Question bank
VCAP - VMware Cloud Foundation VKS
40 VCAP - VMware Cloud Foundation VKS questions with the correct answer and a written explanation, organised across 4 exam domains.
- 40 questions
- 4 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Kubernetes Workload Management with VKS
10 questions in this domain
- Question 1Single Choice
What is the foundational layer of VKS that manages workload clusters?
- ASupervisor ClusterCorrect answer
- BvSphere Namespace
- CVKS Cluster Plan
- DNSX Load Balancer
Why this is the answer
The Supervisor Cluster is the Kubernetes control plane that runs on ESXi and manages workload clusters in VKS.
- Question 2Multiple Select
Which of the following are required for deploying a VKS cluster? (Select all that apply)
- AEnabled Supervisor ClusterCorrect answer
- BConfigured NSX networkingCorrect answer
- CvSphere Namespace with resource quotasCorrect answer
- DA pre-deployed external load balancer
Why this is the answer
VKS requires a Supervisor Cluster, NSX networking, and a vSphere Namespace; the load balancer is integrated via NSX.
- Question 3Interactive
Complete the command to log in to the Supervisor Cluster: 'kubectl vsphere login --server=[blank] --vsphere-username=admin'
- Avcenter.example.com
- BSupervisor Cluster API server IPCorrect answer
- CNamespace name
- DVKS cluster name
Why this is the answer
The kubectl vsphere login command requires the API server IP of the Supervisor Cluster.
- Question 4Single Choice
What is the purpose of a VKS Cluster Plan?
- ATo specify the Kubernetes version for the cluster
- BTo define the cluster topology, node pools, and VM classCorrect answer
- CTo manage user permissions and RBAC
- DTo configure network policies for the cluster
Why this is the answer
Cluster Plans are templates that specify the cluster’s topology, including control plane size, worker node configurations, and VM class.
- Question 5Multiple Select
Which statements are true about VKS cluster upgrades? (Select all that apply)
- AUpgrades are triggered by modifying the cluster YAML and reapplyingCorrect answer
- BThe tanzu cluster upgrade command is used for upgrades
- CThe Supervisor Cluster must be at the same or newer version than the VKS clusterCorrect answer
- DWorker nodes are upgraded before control plane nodes
Why this is the answer
VKS upgrades are declarative via YAML; the Supervisor Cluster version must be compatible; control plane upgrades first.
- Question 6Interactive
In the VKS cluster YAML, which field specifies the plan to use? Refer to the code block.
- Aspec.planCorrect answer
- Bspec.version
- Cspec.nodePools
- Dspec.storagePolicy
Why this is the answer
The plan is referenced under spec.plan in the VKS cluster manifest.
- Question 7Single Choice
Which component provides persistent storage for containerized applications in VKS?
- ANFS datastores
- BvSANCorrect answer
- CExternal SAN arrays
- DLocal host storage
Why this is the answer
vSAN provides hyper-converged storage that integrates with VKS via the CSI driver for persistent volumes.
- Question 8Multiple Select
Which of the following are key parameters in a vSAN storage policy? (Select all that apply)
- ANumber of Failures to Tolerate (FTT)Correct answer
- BStripe WidthCorrect answer
- CObject Space ReservationCorrect answer
- DReclaim Policy (Delete/Retain)
Why this is the answer
vSAN policies include FTT, Stripe Width, and Object Space Reservation; reclaim policy is a Kubernetes StorageClass setting not a vSAN policy.
- Question 9Interactive
Identify the correct kubectl command to view all VKS clusters in a namespace. Refer to the code block.
- Akubectl get vksclusterCorrect answer
- Bkubectl get cluster
- Ckubectl get tkgcluster
- Dkubectl get namespaces
Why this is the answer
The command 'kubectl get vkscluster' lists VKS clusters in the current namespace.
- Question 10Single Choice
What is a vSphere Namespace in the context of VKS?
