Leading 3V0-21.21 Question For Advanced Design VMware VSphere 7.x Certification

NEW QUESTION 1
An architect is tasked with expanding an existing VMware software-defined data center (SDDC) solution so that it can be used to deliver a virtual desktop infrastructure (VDI) service off-shore development activities.
The production environment is currently delivered across two geographically dispersed data centers. The two data centers are currently connected to each other through multiple diversely routed, high bandwidth and low latency links. The current operations management components are deployed to a dedicated management cluster that is configured with N+1 redundancy. The current VMware software-defined data center (SDDC) has a monthly availability target of 99.5%, which includes all management components.
The customer requires that the new solution scale to support the concurrent running of 500 persistent virtual desktops. The virtual desktops must not share the same virtual infrastructure as existing virtual machines, but can be managed using the same VMware operations management components. Any new VDI service management components must be installed into the management cluster. There is no requirement to back up the virtual desktops because all relevant user data is stored centrally. The VDI service is providing business critical services and must have an availability target of 99.9%.
Given the information from the customer, which two assumptions would the architect include in the design? (Choose two.)

• A. The existing virtual infrastructure has sufficient capacity to host the new VDI workloads
• B. The existing operations monitoring tools have sufficient capacity to monitor the new VDI services
• C. The existing management cluster has enough available capacity to host any VDI service management component
• D. The management cluster has N+1 redundancy
• E. The VDI service has a higher service-level agreement (SLA) than the operations management SLA

Answer: BD

NEW QUESTION 2
An architect is designing a new greenfield environment with 600 ESXi hosts in an automated fashion. The engineering department already has a PXE Boot server, TFTP server, and DHCP server set up with an NFS mount for their current Linux servers.
The architect must be able to demonstrate and meet a security requirement to have all infrastructure processes separated.
Which recommendation should the architect make for the ESXi host deployment?

• A. Request an isolated network segment to use and dedicate it to Auto Deploy functions
• B. Ask the business to expand the engineering environment to service the virtual environment as well
• C. Request a common shared network with flexible security measures to accommodate different auto deployment options
• D. Deploy each ESXi host individually and document it to satisfy security requirements

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.esxi.install.doc/GUID-8DAC6FEE-0441-4072

NEW QUESTION 3
An architect is designing a new VMware software-defined data center (SDDC) that will consist of 100 branch sites connected to a single VMware vCenter Server within the primary data center. To allow for the use of existing automation scripts, there is a requirement to replicate the names of the virtual distributed port groups across all sites. The procurement team purchases licensing and there is no further budget allocated.
Which design decision should the architect make to meet this requirement?

• A. A new vCenter Server will be deployed for each branch site
• B. A new host and cluster folder will be created for each branch site
• C. The automation script will be updated to reflect unique naming for each site
• D. A new virtual data center will be created for each branch site

Answer: B

NEW QUESTION 4
Refer to the exhibit.
During a requirements gathering workshop, the architect shares the following diagram:

What should the architect recommend for guaranteed throughput for each service?

• A. Use explicit failover order with pNIC0 as Active for ESXi Management and VM Network Use explicit failover order with pNIC1 as Active for backup networkUse explicit failover order with pNIC2 as Active for vMotion Use explicit failover order with pNIC3 as Active for replication
• B. Use the Route Based on IP Hash for ESXi management and VM network Use the Route Based on IP Hash for backup networkUse the Route Based on the Originating Virtual Port for vMotion Use failover with pNIC3 as Active for replication
• C. Create a link aggregation group (LAG) for vDS_01Use the Route Based on Physical NIC Load for vMotion Use the Route Based on Physical NIC Load for replication
• D. Use the Route Based on IP Hash for ESXi management and VM network Use failover with pNIC1 as Active for backup networkCreate a link aggregation group (LAG) for vDS_02

Answer: A

NEW QUESTION 5
An architect is tasked with designing a greenfield VMware software-defined data center (SDDC) solution that will be used to deliver a private cloud service for a customer.
During the initial meeting with the service owner and business sponsor, the customer has provided the following information to help inform the design:
The solution must initially support the concurrent running of 300 production and 600 development virtual machines.
The production environment should be delivered across two geographically dispersed data centers. The development environment must be vSphere-based but does not have to be deployed on-premises.
The two data centers are connected to each other through multiple diversely routed, high bandwidth and low latency links.
The customer’s server hardware standard document states that all virtual infrastructure hosts must be based on blade architecture only.
The service owner has said that is important to ensure that neither the availability target of 99.5% nor the resource capacity is affected when the operations team completes maintenance activities, such as the monthly software patching and ad-hoc hardware break/fix.
All virtual machine backups must be completed using the existing backup service. The recovery time objective (RTO) for the service is four hours.
The recovery point objective (RPO) of the service is 24 hours.
Given the information from the customer, which two would be classified as assumptions within the design? (Choose two.)

