Free 2V0-17.25: VMware Cloud Foundation 9.0 Administrator Exam Questions and Answers

An administrator must allow users from the company's Microsoft Entra ID tenant to sign in to vCenter, NSX and VCF Operations across the fleet by using a single configuration. Which action should the administrator take?

• AA. Join every ESX host in the fleet to the Entra ID domain and assign host permissions to the users
• BB. Deploy a standalone Workspace ONE Access appliance and register each component as a separate application
• CC. Configure VCF Single Sign-On by using the VCF Identity Broker with Entra ID as the external identity provider
• DD. Create matching local user accounts in each vCenter and NSX Manager and map them to the Entra ID users

An administrator is planning subscription licensing for VCF. The environment has 6 hosts, each with 2 CPUs and 12 physical cores per CPU. VCF is licensed per core, with a minimum of 16 cores per CPU. How many cores must the administrator license?

• AA. 96
• BB. 144
• CC. 192
• DD. 288

An administrator manages a four-host vSphere cluster with vSphere HA enabled. The business requires that, after the failure of any one host, the remaining hosts always have enough reserved capacity to restart all affected VMs. Which action should the administrator take?

• AA. Enable vSphere HA admission control with the host failures the cluster tolerates set to 1
• BB. Set the DRS automation level to Fully Automated with the most aggressive migration threshold
• CC. Enable vSphere Fault Tolerance on every VM in the cluster
• DD. Set the restart priority of every VM to High in the cluster VM overrides

Which vSphere cluster feature restarts virtual machines on the remaining hosts after an ESX host fails?

• AA. vSphere vMotion
• BB. vSphere HA
• CC. vSphere DRS
• DD. vSphere Fault Tolerance

An administrator has VMs on an NSX overlay segment attached to a Tier-1 gateway that connects to a Tier-0 gateway. The VMs use private 10.20.0.0/24 addresses and must reach an external update server that accepts connections only from one registered public IP address. Which NSX networking service should the administrator configure?

• AA. A gateway firewall rule that allows the segment subnet to reach the update server
• BB. A destination NAT rule that translates the registered address to each VM
• CC. A source NAT rule that translates the segment subnet to the registered address
• DD. A static route on the Tier-1 gateway that points to the update server

An administrator wants users in the corporate Microsoft Entra ID directory to sign in to vCenter and VCF Operations in a VCF fleet by using one set of credentials. The administrator wants to avoid configuring an identity source separately in each component. What should the administrator configure?

• AA. Enhanced Linked Mode between all vCenter instances in the fleet
• BB. An Active Directory identity source in the Single Sign-On configuration of each vCenter
• CC. Active Directory domain membership on every ESX host in the fleet
• DD. The external identity provider in VCF Single Sign-On through the VCF Identity Broker

A licensed database application must normally run on ESX hosts esx-01 and esx-02 in a cluster with vSphere DRS and vSphere HA enabled. If both hosts fail, the VMs must still be restarted on any other host in the cluster. Which DRS rule should the administrator create?

• AA. A VM-Host rule set to Must not run on hosts in group
• BB. A VM-Host rule set to Must run on hosts in group
• CC. A VM-VM rule set to Keep Virtual Machines Together
• DD. A VM-Host rule set to Should run on hosts in group

An organization administrator in VCF Automation wants a group of developers to deploy VMs in one project but not change that project's settings or membership. Which action should the administrator take?

• AA. Add the group to the project with the Project User role
• BB. Add the group to the organization with the Organization Administrator role
• CC. Assign the group the Provider Administrator role for the region
• DD. Assign the group the Project Administrator role in the project

What is the purpose of the management domain in a VMware Cloud Foundation (VCF) instance?

• AA. It hosts the production application workloads for the first business unit in the instance
• BB. It hosts the infrastructure management VMs of the instance, including vCenter and NSX Manager
• CC. It holds the shared storage arrays and physical switches used by every workload domain
• DD. It runs the Kubernetes workload clusters that are provisioned through the Supervisor

An auditor requests a weekly PDF that lists every VM in a VCF fleet with its configured vCPU count, configured memory, and guest OS name. What should the administrator create in VCF Operations?

• AA. A super metric for each attribute, assigned to the default policy and exported by a scheduled report
• BB. A list view with a column for each attribute, added to a report template and scheduled to run weekly
• CC. A heat map widget for the VM object type, placed on a dashboard that is shared with the auditor
• DD. A symptom definition for each attribute, attached to an alert definition that notifies the auditor