Performance-tuning and Optimization ยท DRS Affinity Rules
A financial services firm is migrating a legacy monolithic application to VMware Cloud on AWS. The application has high inter-VM latency sensitivity. During the planning phase, the architect needs to ensure that specific VMs within the application tier remain on the same physical host to minimize network latency. Which vSphere feature should be configured in the SDDC to achieve this requirement?
Answer and explanation
Correct answer: C
A VM-VM affinity rule (also known as an intra-VM affinity rule) instructs DRS to keep the specified virtual machines together on the same ESXi host. This is the correct solution to minimize network latency between these VMs by ensuring they use the virtual switch on a single host for communication.
Q2Question 2
Advanced
Integrating Other VMware Products with the SDDC ยท vRealize Network Insight Cloud Usage
A retail company is using vRealize Network Insight Cloud to analyze traffic flows before migrating their e-commerce platform to VMware Cloud on AWS. The goal is to create a micro-segmentation strategy. After a week of data collection, the security team needs to identify all traffic flows to and from the production database servers that are using unencrypted protocols. Which feature within vRealize Network Insight Cloud is best suited for this specific task?
Answer and explanation
Correct answer: C
Flow Analytics allows for powerful, plain-language search queries to filter and analyze network flows. The security team can construct a query such as 'flows where destination VM is 'db-server' and protocol is not 'HTTPS' or 'SSH'' to precisely identify unencrypted traffic, which is essential for defining micro-segmentation rules.
Q3Question 3
IntermediateMultiple answers
Administrative and Operational Tasks ยท vSAN Storage Policies
During a routine audit, an administrator discovers that several development VMs in a VMware Cloud on AWS SDDC have been configured with a storage policy providing RAID-6 (Erasure Coding), which is consuming more capacity than necessary for a non-production environment. The administrator needs to create and apply a new, more space-efficient storage policy for these VMs. Which TWO settings would be appropriate for a space-efficient policy in a multi-host cluster? (Select TWO)
Answer and explanation
Correct answers: A, B
Setting Failures to tolerate (FTT) to 1 provides protection against a single host or disk failure, which is typically sufficient for development environments. It requires less capacity than FTT=2.
For FTT=1, RAID-1 (Mirroring) is a valid and common choice. It consumes 2x the space of the VM data but is generally more performant for writes than RAID-5. In the context of VMC, RAID-1 is the standard for FTT=1.
Q4Question 4
Intermediate
Planning and Designing ยท Elastic DRS Sizing
A university is designing a VMware Cloud on AWS solution for a new virtual computer lab. The primary requirement is to minimize costs, as usage will be highly variable, with peaks during final exams and very low usage during summer break. The solution must automatically scale the cluster size based on memory utilization to avoid paying for idle hosts. Which Elastic DRS policy should be configured?
Answer and explanation
Correct answer: B
The 'Optimize for Lowest Cost' policy is designed specifically for this use case. It allows cluster utilization to run at higher levels before scaling out and scales in more aggressively when resources are freed up. It makes scaling decisions based on CPU, memory, and storage utilization to maintain the smallest possible cluster that can support the workload, thereby minimizing cost.
Q5Question 5
Beginner
VMware Cloud on AWS Architectures and Technologies ยท HCX Replication Assisted vMotion (RAV)
True or False: When using VMware HCX Replication Assisted vMotion (RAV), a complete switchover to the destination site can be scheduled for a future maintenance window, minimizing the downtime required during the final cutover.
Answer and explanation
Correct answer: A
This statement is true. RAV combines the benefits of bulk migration (parallel replication) and vMotion (zero downtime switchover). The data is replicated in the background, and the final delta synchronization and switchover, which is a vMotion operation, can be scheduled to occur at a specific time. This minimizes the performance impact and downtime during the cutover window.
