An enterprise organization has a library of Terraform configurations for creating and managing its infrastructure resources.
What enhanced capability will be introduced by leveraging the vRealize Automation Terraform Service? (Choose the best answer.)
- A . The ability to deploy a machine using a dynamically-created Terraform configuration with tag-based placement.
- B . The ability to deploy a machine using an existing Terraform configuration from the self-service catalog in Service Broker.
- C . The ability to deploy a machine using an existing Terraform configuration with tag-based placement.
- D . The ability to deploy a machine using a dynamically-created Terraform configuration from the self-service catalog in Service Broker.
A
Explanation:
Reference: https://blogs.vmware.com/management/2020/11/vra-tf-fcd.html
What is the purpose of a cloud zone? (Choose the best answer.)
- A . A cloud zone is used to segregate resources for provisioning within a cloud account.
- B . A cloud zone is a method of connecting to a type of resource provider.
- C . A cloud zone is a simplified user interface for users who do not need full access to developing and building cloud templates.
- D . A cloud zone is used for organizing users and groups.
A
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.1/Using-and-Managing-Cloud-Assembly/GUID-87FF38A3-CEAD-4B15-BC85-07568EA4CF1C.html
Refer to the exhibit.
An administrator is testing a newly created Windows 2016 cloud template in Cloud Assembly. While using the Test option from within the cloud template, the attached error appears.
What is a possible cause for this error message? (Choose the best answer.)
- A . During the machine allocation phase, Cloud Assembly could not find enough resources.
- B . The network profile created did not have the correct capability tag.
- C . The administrator did not associate a cloud zone to the project.
- D . The administrator did not add a cloud account.
C
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.2/vrealize-automation-transition/GUID-F3541BFC-E154-4E76-8845-FAF4E40632E3.html
After collecting a log bundle using the vracli CLI command, the resulting .tar file contains many paths and files.
Where will the administrator find the logs related specifically to the embedded vRealize Orchestrator?
- A . /pods/kube-system/
- B . /pods /prelude/vco-app-<service instance>
- C . /pods/prelude/extensibility-ui-app-<service instance>
- D . /<hostname>/var/log/vco
B
Explanation:
vRealize Orchestrator Control Center logs reside in a vco-controlcenter-app.log file in each of the /pods/prelude/vco-app-hash/ directories.
Refer to the exhibit.
An administrator receives the error in the attached screenshot when attempting to add a cloud account.
What is a possible cause of this error? (Choose the best answer.)
- A . The username and password are incorrect.
- B . The hostname uses a URL instead of IP address/FQDN.
- C . There is an invalid certificate for the vCenter.
- D . A Cloud account exists with the same name.
B
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Operations-Manager/8.4/com.vmware.vcom.core.doc/GUID-315C57B6-A383-4DBA-A8D0-FEF6CC56F0B4.html
Assuming no additional inputs have been added to the cloud template and the custom form is not enabled, which two fields are always flagged as mandatory when requesting a catalog item? (Choose two.)
- A . Description
- B . Cloud zone
- C . Version
- D . Project
- E . Deployment name
C,E
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.0/Using-and-Managing-Service-Broker/GUID-743604C9-5527-4EF9-87C6-EF6D3D5981E3.html
Which kubectl command should be run to find the Kubernetes authentication method? (Choose the best answer.)
- A . kubectl describe pod <pod-name>
- B . kubectl Cn prelude describe pod <pod-name>
- C . kubectl describe secrets
- D . kubectl explain
C
Explanation:
Reference: https://kubernetes.io/docs/tasks/configmap-secret/managing-secret-using-kubectl/
What are two purposes of projects in vRealize Automatin? (Choose two.)
- A . Configure custom naming
- B . Organize image mappings
- C . Create tenants
- D . Add cloud accounts
- E . Map compute resources to users and groups
A,E
Explanation:
Reference: https://cloudadvisors.net/2019/12/13/vrealize-automation-8-working-with-projects-first-considerations/
Which vRealize Suite product helps an administrator understand the monetary impact of deployments and manage costs in vRealize Automation? (Choose the best answer.)
