25 free VMware 2V0-17.25 practice questions from the CertStash pack of 100, each with the correct answer and a full explanation. The rule is the same for every exam: ten free on the product page, 25 free here, all 100 in the pack, and each step includes the one before it.
Get all 100 questions (US$39) · Download the first 10 as a PDF
Question 1
Which VMware Cloud Foundation (VCF) Automation component provides a self-service catalog in the VM Apps tenant?
Show answer and explanation
Correct answer: A. VCF Service Broker
In the VM Apps organization of VCF Automation, Service Broker is the service that delivers the self-service catalog. Administrators bring blueprints and orchestrator workflows into the catalog, control who can request each item with content sharing policies, and users then request and track their deployments from it. In VCF 9.0 the Service Broker, Assembler and Orchestrator interfaces are merged into one portal, where the catalog appears under the Consume menu, but Service Broker remains the backend service that provides it.
Why the other options are wrong
- B. Config handles configuration management of deployed machines; it does not present catalog items for users to request.
- C. Assembler is where blueprints are designed and versioned, and users request those blueprints through the Service Broker catalog, not through Assembler.
- D. VCF Operations orchestrator runs workflows that can be offered as catalog items, but it does not host the self-service catalog itself.
Question 2
A security team informed an administrator that a VMware vCenter root password was compromised. As a precaution, the password was changed directly in vCenter. What should an administrator do to regain management capability of this vCenter by VMware Cloud Foundation (VCF) Operations?
Show answer and explanation
Correct answer: C. Enter the new root password using the Remediate password function in VCF Operations.
When a password is changed directly at the component, the credential that VCF has stored no longer matches, so VCF can no longer authenticate to that vCenter. Remediate password exists for exactly this case: it reconciles a single account with a password that was set manually at the component, synchronizing the stored credential with the new value. The administrator enters the new root password through the Remediate password function in VCF Operations, and management of the vCenter is restored. Remediation should be run when no other workflows are running or scheduled.
Why the other options are wrong
- A. Rotate generates a new randomized password for the account and does not record a password already changed at the component; in VCF 9.0 rotation also runs from SDDC Manager rather than VCF Operations.
- B. VCF Operations password management offers Update and Remediate operations; there is no Reset password function that accepts a password changed outside VCF.
- D. Update password sets a newly entered password on the component through VCF, which relies on VCF still holding the working current password, and that is no longer the case here.
Question 3
An administrator is responsible for managing a VMware Cloud Foundation (VCF) Automation organization within a VCF instance. The administrator has been tasked with updating a VMware NSX VPC by editing the NSX Connectivity profile for an NSX Project. The current profile was generated automatically when the NSX VPC was created. What is the impact of the administrator making this change to the NSX VPC?
Show answer and explanation
Correct answer: B. All NSX VPCs that use the default VPC connectivity profile will be updated with the new VPC connectivity profile.
A VPC connectivity profile defines the northbound connectivity of the VPCs that use it, such as the transit gateway and the external and private transit gateway IP blocks. The profile created automatically in this scenario is the default VPC connectivity profile, which VCF creates alongside the NSX Project, transit gateway and default VPC, and which any VPC without a custom profile uses. When a connectivity profile is edited, the change affects the northbound connectivity configuration of every VPC that uses that profile. Editing the default profile therefore updates all VPCs attached to it, while VPCs that use a different profile keep their existing settings.
Why the other options are wrong
- A. VPCs in the organization that use other connectivity profiles are not affected, because an edit only reaches the VPCs that use the edited profile.
- C. The edited profile is the shared default profile, so the change reaches every VPC that uses it rather than only the selected VPC.
- D. The scope of the change follows the profile, not the project, so VPCs in the same NSX Project that use a custom profile are left unchanged.
Question 4
An administrator is tasked to obtain an overview of all VMware vSAN and non-vSAN datastores within a VMware Cloud Foundation (VCF) environment using VCF Operations. Where can the administrator access the required information?
