Troubleshoot Container Deployment, Registry, and Trusted CA Errors VCAP-VCF-SUPPORT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A container deployment fails with an error indicating the registry is unreachable. The administrator confirms the registry is running and accessible from a jump host. The Supervisor cluster is configured with the correct registry URL. What should the administrator check next?

   • AThe registry's storage capacity
   • BThe container image's compatibility with the Supervisor's runtime
   • CNetwork policies or firewall rules between the Supervisor nodes and the registry
   • DThe namespace's resource quota
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A pod in a vSphere Supervisor namespace is stuck in a CrashLoopBackOff state. The container image was pulled successfully. The pod logs show an application error during startup. What should the administrator investigate?

   • AThe namespace's network policy
   • BThe registry's authentication settings
   • CThe Supervisor cluster's trusted CA bundle
   • DThe application's configuration and startup dependencies
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A container deployment in a VKS environment fails with a 'certificate is valid for example.com, not registry.internal' error. What is the most likely cause?

   • AThe registry's TLS certificate does not include the hostname used to access it
   • BThe registry is not reachable from the VKS cluster
   • CThe registry's CA certificate is not trusted
   • DThe registry credentials are incorrect
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A container deployment fails with an x509 error. The administrator adds the registry's CA certificate to the Supervisor cluster's trusted bundle, but the error persists. The registry uses a certificate signed by an intermediate CA. What is the most likely cause?

   • AThe registry's hostname does not match the certificate's SAN
   • BThe intermediate CA certificate is not included in the trusted bundle
   • CThe container image is corrupted
   • DThe registry's certificate has expired
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A container deployment to a vSphere Supervisor namespace fails with a certificate error. The registry uses a certificate that has expired. What is the correct course of action?

   • AConfigure the Supervisor to skip certificate validation
   • BRenew the registry's certificate and update the trusted CA bundle if necessary
   • CAdd the expired certificate to the trusted CA bundle
   • DRestart the registry service
   Reveal Solution Discussion Select an answer first