[2026] Pass VMware 3V0-24.25 Exam Updated 173 Questions [Q59-Q82]

Share

[2026] Pass VMware 3V0-24.25 Exam Updated 173 Questions

Get 2026 Updated Free VMware 3V0-24.25 Exam Questions and Answer

NEW QUESTION # 59
After upgrading the vSphere Supervisor, an administrator notices that the vSphere Kubernetes Service, configured as a Core Supervisor Service, is stuck in a"Configuring"state.
What should the administrator do to finish the upgrade?

  • A. Verify the AppPlatform operator user account can authenticate with vCenter.
  • B. Ensure the vSphere Kubernetes Service is a supported version.
  • C. Verify the administrator account can authenticate to the Supervisor service.
  • D. Restart the supervisor service.

Answer: B

Explanation:
A Supervisor upgrade impacts the lifecycle and compatibility of Supervisor Services (including Core Supervisor Services). VMware guidance emphasizes validating compatibility for the components that depend on the Supervisor and remediating any incompatibilities as part of the overall upgrade process. If a Core Supervisor Service remains stuck in"Configuring"after the Supervisor is upgraded, a common and expected cause is that the service version isnot compatiblewith the upgraded Supervisor/vCenter software state. In those cases, the upgrade workflow expects you toidentify and update incompatible Supervisor Servicesto versions that match the new supported software level. Ensuring the vSphere Kubernetes Service is at asupportedversion (for the upgraded Supervisor) aligns with the documented approach: run compatibility checks and thenupdate the versions of incompatible Supervisor Servicesso they can complete reconciliation and reach a healthy state.


NEW QUESTION # 60
A Platform Engineer observes that a TKG cluster upgrade has failed with the status Condition:
Incompatible. The error message indicates that the VirtualMachineClass referenced in the cluster YAML (guaranteed-large-v1) is no longer available in the namespace.
The administrator realizes that the guaranteed-large-v1 class was recently removed from the Namespace configuration in favor of guaranteed-large-v2.
How should the engineer recover the cluster and complete the upgrade? (Select all that apply.)

  • A. The cluster must be deleted and recreated because the VM Class is immutable once provisioned.
  • B. Edit the TanzuKubernetesCluster manifest to update the vmClass field to guaranteed-large-v2 for the node pools.
  • C. Add the guaranteed-large-v1 class back to the Namespace in the vSphere Client to satisfy the current state requirements, allowing the controller to reconcile the current state before moving to the new state.
  • D. Once the manifest is updated to guaranteed-large-v2, the Supervisor will trigger a rolling update to replace the nodes with the new class (and new version if specified).
  • E. Manually rename the VM Class in vCenter from guaranteed-large-v2 to guaranteed-large-v1.

Answer: B,C,D


NEW QUESTION # 61
A Platform Engineer is troubleshooting a Pending PersistentVolumeClaim (PVC) in a Zonal Supervisor environment. The pod requesting the volume is scheduled in Zone-A.
Review the kubectl describe pvc data-vol output:
Name: data-vol
Namespace: zonal-app
Status: Pending
Volume:
StorageClass: zone-a-policy
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning ProvisioningFailed 15s (x9 over 2m) csi.vsphere.vmware.com failed to provision volume with StorageClass "zone-a-policy":
No compatible datastore found in topology
"topology.kubernetes.io/zone=zone-a".
The vSphere Administrator confirms that zone-a-policy exists and is assigned to the namespace.
What is the most likely configuration error causing this failure? (Choose 2.)

  • A. The vSphere CSI driver has crashed on the ESXi hosts.
  • B. The zone-a-policy is configured to force provisioning in Zone-B only, creating a topology mismatch with the pod's location.
  • C. The datastores in Zone-A are compatible with the policy but have insufficient free space to satisfy the requested PVC size.
  • D. The storage policy zone-a-policy includes tag-based rules that are not satisfied by any datastore currently available in Zone-A.
  • E. The PVC request is missing the accessModes field.

Answer: B,D


NEW QUESTION # 62
A cloud platform team is deploying multiple Supervisors in a VMware Cloud Foundation (VCF) environment to support a multi-tenant VKS architecture. Each Supervisor will host a distinct set of namespaces mapped to different organizational tenants such as Finance, Public Services, and R&D, where each tenant consumes resources from dedicated workload domains.
What is the purpose of the vcf context create command?

