What is the purpose of certificate-based authentication in VKS clusters?

To verify the identity of users or components

Which mechanism is used in VKS clusters to control user access to Kubernetes resources?

Role-Based Access Control (RBAC)

A VKS cluster administrator is configuring TLS certificates for the cluster's webhook servers. The webhook servers are internal and use a private CA. The administrator needs to ensure that the API server trusts the webhook certificates. What should be configured?

Add the private CA certificate to the API server's trust store

Disable TLS verification for webhook servers

Configure the webhook servers to use a public CA certificate

Use a self-signed certificate for the webhook servers

A VKS cluster uses Antrea with NSX-T integration. The administrator needs to secure the communication between the Antrea agent and the NSX-T policy API. What should be configured?

Configure TLS certificates for the Antrea agent to authenticate to the NSX-T policy API

Use a VPN tunnel for all Antrea-to-NSX-T communication

Disable TLS and rely on network isolation

Use a shared secret for authentication between the Antrea agent and NSX-T

A VKS cluster is deployed in a DMZ segment that must route traffic to an on-premises database through a Tier-0 gateway. The cluster uses Antrea with NSX-T integration. The administrator needs to ensure that pod traffic can reach the database. What must be configured?

Attach the cluster segment directly to the Tier-0 gateway

Configure a static route on the Tier-0 gateway to the pod subnet

Create a Tier-1 gateway and connect it to the Tier-0 gateway, then attach the cluster segment to the Tier-1

Enable NAT on the Tier-0 gateway for the pod subnet

VMwareVCAP-VCF VKS (3V0-24.25)

Domain 2Objective 6

Configure CNIs, NSX Networking Objects, and TLS Certificates and Secure VKS Clusters VCAP-VCF-VKS Practice Questions (Page 2)

Part of the VMware Products and Solutions domain, which makes up ~24% of our current practice bank.

24questions here

5free pages

4concepts

Questions 6–10

6foundation · easy
What is the purpose of certificate-based authentication in VKS clusters?
Select an answer first
7foundation · easy
Which mechanism is used in VKS clusters to control user access to Kubernetes resources?
Select an answer first
8expert · hard
A VKS cluster administrator is configuring TLS certificates for the cluster's webhook servers. The webhook servers are internal and use a private CA. The administrator needs to ensure that the API server trusts the webhook certificates. What should be configured?
Select an answer first
9application · medium
A VKS cluster uses Antrea with NSX-T integration. The administrator needs to secure the communication between the Antrea agent and the NSX-T policy API. What should be configured?
Select an answer first
10application · medium
A VKS cluster is deployed in a DMZ segment that must route traffic to an on-premises database through a Tier-0 gateway. The cluster uses Antrea with NSX-T integration. The administrator needs to ensure that pod traffic can reach the database. What must be configured?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCAP-VCF-VKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-VKS” is a trademark of its owner, used for identification only.