I85PREP
⌘ K
VCP-VCF study materials
VCP-VCF study resources

VCP-VCF practice questions

One question at a time. Build your VCP-VCF understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1VMware Cloud Foundation Architecture and Components

Which component provides centralized lifecycle management and automation for a VMware Cloud Foundation instance?

  1. vSAN Witness Appliance
  2. vCenter Server
  3. NSX Manager
  4. SDDC Manager Correct answer.

Explanation

SDDC Manager is the management appliance that owns the inventory of domains, hosts, networks and credentials, and it drives patching, upgrades, certificate and password operations across the instance. vCenter Server and NSX Manager operate only inside a single domain, and the witness appliance serves only vSAN stretched clusters.

Question 2VMware Cloud Foundation Architecture and Components

How does VMware Cloud Foundation define a workload domain?

  1. A pair of NSX Edge nodes that provide north-south routing for a domain
  2. A vSAN datastore that is shared by every domain in the instance
  3. A logical unit of compute, storage and network managed by one vCenter Server Correct answer.
  4. A single ESXi host that has been commissioned into the SDDC Manager free pool

Explanation

A workload domain is the unit of consumption in VCF: compute, storage and network resources administered by their own vCenter Server and upgraded as a single unit. The management domain is simply the first workload domain, and hosts sitting in the free pool do not belong to any domain.

Question 3VMware Cloud Foundation Architecture and Components

What is the role of the Cloud Builder appliance in a VMware Cloud Foundation deployment?

  1. It provides DNS and NTP services for every domain in the instance
  2. It stores the software bundles that SDDC Manager downloads for upgrades
  3. It acts as the witness host for the management domain's vSAN cluster
  4. It automates deployment of the management domain during initial bring-up Correct answer.

Explanation

Cloud Builder is a temporary appliance that consumes the deployment parameter workbook and builds the management domain. Once bring-up completes successfully it is shut down and decommissioned, and all subsequent lifecycle work is handled by SDDC Manager.

Question 4VMware Cloud Foundation Architecture and Components

Which domain must be deployed before any other domain can be created in a VMware Cloud Foundation instance?

  1. The management domain Correct answer.
  2. An NSX Edge cluster domain
  3. A vSAN stretched cluster domain
  4. A VI workload domain

Explanation

The management domain is always created first because it hosts SDDC Manager, vCenter Server, the NSX Manager cluster and, in the consolidated design, the NSX Edge cluster. Only once it exists can SDDC Manager create and manage additional VI workload domains.

Question 5VMware Cloud Foundation Architecture and Components

Which layer does vSAN provide in a VMware Cloud Foundation workload domain?

  1. Software-defined, policy-driven storage from the hosts' local disks Correct answer.
  2. Logical switching and routing between virtual and physical networks
  3. Centralized monitoring and capacity analytics for the domain
  4. Lifecycle automation for the ESXi hosts that belong to the domain

Explanation

vSAN aggregates local disks in the domain's hosts into a policy-driven shared datastore, so storage is provisioned through storage policies rather than LUNs. Switching and routing are provided by NSX, and host lifecycle is driven by SDDC Manager.

Question 6VMware Cloud Foundation Architecture and Components

Which statement describes VMware Cloud Foundation licensing?

  1. It is licensed per host socket regardless of the number of cores
  2. It bundles vSphere, vSAN and NSX in one per-core entitlement Correct answer.
  3. It licenses only the management domain and not workload domains
  4. It requires a separate per-VM license for each vCenter Server instance

Explanation

A VCF license is a per-core entitlement that already includes vSphere (with vCenter Server), vSAN and NSX, so domains do not need individual component licenses. All domains in the instance consume the same entitlement.

Question 7VMware Cloud Foundation Architecture and Components

In SDDC Manager, where does a commissioned host reside before it is assigned to a domain?

  1. In the management domain's vSphere cluster
  2. In the free host pool of unassigned hosts Correct answer.
  3. In a quarantine network until it is certified
  4. In the domain's NSX transport zone

Explanation

Commissioning verifies, images and adds a host to SDDC Manager's inventory, where it waits in the free pool. The host becomes part of a domain only when it is explicitly assigned during domain creation or expansion.

Question 8VMware Cloud Foundation Architecture and Components

Which NSX gateway provides north-south connectivity between a workload domain and the physical network?