  • A. Creates a named set of access parameters for a VKS cluster.
  • B. Creates a new storage profile for a cluster.
  • C. Creates a connection to VCF Operations for the current session.
  • D. Provides authentication to the Supervisor cluster.

Answer: A

Explanation:
VCF 9.0 defines aVCF CLI contextas aconfiguration setfor a specific endpoint (for example, a Kubernetes cluster, vSphere Supervisor, or VCF Automation) and explains that a context stores the key connection parameters such asendpoint,context type,path to kubeconfig, andcredentials. This aligns directly with optionC, because vcf context create is used to create anamedcontext that encapsulates the access parameters needed to work with a specific Supervisor or VKS cluster and to switch between multiple environments without rewriting configuration each time.
The documentation further shows vcf context create being used to connect either to aSupervisor endpointor to aworkload (VKS) cluster(by providing workload cluster name/namespace or by using a generated kubeconfig), which is exactly the multi-tenant operational pattern in the question. While authentication is part of what happens during context creation (for example, creating a configuration that includes a JWT for Kubernetes API access), the command's purpose is broader: it creates the reusablecontextobject that defineswhereandhowthe CLI connects.


NEW QUESTION # 63
A VI Administrator is optimizing the resource allocation for a vSphere Namespace named prod- analytics running critical stateful workloads. The goal is to ensure that the memory for these workloads is fully reserved on the ESXi hosts to prevent contention, while allowing CPU to burst.
Review the available configuration options in the Namespace "Resource Limits" section:
[CPU]
Limit: [Enter Value] MHz
Reservation: [Enter Value] MHz
[Memory]
Limit: [Enter Value] MB
Reservation: [Enter Value] MB
Which specific configuration actions should the administrator perform? (Select all that apply.)

  • A. Set the CPU Reservation to equal the CPU Limit.
  • B. Configure the Storage Policy to thick-provisioned.
  • C. Set the Memory Limit to the desired capacity (e.g., 64000 MB).
  • D. Set the Memory Reservation to equal the Memory Limit (e.g., 64000 MB).
  • E. Leave the Memory Reservation at 0 (default).

Answer: C,D


NEW QUESTION # 64
A Cloud Architect is designing a disaster recovery plan for a mission-critical Zonal Supervisor deployment. The scenario involves a catastrophic failure of the Supervisor Cluster itself (e.g., corruption of the etcd database across all zones) during a failed upgrade, requiring a full restore.
Environment:
* VKS workloads are backed up using Velero.
* The Supervisor configuration (Namespaces, Policies) is backed up using the vCenter File-Based Backup.
What is the correct sequence of steps to restore service? (Select all that apply.)

  • A. Restore the vCenter Server from its file-based backup to recover the Supervisor's management context.
  • B. Since the Supervisor state (etcd) is corrupted, the administrator must restore the Supervisor Cluster using the specific "Restore Supervisor" workflow (often involving the restore-supervisor.sh script or UI equivalent if available in the specific VCF version) which utilizes the backup data to reconstruct the Control Plane VMs.
  • C. It is unnecessary to restore the Supervisor; simply redeploying a new Supervisor and pointing Velero to the object store will automatically recover the cluster infrastructure.
  • D. Manually recreate all vSphere Namespaces and re-assign permissions before restoring workloads.
  • E. After the Supervisor is restored, use Velero to restore the TKG workloads (TanzuKubernetesClusters) into the restored Namespaces.

Answer: A,B,E


NEW QUESTION # 65
An administrator is operating a sovereign private cloud built on VMware Cloud Foundation (VCF) and is providing isolated Supervisor Namespaces as well as associated Kubernetes clusters. The architecture must ensure consistent provisioning, management, and monitoring of these clusters across tenants while maintaining compliance with internal governance and automation frameworks, considering:
* Deploying and scaling Kubernetes clusters
* Managing Supervisor Namespaces and configurations
* Monitoring cluster health, workloads, and resources across tenants
What three clients are supported for provisioning, managing, and monitoring VMware vSphere Kubernetes Service (VKS) clusters? (Choose three.)

