A VDS-based Supervisor cluster hosts a stateless web application. The team wants to expose it to external users using a stable IP address. Which approach should they use?

Expose the application via a NodePort service and configure an external load balancer to forward traffic to the node ports.

Create a Kubernetes Service of type LoadBalancer.

Assign a public IP directly to the pod.

Use a NetworkPolicy to allow external traffic to the pod's IP.

In a VPC-based Supervisor cluster, what is the purpose of a network policy?

To define rules for traffic between workloads in the VPC

To define the physical uplinks for the VPC

To define the storage classes available to workloads

To define the DNS settings for the VPC

A Supervisor cluster is configured with NSX-T networking. The networking team wants to provide each development team with its own isolated routing domain, including its own Tier-1 gateway and subnets, while sharing the same Tier-0 gateway for external connectivity. Which NSX-T object should be used to achieve this?

A separate Tier-0 gateway for each team.

A VPC for each development team.

A distributed firewall rule to segment traffic between teams.

A single NSX-T segment with multiple subnets.

A Supervisor cluster uses NSX-T networking. The team needs to expose a workload that requires both TCP and UDP on the same port (e.g., 443). They also need to support WebSocket connections. Which load balancing solution should they use?

NSX Advanced Load Balancer (ALB) with a virtual service configured for both TCP and UDP.

An ingress controller based on NGINX.

A Kubernetes Service of type LoadBalancer with a single port definition.

HAProxy with a TCP mode configuration.

A Supervisor cluster is being deployed with VPC networking. The networking team needs to ensure that workloads in a VPC can communicate with an on-premises network via a VPN. Which component must be configured to enable this?

A Tier-0 gateway with a VPN service.

A VPC subnet with a static route to the on-premises network.

A NetworkPolicy that allows traffic to the on-premises CIDR.

A Tier-1 gateway with a route to the on-premises network.

VMwareVCAP-VCF VKS (3V0-24.25)

Domain 2Objective 2

Configure Supervisor Cluster Networking with VDS, NSX Segments, or VPCs and Apply Appropriate Load Balancing Solutions VCAP-VCF-VKS Practice Questions (Page 2)

Part of the VMware Products and Solutions domain, which makes up ~24% of our current practice bank.

15questions here

3free pages

4concepts

Questions 6–10

6application · medium
A VDS-based Supervisor cluster hosts a stateless web application. The team wants to expose it to external users using a stable IP address. Which approach should they use?
Select an answer first
7foundation · easy
In a VPC-based Supervisor cluster, what is the purpose of a network policy?
Select an answer first
8application · medium
A Supervisor cluster is configured with NSX-T networking. The networking team wants to provide each development team with its own isolated routing domain, including its own Tier-1 gateway and subnets, while sharing the same Tier-0 gateway for external connectivity. Which NSX-T object should be used to achieve this?
Select an answer first
9expert · hard
A Supervisor cluster uses NSX-T networking. The team needs to expose a workload that requires both TCP and UDP on the same port (e.g., 443). They also need to support WebSocket connections. Which load balancing solution should they use?
Select an answer first
10application · medium
A Supervisor cluster is being deployed with VPC networking. The networking team needs to ensure that workloads in a VPC can communicate with an on-premises network via a VPN. Which component must be configured to enable this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCAP-VCF-VKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-VKS” is a trademark of its owner, used for identification only.