- A . vRealize Suite Lifecycle Manager
- B . vRealize Network Insight
- C . vRealize Operations
- D . vRealize Log Insight
C
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Operations-Manager/7.5/com.vmware.vcom.config.doc/GUID-9D162B8A-FBF8-4713-901C-6E3A1A5B7AEA.html
When creating a subscription in Cloud Assembly, what are the two types of runnable items available for executing code? (Choose two.)
- A . ABX Action
- B . Python
- C . PowerShell
- D . Node.js
- E . vRO Workflow
A,E
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.0/Using-and-Managing-Cloud-Assembly/GUID-CA30B6E8-0DFD-4679-84B2-06B4D3A1CBEF.html
Which vRealize Automation service is available through an external appliance in vRealize Automation Cloud? (Choose the best answer.)
- A . Cloud Assembly
- B . Service Broker
- C . vRealize Orchestrator
- D . Code Stream
C
Explanation:
Reference: https://blogs.vmware.com/management/2019/10/vrealize-automation-new-install-and-configuration.html
Once complete, the console shows the services and options which are available. You can add users and configure roles by selecting Identity & Access Management from the menu bar. If you’re using Active Directory, remember you’ll need to add those details in vIDM or LCM through Locker before users and groups will appear in vRA 8. In addition to the aforementioned services, vRealize Orchestrator (vRO) is accessible from the Console, as well as the vRA Migration Assessment. vRO no longer uses a java client. Instead you can access the embedded vRO via the new HTML 5 UI through this console. An external vRO appliance option is available too
Which command should an administrator run to check the status of vRealize Automation services? (Choose the best answer.)
- A . vracli org-oauth-apps
- B . kubectl Cn prelude get pods
- C . kubectl cluster-info Cn prelude
- D . vracli status
B
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.0/Administering/GUID-99D06124-13F8-489A-B43C-EAEC3F4FE582.html
Where would an administrator configure the availability of newly added all-flash storage arrays for a Big Data Project in vRealize Automation? (Choose the best answer.)
- A . Cloud templates
- B . Storage Profiles
- C . Cloud Zones
- D . Storage Resources
B
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.2/Using-and-Managing-Cloud-Assembly/GUID-623A6992-4E4B-40C1-A697-E1933A285203.html
Which two public cloud accounts are supported for vRealize Automation? (Choose two.)
- A . IBM Cloud
- B . Oracle Cloud
- C . Amazon Web Services
- D . Alibaba Cloud
- E . Microsoft Azure
C,E
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.0/Using-and-Managing-Cloud-Assembly/GUID-6667AA70-169A-4E03-A377-B2B4533910D4.html
An administrator configures a lease policy with the following settings:
Maximum lease (days): 10
Maximum total lease (days): 30
Grace period (days): 5
If a user does not respond to any emails, after how many days will the deployment be
destroyed? (Choose the best answer.)
- A . 15
- B . 10
- C . 35
- D . 40
A
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.1/Using-and-Managing-Service-Broker/GUID-87B2B204-3B4F-458F-826E-82CE7246FDA4.html
An administrator is preparing to deploy vRealize Automation into production in one of several geo-distributed datacenters.
For which type of deployment should the administrator plan while confirming resource capacity? (Choose the best answer.)
- A . Standard
- B . Multi-site
- C . Distributed
- D . Clustered
An administrator is trying to create a new set of image mappings that will map to vSphere templates that have been added to an existing vCenter Server cloud account. When the administrator tries to select the Windows Server 2016 image, nothing appears on the list. The administrator has confirmed that the vSphere template exists in the correct location within vCenter Server.
Which action should the administrator take to be able to create the new image mapping? (Choose the best answer.)
- A . Validate the vCenter Server cloud account credentials.
- B . Check to make sure image synchronization is successful for the vCenter Server cloud account.
- C . Make sure the correct NSX endpoint is selected for the vCenter Server cloud account.
- D . Add a new capability tag to the vCenter Server cloud account.
B
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.1/Using-and-Managing-Cloud-Assembly/GUID-9CBAA91A-FAAD-4409-AFFC-ACC1810E4FA5.html
The administrator has installed SaltStack Config using the "edu" tenant from vRealize Suite Lifecycle Manager.