  1. The overlay segment
  2. The distributed firewall
  3. The Tier-0 gateway Correct answer.
  4. The Tier-1 gateway

Explanation

The Tier-0 gateway is the provider gateway that peers with the physical network through its uplinks. Tier-1 gateways are tenant-level gateways that connect to the Tier-0 gateway rather than directly to physical routers.

Question 9VMware Cloud Foundation Architecture and Components

What is the purpose of a network pool defined in SDDC Manager?

  1. It reserves VLANs exclusively for use by the vSAN witness appliance
  2. It maps each workload domain to its own dedicated NSX transport zone
  3. It holds the DNS and NTP settings that every new domain inherits
  4. It supplies the IP ranges used for host and Edge networks Correct answer.

Explanation

A network pool defines an IP range, subnet, gateway, VLAN and MTU from which SDDC Manager allocates addresses for host management, vMotion, vSAN and NSX Edge networks when it deploys or expands a domain. DNS and NTP are supplied separately as part of the deployment parameters.

Question 10VMware Cloud Foundation Architecture and Components

An administrator needs to add capacity to an existing VI workload domain. Which procedure is supported?

  1. Add the host to the domain's vCenter Server cluster manually
  2. Commission the host in SDDC Manager, then expand the domain with it Correct answer.
  3. Add the host to the free pool and wait for vSphere to auto-assign it
  4. Create a new management domain that contains the extra host

Explanation

Capacity changes flow through SDDC Manager: the host is first commissioned into inventory and then assigned to the domain, which triggers the required vSphere and NSX reconfiguration. Adding a host directly in vCenter bypasses SDDC Manager's inventory and leaves the domain in an unsupported state.

Question 11VMware Cloud Foundation Architecture and Components

A VMware Cloud Foundation instance has a management domain and two VI workload domains. How many vCenter Server instances does it use?

  1. Three, one for each domain Correct answer.
  2. Four, one per domain plus one for SDDC Manager
  3. Two, one for management and one shared by both workload domains
  4. One shared instance that manages all three domains

Explanation

Every domain, including the management domain, has its own vCenter Server that manages only the objects belonging to that domain. Domains therefore never share a vCenter Server, and SDDC Manager itself does not consume a vCenter instance.

Question 12VMware Cloud Foundation Architecture and Components

How does SDDC Manager handle the credentials of the components it manages?

  1. It stores them in vCenter Server and rotates them with the SSO policy
  2. It rotates them on demand or on a schedule and records the change Correct answer.
  3. It rotates only the ESXi root password, on every host reboot
  4. It leaves them static and requires the administrator to change them manually

Explanation

SDDC Manager is the credential authority for the instance: it stores the accounts for each component and can rotate them on demand or on a schedule, updating its records so later automation still authenticates successfully. Credentials for VCF components are not held in vCenter Server.

Question 13VMware Cloud Foundation Architecture and Components

How does SDDC Manager obtain the software bundles used for patching and upgrading?

  1. It pulls them from the boot device of each ESXi host in the domain
  2. It downloads them from the VMware depot into its own repository Correct answer.
  3. It receives them from Aria Lifecycle once they have been staged
  4. It reads them directly from the vCenter Server update repository

Explanation

SDDC Manager downloads the bundles that apply to the instance's validated version set from the VMware depot and stores them in its internal repository. An update can then be scheduled and prechecked against those bundles.

Question 14VMware Cloud Foundation Architecture and Components

How should the SDDC Manager appliance be protected in a production VMware Cloud Foundation instance?

  1. By placing it in a vSphere HA cluster and relying on restart
  2. By deploying a second SDDC Manager and clustering the two
  3. By configuring scheduled backups to an external SFTP server Correct answer.
  4. By cloning it nightly with vSphere Replication to a second site

Explanation

SDDC Manager runs as a single appliance with no active-standby peer, so the supported protection is a scheduled backup to an external SFTP location together with a tested restore procedure. A restart or replica would not preserve a consistent appliance state.

Question 15VMware Cloud Foundation Architecture and Components

Which step must precede decommissioning a host from a VMware Cloud Foundation domain?

  1. Place the host in maintenance mode and remove it from the domain Correct answer.
  2. Revoke the host's certificate from the SDDC Manager CA
  3. Delete the host's vSAN disk groups and securely erase all disks
  4. Disconnect the host from the NSX Manager cluster before removal

Explanation

Decommissioning reverses commissioning: the host must be in maintenance mode and removed from its domain so that vCenter Server and SDDC Manager release it, after which SDDC Manager removes it from inventory. Disk group deletion and certificate cleanup happen as part of the workflow, not before it.