Q6Question 6
Advanced
Troubleshooting and Repairing ยท VPN Connectivity Troubleshooting
An administrator is troubleshooting a connectivity issue where on-premises VMs cannot communicate with VMs in a VMware Cloud on AWS SDDC over a newly configured route-based IPsec VPN. The VPN tunnel status is 'Up' in the NSX Manager. The administrator has verified that firewall rules on both the on-premises gateway and the SDDC Compute Gateway allow the traffic. What is the most likely remaining cause of the connectivity failure?
graph TD
subgraph On-Premises Data Center
OnPremVM[VM 10.10.10.5]
OnPremGW[Firewall/Router]
end
subgraph VMC on AWS SDDC
SDDC_VM[VM 192.168.1.5]
CGW[Compute Gateway]
end
OnPremVM --> OnPremGW
OnPremGW -- "IPsec VPN (Up)" --x CGW
CGW --> SDDC_VM
Answer and explanation
Correct answer: A
For a route-based VPN in VMware Cloud on AWS, the IPsec tunnel provides the secure transport, but BGP (Border Gateway Protocol) is required to exchange routing information between the on-premises network and the SDDC. If the tunnel is up but no traffic flows, a common cause is a misconfigured or failed BGP session, meaning neither side knows how to route traffic to the other.
Q7Question 7
Intermediate
Integrating Other VMware Products with the SDDC ยท vRealize Log Insight Cloud Configuration
A healthcare organization is deploying a new electronic health record (EHR) system on VMware Cloud on AWS. To meet HIPAA compliance requirements, all log data from the SDDC (including vCenter, ESXi, and NSX) must be forwarded to a centralized, compliant SIEM solution for long-term retention and analysis. The organization is already using vRealize Log Insight Cloud. What is the correct procedure to meet this requirement?
Answer and explanation
Correct answer: C
The correct, supported method is to have the SDDC forward all logs to its integrated vRealize Log Insight Cloud instance. From there, the administrator can configure log forwarding within vRealize Log Insight Cloud to send all necessary logs to one or more external SIEM endpoints. This provides a centralized and manageable forwarding point.
Q8Question 8
Intermediate
Performance-tuning and Optimization ยท vSphere Permissions
An administrator needs to provide a junior colleague with the ability to create, delete, and manage virtual machines within a specific resource pool in the SDDC, but prevent them from making any changes to cluster-level settings like DRS or HA. What is the most effective way to grant these specific permissions?
Answer and explanation
Correct answer: B
The principle of least privilege dictates creating a custom role with only the required permissions (e.g., VM Power On/Off, Create, Delete) and assigning that role to the user specifically on the target resource pool. The CloudAdmin role has the privilege to create and manage these custom roles, enabling granular access control.
Q9Question 9
Intermediate
Planning and Designing ยท Connectivity Options
A media company wants to extend their on-premises data center to VMware Cloud on AWS to handle burst rendering workloads. They need a high-bandwidth, low-latency, private connection. The on-premises data center is located in an AWS Direct Connect enabled facility. They have already provisioned a 10 Gbps Direct Connect connection. Which type of virtual interface (VIF) must be configured on the Direct Connect connection to establish private connectivity to the SDDC?
Answer and explanation
Correct answer: B
A private VIF is the correct choice for establishing a private, dedicated connection from an on-premises network to an AWS Virtual Private Cloud (VPC). Since the VMware Cloud on AWS SDDC is connected to a customer's VPC, the private VIF is used to extend the on-premises network to that VPC, thereby enabling private access to the SDDC.
Q10Question 10
Advanced
Planning and Designing ยท Sizing and Disaster Recovery
Case Study:
A global logistics company, 'ShipFast', is planning a full data center evacuation to VMware Cloud on AWS. Their on-premises environment consists of 500 VMs with a total of 2000 vCPU, 8TB RAM, and 150TB of utilized storage. The workloads include Oracle databases, web servers, and custom Java applications. An analysis with Live Optics shows an average of 80,000 IOPS with a 70/30 read/write ratio. The CIO has mandated that the new cloud environment must support disaster recovery to a different AWS region with an RPO of 15 minutes.
The project team must select the appropriate host type and size the initial SDDC. They also need to choose a DR solution. The primary goal is to balance performance for the database workloads with overall cost-effectiveness. The migration must be completed within three months with minimal downtime for critical applications.
Which combination of host type and disaster recovery solution best meets ShipFast's requirements?
Answer and explanation
Correct answer: B
This is the optimal solution. The i3en.metal hosts are designed for storage-dense and I/O-intensive workloads like Oracle databases, making them a perfect fit for the 150TB storage and high IOPS requirement. VMware Site Recovery is the native, integrated DRaaS solution for VMware Cloud on AWS that can easily achieve an RPO of 15 minutes or less through vSphere Replication.
Register free for 10 more questions
Or unlock all 222 5V0-11-21 questions with explanations, timed mode and flashcards.