  • A. vSphere UI
  • B. esxtop
  • C. VCF CLI
  • D. esxcli
  • E. kubectl
  • F. Cluster API

Answer: A,C,E

Explanation:
VCF 9.0 states that you can provision Kubernetes clusters using both GUI and CLI approaches, and it explicitly calls out the CLI clients: "the VCF CLI and kubectl provide command-line interfaces for provisioning Kubernetes clusters." That directly maps tokubectl (A)andVCF CLI (E)as supported clients for provisioning and lifecycle operations. Separately, VCF 9.0 explains that vSphere administrators can "manage and monitor vSphere Pods, VMs, and VKS clusters by using the vSphere Client," which corresponds tovSphere UI (C)in the question. In addition, the vSphere Client is used to access Supervisor-facing self- service interfaces (for example, the Local Consumption Interface through the vSphere Client), reinforcing vSphere UI as an operational entry point for managing Supervisor-backed services and workloads.
By contrast,Cluster APIis a controller framework (not an operator "client" for admins in this context), andesxtop/esxcliare ESXi host tools that do not represent the documented, supported interfaces for provisioning and managing VKS clusters at the Kubernetes service layer.


NEW QUESTION # 66
A Security Operations Analyst needs to configure access for an external OIDC provider (e.g., Okta) to allow developers to authenticate to TKG clusters.
Review the available configuration interfaces:
1. vSphere Client > Administration > Single Sign-On > Configuration > Identity Provider
2. Supervisor Control Plane VM (via SSH) > /etc/pam.d/
3. NSX Manager > System > Users > External
4. Tanzu Mission Control > Identity
Where must the analyst configure the upstream OIDC Identity Provider trust relationship so that it applies to the Supervisor Cluster and its Namespaces?

  • A. Interface 2
  • B. Interface 4
  • C. Interface 1
  • D. Interface 3

Answer: C


NEW QUESTION # 67
In a vSphere with Tanzu environment, what is the primary source of truth for identity and authentication for the Supervisor Cluster?

  • A. The Supervisor maintains its own independent local user database stored in etcd.
  • B. vCenter Single Sign-On (SSO) is the central identity provider; the Supervisor federates with vCenter SSO to authenticate users.
  • C. Authentication is handled exclusively by the NSX Manager identity store.
  • D. The Supervisor must be connected directly to an external LDAP server, bypassing vCenter Server.

Answer: B


NEW QUESTION # 68
Which of the following best describes the primary function of a vSphere Namespace within a vSphere with Tanzu environment?

  • A. It is a construct that maps 1:1 to a vCenter Server cluster for high availability.
  • B. It is a networking construct that provides isolation at Layer 2 for TKG clusters.
  • C. It is a logical boundary that encapsulates a set of virtual machines for resource management.
  • D. It is a resource boundary backed by a Resource Pool that allows vSphere administrators to set limits on CPU, memory, and storage for a set of Kubernetes workloads.

Answer: D


NEW QUESTION # 69
A Security Architect requires a Private Image Registry (Harbor) to be deployed as a Supervisor Service in a highly secure, air-gapped environment.
Requirements:
1. The Harbor service must use a custom TLS certificate signed by the internal Corporate CA (corp- ca.pem), not a self-signed one.
2. All TKG clusters in the environment must automatically trust this registry.
Review the deployment strategy:
- Step 1: Upload the Harbor Service Definition to vCenter.
- Step 2: Create a vSphere Namespace shared-services.
- Step 3: Enable the Harbor service on shared-services.
Which additional configuration steps are necessary to satisfy the security requirements? (Select all that apply.)

  • A. The TKG clusters must be manually patched with the CA certificate after deployment using SSH.
  • B. Ensure the TkgServiceConfiguration (or global Supervisor Trust settings) includes the corp-ca.pem in the trust.additionalTrustedCAs list. This ensures all future TKG clusters provisioned by this Supervisor will have the CA injected into their nodes and can pull images from the Harbor registry without x509 errors.
  • C. The Harbor service cannot use custom certificates; it only supports self-signed.
  • D. No certificate configuration is needed; vCenter's VMCA will automatically sign the Harbor certificate, which is trusted by default.
  • E. During the Harbor Service installation wizard, upload the server.crt (signed by Corp CA) and server.key in the "Certificate" section.

Answer: B,E


NEW QUESTION # 70
An administrator is maintaining several Kubernetes clusters deployed through a Supervisor Namespace in a vSphere Kubernetes Service environment. One of the micro-services (a containerized API gateway) is failing intermittently after a recent configuration update. The pod is entering aCrashLoopBackOffstate. The administrator needs to collect detailed runtime information directly from the pod, including both thestandard output (STDOUT)andstandard error (STDERR)streams, to analyze the application's behavior before the crash.
Which command produces the required output?