• A. The backup service will store data in a secure facility
• B. The backup service has sufficient capacity for the new requirements
• C. The customer will update their hardware standard to support rack mount servers
• D. All virtual machines will be deployed with the same resource profile for production and development
• E. The clusters will have a minimum redundancy of N+1

Answer: BE

NEW QUESTION 6
During a requirements gathering workshop, the customer provides the following information:
Each host has 2 × 10 GbE NIC
EtherChannel is not currently configured
No changes can be made to the physical network
Network throughput must be prioritized for defined critical services
Which two recommendations should the architect make with regard to virtual networking? (Choose two.)

• A. Use Route Based on Physical NIC Load.
• B. Use Network I/O Control with Shares.
• C. Use Network I/O Control with Reservation.
• D. Use Link Aggregation Control Protocol (LACP).
• E. Use Network I/O Control with Limits.

Answer: AD

NEW QUESTION 7
There is a request for approved virtual machine applications through a new vSphere platform’s integrated automation portal. The platform was built following all provided company security guidelines and has been assessed against Sarbanes-Oxley Act of 2002 (SOX) regulations.
The platform has the following characteristics:
vRealize Operations is being used to monitor all clusters.
There is a dedicated ESXi cluster, supporting all management services.
All network traffic is via distributed virtual switches (DVS). There is a dedicated ESXi cluster for all line-of-business applications.
Network traffic is serviced by NSX-T.
There is a dedicated ESXi cluster for virtual desktop infrastructure (VDI).
Network traffic is serviced by NSX-T.
The application owner is requesting approval to install a new service that must be protected as per the Payment Card Industry (PCI) Data Security Standard.
Which additional non-functional requirement should the architect include in the design to support the new service?

• A. The vSphere hosting platform and all PCI application virtual machines must be assessed against Payment Card Industry (PCI) Data Security Standard compliance.
• B. The vSphere hosting platform and all PCI application virtual machines must be assessed for SOX compliance.
• C. The vSphere hosting platform and all PCI application virtual machine network traffic must be routed via NSX-T.
• D. The vSphere hosting platform and all PCI application virtual machines must be monitored using the vRealize Operations Compliance Pack for Payment Card Industry.

Answer: A

NEW QUESTION 8
An architect is considering placement of virtual machines within an existing VMware software-defined data center (SDDC).
During the discovery phase, the following information is documented: Cluster One
Six ESXi hosts
vSphere HA with host failures cluster tolerates = 1
Proactive HA is enabled and set to automated
Fully Automated vSphere DRS
Transparent Page Sharing (TPS) is enabled Cluster Two
Eight ESXi hosts
vSphere HA with host failures cluster tolerates = 1
Proactive HA is disabled
Partially Automated vSphere DRS
Transparent Page Sharing (TPS) is disabled Cluster Three
Three ESXi hosts
vSphere HA with admission control is disabled
Proactive HA is not supported
Transparent Page Sharing (TPS) is disabled Virtual Machine Resource Profile 1
Memory sharing techniques should not be used
Automated initial virtual machine placement
Virtual Machine Resource Profile 2
Memory sharing techniques should not be used
Virtual machines should be automatically restarted in the event of host failure regardless of available resources
Automated initial virtual machine placement
Which two recommendations should the architect make for placement of the virtual machines to meet resource profile requirements? (Choose two.)

• A. All virtual machines matching Virtual Machine Resource Profile 2 should be placed on Cluster One.
• B. All virtual machines matching Virtual Machine Resource Profile 1 should be placed on Cluster One.
• C. All virtual machines matching Virtual Machine Resource Profile 2 should be placed on Cluster Two.
• D. All virtual machines matching Virtual Machine Resource Profile 1 should be placed on Cluster Two.
• E. All virtual machines matching Virtual Machine Resource Profile 2 should be placed on Cluster Three.

Answer: DE

Explanation:
https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.resmgmt.doc/GUID-FEAC3A43-C57E

NEW QUESTION 9
During a transformation project kick-off meeting, an architect highlights specific areas on which to focus while developing the new conceptual design.
Which two of the listed statements are business requirements? (Choose two.)

• A. The project should use the existing storage devices within the data center
• B. Sites must support a network latency of less than 12 ms round-trip time (RTT)
• C. The solution must allow data replication between sites
• D. There is no budget specifically assigned for disaster recovery
• E. There must not be a single point of failure for the virtual infrastructure

Answer: CE

NEW QUESTION 10
A customer requests a review of its current vSphere platform design.
The following information is noted:
There are three different workload profiles for the virtual machines:
Tier-1 virtual machines operate resource-intensive applications and require dedicated allocations for CPU and RAM.
Tier-2 virtual machines operate internet-facing applications and require access to externally facing networks.
Tier-3 virtual machines operate platform management tools such as vCenter Server and have different lifecycle management requirements.
Tier-1, Tier-2 and Tier-3 virtual machines are all hosted on a single large vSphere cluster.
The Chief Information Security Officer (CISO) has raised concerns that hosting externally facing applications alongside management tools does not meet internal compliance standards.
The Operations team has raised concerns about Tier-1 virtual machines negatively impacting the performance of vCenter Server.
The Operations lead has stated that management changes have consistently been rejected by application teams.
As a result of the review, which recommendation should the architect make regarding the design of this platform?

