Evaluate the Architecture of vSphere Namespaces with Ingress and Egress Options VCAP-VCF-VKS Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A team is deploying a stateless web application in a vSphere Namespace on a Supervisor Cluster. The application must be exposed to external users over HTTPS on port 443. The team has NSX Advanced Load Balancer (ALB) available and wants to minimize the number of components to manage. Which solution should the team use to expose the application?

   • ACreate a Kubernetes NodePort service and access the application via the worker node's IP address.
   • BDeploy an HAProxy ingress controller in the namespace and create an Ingress resource.
   • CUse the Supervisor Cluster's control plane node IP with a hostPort mapping.
   • DConfigure an NSX Advanced Load Balancer virtual service and attach it to the namespace's load balancer service.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which egress option in vSphere namespaces provides a dedicated NAT gateway for outbound traffic, allowing more granular control over IP address allocation and security?

   • ASNAT
   • BNetwork Policy
   • CEgress NAT
   • DIngress Controller
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization is designing a multi-tenant environment using vSphere Namespaces. Each tenant has its own namespace and needs to expose its applications via HTTP. The organization wants to minimize the number of shared infrastructure components while ensuring each tenant's ingress is isolated. Which design approach best meets these requirements?

   • ADeploy a single shared HAProxy instance for all namespaces.
   • BUse NSX ALB with a dedicated virtual service per namespace.
   • CUse a single NSX ALB virtual service for all namespaces.
   • DDeploy a dedicated HAProxy instance per namespace.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has a vSphere Namespace with a group of pods that need to access an external database. The database firewall only allows traffic from a specific public IP address. The company wants to ensure all outbound traffic from the namespace appears to come from that single IP. Which egress configuration should be used?

   • AConfigure a Kubernetes NetworkPolicy to allow egress to the database IP.
   • BUse a LoadBalancer service for the pods.
   • CAssign a public IP directly to each pod.
   • DEnable SNAT on the namespace's egress router.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which ingress solution for vSphere namespaces provides L4-L7 load balancing, integrates with NSX, and offers features like WAF, content rewriting, and global server load balancing?

   • ANSX Distributed Firewall
   • BHAProxy
   • CKubernetes Ingress Controller (NGINX)
   • DNSX Advanced Load Balancer (ALB)
   Reveal Solution Discussion Select an answer first