VMware Certified Advanced Professional - VMware Cloud Foundation 9 Administrator v1.0
Question 1
An administrator is onboarding a new research VPC under its R&D project.
Requirements include:
Multiple application teams must be isolated while still consuming shared DNS, DHCP.
Teams require L4–L7 services (LB, WAF, NAT) for their applications.
The physical core network exposes BGP only on VLAN 300-dc-edge-uplink-pg that terminates on the Edge cluster.
Any north-south connectivity to the datacenter must traverse Edge.
East-west paths should remain on hosts where possible.
No direct Internet egress is allowed.
Which combination of Transit Gateway (TGW) mode, VPC subnet type and routing configuration meets the requirements?
- A. Distributed TGW with Private-VPC subnet, policy-based routing to shared services; static routes for datacenter services on each segment.
- B. Distributed TGW, external attachment for the datacenter core and Private-TGW Subnet to shared services; import datacenter routes via BGP on transport nodes and suppress export.
- C. Centralized TGW, external attachment on the Edge for datacenter core and Private-TGW Subnet to shared services; import only required datacenter prefixes and disable/filter export of VPC routes.
- D. Centralized TGW with Private-TGW Subnet to datacenter core and external to shared services; advertise all VPC routes but rely on upstream ACLs to block.
Answer : C
Question 2
An architect is designing a self-service infrastructure platform that enables application teams to deploy multi-tier applications comprising databases, application servers, and load balancers in an All Apps Organization in VMware Cloud Foundation Automation (VCFA).
The architecture should allow teams to specify deployment size (small, medium, large) at request time, which automatically provisions appropriate infrastructure resources, including virtual machine (VM) sizes, storage, and networking configurations.
Which architectural solution should the architect implement in VCFA to minimize blueprint sprawl?
- A. Implement property groups for centralized infrastructure specifications with conditional expressions in a single blueprint.
- B. Implement VCF Operations Orchestrator workflows that dynamically generate blueprints based on deployment size.
- C. Deploy infrastructure manually based on team requests and document the configuration in a wiki.
- D. Create separate blueprints for each deployment size with hard-coded resource specifications.
Answer : A
Question 3
An administrator received complaints that an application virtual machine (VM) is running slowly during a nightly batch cycle.
After logging in to the ESX host where the VM is running, esxtop was run to troubleshoot any issues.
The VM hardware details include:
24 vCPU
256GB RAM
The ESX server details include:
128 CPU cores
1.5TB RAM
The administrator notices that the target VM has a higher %MLMTD than any other VM on the host.
What should the administrator verify next in order to further troubleshoot the performance issue?
- A. If the VM has too much Memory allocated.
- B. If the VM has a Memory Limit set.
- C. If the VM has too many vCPUs allocated.
- D. If the VM has a CPU Limit set.
Answer : D
Question 4
An administrator is tasked with configuring an existing Organization to enable users to create namespaces with GPU resources on their assigned Projects.
The Organization is backed by a Region with a GPU-enabled supervisor on a single zone setup.
What needs to be configured for this task?
- A. Namespace Class with VM Class Reservations.
- B. NVIDIA grid_a100-40c profile.
- C. GPU enabled VM Classes.
- D. NVIDIA GPU Operator.
Answer : C
Question 5
DRAG DROP -
An administrator has completed a proof of concept for using Harbor as a container registry part of the Supervisor Services and you are tasked for cleaning up the environment, starting with the uninstall of the Harbor Supervisor Service.
Drag and drop the four tasks into the correct order from Configuration Options on the left and place them into the Configuration Sequence on the right.
Answer : 
Question 6
An administrator has deployed a three-host vSphere cluster with a small amount of VMFS storage and wants to add additional capacity from a vSAN ESA cluster located in the same vCenter Server.
When the administrator selects the vSphere cluster and navigates to the Configure tab, the Datastore Management option is missing under the vSAN section.
What prerequisite must be met before the administrator can mount the remote datastore?
- A. The vSphere cluster must be deployed to a different VCF Workload Domain.
- B. VSAN storage cluster client traffic must be configured.
- C. VSAN must be enabled as a single site vSAN Cluster, Select “I need local vSAN Datastore”, Select VSAN Type “ESA”.
- D. Configure Data Management Options.
- E. Fourth host must be commissioned for the vSphere cluster.
Answer : B
Question 7
An administrator needs to quickly test a possibly destructive change to a Virtual Machine (VM) in production. The VM is currently protected by VSAN Data Protection.