• A. Separate Tier-1, Tier-2 and Tier-3 virtual machines using dedicated distributed virtual switches (DVS)
• B. Separate Tier-2 virtual machines onto a dedicated cluster
• C. Separate Tier-1, Tier-2 and Tier-3 virtual machines onto dedicated clusters
• D. Separate Tier-1, Tier-2 and Tier-3 virtual machines using resource pools and shares

Answer: C

NEW QUESTION 11
Following a recent acquisition, an architect needs to merge IT assets into its current data center. The combined vSphere environment will need to run the newly acquired company’s virtual machines.
Network integration work has already been completed and the current environment has capacity to host all virtual machines. The Operations team needs to identify which virtual machines belong to the acquired company and report on their usage.
How should the architect merge the company’s assets and virtual machines?

• A. Leave the newly acquired company’s assets in its current place
• B. Lift and shift the acquired assets into the data center
• C. Migrate the acquired company’s virtual machines into the existing vSphere environment
• D. Migrate and apply vSphere tags to the acquired company’s virtual machines

Answer: D

NEW QUESTION 12
An architect is designing a new backup solution for a vSphere platform that has been recently upgraded to vSphere 7.
The architect wants the backup solution to perform the following:
Full virtual machine image backup and restore
Incremental virtual machine image backup and restore
File level backup and restore within both Windows and Linux virtual machines
LAN-free backup
Which functional requirement should the architect include in the design of the new backup solution?

• A. The backup solution must leverage the VMware Consolidated Backup (VCB) framework.
• B. The backup solution must leverage virtual machine snapshots.
• C. The backup solution must leverage VMware vSphere Storage APIs - Data Protection.
• D. The backup solution must leverage VMware vStorage APIs for Data Protection (VADP).

Answer: C

NEW QUESTION 13
An organization's existing vSphere environments are configured for Enhanced Linked Mode. The DevOps team automates the creation of hardened virtual machine images for various operating systems. Their continuous integration/continuous delivery (CI/CD) pipeline runs a task at the end of a successful build, which uploads the Open Virtualization Format (OV) image to a sandbox content library, deploys a virtual machine from the image, and then destroys these objects after quality checks are complete.
The following requirements have been noted:
All content libraries and images must be centrally created and managed.
All images must be capable of being updated.
All images must be refreshed and available to subscribed libraries within 24 hours.
All images must provide details of the image contents and versions.
All images must be capable of being reverted to a previous version.
All images must be capable of having the hardware and guest operating system customized during deployment.
Which three recommendations should the architect make to design a content library solution that will meet these requirements? (Choose three.)

• A. Create a local content library in the primary vSphere environment and enable publishing.
• B. Create and publish a new subscription to a new subscriber library for each target vSphere environment.
• C. Deploy the OVF images to vSphere and clone as an OVF template to a local content library.
• D. Deploy the OVF images to vSphere and clone as a VM template to a local content library.
• E. Edit the Auto Sync Refresh Interval advanced setting for each subscribed library.
• F. Add a new subscriber library from each vSphere environment.

Answer: ACF

NEW QUESTION 14
An architect is designing a new vSphere platform to meet a list of requirements from the security team. Which two requirements would be classified as non-functional requirements? (Choose two.)

• A. Migration of virtual machines between hosts must be encrypted
• B. Log information must be verbose to support incident resolution
• C. Critical events generated within the platform must be logged to an external Syslog service
• D. Data integrity must be ensured
• E. A common content library must be maintained across all data centers

Answer: CD

NEW QUESTION 15
An architect has 50 ESXi hosts to deploy and DHCP servers are not allowed on any network. Which automated host deployment method should the architect use?

• A. Stateless vSphere Auto Deploy
• B. Stateful vSphere Auto Deploy
• C. Scripted installation
• D. Interactive installation

Answer: C

NEW QUESTION 16
An architect is designing a solution for an environment with two types of resource profiles that must be virtualized. The first type consists of Tier 1 virtual machines that are disk I/O intensive, but do NOT require high CPU or memory. The second type consists of Tier 2 virtual machines that require a lower CPU and memory allocation and have minimal disk I/O.
Which design recommendation should the architect make for distributing the resource profiles?

• A. Separate the two resource profiles into two cluster
• B. The Tier 1 cluster will have fast storage while the Tier 2 cluster will not.
• C. Run both resource profiles on the same cluster with the same host hardware platform.
• D. Separate the two resource profiles into two cluster
• E. The Tier 2 cluster will have faster CPU and more memory while the Tier 1 cluster will have slower CPU and less memory but more disk space.
• F. Run both resource profiles on the same cluster with host hardware that has fast CPU, large amounts of memory, and the fastest storage platform.

Answer: D

NEW QUESTION 17
......