After configuring a service mesh with a VirtualService that routes traffic to a `catalog` service, the team wants to validate that the routing rule is working. They send a request to the `catalog` service and receive a response from v2, but they expected v1. What should they check first?

Check the Kubernetes Service for the `catalog` service to see if it points to v2

Check the mTLS policy to ensure it is not blocking traffic to v1

Verify that the VirtualService is correctly applied to the `catalog` service and that the weights are set as intended

Restart the sidecar proxy on the `catalog` service to reload the configuration

In a service mesh, what is the primary purpose of configuring traffic routing rules?

To manage the service mesh control plane

To provide a user interface for the mesh

To control how requests are directed to service versions or instances

What is the purpose of configuring a sidecar proxy in a service mesh?

To enable the service to communicate with the control plane

To store the service's configuration files

To provide a user interface for the service

To intercept and manage traffic to and from the service

When integrating a service mesh with an existing application, what is a common requirement to ensure seamless communication?

Deploying a sidecar proxy alongside each service instance

Rewriting the application code to use mesh-specific APIs

Moving all services to a single host

Migrating all services to a single programming language

A retail organization is integrating an existing monolithic application with a new service mesh. The monolith runs as a single pod and cannot be modified to include a sidecar proxy. The team needs the monolith to communicate with mesh-enabled services while maintaining observability of that traffic. The mesh uses a global mTLS policy that requires all inbound connections to be authenticated. What should the implementation team do to enable this integration?

Deploy a standalone Envoy proxy as a separate deployment and configure it as the monolith's gateway

Configure an ExternalName service pointing to the monolith and apply a DestinationRule for TLS origination

Create a ServiceEntry for the monolith and configure a PeerAuthentication policy with PERMISSIVE mode for its namespace

Use a Kubernetes Service to expose the monolith and enable strict mTLS in its namespace

VMwareVCAP-VCF VKS (3V0-24.25)

Domain 3Objective 5

Create an Implementation of Service Mesh VCAP-VCF-VKS Practice Questions (Page 2)

Part of the Plan and Design domain, which makes up ~21% of our current practice bank.

18questions here

4free pages

5concepts

Questions 6–10

6application · medium
After configuring a service mesh with a VirtualService that routes traffic to a `catalog` service, the team wants to validate that the routing rule is working. They send a request to the `catalog` service and receive a response from v2, but they expected v1. What should they check first?
Select an answer first
7foundation · easy
In a service mesh, what is the primary purpose of configuring traffic routing rules?
Select an answer first
8foundation · easy
What is the purpose of configuring a sidecar proxy in a service mesh?
Select an answer first
9foundation · easy
When integrating a service mesh with an existing application, what is a common requirement to ensure seamless communication?
Select an answer first
10application · medium
A retail organization is integrating an existing monolithic application with a new service mesh. The monolith runs as a single pod and cannot be modified to include a sidecar proxy. The team needs the monolith to communicate with mesh-enabled services while maintaining observability of that traffic. The mesh uses a global mTLS policy that requires all inbound connections to be authenticated. What should the implementation team do to enable this integration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCAP-VCF-VKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-VKS” is a trademark of its owner, used for identification only.