Question 16VMware Cloud Foundation Architecture and Components

Which statement is true about the SDDC Manager REST API?

  1. It exposes the same operations as the UI so tasks can be automated Correct answer.
  2. It is read-only and cannot be used to change the domain configuration
  3. It supports only the management domain and not workload domains
  4. It is available only while the Cloud Builder appliance is running

Explanation

SDDC Manager is API-first: its UI is a client of the same REST API, so commissioning hosts, creating domains and starting updates can all be scripted. The API covers both management and workload domain operations for the life of the appliance.

Question 17VMware Cloud Foundation Architecture and Components

Which statement about vSphere clusters inside a single VI workload domain is true?

  1. All hosts must be in one cluster because NSX cannot span clusters
  2. Each cluster in the domain requires its own vCenter Server
  3. A domain can contain only one cluster, which must be stretched
  4. A domain can contain several clusters managed by one vCenter Server Correct answer.

Explanation

A workload domain may include multiple vSphere clusters, for example one per CPU generation or one dedicated to a particular workload, and all of them are managed by the domain's single vCenter Server. The domain, not the cluster, is the unit that is upgraded.

Question 18VMware Cloud Foundation Architecture and Components

How are human administrators typically authenticated to SDDC Manager in an enterprise deployment?

  1. Through client certificates that each ESXi host issues
  2. With vCenter Single Sign-On accounts replicated to the appliance
  3. With local accounts only, since directory integration is unsupported
  4. Through a configured identity source such as Active Directory Correct answer.

Explanation

SDDC Manager can be bound to an identity source such as Active Directory over LDAP or LDAPS, after which directory users and groups are assigned VCF roles. A local account is retained only as a break-glass option, and vCenter Single Sign-On identities are not shared.

Question 19VMware Cloud Foundation Architecture and Components

Which statement about principal storage for a VI workload domain is accurate?

  1. vSAN, NFS and VMFS on Fibre Channel can all serve as principal storage Correct answer.
  2. Storage must be configured after the domain is created, not during deployment
  3. Only NFS datastores are supported because vSAN is reserved for management
  4. Only vSAN is supported; external storage is limited to the management domain

Explanation

VCF supports vSAN as well as external options such as NFS and VMFS on Fibre Channel when a workload domain is created. The chosen storage must be supplied as a deployment parameter because the domain's datastores are created during deployment, not afterwards.

Question 20VMware Cloud Foundation Architecture and Components

Why would an architect place a new workload in its own VI workload domain instead of an existing one?

  1. To remove the need for an NSX Edge cluster in that part of the environment
  2. To share the existing domain's ESXi hosts across both vCenter Servers
  3. To give the workload its own vCenter Server and lifecycle boundary Correct answer.
  4. To avoid consuming a separate VCF license for the additional workloads

Explanation

Domains are the unit of isolation and lifecycle in VCF: each has its own vCenter Server, so it can be patched and upgraded on its own schedule without touching other domains. Hosts belong to exactly one domain, and the number of domains does not change the licensing model.

Question 21VMware Cloud Foundation Architecture and Components

In which order does VMware Cloud Foundation upgrade the pieces of an instance during a full upgrade?

  1. All domains in parallel, followed by the SDDC Manager appliance
  2. ESXi hosts first, then vCenter Server, then SDDC Manager, then NSX
  3. SDDC Manager first, then the management domain, then workload domains Correct answer.
  4. Workload domains first, then the management domain, then SDDC Manager

Explanation

SDDC Manager must be upgraded before it can orchestrate anything else, so it is updated first and then used to upgrade the management domain. Only after the management domain is current are the VI workload domains upgraded, with SDDC Manager sequencing the components inside each domain to respect dependencies.

Question 22VMware Cloud Foundation Architecture and Components

A VI workload domain uses a vSAN stretched cluster across two sites. What is the role of the witness host?

  1. It provides quorum so the surviving site keeps running Correct answer.
  2. It serves the vSAN metadata for the cluster's stretched objects
  3. It stores a full replica of the data so either site can be rebuilt
  4. It holds the vSAN encryption keys used by both data sites

Explanation

The witness host sits at a third location and holds only witness components, providing the quorum that lets the surviving site keep the cluster available after a site failure. The two data replicas reside in the data sites, and the witness stores neither user data nor encryption keys.

Question 23VMware Cloud Foundation Architecture and Components

In the consolidated architecture supported by recent VMware Cloud Foundation releases, how is NSX deployed?