Show answer and explanation
Correct answer: D. Storage Overview
Storage Overview, which VCF 9.0 documents as the Storage Operations page under Infrastructure Operations, is the centralized storage dashboard in VCF Operations for both vSAN and non-vSAN storage. It gives an overview of the datastore inventory, shows the usage and distribution of vSAN and non-vSAN datastores with filters for each type, lists storage-related alerts, and adds vSAN cluster health and performance views. Because it brings every datastore in the environment onto one page, it is the place to obtain the requested overview of all vSAN and non-vSAN datastores.
Why the other options are wrong
- A. Data Protection & Recovery covers backup and disaster recovery of workloads, not an inventory of datastores.
- B. VCF Health reports the health of VCF components and services rather than listing the vSAN and non-vSAN datastores.
- C. Diagnostic Findings lists detected known issues and how to remediate them, not an inventory of datastores.
Question 5
An administrator has been tasked with deploying a new VMware Cloud Foundation (VCF) instance using a supported VCF Operations model that has the smallest possible resource footprint. Which VCF Operations deployment model should the administrator use?
Show answer and explanation
Correct answer: C. Simple
The Simple VCF Operations model deploys VCF Operations as a single node, which VCF design guidance lists as the model with the smallest footprint. It relies on vSphere HA to restart the node after an ESX host failure, so recovery is slower and monitoring can be interrupted, but it uses the fewest resources and can later be scaled out to a highly available model. For a requirement focused only on the smallest supported footprint, Simple is the model to choose.
Why the other options are wrong
- A. Continuous Availability splits a multi-node VCF Operations cluster across two fault domains in separate availability zones, which needs far more resources than a single node.
- B. High Availability deploys a three-node cluster of primary, replica and data nodes, so its footprint is several times that of the Simple model.
- D. Stretched Cluster is a vSphere and vSAN cluster topology, not one of the VCF Operations models (Simple, High Availability and Continuous Availability).
Question 6
Which three statements are characteristics of a VMware Cloud Foundation (VCF) private cloud? (Choose three.)
Show answer and explanation
Correct answer: B, C, F. VCF offers automation of operations and the ability to optimize network services; VCF supports the provisioning of both VMs and containers; VCF offers the ability to configure full isolation of organizations in the private cloud.
VCF is a private cloud platform that automates operations such as deployment, lifecycle and password management, and through NSX it delivers software-defined network services that can be tuned and automated. It provisions both traditional virtual machines and containers, with vSphere Supervisor and VKS clusters running Kubernetes workloads alongside VMs. Through VCF Automation organizations, each tenant operates in its own secure and isolated environment with separate users, projects, resources and networking, giving full isolation between organizations in the same private cloud.
Why the other options are wrong
- A. VCF runs in the customer's own data centers, so compliance is governed by the customer's own controls rather than limited to a cloud provider's offerings.
- D. VCF supports vSAN, NFS v3 and VMFS on Fibre Channel as principal storage, so it is not limited to vSAN.
- E. VCF scales through automated workflows such as commissioning hosts and adding clusters or workload domains, not through manual configuration or custom scripts.
Question 7
An administrator is preparing to deploy a new VMware Cloud Foundation (VCF) fleet to an environment that does not have internet access. Which two binaries must be uploaded to the VCF Installer appliance before initiating the deployment? (Choose two.)
Show answer and explanation
Correct answer: B, C. VCF Operations; NSX
Without internet access, the VCF Installer cannot download from the online depot, so the required binaries must be placed on the appliance, with the VCF Download Tool or from an offline depot, before deployment starts. The required binaries for a VCF deployment are VCF Automation, NSX, VCF Operations, VCF Operations fleet management, VCF Operations collector, vCenter and SDDC Manager. Of the listed choices, VCF Operations and NSX are the two that appear on that list, so both must be on the appliance before the deployment begins.
