3V0-21.21 Exam - Advanced Design VMware vSphere 7.x

NEW QUESTION 1
During a requirements gathering workshop, the customer provides the following requirement:
A new vSphere platform must be designed securely and all interfaces must be protected against potential snooping.
How should this non-functional security requirement be documented?

• A. Interfaces must be audited.
• B. Encrypted channels must be used for all communications.
• C. Unauthorized access to interfaces must be reported within 15 minutes.
• D. Communications must be through Private VLANs (PVLAN).

Answer: A

NEW QUESTION 2
The architect for a large enterprise is tasked with reviewing a proposed design created by a service partner.
Which design elements are expected to be detailed within the physical design section of the documentation?

• A. A design diagram illustrating the configuration and specific attributes, such as IP addresses
• B. A list of requirements, constraints, and risks
• C. A solution architecture diagram with the components and data flow
• D. An entity relationship diagram describing upstream and downstream dependencies for specific service components

Answer: B

NEW QUESTION 3
A customer defines a requirement to minimize the vMotion migration time during a maintenance period. The servers being used are equipped with eight 1 GbE network adapters.
Per the defined logical network configuration, there are two network adapters each used for:
Management traffic
vMotion traffic
iSCSI traffic
Virtual machine traffic
Which design decision should the architect make to meet the customer requirement?

• A. Use Network I/O Control to define a reservation for vMotion traffic.
• B. Implement Multi-NIC vMotion by adding additional vMotion VMkernels.
• C. Configure a dedicated TCP/IP stack for vMotion traffic.
• D. Combine vMotion and Management traffic to make use of four adapters.

Answer: A

NEW QUESTION 4
An architect is tasked with designing a greenfield VMware software-defined data center (SDDC) solution that will be used to deliver a private cloud service for a customer.
During the initial meeting with the service owner and business sponsor, the customer has provided the following information to help inform the design:
The solution must initially support the concurrent running of 300 production and 600 development virtual machines.
The production environment should be delivered across two geographically dispersed data centers. The development environment must be vSphere-based but does not have to be deployed on-premises.
The two data centers are connected to each other through multiple diversely routed, high bandwidth and low latency links.
The customer’s server hardware standard document states that all virtual infrastructure hosts must be based on blade architecture only.
The service owner has said that is important to ensure that neither the availability target of 99.5% nor the resource capacity is affected when the operations team completes maintenance activities, such as the monthly software patching and ad-hoc hardware break/fix.
All virtual machine backups must be completed using the existing backup service. The recovery time objective (RTO) for the service is four hours.
The recovery point objective (RPO) of the service is 24 hours.
Given the information from the customer, which two would be classified as assumptions within the design? (Choose two.)

• A. The backup service will store data in a secure facility
• B. The backup service has sufficient capacity for the new requirements
• C. The customer will update their hardware standard to support rack mount servers
• D. All virtual machines will be deployed with the same resource profile for production and development
• E. The clusters will have a minimum redundancy of N+1

Answer: BE

NEW QUESTION 5
There is a request for approved virtual machine applications through a new vSphere platform’s integrated automation portal. The platform was built following all provided company security guidelines and has been assessed against Sarbanes-Oxley Act of 2002 (SOX) regulations.
The platform has the following characteristics:
vRealize Operations is being used to monitor all clusters.
There is a dedicated ESXi cluster, supporting all management services.
All network traffic is via distributed virtual switches (DVS). There is a dedicated ESXi cluster for all line-of-business applications.
Network traffic is serviced by NSX-T.
There is a dedicated ESXi cluster for virtual desktop infrastructure (VDI).
Network traffic is serviced by NSX-T.
The application owner is requesting approval to install a new service that must be protected as per the Payment Card Industry (PCI) Data Security Standard.
Which additional non-functional requirement should the architect include in the design to support the new service?

• A. The vSphere hosting platform and all PCI application virtual machines must be assessed against Payment Card Industry (PCI) Data Security Standard compliance.
• B. The vSphere hosting platform and all PCI application virtual machines must be assessed for SOX compliance.
• C. The vSphere hosting platform and all PCI application virtual machine network traffic must be routed via NSX-T.
• D. The vSphere hosting platform and all PCI application virtual machines must be monitored using the vRealize Operations Compliance Pack for Payment Card Industry.

Answer: A

NEW QUESTION 6
Following a company merger, there are two data centers running vSphere environments. Both data centers are leveraging separate Layer 3 vMotion networks.
Which requirement must be met in order to enable vMotion migration between these locations?

