Verified 2V0-71.21 dumps Q&As - Pass Guarantee Exam Dumps Test Engine [2022]
2V0-71.21 dumps and 56 unique questions
NEW QUESTION 15
What is a standard solution for a Kubernetes administrator to implement pod security?
- A. Use trusted corporate repository
- B. iptables
- C. OPA
- D. Add check for validating YAML
Answer: D
NEW QUESTION 16
What kubernetes object can be used to mount and run script inside a POD after creation?
- A. Config map
- B. Admission controller
- C. Secret
- D. Deployment
Answer: D
NEW QUESTION 17
Which step must be taken to enable Kubernetes auditing on a Tanzu Kubernetes cluster?
- A. Run systemctl start auditd && systemctl enable auditd on master node
- B. Edit /etc/kubernetes/audit-policy.yaml and set ENABLE_AUDIT variable to '1' on master node
- C. Audit is enabled by default on every Tanzu cluster
- D. Set the ENABLE_AUDIT_LOGGING variable to 'true' before deploying the cluster
Answer: D
Explanation:
Reference:
%20auditing%20on,on%20the%20control%20plane%20node
NEW QUESTION 18
Which method is supported to change Kubernetes version for Tanzu Kubernetes clusters on VMware vSphere with Tanzu?
- A. Upgrade by skipping Kubernetes version e.g. 1.16 to 1.18
- B. Decrease Kubernetes version e.g. 1.18 to 1.17
- C. Change the major version, e.g. from v1.18 to v2.0
- D. Upgrade by incremental Kubernetes version e.g. 1.17 to 1.18
Answer: D
NEW QUESTION 19
Refer to the exhibit.
A developer deployed nginx with 2 replicas on a new Tanzu Kubernetes Grid cluster, but the deployment did not move to a ready state.
What is the next step to troubleshoot?
- A. kubectl describe pods
- B. kubectl get pods
- C. kubectl describe replicasets
- D. kubectl get errors
Answer: A
NEW QUESTION 20
Why is the port 6443 required in the boostrap machine to deploy Tanzu Kubernetes Grid on vSphere environment?
- A. Kubernetes API is exposed
- B. Kubernetes TLS is exposed
- C. Kubernetes IP is exposed
- D. Kubernetes VPN is exposed
Answer: A
NEW QUESTION 21
An administrator was asked to run a conformance testing on all Kubernetes clusters managed by Tanzu Mission Control.
What are the required steps?
- A. Run the conformance testing by selecting a workspace group that all the cluster namespaces belong to
- B. Run the conformance testing by selecting a cluster group that all the clusters belong to
- C. Conformance testing can be run on the cluster level, repeat this task for all the clusters
- D. Apply a label to all the clusters and select the label when running the conformance testing
Answer: B
NEW QUESTION 22
What command would an administrator use to upgrade the Tanzu Management Cluster?
- A. tkg upgrade management-cluster
- B. tkg management-upgrade
- C. apt-get install -y kubeadm
- D. tanzu-upgrade-mgt
Answer: A
NEW QUESTION 23
Which log file can be used for troubleshooting when there is a problem with Workload Control Plane (WCP) deployment?
- A. websso.log
- B. sps.log
- C. vpxd.log
- D. wcpsvc.log
Answer: D
NEW QUESTION 24
What Kubernetes feature would be used to force the scheduler to place instances of the application on different nodes?
- A. nodeAuthorization
- B. kubectl
- C. namespaces
- D. nodeAffinity/nodeAntiAffinity
Answer: D
NEW QUESTION 25
How is the Tanzu Kubernetes Grid (TKG) management cluster created?
- A. There is no need for a management cluster in Tanzu Kubernetes Grid.
- B. The TKG CLI creates a temporary bootstrap cluster.
- C. The administrator creates the management cluster in vCenter.
- D. Download the kubernetes management agent.
Answer: B
NEW QUESTION 26
Which two inspections are supported in Tanzu Mission Control? (Choose two.)
- A. Security Inspection
- B. Vulnerability Inspection
- C. SAST Inspection
- D. CIS Benchmark Inspection
- E. Conformance Inspection
Answer: D,E
NEW QUESTION 27
How can an administrator collect a support bundle for Tanzu Kubernetes cluster (TKC)?
- A. Run command kubectl collect tkc support-bundle
- B. Use TKC Support Bundler
- C. Collect with PowerCLI
- D. Download from vCenter Server
Answer: B
NEW QUESTION 28
Which Tanzu Mission Control role provides the typical service usage for most members in an organization?
- A. Service Collaborator
- B. Service Member
- C. Service Owner
- D. Service Admin
Answer: B
NEW QUESTION 29
Which command is used to upgrade a Tanzu Kubernetes Grid Cluster (TKG) to a different kubernetes version?
- A. tkg cluster upgrade <cluster_name> --kubernetes-version <version>
- B. tkg upgrade cluster <cluster_name> --version <version>
- C. tkg upgrade cluster <cluster_name> --kubernetes-version <version>
- D. tkg cluster upgrade <cluster_name> --k8s-version <version>
Answer: C
NEW QUESTION 30
What is the default authentication implemented in Tanzu Kubernetes Grid?
- A. Keycloak
- B. Dex & Gangway
- C. kube-oidc-proxy
- D. Vault
Answer: D
NEW QUESTION 31
Which component can intercept requests to the Kubernetes API?
- A. Network Policy
- B. Admission Controllers
- C. Pod Security Policies
- D. RBAC Authorization
Answer: B
NEW QUESTION 32
Which upgrade method can be used for an 'in-place' Kubernetes update?
- A. Run "kubectl patch" command against a Tanzu Kubernetes cluster
- B. Change the VirtualMachineClass on a Tanzu Kubernetes cluster
- C. Change the number of control plane nodes
- D. Change the StorageClass on a Tanzu Kubernetes cluster
Answer: A
NEW QUESTION 33
Which role is required to enable data protection in Tanzu Mission Control?
- A. cluster.admin
- B. cluster.edit
- C. clusters.admin
- D. cluster.manage
Answer: A
NEW QUESTION 34
An architect is designing the infrastructure for multiple applications and needs to ensure isolation and control over resources and permissions assigned to each application team.
Which is the easiest and least expensive way to satisfy these requirements?
- A. Use dedicated vSphere Namespace per application
- B. Use dedicated vSphere Pod per application
- C. Use dedicated Supervisor Cluster per application
- D. Use dedicated Kubernetes Deployments per each application
Answer: A
Explanation:
The dedicated namspace per application ensure isolation and control over resources and permissions in each application team. Namespace is unique entity that is why it can be used to manage resources independently.
NEW QUESTION 35
Refer to the exhibit.
Which two options can be modified in order to expose nginx app using Ingress Controller? (Choose two.)
- A. Change type to LoadBalancer
- B. Change type to IngressController
- C. Change type to HostPort
- D. Change type to AntreaCni
- E. Change type to NodePort
Answer: B,C
NEW QUESTION 36
Which is the correct statement describing the characteristic of a pod?
- A. Pod is deployed directly on the virtual machine.
- B. Pod is the smallest entity managed by Docker.
- C. Pod can contain only one container.
- D. Containers in a pod start and stop together.
Answer: D
NEW QUESTION 37
......
2V0-71.21 Dumps for Pass Guaranteed - Pass 2V0-71.21 Exam: https://www.easy4engine.com/2V0-71.21-test-engine.html
2V0-71.21 Exam Dumps - Try Best 2V0-71.21 Exam Questions: https://drive.google.com/open?id=1I-5-z9sgHjmTpBtfeFAATkr6CRpBRtzO
