2V0-71-23 Sample Questions & Answers

A platform operator is deploying a new Tanzu Kubernetes Grid (TKG) management cluster to a vSphere environment using the CLI. The deployment fails during the provider resource creation step. Upon reviewing the logs, the operator suspects an issue with the credentials used to connect to vCenter. Which command should the operator use to verify and, if necessary, regenerate the vSphere credentials stored in the local Tanzu configuration?

A financial services company has deployed Tanzu Service Mesh across their hybrid environment, which includes TKG clusters on-premises and in AWS. They have created a Global Namespace (GNS) for their 'trading-app' to facilitate secure, cross-cluster communication. A new regulation requires that all traffic between the 'market-data' service and the 'order-processing' service within this GNS must be mutually authenticated using mTLS. How should an administrator enforce this requirement?

During the deployment of a TKG cluster on vSphere, the process fails. An operator runs tanzu cluster get and observes that the control plane nodes are stuck in the 'Provisioning' phase. Which underlying technology is responsible for the declarative reconciliation of the cluster's state against the vSphere infrastructure?

Case Study:

A healthcare organization is modernizing its patient portal application using VMware Tanzu for Kubernetes Operations. They have a vSphere 7.0U3 environment with vSAN as the primary datastore. A Supervisor Cluster has been successfully deployed, and a vSphere Namespace called 'patient-portal-prod' has been created for the development team.

The application consists of several microservices, including a stateful database component that requires persistent storage with high availability. The security team mandates that all application traffic must be routed through a centralized ingress point with TLS termination, and developers must not have permissions to create their own ingress objects.

The operations team needs to ensure they can back up the entire 'patient-portal-prod' namespace, including persistent volumes, to an S3-compatible object store for disaster recovery. They also need to provide developers with a simple way to deploy the application stack without managing complex Kubernetes YAML manifests.

Which combination of Tanzu components and configurations best meets all the stated requirements?

An SRE is troubleshooting application latency in a Kubernetes cluster that is monitored by Aria Operations for Applications (formerly Tanzu Observability). The SRE needs to identify which specific microservice call in a distributed transaction is causing the slowdown. Which capability of Aria Operations for Applications is essential for this type of analysis?

A platform administrator is configuring a new TKG cluster that will host applications requiring high-performance, low-latency storage. The underlying vSphere environment uses vSAN. To meet the application's performance requirements, the administrator needs to ensure that all PersistentVolumes created for this application use a specific vSAN policy that enables RAID-1 mirroring and a high number of IOPS reservations. What Kubernetes object must the administrator create and configure to make this vSAN policy available for developers to request via PersistentVolumeClaims?

A company is using NSX Advanced Load Balancer (Avi) with Tanzu Kubernetes Grid. An administrator notices that when a new Service of type LoadBalancer is created, a new virtual service is not being created on the Avi Controller. The administrator has confirmed that the Avi Controller is reachable from the TKG cluster. Which component is responsible for watching the Kubernetes API for new Services and Ingresses and communicating with the Avi Controller to create the necessary virtual services?

What is the primary function of the Tanzu Kubernetes Grid Service (TKGS) within a vSphere with Tanzu environment?

Which of the following are valid datastore types that can be used for shared storage by a vSphere with Tanzu Supervisor Cluster? (Select TWO)

An organization uses Velero to back up their TKG clusters. A junior administrator is tasked with restoring a specific namespace, app-- from a backup. After the restore, developers report that their application cannot connect to its database, which runs in the same namespace. The investigation reveals that the Kubernetes Secret containing the database password was not restored. What is the most likely reason for this failure?