Which two actions are orchestrated by the NSX Container Plugin (NCP)? (Choose two.)

• A.Creation of an embedded registry
• B.Creation of an NSX Edge
• C.Creation of a service
• D.Creation of a portgroup
• E.Creation of a network policy

Comment: *

Name: *

Email: *

Verification: *

Which step is necessary in order to allocate storage to a newly created namespace?

• A.Assign permissions to users
• B.Add a content library
• C.Define resource limits
• D.Assign a VM Storage Policy

Comment: *

Name: *

Email: *

Verification: *

What is required to enable Workload Management?

• A.vSphere Distributed Switch
• B.Windows Network Load Balancer
• C.Github repository
• D.NSX-V

Comment: *

Name: *

Email: *

Verification: *

How can a vSphere administrator replace the Supervisor Cluster API endpoint certificate?

• A.Use the certificate-manager CLI utility to replace the Supervisor Cluster API endpoint certificate.
• B.Use the vSphere Client to replace the Workload platform MTG certificate.
• C.Use the vSphere Client to replace the NSX Load Balancer certificate.
• D.Use kubectl to replace the Supervisor Cluster API endpoint certificate.

Correct Answer: B

As a vSphere administrator, you can replace the certificate for the virtual IP address (VIP) to securely connect to the Supervisor Cluster API endpoint with a certificate signed by a CA that your hosts already trust. The certificate authenticates the Kubernetes control plane to DevOps engineers, both during login and subsequent interactions with the Supervisor Cluster.
Prerequisites
Verify that you have access to a CA that can sign CSRs. For DevOps engineers, the CA must be installed on their system as a trusted root.
Procedure
In the vSphere Client, navigate to the Supervisor Cluster.
Click Configure then under Namespaces select Certificates.
In the Workload platform MTG pane, select Actions > Generate CSR.
Provide the details for the certificate.
Once the CSR is generated, click Copy.
Sign the certificate with a CA.
From the Workload platform MTG pane, select Actions > Replace Certificate.
Upload the signed certificate file and click Replace Certificate.
Validate the certificate on the IP address of the Kubernetes control plane.

Comment: *

Name: *

Email: *

Verification: *

Which functionality does the Cloud Native Storage (CNS) component take advantage of to support the creation of container volumes?

• A.VMware Disk Encryption
• B.Virtual Disk
• C.First Class Disk
• D.Storage Based Policy Management

Comment: *

Name: *

Email: *

Verification: *