Why the other options are wrong
- A. ESX is already installed on the hosts before the installer runs, so it is not among the binaries the VCF Installer needs.
- D. Lifecycle Manager is not among the binaries the VCF Installer requires; fleet lifecycle in VCF 9.0 is provided by VCF Operations fleet management.
- E. VCF Identity Broker is not on the installer's list of required binaries; identity and VCF SSO configuration is completed after the fleet is deployed.
Question 8
An administrator is responsible for managing a VMware Cloud Foundation (VCF) fleet. The administrator has been tasked with creating a solution that allows Kubernetes development teams to complete the self-service creation of Active Directory (AD) accounts with the following requirements:
• Only users within the Development tenant should be able to create user accounts.
• Users must be able to create and destroy user accounts in the development AD only.
The administrator has already deployed a dedicated VCF Operations orchestrator for the Development tenant.
What four additional tasks must the administrator complete to meet the stated objective? (Choose four.)
Show answer and explanation
Correct answer: C, D, E, G. Configure the VCF Operations orchestrator integration to connect to the dedicated VCF Operations orchestrator; Publish the Active Directory User creation workflow to the self-service catalog in VCF Automation through the Content Hub; Create a Custom Resource object and select the appropriate VCF Operations orchestrator workflows for object creation and destruction; Configure the VCF Operations orchestrator Active Directory plug-in to connect to the development Active Directory.
Because a dedicated VCF Operations orchestrator already exists for the Development tenant, the VCF Automation integration must point at that instance rather than the embedded one, so the workflows run on the tenant's own orchestrator. The orchestrator Active Directory plugin is connected to the development Active Directory only, so the workflows can never touch production accounts. A Custom Resource built on the orchestrator workflows for creation and destruction gives users an AD user object they can create and later remove, and adding the AD user creation workflow to the self-service catalog through the Content Hub lets development users request it themselves.
Why the other options are wrong
- A. The embedded orchestrator is not the instance dedicated to the Development tenant, so pointing the integration at it bypasses the orchestrator deployed for this purpose.
- B. Connecting the plugin to the production Active Directory would let developers create and delete production accounts, which the requirements forbid.
- F. Active Directory user creation is delivered as an orchestrator workflow from the AD plugin, so the catalog item is built from the workflow rather than from an action.
Question 9
An administrator is deciding on a storage solution to create the first management workload domain for a new VMware Cloud Foundation (VCF) instance. Which three storage solutions can the administrator use as principal storage? (Choose three.)
Show answer and explanation
Correct answer: B, C, D. VMFS on Fibre Channel (FC); NFSv3; vSAN OSA
When the VCF Installer deploys a new instance, the storage chosen for the default cluster of the management domain becomes its principal storage, and the installer offers three types: vSAN (ESA or OSA), VMFS on Fibre Channel and NFS v3. For VMFS on FC the datastore must already be created and mounted on all ESX hosts, and for NFS v3 the NFS server must already exist and meet the vSphere storage requirements. The principal storage type of a cluster cannot be changed later, although clusters with other principal storage types can be added.
Why the other options are wrong
- A. NVMe/TCP is not one of the principal storage types the VCF Installer offers for the management domain, which are vSAN, VMFS on FC and NFS v3.
- E. vVols is not offered as principal storage for the management domain, and VCF 9.0 deprecates the vSphere Virtual Volumes capability.
Question 10
An administrator is tasked with configuring a storage solution within a VMware Cloud Foundation (VCF) environment. The storage must be accessible to both client workstations and virtual machines. Which VCF feature should an administrator configure to satisfy the requirement?
Show answer and explanation
Correct answer: D. vSAN File services
vSAN File Service provides file shares over NFS and SMB directly from the vSAN cluster. Because the shares are reached over the network with standard file protocols, client workstations can mount them in the same way that virtual machines can, which satisfies the requirement for storage accessible to both. The service runs on the vSAN cluster itself, so no separate file server or external NAS array has to be deployed to provide the shares.