How would the administrator access the SaltStack Config service?
- A . Log into httpa://<vra-fqdn>
- B . Log in to https://edu.<3alt3tackconfig-fqdn>
- C . Log in to https://edu.<vra-fqdn>
- D . Log in to https://salt.<vra-fqdn>
What is the main difference between vRealize Orchestrator non-persistent logs and persistent logs? (Choose the best answer.)
- A . Time Synchronization of logs
- B . Storing of events in the database
- C . Log Insight forwarding configuration
- D . Logging level configuration
B
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Orchestrator/8.1/com.vmware.vrealize.orchestrator-install-config.doc/GUID-4E29EBE7-181D-4B17-982E-7599F9164F1B.html
Refer to the exhibit.
An administrator successfully deploys vRealize Automation (vRA) and configures a new directory in vRealize Suite Lifecycle Manager for the App-Dev team. The Add-Dev team needs to request catalog items and manage the subsequent deployments. The company security policy requires that users be granted the least privileges necessary to fulfill their role.
The administrator is assigned a ticket to address the issue that when the App-Dev members log into vRA, they receive the error shown in the exhibit. Based on initial investigation, all of the users experiencing the issue are members of the same Active Directory Group: App-Dev-Users. Upon review from within vRA Identity & Access Management, all of the users reporting the issue appear under the Active Users tab.
Which two actions should the administrator take within Identity & Access Management to resolve the reported issue while adhering to the security policy? (Choose two.)
- A . Under Enterprise Groups, assign the Service Broker User service role to the App-Dev-Users group.
- B . Under Active Users, assign the Service Broker Administrator service role to each of the impacted users.
- C . Under Enterprise Groups, assign the Service Broker Administrator service role to the App-Dev-Users group.
- D . Under Enterprise Groups, assign the Organization Member role to the App-Dev-Users group.
- E . Under Active Users, assign the Organization Owner role to each of the impacted users.
A,D
Explanation:
Reference: https://docs.vmware.com/en/VMware-Cloud-Assembly/services/Using-and-Managing/GUID-5A4C11E3-C7E6-4FBB-BFB3-F85C2FA28D6D.html
In which two areas of vRealize Automation could an administrator view a flow chart of a failed deployment? (Choose two.)
- A . Infrastructure > Activity > Requests
- B . Extensibility > Events
- C . Extensibility > Library > Event Topics
- D . Infrastructure > Machines
- E . Deployments > History > Provisioning Diagram
A,E
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.3/Using-and-Managing-Cloud-Assembly/GUID-970CA971-65B7-4747-BF35-A54C1C0B849B.html
Which command should an administrator run to manage certificates on a vRealize Automation appliance? (Choose the best answer.)
- A . /data/vco/usr/lib/vco/app-server/bin/generate_ssl_certificate.sh
- B . kubectl certificate
- C . /opt/scripts/renew_k8s_certificates.sh
- D . vracli certificate
D
Explanation:
Reference: https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#certificate
When deploying the SaltStack Config service using vRealize Suite Lifecycle Manager, which construct is automatically created in Cloud Assembly to assist in deploying SaltStack Config minions using cloud templates?
- A . A custom resource
- B . A secret
- C . A custom role
- D . A property group
D
Explanation:
https://blogs.vmware.com/management/2021/02/vrealize-automation-8-3-and-saltstack-config-technical-overview.html
An administrator is looking to install SaltStack Config to integrate with existing vRealize Automation environment.
Which two pre-requisites must be met to complete the installation using vRealize Suite Lifecycle Manager? (Choose two.)
- A . Access to NSX-T Load Balancer
- B . Integrate vRealize Automation with Active Directory
- C . Access to a vRealize Automation tenant
- D . A valid vRealize Automation license key
- E . Access to NSX-T Data Center cloud account
C,D
Explanation:
Reference: https://docs.vmware.com/en/VMware-vRealize-Suite-Lifecycle-Manager/8.2/vrealize-lifecycle-manager-8.2-installation-upgrade-and-management.pdf
An administrator wants to use constraint tags to deploy cloud templates to a particular storage with a capability tag assigned; however, not all projects have access to this storage.
