Correct Answer: D

A Deployment is a Kubernetes object that allows you to perform a rolling update without disrupting services. A Deployment manages a ReplicaSet or a Pod and provides declarative updates for them. You can describe the desired state of

your application using a Deployment, and it will change the actual state to the desired state at acontrolled rate. A Deployment also allows you to roll back to a previous version if something goes wrong during the update14.

The other options are incorrect because:

A ReplicaSet is a Kubernetes object that ensures that a specified number of pod replicas are running at any given time. It does not provide any mechanism for updating or rolling back pods15.

A Service is a Kubernetes object that defines a logical set of pods and a policy to access them. It does not provide any mechanism for updating or rolling back pods16.

A Container is not a Kubernetes object, but rather a component of a Pod. A Pod is the smallest deployable unit of computing in Kubernetes. A Pod can contain one or more containers that share storage and network resources. A Pod does

not provide any mechanism for updating or rolling back itself or its containers17. References: Deployments, ReplicaSets, Services, Pods

Correct Answer: CE

Two configurations that are valid for Zonal Supervisor Deployment are three- zone and one-zone. A Zonal Supervisor Deployment is a way of deploying the vSphere with Tanzu Supervisor Cluster across multiple vSphere clusters that are mapped to vSphere Zones1. A vSphere Zone is a logical grouping of vSphere clusters that share common characteristics, such as network connectivity, power source, or physical location2. A Zonal Supervisor Deployment provides high availability and fault tolerance for Kubernetes workloads by distributing them across different zones1. The supported configurations for Zonal Supervisor Deployment are: Three-zone: The Supervisor Cluster spans three vSphere clusters, each mapped to a different vSphere Zone. This configuration provides the highest level of availability and fault tolerance, as it can tolerate the failure of any one zone1. One-zone: The Supervisor Cluster runs on a single vSphere cluster that is mapped to a single vSphere Zone. This configuration is suitable for development or testing purposes, but does not provide any availability or fault tolerance guarantees1. References: Requirements for Zonal Supervisor Deployment - VMware Docs, Create vSphere Zones for a Multi-Zone Supervisor Deployment - VMware Docs

Correct Answer: D

A tool that can be used to backup and restore workloads on clusters provisioned by the VMware Tanzu Kubernetes Grid Service is the Velero Plugin for VMware vSphere. The Velero Plugin for VMware vSphere is an extension of Velero, an open source tool that performs backup and restore of Kubernetes resources and persistent volumes5. The plugin leverages the snapshot capabilities of vSphere to create backups of Kubernetes workloads running on vSphere-managed infrastructure, such as VMware Cloud on AWS or VMware Cloud on Dell EMC5. The plugin also supports restoring backups to the same or different clusters, as well as migrating workloads across clusters5. References: Velero Plugin for VMware vSphere Documentation

Correct Answer: B

A prerequisite for cert-manager installation is to obtain the admin credentials of the target workload cluster. Cert-manager is a tool that automates the management and issuance of TLS certificates within Kubernetes clusters3. To install cert-manager, users need to have access to the cluster where they want to deploy it, and have the necessary permissions to create resources such as namespaces, custom resource definitions, deployments, services, and secrets3. Users can obtain the admin credentials of the target workload cluster by using the tanzu cluster kubeconfig get command with the --admin option4. This command generates a kubeconfig file that contains the admin credentials for the cluster, which can be used to authenticate with the cluster and perform cert-manager installation4. References: Installation - cert-manager Documentation, Deploy Workload Clusters - VMware Docs

Correct Answer: ACEF

Four policy types that are supported by VMware Tanzu Mission Control are:

Security policy: Security policies allow you to manage the security context in which deployed pods operate in your clusters by imposing constraints on your clusters that define what pods can do and which resources they have access to6.

Access policy: Access policies allow you to use predefined roles to specify which identities (individuals and groups) have what level of access to a given resource7. Network policy: Network policies allow you to use preconfigured templates to

define how pods communicate with each other and other network endpoints8. Custom policy: Custom policies allow you to implement additional business rules, using templates that you define, to enforce policies that are not already

addressed using the other built-in policy types9.

References: Policy-Driven Cluster Management - VMware Docs