2V0-33.22 Online Practice Questions and Answers

If a company connects their data center to a VMware Cloud on AWS software-defined data center (SDDC) Instance through a virtual private network (VPN) and advertises a 0.0.0.0/0 route, what Is the expected behavior of the SDDC compute network traffic?

A. All compute and management traffic will egress to the data center.

B. All compute network traffic destined for the data center will egress through the VPN but all Internet traffic will egress through the cloud provider Internet gateway.

C. All compute network traffic will egress through the cloud provider Internet gateway.

D. All compute network traffic will egress to the data center.

Which out-of-the-box role is required in order to create a content library In VMware Cloud on AWS?

A. CloudGlobalAdmln

B. CloudAdmin

C. Active Directory ESXi Admin

D. Ad mlnistrator@vSphere. local

A cloud administrator wants to enable administrator wants to enable Enterprise Federation to the Cloud Services Portal in order to be able to authenticate with the on-premises Active Directory. The Administrator Already deployed the on-premises VMware Workspace One Access Connector. Through which port does the Cloud Service Portal communicate with Workspace ONE Access Connector?

A. ldaps/636

B. http/80

C. https/443

D. ldap/389

What is the purpose or the VMware cloud on AWS management gateway (MGW)?

A. A Tier-0 router that handles network traffic for workload virtual machines connected to routed computer network segments

B. A Tier-0 router that handles routing and firewalling for the VMware vCenter Server and othermanagement appliances running in the software-defined datacenter (SDDC).

C. A Tier-1 router that handles network traffic for workload virtual machines connected to routes compute network segments

D. A Tier-1 router handles routing and firewalling for the VMware vCenter Server and Other management appliances running in the software-defined datacenter (SDDC).

A cloud administrator is tasked with deploying a new software-defined data center (SDDC) in VMware Cloud on AWS and has been able to log into the VMware Cloud console Successfully. However, they cannot access the VMware Cloud on AWS Services. Which two tasks need to be performed for the administrator to gain access? (Choose two.)

A. The cloud administrator will need to create a new subscription for the VMware Cloud on AWS service.

B. The cloud administrator will need to request access to the VMware Cloud on AWS service

C. The cloud administrator will need the globalcloudadmin role in the VMware Cloud on AWS service.

D. The cloud administrator will need the Administrator role in the VMware Cloud on AWS service.

E. The cloud administrator will need the cloudadmin role in the VMware Cloud on AWS service.

A user is assigned the CloudAdmin role in a VMware Cloud on AWS software-defined data center (SDDC). At which level in the inventory hierarchy can the user deploy virtual machines?

A. Compute-ResourcePool in the Hosts and Clusters view

B. Discovered virtual machine folder in the VMs and Templates view

C. vsanDatastore in the Storage view

D. Mgmt-ResourcePool in the Hosts and Clusters view

A cloud administrator is asked to validate a proposed internetworking design that will provide connectivity to a VMware Cloud on AWS environment from multiple company locations.

The following requirements must be met:

1.

Connectivity to the VMware Cloud on AWS environment must support high-throughput data transfer.

2.

Connectivity to the VMware Cloud on AWS environment must NOT have a single point of failure.

3.

Any network traffic between on-premises company locations must be sent over a private IP address space.

Which design decisions should be made to meet these network connectivity requirements?

A. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a secondary, standby Direct Connect from headquarters using a public VIF. Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

B. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a public VIF for this connection. Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS. Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

C. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the "Use VPN as Backup to Direct Connect" option. Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

D. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a policy-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the "Use VPN as Backup to Direct Connect" option. Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

A cloud administrator is notified by VMware that their VMware Cloud on AWS Instance will be updated in seven days. Which action does the cloud administrator need to take to allow the update?

A. Add capacity.

B. Select a date for the upgrade.

C. Respond to the notification.

D. Nothing needs to be done.

Which two components are required in order to deploy a Tanzu Kubernetes Grid Cluster in VMware Could environment? (Choose two)

A. Tanzu CLI

B. Supervisor namespace

C. vSphere VM folder

D. vSphere resource pool

E. YAML manifest file

A cloud administrator establishes a VPN connection to the VMware Cloud data center but Is unable to access the VMware Cloud vCenter. Which step can the administrator take to resolve this?

A. Modify the default vCenter management network to participate in the on-premises IP space.

B. Create a segment in the VMware Cloud data center for connection to the vCenter.

C. Establish a layer 2 connection between the on-premises data center and the VMware Cloud data center.

D. Create an NSX firewall rule In the VMware Cloud data center allowing access to the vCenter from the on-premises data center.