Why the other options are wrong
- A. A vSAN storage cluster provides vSAN datastore capacity to vSphere clusters for virtual machines; it does not present file shares to client workstations.
- B. A local VMFS datastore is block storage on a single host used for virtual machine files, and workstations cannot mount it as a share.
- C. A vSAN stretched cluster spreads one vSAN cluster across two sites for site-level availability; it adds no file access for workstations.
What people say about the full 2V0-17.25 pack 5.0 from 5
These dumps are 100% valid. Most of the 2V0-17.25 exam questions came from Cert Stash. Thanks for helping me get certified!
Have answered my 2V0-17.25 exam today with confidence. Your dumps were valid, so I passed my VMware Cloud Foundation 9.0 Administrator exam with good marks. Thanks!
Just now finished 2V0-17.25 exam – 100% valid! Thanks very much!
Question 11
An administrator has been tasked with configuring regions in VMware Cloud Foundation (VCF) Automation to provide resources reflecting different service classes to VCF Automation Organizations.
The following information has been provided to the administrator for this task:
• Regions should be created to provide Gold, Silver and Bronze service classes.
• The Gold service class should be configured with VMware vSAN storage.
• The Silver service class should be configured with NFS storage.
• The Bronze service class should be configured with Virtual Machine File System (VMFS) on Fibre Channel (FC) storage.
The administrator plans to deploy a new VMware Cloud Foundation (VCF) fleet with a single VCF instance with three workload domains to complete this task.
Which two items should the administrator validate as a part of the VCF deployment, to allow the creation of the three regions? (Choose two.)
Show answer and explanation
Correct answer: B, E. The vSphere Supervisor is enabled on each workload domain vCenter instance; All required Storage classes are present and have the same names across all VMware vCenter instances.
In VCF Automation a region is built from vSphere Supervisors, so each workload domain vCenter that will back one of the regions needs the Supervisor enabled before the regions can be created. The Gold, Silver and Bronze service classes here differ by storage type, and storage reaches organizations as storage classes created from vCenter storage policies. For the regions to present consistent tiers, the required storage classes must exist with the same names across all vCenter instances, so the vSAN, NFS and VMFS on FC storage maps cleanly to each region.
Why the other options are wrong
- A. The three service classes in this task differ only by storage type, so VM class naming does not decide whether the storage-based regions can be created.
- C. Every VCF workload domain is deployed with NSX Manager as part of domain creation, so it is not a separate item that determines whether the regions can be created.
- D. A region quota is set when a region is allocated to an organization, so it comes after region creation and is not part of validating the VCF deployment.
Question 12
What is a valid use case for VMware Cloud Foundation (VCF) Operations for networks?
Show answer and explanation
Correct answer: C. Performing Crown Jewel Analysis.
VCF Operations for networks analyzes network flows and the relationships between entities across virtual and physical networks. Crown jewel analysis is one of its documented capabilities: the administrator marks the most critical VMs and physical IP addresses as crown jewels, and the product then shows the flows reaching them, the entities directly connected to them and their total incoming traffic. This identifies possible lateral movement paths an adversary could use to reach those assets, which helps plan segmentation and security policy.
Why the other options are wrong
- A. Report generation is not a use case in itself; the PDFs it can export only package information it has already gathered, such as an NSX assessment or a dashboard.
- B. VCF Operations for networks collects and analyzes data from network devices and NSX; it does not run automation jobs that change their configuration.
- D. Collecting and providing logs from NSX components is the role of VCF Operations for logs, not VCF Operations for networks.
Question 13
An administrator configures a new VMware NSX overlay segment for a new pool of virtual desktops to connect to with default segment policies. The virtual desktops will obtain an IPv4 address from a DHCP server connected to the same segment. Which action must the administrator take to ensure IPv4 lease addresses can be successfully obtained from the DHCP server?
