphere with Tanzu. The embedded Harbor for vSphere with Tanzu includes the following features: * Identity integration and role-based access control
* Graphical user interface
* Auditing of operations
* Management with labels