  • A. kubectl describe
  • B. kubectl logs
  • C. kubectl get all
  • D. kubectl events

Answer: B

Explanation:
When a container repeatedly crashes (CrashLoopBackOff), the most direct way to capture what the application emitted right before termination is to retrieve the container logs. In Kubernetes, application output written toSTDOUTandSTDERRis captured by the container runtime logging mechanism and exposed through the Kubernetes API for retrieval. The kubectl logs command is designed specifically for this purpose: it fetches the log stream for a pod (and container, if multiple exist), allowing administrators to review the runtime messages that typically explain configuration errors, missing dependencies, failed probes, authentication problems, or other causes of the crash loop. This aligns with VMware operational guidance that uses kubectl to retrieve pod-level operational information and logs as part of troubleshooting Kubernetes functionality running on vSphere.


NEW QUESTION # 71
A Cloud Administrator receives a request to deploy a Supervisor Cluster that supports NSX Segments for namespaces. This allows developers to create their own logical segments within their namespace using kubectl.
Scenario:
* VCF environment with NSX-T.
* Supervisor is not yet enabled.
* The requirement is to allow Namespace-1 to have a segment 192.168.10.0/24 and Namespace-2 to have 192.168.20.0/24, both routable.
Which design choices are valid for this configuration? (Choose 2.)

  • A. This requires the VDS networking stack with HAProxy, as NSX enforces a flat overlay.
  • B. The administrator must manually create each Logical Switch in NSX Manager and map it to the Namespace.
  • C. The Supervisor must be enabled with the NSX networking stack.
  • D. The administrator defines a Network Policy in the Supervisor context that allocates a block of IPs (e.g., /16) to the cluster, from which NSX will carve out /24 segments for each Namespace automatically or upon request.
  • E. Developers will create a VirtualNetwork (or similar CRD depending on version) object in their namespace to trigger the segment creation.

Answer: C,D


NEW QUESTION # 72
A VKS Administrator has initiated an upgrade of a TKG cluster dev-cluster from version v1.23 to v1.24. The status in the vSphere Client indicates "Upgrading" for several hours.
The administrator runs kubectl get tanzukubernetescluster dev-cluster and sees the following:
NAME CONTROL PLANE WORKER DISTRIBUTION AGE PHASE
dev-cluster 3 3 v1.24.9+vmware.1-tkg.1.b16d28d 4h Updating
To investigate the stall, the administrator checks the Machine resources.
Which kubectl command will best help identify which specific node replacement is blocking the process?

  • A. kubectl get pods -n kube-system
  • B. kubectl logs deployment/wcp-controller-manager -n vmware-system-csi
  • C. kubectl get machines -l cluster.x-k8s.io/cluster-name=dev-cluster
  • D. kubectl describe tanzukubernetescluster dev-cluster

Answer: C


NEW QUESTION # 73
A company standardized on the following configurations:
* vSphere Kubernetes Service (VKS) upgrade is separate from vCenter upgrades.
* A private registry will be utilized.
How should an administrator adhere to these standards?

  • A. Issue a PowerCLI command to point to the private registry.
  • B. When uploading the service definition, chooseAsynchronous Public.
  • C. Issue a kubectl command pointing the service definition to the private registry.
  • D. When uploading the service definition, chooseAsynchronous Private.

Answer: D

Explanation:
VCF 9.0 documentation explicitly indicates thatvCenter upgrades and the Supervisor/cluster (Workload Management) upgrade are distinct, noting that "if you have only upgraded vCenter and not the cluster" then DevOps engineers have reduced permissions until the cluster is upgraded. This supports the stated standard that VKS/Workload Management lifecycle can be treated separately from vCenter. For the private registry requirement, VCF 9.0 provides an operational mechanism to authenticate and pull artifacts from private registries: "Registry secrets allow package and repository consumers to authenticate to and pull images from private registries," implemented via a standard Kubernetes Secret of type kubernetes.io/dockerconfigjson.
Taken together, the standard implies (1)asynchronoushandling (separate lifecycle from vCenter) and (2) privatesourcing (images pulled from an internal registry with registry secrets). Therefore, selectingAsynchronous Privatebest matches both requirements in a single configuration choice, aligning with the documented separation of upgrades and the documented need to use authenticated access to private registries.


NEW QUESTION # 74
In a vSphere with Tanzu environment, which component is responsible for automatically adjusting the number of worker nodes in a Tanzu Kubernetes Grid (TKG) cluster based on the pending pod requests?