Show answer and explanation
Correct answer: A. Clone the default segment security profile, configure the DHCP server block to No on the cloned profile and apply it to the segment.
The segment security profile on an NSX segment includes a DHCP Server Block setting that drops DHCP server traffic coming from VMs on that segment. With the default profile applied, the DHCP server attached to the desktop segment cannot answer the clients, so no IPv4 leases are handed out. Default segment profiles are read-only, so the administrator clones the default segment security profile, sets DHCP Server Block to No on the copy and applies the cloned profile to the segment.
Why the other options are wrong
- B. The default IP discovery profile is read-only and has no DHCP Server Block setting, which belongs to the segment security profile.
- C. IP discovery profiles control how NSX learns VM addresses, such as through ARP and DHCP snooping, and do not contain the DHCP Server Block setting.
- D. Default segment profiles are read-only in NSX, so DHCP Server Block cannot be changed on the default security profile itself.
Question 14
An administrator is tasked with creating a new VLAN-backed segment in a VMware Cloud Foundation (VCF) environment to provide connectivity for a group of Virtual Machines (VMs). Which two actions must the administrator take when creating a VLAN-backed segment in NSX Networking? (Choose two.)
Show answer and explanation
Correct answer: B, E. Specify VLAN ID; Specify VLAN transport zone.
In NSX, a segment created in a VLAN transport zone is a VLAN-backed segment, so selecting the VLAN transport zone is what makes the segment VLAN-backed. For a VLAN transport zone, a VLAN ID (or a range of IDs for guest VLAN tagging) must be configured, defining the VLAN that backs the segment in the physical network. Gateway connectivity, a gateway IP subnet and custom segment profiles are all optional for this kind of segment, so only the transport zone and the VLAN ID are required.
Why the other options are wrong
- A. A gateway IP address is required only when the segment connects to a Tier-0 or Tier-1 gateway; a standalone VLAN segment does not need one.
- C. Gateway connectivity is optional, and a VLAN-backed segment can be created with its connectivity set to None.
- D. Default segment profiles are applied automatically, so binding profiles is not a required step.
Question 15
An administrator has been tasked with ensuring the network team can fully utilize the Network Operations feature in VMware Cloud Foundation (VCF). What VCF component must the administrator ensure is installed and configured to support this requirement?
Show answer and explanation
Correct answer: A. VCF Operations for networks
The Network Operations feature in VCF is delivered by VCF Operations for networks, the product formerly known as Aria Operations for Networks (vRealize Network Insight). It collects flows, topology and NSX data so network teams can troubleshoot and plan. It must be deployed and configured for the feature to be fully usable.
Why the other options are wrong
- B. The VCF Operations collector is a data-gathering proxy for VCF Operations and does not by itself provide the network operations analytics.
- C. vDefend firewall provides distributed and gateway security, not network operations visibility and troubleshooting.
- D. NSX provides the virtual networking being monitored but does not supply the Network Operations feature.
Question 16
An administrator is responsible for managing a VMware Cloud Foundation (VCF)-based private cloud. The private cloud consists of a single tenant with two projects: Development and Production.
The administrator has been tasked with ensuring that, when users deploy new VMware Supervisor-based resources within the private cloud, they meet the following criteria:
• By default, all Kubernetes clusters must tolerate a single control plane node failure.
• Only Kubernetes cluster resources will be deployed within the production project.
• In the development project, resources must be minimized.
Which three actions should the administrator take to meet the objective? (Choose three.)
Show answer and explanation
Correct answer: B, C, E. Create a new IaaS Resource Policy for the production project using the Disallow VM resource template; Create a new IaaS Resource Policy for the organization using the Enforce multi-control-node Kubernetes cluster template; Create a new IaaS Resource Policy for the development project using the Enforce single-control-node Kubernetes cluster template.
