A VKS cluster is deployed with Antrea and NSX-T integration. The security team wants to restrict pod-to-pod traffic between two namespaces. Which NSX-T object should be used to enforce this?

A load balancer with a security policy

A network segment with a VLAN tag to isolate traffic

Distributed firewall policy with a rule that blocks traffic between the namespaces

A Tier-1 gateway with a route map to block traffic

A VKS cluster is deployed with Antrea using NSX-T integration. The cluster must support a workload that requires multicast traffic. The administrator discovers that multicast is not working. What is the most likely cause?

The NSX-T segment does not have multicast enabled

The Antrea CNI does not support multicast

The Tier-1 gateway is not configured for multicast

The cluster's network policy blocks multicast traffic

A security audit requires that all communication between VKS cluster components, including the API server and kubelet, be encrypted. The cluster is currently using HTTP for internal communication. What should the administrator configure?

Use SSH tunnels for all internal communication

Configure network policies to restrict access to the API server

Enable TLS for the API server and kubelet, and distribute the CA certificate to all nodes

Enable encryption at rest for etcd

A VKS cluster uses Antrea with NSX-T integration. The administrator needs to expose a service running in the cluster to external clients. Which NSX-T object should be used?

A network segment with a public IP

A Tier-0 gateway with a static route

A load balancer configured on a Tier-1 gateway

VMwareVCAP-VCF VKS (3V0-24.25)

Domain 2Objective 6

Configure CNIs, NSX Networking Objects, and TLS Certificates and Secure VKS Clusters VCAP-VCF-VKS Practice Questions (Page 4)

Part of the VMware Products and Solutions domain, which makes up ~24% of our current practice bank.

24questions here

5free pages

4concepts

Questions 16–20

16application · medium
A VKS cluster is deployed with Antrea and NSX-T integration. The security team wants to restrict pod-to-pod traffic between two namespaces. Which NSX-T object should be used to enforce this?
Select an answer first
17expert · hard
A VKS cluster is deployed with Antrea using NSX-T integration. The cluster must support a workload that requires multicast traffic. The administrator discovers that multicast is not working. What is the most likely cause?
Select an answer first
18application · medium
A security audit requires that all communication between VKS cluster components, including the API server and kubelet, be encrypted. The cluster is currently using HTTP for internal communication. What should the administrator configure?
Select an answer first
19foundation · easy
Which NSX object provides routing between VKS cluster workloads and external networks?
Select an answer first
20application · medium
A VKS cluster uses Antrea with NSX-T integration. The administrator needs to expose a service running in the cluster to external clients. Which NSX-T object should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCAP-VCF-VKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-VKS” is a trademark of its owner, used for identification only.