Which two tag formats can be defined at the cloud template level in order to ensure that cloud templates are deployed on this particular storage, whenever possible, and fail if not available? (Choose two.)
- A . value:key
- B . key:value:soft
- C . !key:value
- D . key:value:hard
- E . key:value
When deploying SaltStack Config minions as part of a machine deployment in vRealize Automation, which parameter must be specified in the cloudConfig section of the cloud template? (Choose the best answer.)
- A . Salt master account with the Administrator or Superuser role
- B . Salt minion installation directory
- C . Salt minion operating system family
- D . Salt master address
D
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.3/Using-and-Managing-Cloud-Assembly/GUID-601FCFAE-DB21-4A05-AFCF-F304D6216C8C.html
What is the function of Action-Based Extensibility (ABX)? (Choose the best answer.)
- A . It provides the capability to migrate content between instances of vRealize Automation.
- B . It provides efficient capacity and cost management for managed virtual machines.
- C . It provides intelligent remediation and integrated compliance for security patches.
- D . It provides a way to execute stateless function, which contain reusable parameterized actions.
D
Explanation:
Reference: https://docs.vmware.com/en/VMware-Cloud-Assembly/services/Using-and-Managing/GUID-55847415-5920-47E7-86BD-20CD9EB6BA6B.html
Which statement is true for vRealize Automation multi-organization tenant configuration?
- A . Providers can set up multiple tenants and allocate infrastructure within each deployment, providers manage tenant infrastructure remotely
- B . Providers can set up multiple tenants and allocate infrastructure within each deployment and providers manage projects, resources, and deployments
- C . Providers set up multiple tenants, each tenant manages its own projects but resources, and deployments are managed globally
- D . Providers set up multiple tenants, each tenant manages its own projects, resources, and deployments
B
Explanation:
vRealize Automation enables IT providers, to set up multiple tenants, or organizations, within each deployment. Providers can set up multiple tenant organizations and allocate infrastructure within each deployment. Providers can also manage users for tenants. Each tenant manages its own projects, resources, and deployments. https://docs.vmware.com/en/vRealize-Automation/8.6/Administering/GUID-6E4A52AF-AE4B-4C12-AE20-413A505DF189.html
An administrator successfully creates a new cloud template in Cloud Assembly for the DevOps project. The administrator is ready to publish the cloud template so that the DevOps team can use the catalog for self-service requests.
The administrator is trying to import the cloud template into Service Broker through the correct content source type. After creating the content source, the administrator cannot find the new cloud template listed in order to import it.
What might be the cause of this issue? (Choose the best answer.)
- A . The administrator did not create a version of the cloud template.
- B . The administrator did not test the cloud template provisioning logic.
- C . The administrator did not select the ‘Release this version to the catalog’ checkbox.
- D . The administrator did not change the cloud template to a shared cloud template.
D
Explanation:
Reference: https://docs.vmware.com/en/vRealize-Automation/8.4/vrealize-automation-transition/GUID-9C62A648-E605-4E58-885E-A5C9670AF611.html
An administrator configures cloud accounts for vSphere, Amazon Web Services and Google Cloud Platform. Each public cloud account has a single region configured, with a single cloud zone associated with each. Company policy states that all development workloads should be deployed to the public cloud and all production workloads should be deployed to vSphere. The administrator wants to ensure that when creating cloud templates for this project an appropriate constraint tag is specified to meet the placement policy and that App-Dev users are allowed to select whether to deploy the machine to production or development. The tagging strategy states that development environments should be tagged with “dev” and production environments should be tagged “prod”.
Which two actions should the administrator take to ensure the objective is met? (Choose two.)
- A . Add a capability tag to each cloud account, using env:prod as the key/value pair.
- B . Add a capability tag to each public cloud zone, using env:dev as the key/value pair.
- C . Add a capability tag to each vSphere cloud zone, using env:dev as the key/value pair.
- D . Add a capability tag to each vSphere cloud zone, using env:prod as the key/value pair.
- E . Add a capability tag to each public cloud zone, using env:prod as the key/value pair.