• A. The vMotion service must be configured on the Management VMkernel adapter
• B. A dedicated TCP/IP stack for vMotion with a dedicated gateway must be configured
• C. A stretched vMotion network must be configured between data centers
• D. Virtual machines must be powered off in order to migrate them between data centers

Answer: B

NEW QUESTION 7
Refer to the exhibit.
During a requirements gathering workshop, the customer shares the following diagram regarding their availability service-level agreements (SLAs):

The customer wants database application level availability to always take precedence. What should the architect recommend to meet the customer’s requirement?

• A. Enable vSphere HA and add a VM Override with VM Restart Priority set to Highest.
• B. Enable Fault Tolerance.
• C. Enable Sphere HA and maintain the default settings.
• D. Enable vSphere HA and add a VM Override with VM Restart Priority set to Lowest.

Answer: D

NEW QUESTION 8
During a requirements gathering workshop, the customer provides the following requirement (REQ) and constraints (CON):
REQ01: The customer is looking for a way to limit database virtual machine (VM) placement to save on CPU licensing costs.
CON01: There is a single cluster with no budget to scale.
CON02: All virtual machines must run on the consolidated cluster.
Which two design decisions should the architect make to meet the customer requirement? (Choose two.)

• A. The solution must use VM-VM anti-affinity rules
• B. The solution must use vSphere DRS in manual mode
• C. The solution must use a vRealize Orchestrator workflow for VM placement
• D. The solution must use VM-Host affinity rules
• E. The solution must use vSphere VM and host DRS groups

Answer: DE

NEW QUESTION 9
An organization's existing vSphere environments are configured for Enhanced Linked Mode. The DevOps team automates the creation of hardened virtual machine images for various operating systems. Their continuous integration/continuous delivery (CI/CD) pipeline runs a task at the end of a successful build, which uploads the Open Virtualization Format (OV) image to a sandbox content library, deploys a virtual machine from the image, and then destroys these objects after quality checks are complete.
The following requirements have been noted:
All content libraries and images must be centrally created and managed.
All images must be capable of being updated.
All images must be refreshed and available to subscribed libraries within 24 hours.
All images must provide details of the image contents and versions.
All images must be capable of being reverted to a previous version.
All images must be capable of having the hardware and guest operating system customized during deployment.
Which three recommendations should the architect make to design a content library solution that will meet these requirements? (Choose three.)

• A. Create a local content library in the primary vSphere environment and enable publishing.
• B. Create and publish a new subscription to a new subscriber library for each target vSphere environment.
• C. Deploy the OVF images to vSphere and clone as an OVF template to a local content library.
• D. Deploy the OVF images to vSphere and clone as a VM template to a local content library.
• E. Edit the Auto Sync Refresh Interval advanced setting for each subscribed library.
• F. Add a new subscriber library from each vSphere environment.

Answer: ACF

NEW QUESTION 10
During a requirements gathering workshop, the customer provides the following requirement that is pertinent to the design of a new vSphere environment:
The Maximum Tolerable Downtime (MTD) for all Tier 1 applications is one hour. Which requirement classification is being gathered for the design documentation?

• A. Manageability
• B. Performance
• C. Availability
• D. Recoverability

Answer: C

NEW QUESTION 11
Refer to the exhibit.
During a requirements gathering workshop, the architect shares the following diagram:

What should the architect recommend for guaranteed throughput for each service?

• A. Use explicit failover order with pNIC0 as Active for ESXi Management and VM Network Use explicit failover order with pNIC1 as Active for backup networkUse explicit failover order with pNIC2 as Active for vMotion Use explicit failover order with pNIC3 as Active for replication
• B. Use the Route Based on IP Hash for ESXi management and VM network Use the Route Based on IP Hash for backup networkUse the Route Based on the Originating Virtual Port for vMotion Use failover with pNIC3 as Active for replication
• C. Create a link aggregation group (LAG) for vDS_01Use the Route Based on Physical NIC Load for vMotion Use the Route Based on Physical NIC Load for replication
• D. Use the Route Based on IP Hash for ESXi management and VM network Use failover with pNIC1 as Active for backup networkCreate a link aggregation group (LAG) for vDS_02

Answer: A

NEW QUESTION 12
Following a recent acquisition, an architect needs to merge IT assets into its current data center. The combined vSphere environment will need to run the newly acquired company’s virtual machines.
Network integration work has already been completed and the current environment has capacity to host all virtual machines. The Operations team needs to identify which virtual machines belong to the acquired company and report on their usage.
How should the architect merge the company’s assets and virtual machines?