IaaS resource policies in VCF Automation control what namespaces in an organization or project can provision, and the built-in templates cover these requirements. An organization-scoped policy from the Enforce multi-control-node Kubernetes cluster template requires at least three control nodes, so by default every cluster can tolerate the loss of one control plane node. A production-scoped policy from the Disallow VM resource template blocks VM provisioning there, leaving only Kubernetes cluster resources. A development-scoped policy from the Enforce single-control-node Kubernetes cluster template limits development clusters to one control node, minimizing their resource use.
Why the other options are wrong
- A. A single-control-node policy in production would remove control plane redundancy where clusters must tolerate a control node failure.
- D. Disallowing VMs for the whole organization would also block VMs in development, while the restriction is required only in the production project.
- F. A multi-control-node policy for development would force at least three control nodes there, which works against minimizing development resources.
Question 17
An administrator is responsible for the management of a VMware Cloud Foundation (VCF)-based private cloud. The environment is configured in the following ways:
• A single Organization for VM Applications with 50 application development projects.
• The relevant information for the configuration of the FitnessTrackerApp project is as follows:
◦ Project Administrators: FTA_Admins (Group)
◦ Project Members: FTA_Developers (Group), FTA_LeadDevelopers (Group)
◦ Provisioning Zone(s): vcf-wld-01
The administrator has been tasked with ensuring that the newly created catalog item (Mobile Application Backend) is initially only visible to the Lead Developers of the FitnessTrackerApp project.
The administrator has already completed the following tasks:
1. Logged into VCF Automation.
2. Updated the Content Source to include the Mobile Application Backend blueprint.
Which four additional steps must the administrator take to complete the objective? (Choose four.)
Show answer and explanation
Correct answer: A, C, E, F. Add the FTA_LeadDevelopers Group to the new policy; Configure the Scope of the new policy to be Project and select the FitnessTrackerApp project; Add the Mobile Application Backend catalog item to the new policy; Create a new Content Sharing Policy.
Content sharing policies control which users and groups can see and request catalog items in VCF Automation. The administrator creates a new Content Sharing Policy, sets its scope to Project and selects FitnessTrackerApp so the policy applies only to that project, adds the Mobile Application Backend catalog item as the content to share, and adds the FTA_LeadDevelopers group as the users it is shared with. Only members of that group in that project can then see and request the new item, while other project members and other projects do not see it.
Why the other options are wrong
- B. A Deployment Limit Policy caps deployments and resource use; it does not decide who can see a catalog item.
- D. Adding FTA_Developers would expose the item to all developers in the project, not only the lead developers.
- G. Organization scope would apply the sharing across all 50 projects instead of only the FitnessTrackerApp project.
Question 18
A large corporation recently experienced a power outage at one of its primary data centers resulting in service disruption for customers in that region. An administrator is tasked to assess the current infrastructure and propose a plan to improve resiliency.
Current configuration:
• Single-site vSAN Express Storage Architecture (ESA) cluster
• 12 hosts
• Cluster resource utilization (CPU, memory, and storage) is under 30%
Which solution would improve resiliency and minimize service disruption in data center outages with a recovery point objective of zero without requiring additional hosts?
Show answer and explanation
Correct answer: C. Relocate six ESX hosts to another data center and configure a vSAN Stretched Cluster.
A vSAN stretched cluster spans two sites with a witness, and every write is mirrored synchronously to both sites, so a site failure loses no committed data (an RPO of zero) and vSphere HA restarts the affected VMs on the surviving site. With CPU, memory and storage utilization under 30 percent, the twelve existing hosts can be split six and six between two data centers and one site can still carry the full workload, so no additional data hosts are required.
Why the other options are wrong
- A. VMware Live Recovery protects VMs by replicating them to a separate set of hosts at a secondary site, which means more hosts, and its vSphere Replication protection is asynchronous rather than zero RPO.