  1. One NSX Manager cluster and an edge cluster in the management domain serve all domains Correct answer.
  2. NSX Managers run in each workload domain while edges are shared from the management domain
  3. Each VI workload domain gets a dedicated NSX Manager cluster and its own edge cluster
  4. NSX is optional and is deployed only when a domain is converted to a stretched design

Explanation

In the consolidated design the management domain hosts the shared NSX Manager cluster and the NSX Edge cluster, and workload domains consume that same NSX infrastructure instead of building their own. The earlier standard design gave every workload domain a dedicated NSX Manager cluster and edge cluster.

Question 24VMware Cloud Foundation Architecture and Components

What is the significance of the bill of materials published for each VMware Cloud Foundation version?

  1. It lists the validated component versions that make up that VCF release Correct answer.
  2. It lists the server models and firmware certified for each VCF release
  3. It records the licenses consumed by each domain in the instance
  4. It tracks the open security advisories affecting the instance

Explanation

Each VCF release is validated against a specific set of component versions, such as vCenter Server, ESXi, NSX and Aria products, and that set is published as the bill of materials. Keeping the instance on those versions is what makes it a tested, supported combination.

Question 25VMware Cloud Foundation Architecture and Components

Which component does SDDC Manager use to deploy and manage the Aria (formerly vRealize) products in a VCF instance?

  1. Aria Lifecycle Correct answer.
  2. The Cloud Builder appliance
  3. Aria Operations
  4. vSphere Lifecycle Manager

Explanation

Aria Lifecycle, formerly vRealize Suite Lifecycle Manager, is the tool that deploys and manages the Aria suite, and SDDC Manager integrates with it in a VCF environment. vSphere Lifecycle Manager handles ESXi images inside a cluster, and Aria Operations is itself one of the products being managed.

Question 26VMware Cloud Foundation Architecture and Components

What defines the scope of a VMware Cloud Foundation instance?

  1. The set of ESXi hosts registered to one vCenter Server
  2. The set of NSX segments connected to one Tier-0 gateway
  3. The domains managed by one SDDC Manager Correct answer.
  4. The set of vSAN datastores visible to one vSphere cluster

Explanation

A VMware Cloud Foundation instance is the top-level deployment unit managed by a single SDDC Manager. It contains the management domain and any VI workload domains, each with its own components and scope.

Question 27VMware Cloud Foundation Architecture and Components

Which role does the management domain serve in a VCF instance?

  1. It hosts the core management components. Correct answer.
  2. It hosts only tenant workloads and their NSX edges.
  3. It acts as a staging area for uncommissioned hosts.
  4. It provides backup storage for all workload domains.

Explanation

The management domain is created first and contains the core infrastructure that runs the instance, such as SDDC Manager, vCenter Server, and NSX Manager. Tenant workloads normally run in VI workload domains.

Question 28VMware Cloud Foundation Architecture and Components

Which function is performed by SDDC Manager in VMware Cloud Foundation?

  1. Orchestrating domain lifecycle Correct answer.
  2. Serving as the certificate authority for all workloads
  3. Providing block storage to vSphere clusters
  4. Forwarding overlay traffic between ESXi transport nodes

Explanation

SDDC Manager coordinates lifecycle operations such as creating, expanding, and upgrading domains. It also maintains inventory and desired state for the instance.

Question 29VMware Cloud Foundation Architecture and Components

What is a workload domain in VMware Cloud Foundation?

  1. A compute, storage, and network boundary Correct answer.
  2. A collection of hosts in maintenance mode
  3. A single ESXi host managed by SDDC Manager
  4. A VLAN-backed segment in an NSX overlay

Explanation

A workload domain is a logical unit that groups hosts and the virtual infrastructure needed to run workloads. It provides a boundary for management and isolation within a VCF instance.

Question 30VMware Cloud Foundation Architecture and Components

What is the role of an NSX Manager cluster?

  1. It provides the management plane for NSX Correct answer.
  2. It stores vSAN objects across hosts
  3. It forwards tenant traffic between sites
  4. It authenticates ESXi hosts to vCenter

Explanation

The NSX Manager cluster hosts the NSX management plane and provides the UI and API for configuring logical networking and security. Data-plane forwarding is handled by transport nodes such as ESXi hosts and Edge nodes.

Question 31VMware Cloud Foundation Architecture and Components

Within a workload domain, what does the vCenter Server primarily manage?