• A. Leave the newly acquired company’s assets in its current place
• B. Lift and shift the acquired assets into the data center
• C. Migrate the acquired company’s virtual machines into the existing vSphere environment
• D. Migrate and apply vSphere tags to the acquired company’s virtual machines

Answer: D

NEW QUESTION 13
A new real-time financial service application is being developed by the engineering team at a financial firm and will be released as a public Software-as-a-Service (SaaS) offering. The solutions architect has designed and deployed a new vSphere environment and the supporting network infrastructure for hosting all public services. ESXi hosts are configured to use Precision Time Protocol (PTP) and a local stratum-1 network time server.
Application provisioning and scaling will be managed by VMware vRealize Automation and can be run on Microsoft Windows or multiple distributions of Linux.
Which three recommendations should the architect include in the design to ensure that the service maintain timekeeping within an accuracy of one second? (Choose three.)

• A. Use Microsoft Windows Server as the guest operating system.
• B. Configure the chrony time-sync agent on each virtual machine guest operating system.
• C. Set the virtual hardware device to use Host System Time (NTP) for each virtual machine running the application.
• D. Add a precision clock virtual device to each virtual machine running the application.
• E. Use a Linux distribution as the guest operating system.
• F. Add a virtual watchdog timer (VWDT) device to each virtual machine running the application.

Answer: ABC

NEW QUESTION 14
An architect is designing a new vSphere environment to meet the following requirements:
The environment must support 5,000 virtual machines.
The environment will be built initially using 350 hosts.
Which vCenter Server appliance deployment size should the architect specify for the design?

• A. Large
• B. Small
• C. Tiny
• D. Medium

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vcenter.install.doc/GUID-077C7523-E0EA-492

NEW QUESTION 15
An architect is designing storage for a new vSphere environment to meet the following requirements: Asynchronous replication is required between two sites.
The impact on the storage layer should not impact the performance of the compute layer.
Each application tier will require different replication attributes.
Virtual machine live migration across compute and storage must be supported.
Virtual machine aware back up will be leveraged.
Operational management overhead should be minimized.
Operational automation should be supported.
Which storage design recommendations would meet the requirements?

• A. Two new Fibre Channel storage arrays will be deployed, one at either site.Each application tier will be initially provisioned a new LU
• B. Data replication will be offloaded to the new arrays.
• C. Two new vSphere clusters enabled with vSAN will be deployed, one at either sit
• D. vSAN will be used to provide policy-based management for each application tier.vSphere Replication will be used to replicate the virtual machine data in an asynchronous configuration.
• E. Two new ISCSI storage arrays will be deployed, one at either site.Each application tier will be initially provisioned a new LU
• F. Data replication will be offloaded to the new arrays.
• G. Two new storage arrays will be deployed, one at either site.vSphere Volumes (vVOLs) will be used to provide policy-based management for each application tie
• H. Data replication will be offloaded to the new arrays.

Answer: B

NEW QUESTION 16
An architect is finalizing the design for a new vSphere platform based on the following information:
All Windows virtual machines will be hosted on a dedicated cluster for licensing purposes.
All Linux virtual machines will be hosted on a dedicated cluster for licensing purposes. All management virtual machines will be hosted on a dedicated cluster.
A total of ten physical sites will be used to host virtual machines.
In the event of one physical datacenter becoming unavailable, the manageability of the virtual infrastructure in the remaining data centers should not be impacted.
Access to configure the management virtual machines via vCenter Server must be controlled through the management Active Directory domain.
Access to configure the Windows and Linux virtual machines must be controlled through the resource Active Directory domain.
The management and resource Active Directory domains are part of separate Active Directory forests and do not have any trusts between them.
The design will use Active Directory with Integrated Windows Authentication.
How should the architect document the vCenter Server configuration for this design?

• A. Deploy a vCenter server for the management cluster.Deploy a vCenter Server for all remaining cluster
• B. Create a shared SSO domain for each physical site.
• C. Deploy a vCenter Server for the management cluster.Deploy a vCenter Server for all remaining cluster
• D. Create a shared SSO domain across all physical sites.
• E. Deploy a vCenter Server for the management cluster with a dedicated SSO domain.Deploy a vCenter Server for all remaining clusters and use a dedicated SSO domain for each physical site.
• F. Deploy a vCenter Server for the management cluster with a dedicated SSO domain.Deploy a vCenter Server for all remaining clusters and use a dedicated SSO domain into a single physical site.

Answer: B

NEW QUESTION 17
......