- B. Fault domains spread data across racks inside the same data center, so a site-wide power outage still takes down every copy.
- D. A two-failure RAID-1 policy only adds more replicas within the same site, which does nothing when the whole data center loses power.
Question 19
An administrator has deployed a VMware Cloud Foundation (VCF) environment and needs to monitor the health of the environment. Which three components can be monitored using VCF Health in VCF Operations? (Choose three.)
Show answer and explanation
Correct answer: B, D, F. vCenter Server; NSX; ESX hosts
VCF Health in VCF Operations checks the core infrastructure of each VCF instance and reports the problems it finds. Its checks cover the vCenter Server instances that manage the domains, the NSX components that provide networking and security, and the ESX hosts that run the workloads, so the administrator can see which component is unhealthy and why. These three components form the management, network and compute layers of every VCF instance.
Why the other options are wrong
- A. VCF Operations for Logs is an optional add-on for log analysis, not one of the instance infrastructure components that VCF Health checks.
- C. VCF Operations Fleet Management handles lifecycle for the management components and is not one of the infrastructure targets VCF Health reports on.
- E. VCF Operations is the platform that runs VCF Health and displays its results, not one of the components it checks.
Question 20
What is the required update interval for VMware Cloud Foundation (VCF) licenses in connected mode to maintain the entitlement?
Show answer and explanation
Correct answer: D. 180 days
VCF 9.0 licensing requires license usage to be reported to the VCF Business Services console at least once every 180 days to maintain the licenses. In connected mode, VCF Operations sends these usage reports to the console automatically and the licenses can be updated with a single click, but the licenses must still be updated at least once every 180 days to confirm that the usage report was submitted. The 180-day interval is therefore the one that must be met to keep the entitlement valid.
Why the other options are wrong
- A. 365 days is longer than the 180-day limit, so the licenses would no longer be maintained before the update arrived.
- B. 90 days is not the required interval; usage must be reported at least once every 180 days.
- C. 270 days is longer than the 180-day limit, so the licenses would no longer be maintained before the update arrived.
Question 21
An administrator needs to scale out the VMware Cloud Foundation (VCF) Automation node from a small to a medium form factor. The environment is currently deployed using the Simple VCF Automation Model. Which action should the administrator take to achieve this?
Show answer and explanation
Correct answer: C. Scale out the VCF Automation deployment to a High Availability model with medium form factor.
The Simple VCF Automation model is a single node that defaults to the small size, and it supports scaling out and up to the High Availability model, a three-node cluster. Scaling is done in VCF Operations under Fleet Management > Lifecycle > Components with the Scale action: the administrator selects a larger target size such as Medium, adds VIPs and cluster node IP addresses for the extra nodes, runs the precheck and submits. Moving from small to medium is therefore a scale-out to a medium-sized High Availability deployment.
Why the other options are wrong
- A. The Scale workflow does not resize the single node in place; moving to medium adds nodes and node IP addresses, turning the Simple model into a cluster.
- B. A separate VCF Automation instance would leave the existing organizations and content on the small node instead of scaling that deployment.
- D. Redeploying as a single node throws away the existing deployment and still leaves a Simple model, while the Scale workflow grows the deployment in place.
Question 22
An administrator wants to implement a solution that will centrally manage and distribute Virtual Machine (VM) templates, ISO images, and other files across multiple physical locations and VMware Cloud Foundation (VCF) instances. Which solution should the administrator implement?
Show answer and explanation
Correct answer: C. Content Library
Content Library stores VM templates, ISO images and other files in vCenter and shares them through a publish and subscribe model. A publishing library makes its content available, and subscribed libraries in other vCenter instances, sites or VCF instances synchronize from it automatically or on demand. This gives the administrator one central source of templates and images that is distributed consistently to every physical location.
Why the other options are wrong
- A. A vSAN storage cluster provides datastore capacity to clusters but has no mechanism to publish or synchronize templates and ISO images between sites.
