Free 5V0-31.23 Exam Braindumps
VMware Cloud Foundation Deployment Specialist Questions 11–15 (page: 4)

Updated On: 10-Feb-2026

A VMware Cloud Foundation (VCF) administrator wants to download the install bundles to deploy a new VI Workload Domain. The SDDC Manager is currently not connected to the internet.
Which two methods can the VCF administrator use to download the install bundles? (Choose two.)

  1. Use the Bundle Transfer Utility
  2. Use a proxy in the SDDC Manager
  3. Use a custom ESXi image
  4. Use the Async Patch tool
  5. Use a proxy in the Aria Suite Lifecycle

Answer(s): A,B

Explanation:

When the SDDC Manager in VMware Cloud Foundation (VCF) is not connected to the internet, administrators have two main options to download install bundles:
1. Using the Bundle Transfer Utility: This utility allows administrators to download bundles on an internet-connected machine and then transfer them to the isolated VCF environment. It's specifically designed for environments without direct internet access.
2. Using a Proxy in the SDDC Manager: Configuring a proxy in SDDC Manager enables indirect access to download bundles through a controlled connection, such as a secure proxy server, if internet access is permitted only through proxy settings.



An administrator wants to implement password rotation as a security measure in VMware Cloud Foundation (VCF).
Which statement regarding password rotation in VCF is true?

  1. The parameters of password rotation can be manually changed to customize the generated passwords.
  2. To retrieve passwords for an entity in VCF, run the lookup passwords command, but user credentials do not need to be entered.
  3. Scheduled password rotation is available for ESXi Hosts, and it runs every 30 days by default.
  4. Password rotation generates randomized passwords with a minimum length of 20 characters, at least one uppercase letter, one number, and one special character.

Answer(s): D

Explanation:

In VMware Cloud Foundation (VCF), password rotation generates new, randomized passwords that meet specific complexity requirements, including a minimum length of 20 characters with at least one uppercase letter, one number, and one special character. This approach helps enhance security by ensuring that passwords are strong and regularly updated.



An administrator wants to deploy a VMware Cloud Foundation (VCF) VI Workload Domain (WLD). The WLD will use a vSAN stretched cluster across availability zones.
What configuration step meets the requirements?

  1. Create a single host overlay network per availability zone with a DHCP scope
  2. Create a single host overlay network per availability zone with an IP Pool
  3. Create a site for the vSAN Witness by placing a single node ESXi host in the VI WLD
  4. Create a site for the vSAN Witness by placing a single node ESXi host in the management WLD

Answer(s): D

Explanation:

For a vSAN stretched cluster deployment across availability zones in VMware Cloud Foundation, a vSAN Witness is required to maintain data consistency and quorum between the two sites. This witness node is typically deployed as a single ESXi host in the Management Workload Domain (WLD), separate from the active VI Workload Domain. This configuration provides fault tolerance and ensures that the witness is isolated from the main workload domain, enhancing stability and recovery in case of a failure in one of the availability zones. Other options are incorrect because they involve configurations that do not meet the specific requirements for a stretched vSAN cluster setup with a dedicated vSAN Witness in a secure, isolated location.



Which two are true regarding vSphere Namespaces in a Workload Management-enabled VI Workload Domain? (Choose two.)

  1. A vSpJiere Namespace can support Role Based Access Control for a directly integrated Active Directory.
  2. A vSphere Namespace is an extension of a vSphere resource pool.
  3. A vSphere Namespace is a resource boundary that can only contain Kubernetes clusters.
  4. A vSphere Namespace's primary function is to run workloads.
  5. A vSphere Namespace requires its own license.

Answer(s): A,B

Explanation:

vSphere Namespaces in a Workload Management-enabled environment can integrate with Active Directory to provide Role Based Access Control (RBAC). This feature allows administrators to set permissions based on Active Directory roles for better access management. vSphere Namespace is essentially an extension of a vSphere resource pool. It provides a logical boundary within which resources (such as CPU, memory, and storage) can be allocated to workloads and Kubernetes clusters, facilitating efficient resource management within the workload domain.



An administrator is experiencing issues with NTP during a pre-check before performing an upgrade of VMware Cloud Foundation (VCF). As a precaution the administrator would like to check if NTP is synchronized properly between the SDDC Manager and the ESXi hosts by using the SoS utility.
Which command option should the administrator use?

  1. --esxi-ntp-health
  2. --ntp-health
  3. --get-ntp-health
  4. --check-ntp-health

Answer(s): B

Explanation:

In VMware Cloud Foundation (VCF), the SoS utility provides a variety of command options to check the health of system components. To verify NTP synchronization status between the SDDC Manager and ESXi hosts, the administrator should use the --ntp-health command option. This command provides details on NTP configuration and synchronization status, which is essential for maintaining time consistency across the VCF environment, especially before an upgrade.



Viewing page 4 of 15
Viewing questions 16 - 20 out of 70 questions


Post your Comments and Discuss VMware 5V0-31.23 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!