  • A. The vSphere HA agent running on the ESXi hosts.
  • B. The Distributed Resource Scheduler (DRS) running on the vCenter Server.
  • C. The Horizontal Pod Autoscaler (HPA) running inside the TKG cluster.
  • D. The Cluster Autoscaler (integrated as part of the Cluster API provider logic) which monitors for unschedulable pods and interfaces with the Supervisor to provision new Machine objects.

Answer: D


NEW QUESTION # 75
A Cloud Architect is designing a storage strategy for a Zonal Supervisor deployment across 3 Availability Zones (Zone-1, Zone-2, Zone-3) to support a highly available Kafka cluster.
Requirements:
1. Kafka brokers will be distributed across all 3 zones.
2. Each broker needs a persistent volume for data.
3. If a pod in Zone-1 fails and is rescheduled to Zone-1 (same zone), it must re-attach to its data.
4. If Zone-1 fails completely, the architecture does NOT require the data from Zone-1 to be accessible in Zone-2 (Kafka handles app-level replication).
5. Storage management must be automated via Kubernetes.
Which storage policy design best meets these requirements while minimizing cross-zone latency and cost? (Select all that apply.)

  • A. Create three distinct vSphere Storage Policies (e.g., local-zone-1, local-zone-2, local-zone-3), each tagged to use only the local datastores within its respective zone.
  • B. Configure the Kafka StatefulSet to use the zonal-storage class. When a pod is scheduled to a node in Zone-1, the CSI driver (via delayed binding) will automatically provision the volume on the datastore in Zone-1 to satisfy the topology constraint.
  • C. Use a Topology-Aware Storage Class. This can be achieved by using a single Storage Policy (e.g., zonal-storage) that is compatible with storage in all zones, and relying on the WaitForFirstConsumer volume binding mode.
  • D. Assign all three zonal policies to the kafka-namespace.
  • E. Use a vSAN Stretched Cluster policy that replicates data synchronously across all zones.

Answer: B,C


NEW QUESTION # 76
A VI Administrator is preparing a vSphere Namespace named dev-playground for the DevOps team to deploy Virtual Machines via kubectl. The administrator has already created a Content Library named K8s-Images containing the necessary OVF templates.
Review the Namespace configuration view in the vSphere Client:
Namespace: dev-playground
[VM Service]
VM Classes: [ 2 selected ]
Content Libraries: [ 0 selected ]
What specific action must the administrator take to enable the DevOps team to resolve the image names specified in their VM YAML manifests?

  • A. Add the K8s-Images Content Library to the "Content Libraries" card in the Namespace configuration.
  • B. Share the K8s-Images library globally from the vCenter Administration menu; namespace assignment is automatic.
  • C. Deploy a specific "Image Registry Pod" into the namespace.
  • D. Convert the OVF templates to Docker images and push them to the embedded Harbor registry.

Answer: A


NEW QUESTION # 77
Which feature in VMware vSphere Kubernetes Service (VKS) provides vSphere storage policy integration that supports provisioning persistent volumes and their backing virtual disks?

  • A. Cloud storage provider
  • B. Cloud storage implementation
  • C. vSphere Cloud Native Storage (CNS)
  • D. Container Storage Interface (CSI)

Answer: C

Explanation:
VCF 9.0 describesCloud Native Storage (CNS) on vCenteras the component that implements "provisioning and lifecycle operations for persistent volumes." When provisioning persistent volumes, CNS "interacts with the vSphere First Class Disk functionality to create virtual disks that back the volumes," and it
"communicates with Storage Policy Based Management to guarantee a required level of service to the disks." This is exactly the storage-policy-to-backed-virtual-disk relationship the question is testing: storage policies (via policy-based management) define requirements, and CNS is the vCenter-side service that applies those requirements while creating and managing the backing storage objects.
In contrast,CSI(including Supervisor CNS-CSI and VKS pvCSI) is the Kubernetes-facing interface/driver used to request and consume storage, but it does not "provide" the vSphere storage policy system; rather, it relies on CNS/CNS-CSI and vCenter services to fulfill provisioning requests. Therefore,vSphere Cloud Native Storage (CNS)is the correct choice.


NEW QUESTION # 78
A Platform Engineer creates a custom Supervisor Service for a proprietary admission controller.
The service definition YAML includes a PreInstall hook.
What is the purpose of this hook?