- AA tenant boundary that consolidates compute, storage, network, and permissionsCorrect answer
- BA resource pool for VM workloads only
- CA Kubernetes cluster itself
- DA network segment for pod communication
Why this is the answer
A vSphere Namespace is a tenant boundary that groups resources and RBAC for VKS cluster deployments.
Troubleshooting, Optimization, and Lifecycle Management
8 questions in this domain
- Question 11Single Choice
What is the initial step recommended when troubleshooting a VCF deployment failure?
- ACheck the Hardware Compatibility List (HCL)
- BReview SDDC Manager logs
- CRun pre-validation checklistsCorrect answer
- DRestart NSX services
Why this is the answer
VCF includes a built-in pre-validation tool that checks DNS, NTP, network, and hardware compatibility. Skipping this is a common cause of deployment failures.
- Question 12Multiple Select
Which of the following are common causes of VCF deployment failures? (Choose three)
- ADNS resolution failuresCorrect answer
- BCertificate expiryCorrect answer
- CHardware compatibility issuesCorrect answer
- DInsufficient vSAN deduplication
Why this is the answer
DNS failures, expired certificates, and hardware incompatibility are frequent root causes. vSAN deduplication settings do not typically cause deployment failures.
- Question 13Interactive
Examine the following log snippet from SDDC Manager: 'Failed to deploy vCenter Server. Reason: SSH timeout.' What is the most likely root cause?
- AFirewall blocking SSH
- BvCenter appliance failed to power on due to insufficient datastore spaceCorrect answer
- CIncorrect SSH credentials
- DNSX manager not reachable
Why this is the answer
The SSH timeout is a symptom of the vCenter OVF appliance not powering on, often due to insufficient datastore space. Checking datastore capacity should be the first step.
- Question 14Single Choice
Which of the following is true about vSAN snapshots in the context of backup?
- AThey provide crash-consistent backups suitable for long-term retention
- BThey are stored on the same datastore and impact performanceCorrect answer
- CThey can replace vSphere Replication for DR
- DThey automatically export to external storage
Why this is the answer
vSAN snapshots are crash-consistent but stored on the same datastore, consuming space and affecting performance. They are not a substitute for proper backup.
- Question 15Multiple Select
Which VCF components require separate backup procedures? (Choose three)
- ASDDC ManagerCorrect answer
- BvCenter ServerCorrect answer
- CNSX ManagerCorrect answer
- DWorkload VMs via agent backup
Why this is the answer
Each management component (SDDC Manager, vCenter, NSX) has its own backup method. Workload VMs are backed up by external tools and are not specific management components.
- Question 16Interactive
A PersistentVolumeClaim (PVC) remains in 'Pending' status. The output of 'kubectl get pvc my-pvc -o yaml' shows an event 'no matching StorageClass'. What is the most likely cause?
- AStorageClass 'gold' does not exist in the clusterCorrect answer
- BThe pod using the PVC is not scheduled
- CvSAN datastore is full
- DThe namespace has a resource quota
Why this is the answer
The event 'no matching StorageClass' indicates that the StorageClass referenced in the PVC spec (e.g., 'gold') is not defined. This is a common VKS issue.
- Question 17Single Choice
In a VCF upgrade, which component should be upgraded first?
- AvCenter Server
- BNSX Manager
- CSDDC ManagerCorrect answer
- DESXi hosts
Why this is the answer
SDDC Manager orchestrates the entire lifecycle and must be upgraded first, followed by management domain components (vCenter, NSX, vSAN).
- Question 18Multiple Select
Which prerequisites must be met before upgrading TKG workload clusters? (Choose two)
- AUpgrade the management domain's vCenter
- BTake an etcd snapshotCorrect answer
- CUpgrade the Supervisor ClusterCorrect answer
- DDisable all PodDisruptionBudgets
Why this is the answer
Before workload cluster upgrade, you must upgrade the Supervisor Cluster (management cluster) and take etcd snapshots for rollback capability.
VMware Cloud Foundation Architecture and Design
10 questions in this domain
- Question 19Single Choice
What is the minimum number of hosts required for a vSAN cluster with Failures to Tolerate (FTT) = 1?