  1. The physical network switches
  2. The NSX Edge forwarding tables
  3. Its ESXi hosts and clusters Correct answer.
  4. The SDDC Manager appliance

Explanation

Each workload domain has a vCenter Server that manages its ESXi hosts, clusters, and virtual machines. SDDC Manager orchestrates the domain, while NSX handles logical networking.

Question 32VMware Cloud Foundation Architecture and Components

Why are hosts commissioned into SDDC Manager before use in a domain?

  1. To place them in centralized inventory Correct answer.
  2. To convert them into witness hosts
  3. To install NSX Edge appliances on them
  4. To assign them to a vSAN stretched cluster

Explanation

Commissioning brings ESXi hosts under SDDC Manager inventory so they can be validated and later assigned to a domain. It is a preparation step, not the act of placing the host in a cluster.

Question 33VMware Cloud Foundation Architecture and Components

Which VMware software provides software-defined storage in many VCF domains?

  1. VMware HCX
  2. VMware vSAN Correct answer.
  3. VMware Aria Operations
  4. VMware NSX

Explanation

vSAN pools local disks across ESXi hosts to provide a software-defined shared datastore. It is commonly used as principal storage in VCF domains.

Question 34VMware Cloud Foundation Architecture and Components

Which component orchestrates the creation of a new VI workload domain?

  1. The NSX Edge cluster
  2. SDDC Manager Correct answer.
  3. The vSAN witness host
  4. vCenter Single Sign-On

Explanation

SDDC Manager runs the workload domain creation workflow and coordinates the deployment and configuration of its vCenter Server, NSX components, and clusters. The other components are deployed or consumed during that workflow.

Question 35VMware Cloud Foundation Architecture and Components

What is the primary role of an NSX Tier-1 gateway?

  1. It provides logical routing for tenant segments. Correct answer.
  2. It stores distributed firewall rules for ESXi.
  3. It connects the physical underlay to the Tier-0 gateway.
  4. It manages the NSX Manager cluster.

Explanation

A Tier-1 gateway is a logical router that connects tenant segments and is uplinked to a Tier-0 gateway. It provides routing and services for workloads inside the domain.

Question 36VMware Cloud Foundation Architecture and Components

What does an NSX transport zone define?

  1. The set of IP addresses assigned to Edge nodes
  2. The set of transport nodes for a network Correct answer.
  3. The certificate used by NSX Manager
  4. The backup schedule for NSX configuration

Explanation

A transport zone determines which transport nodes can participate in a given overlay or VLAN-backed network. It is a scope for network transport, not an IP pool or certificate object.

Question 37VMware Cloud Foundation Architecture and Components

How are NSX Edge nodes typically deployed in a VCF workload domain?

  1. As physical switches in the rack
  2. As kernel modules inside each ESXi host
  3. As containers on the vCenter Server
  4. As virtual appliances managed by NSX Correct answer.

Explanation

NSX Edge nodes are virtual appliances deployed to ESXi hosts and form an Edge cluster. They provide centralized routing and network services for the domain.

Question 38VMware Cloud Foundation Architecture and Components

Which condition must be met before an ESXi host can be commissioned into SDDC Manager?

  1. The host must already be in a workload domain.
  2. The host must be a vSAN witness host.
  3. The host must run an NSX Edge appliance.
  4. The host must not belong to another vCenter. Correct answer.

Explanation

Commissioning prepares a host that is not already managed by another vCenter so SDDC Manager can take it into inventory. The host is assigned to a domain only after commissioning.

Question 39VMware Cloud Foundation Architecture and Components

What is the purpose of a VXLAN tunnel endpoint (VTEP) on an ESXi host?

  1. To provide DHCP to tenant workloads
  2. To authenticate the host to NSX Manager
  3. To store distributed firewall logs
  4. To encapsulate overlay traffic Correct answer.

Explanation

A VTEP is the source and destination for VXLAN tunnels and encapsulates overlay frames for transport across the physical network. It operates in the data plane on a transport node.

Question 40VMware Cloud Foundation Architecture and Components

How is storage policy used with vSAN in a VCF workload domain?

  1. It assigns IP addresses to witness hosts.
  2. It configures NTP for the vSAN cluster.
  3. It selects the physical NIC for vSAN traffic.
  4. It defines requirements for virtual disks Correct answer.

Explanation

vSAN uses Storage Policy Based Management to define requirements such as failures to tolerate and stripe width for virtual disks. The policy is applied to VMs and their objects.

Question 41VMware Cloud Foundation Architecture and Components

In the standard VCF architecture, how are management components separated from tenant workloads?