Which feature of vSAN Data Protection can be leveraged to achieve this objective?
- A. Protection group
- B. Linked clone
- C. Multiple snapshot schedules
- D. Immutable snapshots
Answer : B
Question 8
An administrator has observed a VMware Cloud Foundation networking issue in which an NSX Local Manager (LM) outage occurred at the secondary site. However, the NSX Global Manager (GM) at the primary site remains operational.
What occurs to data plane operations and policy enforcement at the secondary site?
- A. Only local policies work; global policies cease to apply on the secondary site.
- B. All traffic is blocked until secondary site LM recovers.
- C. The data plane operates normally until LM recovery and reconnection.
- D. Secondary site must failover all workloads to Primary site.
Answer : C
Question 9
An administrator is tasked to minimize the number of hosts used by workloads to reduce licensing and power costs. The workload demand is steady and predictable. Which operational intent setting should be configured?
- A. Balance
- B. Consolidate
- C. Moderate
- D. Optimize
Answer : B
Question 10
An administrator is building a VMware Cloud Foundation (VCF) Automation environment to consume VMware Cloud Foundation (VCF) resources using an Organizations for AllApps. The goal is to modernize both virtual machine (VM) and Kubernetes workloads using all available Automation Services. The administrator prefers simplification and reduced friction with regards to networking and is not concerned about north/south bandwidth performance.
Which network and edge configuration should the administrator choose to align with these goals?
- A. VPC Getting Started Workload Networking Model with Active/Active gateways.
- B. NSX Segment Network Virtualization Scalable Workload Networking Model.
- C. VPC with Full Services Workload Networking Model with an Active/Standby gateway mode (Distributed Transit Gateway).
- D. Overlay-Only Edge Gateway Deployment Model with Tier-0 per VPC.
Answer : C
Question 11
HOTSPOT -
An administrator has been tasked with enabling OSPF as the routing protocol for a Tier-0 Gateway. Which two items must be configured to enable OSPF for a Tier-0 Gateway? Mark the answers by clicking the two correct locations on the image. (Choose two.)
Answer : 
Question 12
An administrator is responsible for the migration of virtual machines (VMs) from an unmanaged vCenter to a VMware Cloud Foundation (VCF) workload domain.
The migrations will be performed over an 18-month period, and the administrator needs to ensure that the capacity planned for the migrations is not consumed by any other projects that may take place during the migration period.
How can the administrator ensure that the capacity required for the migrations is considered when future projects are modeled?
- A. Use the Migration Planning: VMware Cloud option when creating the scenarios for the migration project.
- B. Create a new scenario for each future projects with a start date twelve months later.
- C. Create a Committed Scenario for the migration project.
- D. Create a single scenario containing the VMs for the migration project and the future project.
Answer : C
Question 13
DRAG DROP -
An administrator is required to configure Network Connectivity within a VMware Cloud Foundation instance, the workload domain will be supporting vSphere Supervisor services.
Drag and drop four options from the Options list on the left and place them into the Steps on the right in the correct order.
Answer : 
Question 14
A business-critical application owner is reporting application failures caused by a short downtime each time the VM is migrated between ESX hosts.
An administrator was requested to provide a solution to prevent frequent migrations of this virtual machine (VM), which is hosted in a VMware Cloud Foundation (VCF) Workload Domain.
Which configuration change will solve the problem with the minimal impact on other virtual machines and the cluster operation, following VCF best practices?
- A. Disable vSphere High Availability (HA) on the Cluster.
- B. Set the Distributed Resource Scheduler Automation Level to Manual.
- C. Assign the VM to a dedicated Resource Pool with Reservations.
- D. Disable Distributed Resource Scheduler on the Cluster.
- E. Override the VM’s Distributed Resource Scheduler Automation Level to Manual.
Answer : E
Question 15
An administrator has deployed a VMware Cloud Foundation (VCF) Operations Orchestrator OVF appliance and configured the authentication provider.
Which two steps are required to integrate VCF Operations Orchestrator with an all apps organization in VMware Cloud Foundation Automation (VCFA)? (Choose two.)
- A. Publish the Orchestrator rights bundle to the All Apps organization
- B. Run the Add a VCF Automation Host workflow
- C. Configure the integration in the VCF Automation organization
- D. Verify that the authentication provider has been successfully registered
- E. Perform forward and reverse DNS lookups to confirm name resolution
Answer : BC