VMware 5V0-31.22 Real Exam Questions
The questions for 5V0-31.22 were last updated at Sep 05,2024.
- Exam Code: 5V0-31.22
- Exam Name: VMware Cloud Foundation Specialist (v2)
- Certification Provider: VMware
- Latest update: Sep 05,2024
The architect of a multi-site VMware Cloud Foundation solution is tasked with ensuring that the prerequisites for vSAN data at rest encryption have been achieved. The existing design calls for use of the vSphere Native Key Provider. NSX-T is configured with Federation, and both sites benefit from a stretched TO and T1 network topology.
A new security policy requires the use of vSphere Virtual Machine encryption, in addition to the at-rest encryption already configured. During a failover test from Site-A to Site-B using Site Recovery Manager, the virtual machines were unable to power-on.
How does the design need to be changed to support the new requirement?
- A . Use a third-party KMS solution that allows for key replication.
- B . Use a third-party KMS solution at each site.
- C . Ensure that a TPM 2.0 certified module is installed on all ESXi hosts at Site-B.
- D . Ensure that the Site Recovery Manager service account has Cryptographer ReadKeyServerslnfo privileges.
The architect of a multi-site VMware Cloud Foundation solution is tasked with ensuring that the prerequisites for vSAN data at rest encryption have been achieved. The existing design calls for use of the vSphere Native Key Provider. NSX-T is configured with Federation, and both sites benefit from a stretched TO and T1 network topology.
A new security policy requires the use of vSphere Virtual Machine encryption, in addition to the at-rest encryption already configured. During a failover test from Site-A to Site-B using Site Recovery Manager, the virtual machines were unable to power-on.
How does the design need to be changed to support the new requirement?
- A . Use a third-party KMS solution that allows for key replication.
- B . Use a third-party KMS solution at each site.
- C . Ensure that a TPM 2.0 certified module is installed on all ESXi hosts at Site-B.
- D . Ensure that the Site Recovery Manager service account has Cryptographer ReadKeyServerslnfo privileges.
A systems administrator wants to integrate Microsoft Certificate Authority with SDDC Manager and has already established a connection between the components.
Which pre-requisite step is required for this integration to work?
- A . Verify that the self-signed certificates have been replaced with signed certificates from Microsoft Certificate Authority.
- B . Verify that a customized certificate template has been configured on the SDDC Manager
- C . Verify that the Microsoft Certificate Authority Server has the RBAC roles configured on the same machine where the Certificate Authority role is installed.
- D . Verify that the Microsoft Certificate Authority Server has been configured for basic authentication
Remove the expired vSAN license from the SDDC Manager
A VMware Cloud Foundation administrator is required to enable Workload Management (vSphere with Tanzu) on an existing workload domain cluster, which is currently licensed with a vSphere Enterprise Plus license.
Which action, if any, is required to complete this task?
- A . Add a license for vSphere with Tanzu with sufficient CPU capacity to the SDDC Manager inventory, and then assign the license to the cluster in SDDC Manager
- B . No action is required since SDDC Manager licenses include an entitlement for vSphere with Tanzu.
- C . No action is required since the vSphere Enterprise Plus license supports vSphere with Tanzu.
- D . Add a license for vSphere with Tanzu with sufficient CPU capacity to both the SDDC Manager and vCenter Server, and then assign the license to the cluster in vCenter Server