- A2
- B3Correct answer
- C4
- D5
Why this is the answer
For vSAN FTT=1, the minimum number of hosts is 2n+1 = 3, where n is the number of failures to tolerate (1).
- Question 20Multiple Select
Which components are part of the VCF management domain? (Select two.)
- ASDDC ManagerCorrect answer
- BvSAN datastore for management dataCorrect answer
- CWorkload VMs
- DNSX Edge nodes
Why this is the answer
The management domain hosts SDDC Manager, vCenter Server, NSX Manager, and the vSAN datastore for management data. Workload VMs and NSX Edge nodes are part of workload domains.
- Question 21Interactive
An architect is configuring a vSAN storage policy. The requirement is to tolerate one failure with space efficiency. Which erasure coding algorithm is indicated by the code shown?
- ARAID-5Correct answer
- BRAID-6
- CRAID-1
- DRAID-0
Why this is the answer
vSAN policy with FTT=1 using erasure coding applies RAID-5 (3+1), which tolerates one failure and provides space efficiency.
- Question 22Single Choice
What is the maximum number of vCenter Servers that can be managed by a single SDDC Manager instance?
- A5
- B10Correct answer
- C15
- D20
Why this is the answer
According to VCF validated design, SDDC Manager can manage up to 10 vCenter Server instances.
- Question 23Multiple Select
Which two types of traffic must be separated into distinct VLANs in a VCF design?
- AvMotion trafficCorrect answer
- BManagement trafficCorrect answer
- CInternet browsing traffic
- DBackup traffic
Why this is the answer
VCF recommends separate VLANs for management, vMotion, vSAN, and overlay traffic to prevent Layer 2 conflicts.
- Question 24Interactive
An administrator runs the command shown to check vSAN cluster health. What does the 'Hosts with connectivity issues' field indicate?
- AAll hosts are communicating properlyCorrect answer
- BOne host is disconnected
- CvSAN network is misconfigured
- DHosts with issues are ignored
Why this is the answer
A value of 0 for hosts with connectivity issues indicates that all hosts in the vSAN cluster have network connectivity to each other.
- Question 25Single Choice
What is the role of SDDC Manager in VCF?
- AManaging virtual machine storage policies
- BOrchestrating lifecycle management of VCF componentsCorrect answer
- CProviding compute virtualization
- DPerforming network micro-segmentation
Why this is the answer
SDDC Manager handles deployment, patching, and upgrade orchestration for VCF infrastructure components.
- Question 26Multiple Select
Which two features are available in vSphere that provide VM availability?
- AvSphere High Availability (HA)Correct answer
- BvSphere Fault Tolerance (FT)Correct answer
- CvSphere Distributed Resource Scheduler (DRS)
- DvSphere vMotion
Why this is the answer
vSphere HA restarts VMs after host failure; FT provides continuous availability via a shadow VM.
- Question 27Interactive
The following NSX-T command creates a logical segment. What type of network does it create?
- AOverlay-backed segmentCorrect answer
- BVLAN-backed segment
- CFlat Layer 2 segment
- DRouter interface segment
Why this is the answer
The command creates an overlay-backed segment, which uses Geneve encapsulation for network virtualization.
- Question 28Single Choice
What is the recommended cluster size (maximum hosts) for a vSphere cluster in a VCF workload domain according to VVD?
- A32 hosts
- B64 hostsCorrect answer
- C96 hosts
- D128 hosts
Why this is the answer
VVD recommends a maximum of 64 hosts per cluster to ensure optimal HA heartbeat and DRS operation.
VMware Cloud Foundation Deployment and Configuration
12 questions in this domain
- Question 29Single Choice
Which component is used only for the initial bring-up of the management domain in VCF?
- ACloud BuilderCorrect answer
- BSDDC Manager
- CvCenter Server
- DNSX Manager
Why this is the answer
Cloud Builder is temporary; SDDC Manager persists for lifecycle management.
- Question 30Multiple Select
Which two prerequisites must be met before deploying SDDC Manager? (Choose two.)
