2V0-71.23 Exam Dumps : VMware Tanzu for Kubernetes Operations Professional

A VM class in VMware vSphere with Tanzu specifies the CPU, memory, and resource reservations for a VM10. vSphere with Tanzu offers several preconfigured VM classes which you can use as is, edit, or delete. You can also create custom VM classes in your vCenter Server instance and it will be available to all Supervisor Clusters and the namespaces created in these clusters11.

When you create or edit a VM class, you can configure the following attributes:

• Name: A unique DNS compliant name that identifies the VM class.
• vCPU Count: The number of virtual CPUs (vCPUs) for a VM. This is a VM hardware configuration.
• CPU Resource Reservation: The guaranteed minimum CPU resource allocation for a VM. This value is expressed in percentage (%).
• Memory: The memory configured for a VM in MB, GB, or TB. This is a VM hardware configuration.
• Memory Resource Reservation: The guaranteed minimum memory resource allocation for a VM. This value is expressed in percentage (%).
• Storage: The storage configured for a VM in MB, GB, or TB. This is a VM hardware configuration.

The other options are incorrect because:

• Network is not an attribute that can be configured in a VM class. Network configuration is done at the namespace level by using network policies12.
• Operating system is not an attribute that can be configured in a VM class. Operating system configuration is done at the image level by using content libraries.
• PCI devices are not an attribute that can be configured in a VM class. PCI devices are not supported by vSphere with Tanzu.

References: VM Classes, Create a Custom VM Class, Network Policies, [Content Libraries]

Policies are one of the features of Tanzu Mission Control that allow you to manage the operation and security posture of your Kubernetes clusters and other organizational objects. Policies allow you to provide a set of rules that govern your organization and all the objects it contains. The policy types available in Tanzu Mission Control include access policy, image registry policy, network policy, quota policy, security policy, and custom policy. Policies can be applied at the individual, group, or organizational level to control access, image registries, networking, resource consumption, security context, and more18.

The other options are incorrect because:

• Policies can be configured using a tag selector to restrict the scope of the policy is false. Policies can be configured using a label selector, not a tag selector, to include or exclude certain objects from the policy. A label is a key/value pairattached to a Kubernetes object that allows you to specify identifying attributes for that object. A selector provides the means to identify the objects that have a given label18.
• Policies can only be applied to clustergroups is false. Policies can be applied to various levels of the Tanzu Mission Control resource hierarchy, such as organization, cluster group, workspace, cluster, and namespace18.
• Policies can be enforced using Kubernetes resources (NetworkPolicy, ResourceQuota etc) or using the Kyverno admission controller is false. Policies are enforced by Tanzu Mission Control using its own admission controller and webhook server. Kyverno is an open-source policy engine for Kubernetes that is not related to Tanzu Mission Control.

References: Policy-Driven Cluster Management, [Kyverno]

VMware Aria Operations for Applications (formerly VMware Tanzu Observability) is a SaaS solution that collects and analyzes traces, metrics, and logs from various sources, including Tanzu Kubernetes Grid clusters, applications, and services. It provides a single source of truth for actionable insights into the performance, availability, and behavior of the entire application stack. It also enables users to create dashboards, alerts, and reports based on the collected data.

The other options are incorrect because:

• Watches defined infrastructure systems to keep track of health of resources is a description of VMware Tanzu Mission Control, which is another SaaS solution that provides centralized management and governance for Tanzu Kubernetes Grid clusters across multiple platforms.
• Automates the remediation of Kubernetes platform resources based on collected data is a description of VMware Tanzu Service Mesh, which is a service thatcreates an enterprise-class service mesh for consistent control and security for microservices, end users, and data.
• Tracks metrics, logs, and alerts based on specified thresholds is a partial description of VMware Aria Operations for Applications, but it does not mention the trace analysis and the single source of truth features.

References: VMware Tanzu for Kubernetes Operations Getting Started, VMware Aria Operations for Applications Documentation