  • A. To register the service with NSX.
  • B. To perform prerequisite checks (e.g., validating that a required Secret exists or checking License validity) or infrastructure setup before the main application pods are deployed. If the hook fails, the installation aborts.
  • C. To delete old data before installing.
  • D. To upgrade the vCenter Server.

Answer: B


NEW QUESTION # 79
An administrator must create amulti-zone vSphere Supervisordeployment in a VMware Cloud Foundation (VCF) environment. What is the primary purpose of this configuration?

  • A. To enable cross-site vSAN stretched clusters for data replication between data centers.
  • B. To create isolated security domains using NSX micro-segmentation.
  • C. To simplify the management of network pools and IP address ranges.
  • D. To provide high availability for the Supervisor Cluster and vSphere Kubernetes clusters.

Answer: D

Explanation:
Amulti-zone Supervisorin VCF 9.0 is designed to deliverplatform resiliency and high availability at the vSphere cluster (zone) failure-domain level. The VCF 9.0 documentation states that a multi-zone Supervisor
"leverages three vSphere clusters" (each mapped to a vSphere Zone) and that these zones are used by both
"workloads and Supervisor management components to deliver high availability," exposing "each cluster as an independent, consumable availability zone," resulting in a "resilient, HA-capable platform." This is reinforced in the vSphere Zones guidance: deploying the Supervisor onthree vSphere Zones spreads the control plane VMs across three zones, providing "cluster-level high availability" that protects the Supervisor control plane against asingle cluster-level failure(one control plane VM per management zone).
Because VKS (vSphere Kubernetes Service) runs on Supervisor, distributing Supervisor control plane and workload placement across zones improves overall availability of Supervisor services and Kubernetes consumption in that Supervisor instance.


NEW QUESTION # 80
An administrator runs several critical workloads on vSphere Kubernetes Service (VKS). An audit identified an outdated container image with a known CVE that exposed internal APIs to unauthorized access. To mitigate this risk and enhance image security, the administrator enabled Harbor as a Supervisor Service.
Which two Harbor registry capabilities help the organization prevent a recurrence of this type of security incident? (Choose two.)

  • A. Automatic image update
  • B. Image signing
  • C. Automatic image validation
  • D. Vulnerability scanning
  • E. Deploy both container and virtual machine images

Answer: B,D

Explanation:
Harbor reduces the risk of running vulnerable or tampered images primarily throughvulnerability scanningandimage signing.Vulnerability scanning (E)detects known CVEs in image layers (OS packages and application dependencies, depending on the scanner configuration). This allows teams to identify-and gate the use of-images that contain high/critical vulnerabilities before those images are deployed to Kubernetes clusters. Enforcing scanning as part of the image promotion process helps prevent outdated images with known CVEs from being pulled into production.Image signing (A)provides integrity and provenance controls by enabling consumers to verify that an image was produced and approved by a trusted publisher and has not been altered. When combined with admission controls/policies (for example, only allowing signed images from specific projects), signing helps block unauthorized or unapproved images from being deployed, which is critical when the incident involves exposed internal APIs and supply-chain risk.
The other choices do not directly prevent recurrence:automatic image update (B)is not a core Harbor registry control,deploy both container and VM images (C)is a content capability rather than a security control, andautomatic image validation (D)is not a standard Harbor registry capability distinct from signing/scanning.


NEW QUESTION # 81
A Cloud Architect is evaluating the resource consumption of the Harbor Supervisor Service.
The requirement is to support a High Availability deployment of Harbor.
What impact does enabling HA have on the Supervisor Cluster?

  • A. It has no impact; HA is a logical switch.
  • B. It requires deploying 3 separate Supervisor Clusters.
  • C. It requires an external database; the embedded one cannot be HA.
  • D. It increases the resource reservation requirement because the Harbor operator will deploy redundant replicas of the core components (Core, Jobservice, Portal) and a clustered database/Redis, consuming more CPU/Memory/Storage from the Supervisor's resource pool.

Answer: D


NEW QUESTION # 82
......

Verified 3V0-24.25 exam dumps Q&As with Correct 173 Questions and Answers: https://www.actualtestsit.com/VMware/3V0-24.25-exam-prep-dumps.html

3V0-24.25 Dumps PDF and Test Engine Exam Questions: https://drive.google.com/open?id=1JzCg8x_T65bALReCEv7pU0xDMb4oa51m