  1. They are placed in each VI workload domain.
  2. They reside in the management domain. Correct answer.
  3. They share a single vCenter and cluster.
  4. They run only on NSX Edge nodes.

Explanation

The standard architecture uses a dedicated management domain for core management components and separate VI workload domains for tenant workloads. This separation improves isolation and lifecycle management.

Question 42VMware Cloud Foundation Architecture and Components

Which statement describes SDDC Manager's inventory role?

  1. It provides the distributed firewall engine.
  2. It routes all VM traffic between domains.
  3. It records hosts, domains, and components. Correct answer.
  4. It replaces vCenter for VM operations.

Explanation

SDDC Manager maintains the inventory and desired state for hosts, domains, and their associated components. It orchestrates management workflows but does not replace vCenter or the NSX data plane.

Question 43VMware Cloud Foundation Architecture and Components

Which service acts as the default certificate authority for VMware Cloud Foundation components?

  1. vSAN Certificate Service
  2. VMware Certificate Authority Correct answer.
  3. SDDC Manager Certificate Store
  4. NSX Certificate Manager

Explanation

VMware Certificate Authority is the default CA built into vSphere and is used to issue certificates for VCF components. Deployments can instead integrate an enterprise certificate authority.

Question 44VMware Cloud Foundation Architecture and Components

What does an SDDC Manager backup primarily preserve?

  1. The NSX Edge forwarding state
  2. Its configuration and inventory data Correct answer.
  3. The vSAN capacity of workload domains
  4. The virtual machine disks of tenant workloads

Explanation

An SDDC Manager backup captures the management configuration and inventory needed to restore SDDC Manager. It does not back up tenant VM data or the full data plane.

Question 45VMware Cloud Foundation Architecture and Components

What is an NSX segment?

  1. A logical network for VMs Correct answer.
  2. A certificate for an Edge node
  3. A physical uplink from a rack switch
  4. A backup copy of an NSX Manager

Explanation

An NSX segment is a logical network that virtual machines can connect to. It can be overlay-backed or VLAN-backed depending on the design.

Question 46VMware Cloud Foundation Architecture and Components

Which NSX gateway configuration supports active-active routing with ECMP for north-south traffic?

  1. A VLAN-backed segment on an Edge node
  2. A Tier-1 gateway in active-standby mode
  3. A Tier-0 gateway in active-active mode Correct answer.
  4. A distributed firewall rule on a host

Explanation

A Tier-0 gateway in active-active mode can use multiple Edge nodes and ECMP to distribute north-south traffic. Tier-1 gateways provide tenant routing but are not the ECMP design point for the physical uplink.

Question 47VMware Cloud Foundation Architecture and Components

What is a characteristic of an NSX Edge cluster in active-standby high availability?

  1. Every Edge node forwards traffic simultaneously.
  2. One Edge is active and another standby. Correct answer.
  3. The cluster requires no virtual IP address.
  4. Edge nodes must run on separate vCenters.

Explanation

In active-standby mode, one Edge node carries traffic while another is ready to take over if the active node fails. Active-active mode is the configuration in which multiple Edge nodes forward traffic at the same time.

Question 48VMware Cloud Foundation Architecture and Components

Which component can act as an NSX transport node?

  1. A vSAN witness host only
  2. A vCenter Server appliance only
  3. An ESXi host prepared for NSX Correct answer.
  4. An SDDC Manager appliance only

Explanation

An ESXi host prepared for NSX can act as a transport node, and NSX Edge nodes can also be transport nodes. vCenter Server and SDDC Manager are management components, not data-plane transport nodes.

Question 49VMware Cloud Foundation Architecture and Components

Which function does the NSX distributed router provide?

  1. It stores vSAN storage policies.
  2. It routes east-west traffic locally. Correct answer.
  3. It assigns IP addresses to ESXi hosts.
  4. It manages SDDC Manager backups.

Explanation

The distributed router runs in the hypervisor on transport nodes and provides optimized routing for east-west traffic. It avoids sending local routed traffic through a centralized Edge node.

Question 50VMware Cloud Foundation Architecture and Components

An NSX Manager cluster in a production VCF domain commonly uses how many manager nodes for high availability?

  1. Two nodes
  2. A single node
  3. Four nodes
  4. Three nodes Correct answer.

Explanation

A production NSX Manager cluster typically uses three manager nodes to provide quorum and high availability. A single node provides no cluster redundancy, while two nodes do not provide the same quorum model.