- B. A VMFS datastore is shared only by hosts connected to the same storage, so it cannot distribute content across separate sites and VCF instances.
- D. Network File Copy is the underlying protocol vSphere uses to move files between hosts and datastores, not a central catalog for managing templates and images.
Question 23
Which two of the following are use cases for VMware Cloud Foundation (VCF) Automation? (Choose two.)
Show answer and explanation
Correct answer: C, E. Implement VMware Cloud Foundation Virtual Private Cloud (VPC); Provide a Self-Service Catalog.
VCF Automation is the self-service consumption layer of VCF. It lets organizations and their projects consume VCF Virtual Private Clouds (VPCs), giving each tenant isolated networking built on NSX without filing requests with the network team. It also provides a Self-Service Catalog, where administrators offer templates and other catalog items that users request and deploy under the organization's governance policies. Both use cases deliver infrastructure as a governed, self-service private cloud, which is the purpose of VCF Automation.
Why the other options are wrong
- A. Application dependency mapping comes from flow and service analysis in the operations tools, such as VCF Operations for networks, not from the automation layer.
- B. Alerting on resource utilization is a monitoring function of VCF Operations, not a self-service automation use case.
- D. Private AI Foundation with NVIDIA is a separate add-on solution built on vSphere Supervisor and NVIDIA software, not one of the core use cases of VCF Automation itself.
Question 24
After a migration to VMware Cloud Foundation (VCF) 9.0, an administrator has been tasked to import only logging data newer than 90 days from Aria Operations for Logs 8.18 into VCF Operations for Logs. If VCF Operations for Logs has enough space available, what is the correct way to achieve this?
Show answer and explanation
Correct answer: A. Initiate the transfer from the control panel in VCF.
Aria Operations for Logs 8.18 has no in-place upgrade path to VCF 9.0: VCF Operations for logs is deployed fresh, and existing log data is brought across as a separate transfer. That transfer is started from the VCF side, in the control panel, where the administrator connects to the old Aria Operations for Logs instance and limits the import to the required time range. With enough free space on VCF Operations for logs, only the last 90 days of data are copied across and older data is left behind.
Why the other options are wrong
- B. Importing from the old instance's NFS archive is not the VCF 9.0 transfer workflow and does not select just the most recent 90 days of data.
- C. Log forwarding only sends new events as they arrive, so it cannot bring across the existing 90 days of historical data.
- D. The transfer is started from the VCF side that receives the data, not from the Aria Operations for Logs 8.18 instance being retired.
Question 25
An administrator has been tasked with showing the average health of all virtual machines (VMs) in a VMware Cloud Foundation (VCF) fleet.
The following information has been provided:
• All clusters are connected to the same VCF Operations instance.
• The Virtual Machines in scope are located across different clusters in the same VCF instance.
What should the administrator create to meet the stated objective?
Show answer and explanation
Correct answer: A. A super metric
A super metric is a formula that VCF Operations calculates from existing metrics, for example the average of the health metric across all virtual machines under a chosen object. Assigned to an object such as the VCF instance or a custom group that contains the virtual machines from every cluster, it produces a single value for average VM health, which VCF Operations then collects and stores like any other metric. This turns per-VM health values spread across several clusters into one aggregate figure.
Why the other options are wrong
- B. An alert raises a notification when its symptoms are met; it does not calculate an average value across virtual machines.
- C. A symptom is a condition used inside alert definitions, not a calculated aggregate of health values.
- D. A dashboard displays metrics that already exist; it does not create a stored average health metric for VMs across clusters.
That was 25 of 100.
The full VMware 2V0-17.25 pack has all 100 questions, each with the answer, the explanation and why the other options are wrong, plus a questions-only copy for timed runs. US$39, paid once, with free monthly updates and a pass-or-your-money-back guarantee.
Not ready yet? Get the first 50 free as one PDF by email. Get the Half Pack →