- AValid DNS forward and reverse recordsCorrect answer
- BNTP time synchronizationCorrect answer
- CVMware vCenter already installed
- DExternal load balancer configured
Why this is the answer
DNS PTR records and NTP are mandatory for Cloud Builder pre-checks.
- Question 31Interactive
Review the snippet from the Cloud Builder log. What caused the failure?
- AMissing PTR record for IP 10.1.0.10Correct answer
- BIncorrect VLAN ID assigned
- CvCenter password too short
- DInsufficient ESXi hosts in cluster
Why this is the answer
The log clearly indicates reverse DNS lookup failure for the management IP.
- Question 32Single Choice
After Cloud Builder completes, which tool handles ongoing lifecycle operations?
- ASDDC ManagerCorrect answer
- BCloud Builder
- CvCenter Server
- DNSX Manager
Why this is the answer
SDDC Manager is persistent and manages all lifecycle operations.
- Question 33Multiple Select
Which two services are hosted by SDDC Manager after deployment? (Choose two.)
- ALCM repository for VCF bundlesCorrect answer
- BCertificate management via VMCACorrect answer
- CvCenter database backup
- DNSX load balancer configuration
Why this is the answer
SDDC Manager hosts a local repository and manages certificates through VMCA.
- Question 34Interactive
A vSphere administrator tries to manually change the root password on an ESXi host. What is the impact on SDDC Manager?
- AInventory becomes out-of-syncCorrect answer
- BSDDC Manager automatically updates
- CPassword rotation is disabled
- DNo impact occurs
Why this is the answer
Manual password changes break the password vault and future lifecycle operations.
- Question 35Single Choice
What defines the data redundancy and placement for VMs on a vSAN cluster?
- AStorage policyCorrect answer
- BCluster DRS rules
- CvSphere HA settings
- DHost profile
Why this is the answer
A vSAN storage policy determines redundancy, striping, and reservation for VM objects.
- Question 36Multiple Select
Which two vSAN storage policy settings directly affect availability? (Choose two.)
- AFailures to Tolerate (FTT)Correct answer
- BStrip Width
- CObject Space Reservation
- DErasure Coding vs MirroringCorrect answer
Why this is the answer
FTT and the choice between mirroring and erasure coding set the redundancy level.
- Question 37Interactive
A VM with a storage policy requiring FTT=2 becomes inaccessible after a host failure. The cluster initially had 5 hosts. What is the most likely cause?
- AInsufficient hosts remain to meet FTT=2Correct answer
- BvSAN capacity is full
- CNetwork connectivity lost to remaining hosts
- DvCenter is not responding
Why this is the answer
FTT=2 with mirroring requires at least 5 hosts; losing one reduces to 4, breaking compliance.
- Question 38Single Choice
Minimum number of hosts required for a vSAN cluster using RAID 5 erasure coding?
- A4 hostsCorrect answer
- B3 hosts
- C5 hosts
- D6 hosts
Why this is the answer
RAID 5 erasure coding requires a minimum of 4 hosts to create the parity stripe.
- Question 39Multiple Select
Which two storage policy features are recommended for write-intensive workloads? (Choose two.)
- AMirroring (RAID 1)Correct answer
- BErasure Coding (RAID 5)
- CHigh strip widthCorrect answer
- DObject Space Reservation 100%
Why this is the answer
Mirroring avoids parity overhead, and higher strip width parallelizes writes across disks.
- Question 40Interactive
An admin deploys a VM with a custom vSAN policy but receives 'Insufficient capacity' error. The cluster has 3 hosts. Which policy setting likely caused this?
- AFailures to Tolerate = 2Correct answer
- BStrip width = 1
- CObject Space Reservation = 0%
- DIOPS Reservation = 1000
Why this is the answer
FTT=2 requires at least 5 hosts for mirroring or 6 for erasure coding. 3 hosts cannot support it.
Frequently asked questions
Everything about the VCAP - VMware Cloud Foundation VKS question bank and how to use it.