An organization is deploying a vSphere Namespace and needs to ensure that workloads can communicate with each other across different namespaces. The organization uses NSX networking. Which NSX feature should be used to enable this inter-namespace communication?

Configure a Kubernetes NetworkPolicy to allow traffic between namespaces.

Ensure both namespaces are attached to the same NSX Tier-1 gateway.

Create a VPN between the namespaces.

Use NSX Distributed Firewall to allow traffic between the namespaces.

When designing ingress for a vSphere namespace that requires advanced L7 features like WAF and content rewriting, which ingress option should be selected?

Kubernetes Ingress Controller (NGINX)

A company is deploying a web application in a vSphere Namespace. The application needs to be exposed on port 443 with TLS termination. The company has NSX ALB available and wants to use a Kubernetes-native approach. Which configuration should be used?

Deploy an HAProxy ingress controller and create an Ingress resource.

Create a NodePort service and configure an external load balancer.

Create a LoadBalancer service and configure the NSX ALB virtual service manually.

Create an Ingress resource with a TLS certificate and use the NSX ALB ingress controller.

A team is troubleshooting outbound connectivity from a vSphere Namespace. Pods can reach other pods in the same namespace, but they cannot reach external services. The team has verified that the namespace's egress router is configured correctly. What is the most likely cause of the issue?

A NetworkPolicy is blocking egress traffic to external destinations.

The pods do not have a default gateway configured.

The external service is not reachable from the Supervisor Cluster.

The egress router is not attached to the correct Tier-1 gateway.

VMwareVCAP-VCF VKS (3V0-24.25)

Domain 3Objective 3

Evaluate the Architecture of vSphere Namespaces with Ingress and Egress Options VCAP-VCF-VKS Practice Questions (Page 2)

Part of the Plan and Design domain, which makes up ~21% of our current practice bank.

20questions here

4free pages

6concepts

Questions 6–10

6expert · hard
An organization is deploying a vSphere Namespace and needs to ensure that workloads can communicate with each other across different namespaces. The organization uses NSX networking. Which NSX feature should be used to enable this inter-namespace communication?
Select an answer first
7foundation · easy
When designing ingress for a vSphere namespace that requires advanced L7 features like WAF and content rewriting, which ingress option should be selected?
Select an answer first
8application · medium
A company is deploying a web application in a vSphere Namespace. The application needs to be exposed on port 443 with TLS termination. The company has NSX ALB available and wants to use a Kubernetes-native approach. Which configuration should be used?
Select an answer first
9foundation · easy
Which ingress option for vSphere namespaces is typically used when a lightweight, open-source L4/L7 load balancer is sufficient and NSX ALB is not deployed?
Select an answer first
10expert · hard
A team is troubleshooting outbound connectivity from a vSphere Namespace. Pods can reach other pods in the same namespace, but they cannot reach external services. The team has verified that the namespace's egress router is configured correctly. What is the most likely cause of the issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCAP-VCF-VKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-VKS” is a trademark of its owner, used for identification only.