Skip to content

2V0-11-25 VMware Cloud Foundation (VCF) 5.2 Administrator Practice Questions

Prepare for 2V0-11-25 with more than an answer.

208 questions in the full set20 sample questionsUpdated Mar 13, 2026

Unlock the full exam and previous versions

  • v1Version 1 208 questions Current
  • 2V0-11-24Legacy VMware Cloud Foundation (VCF) 5.2 Administrator 196 questions Locked
Exam fee
$250 USD
Level
Professional
Valid for
2 years
Domains covered on the exam 5
  1. IT Architectures, Technologies, and Standards
  2. VMware by Broadcom Solution20%
  3. Plan and Design the VMware by Broadcom Solution
  4. Install, Configure, and Administer the VMware by Broadcom Solution60%
  5. Troubleshoot and Optimize the VMware by Broadcom Solution20%
  1. 1

    True or False: When a new VI Workload Domain is created in a VCF 5.2 environment, SDDC Manager automatically deploys a new, dedicated NSX Manager cluster for that domain.

    Show answer details

    Correct answer: B

    This is false. By default, VI Workload Domains share the NSX Manager cluster that was deployed in the Management Domain. While it is possible to deploy a dedicated NSX instance for a workload domain, it is not the default, automatic behavior. The standard architecture promotes a shared NSX management plane.

  2. 2

    A VCF environment is experiencing intermittent connectivity issues to VMs running in an NSX overlay network. The administrator suspects a problem with the Tunnel Endpoints (TEPs) on the ESXi hosts. Which two steps are essential for troubleshooting TEP connectivity? (Select TWO).

    Show answer details

    Correct answer: B, D

    The vmkping command with the appropriate netstack (vxlan for older versions, geneve can also be used) allows testing of connectivity specifically from the TEP vmkernel interface, bypassing the default management TCP/IP stack. This is a crucial step to confirm the underlay network is passing TEP traffic correctly.

    Geneve encapsulation adds overhead to packets. If the underlying physical network and VDS do not have a sufficiently large MTU (minimum 1600), large packets will be fragmented or dropped, leading to intermittent connectivity. An MTU mismatch is a very common cause of TEP issues.

  3. 3

    An organization wants to use VMware Cloud Foundation to automate the provisioning of Kubernetes clusters for its development teams. Which VCF component provides the IaaS control plane that integrates with Tanzu to enable this functionality?

    Show answer details

    Correct answer: C

    The vSphere Supervisor is the component that transforms a vSphere cluster into a platform for running Kubernetes workloads directly on the hypervisor. It is enabled on a per-cluster basis within a VI Workload Domain and provides the underlying IaaS control plane that the Tanzu Kubernetes Grid Service uses to provision and manage conformant Kubernetes clusters.

  4. 4

    After a failed upgrade attempt of a VI Workload Domain, the VCF administrator needs to restore the SDDC Manager from its last successful backup. The backups are stored on an external SFTP server. What is the process to initiate the restore?

    sequenceDiagram participant Admin participant SDDC_Manager_UI as SDDC Manager UI participant Backup_Server as SFTP Server participant VCF_API as VCF API Admin->>SDDC_Manager_UI: Login Fails (due to issue) Admin-->>VCF_API: How to restore?

    Show answer details

    Correct answer: B

    Restoring the SDDC Manager is a recovery operation that cannot be initiated from the failed appliance's UI. The correct procedure is to deploy a new SDDC Manager appliance of the same version. During the initial configuration of this new appliance, you do not perform a bring-up but instead use its API to trigger a restore process, pointing it to the backup files on the configured SFTP server.

  5. 5

    A VCF administrator needs to scale out a vSAN cluster in a VI Workload Domain by adding three new hosts. The hosts have been physically racked and cabled. What is the first step the administrator must perform within SDDC Manager to begin this process?

    Show answer details

    Correct answer: B

    In VMware Cloud Foundation, all host management is orchestrated through SDDC Manager. Before a host can be added to any domain or cluster, it must first be discovered and 'commissioned'. This process adds the host to the SDDC Manager inventory, validates its configuration, and makes it available for allocation to workload domains.

  6. 6

    An administrator is reviewing the architecture of a newly deployed VMware Cloud Foundation (VCF) 5.2 environment. They need to explain to a new team member which component is singularly responsible for orchestrating the deployment of all other management components like vCenter, NSX Manager, and Aria Suite Lifecycle during the initial bring-up process. Which component fulfills this role?

    Show answer details

    Correct answer: C

    The VMware Cloud Builder appliance is used for the initial deployment (bring-up) of the VMware Cloud Foundation management domain. It automates the deployment of SDDC Manager, vCenter Server, and NSX. Once the bring-up is complete and SDDC Manager is running, Cloud Builder is no longer used for day-to-day operations.

  7. 7

    A financial services company is performing a pre-deployment validation for a new VMware Cloud Foundation 5.2 instance. The security team mandates that all management components must have fully resolvable names for both forward (A record) and reverse (PTR record) DNS lookups before any deployment begins. Which VCF component's deployment will fail first if this requirement is not met?

    Show answer details

    Correct answer: C

    The Cloud Builder appliance performs a series of validation checks against the provided deployment parameter sheet before starting the bring-up process. One of the critical first checks is to verify that all specified hostnames and IP addresses have correct forward and reverse DNS entries. If this check fails, the deployment will not proceed, making it the first point of failure related to this requirement.

  8. 8

    During a security audit, an administrator is required to rotate all service account passwords for the components within the VCF Management Domain. Which tool or interface provides a centralized and automated workflow for this task in a VCF 5.2 environment?

    Show answer details

    Correct answer: B

    SDDC Manager provides a centralized interface for managing the passwords of the various components it deploys and manages, such as vCenter Server, NSX Manager, and ESXi hosts. The password management feature includes automated rotation, policy configuration, and reporting, ensuring consistency and compliance across the VCF stack.

  9. 9

    A VCF administrator is using the sos command-line tool on the SDDC Manager appliance to troubleshoot a failed workflow. The administrator needs to collect logs specifically related to the domain management tasks. Which sos option should be used to gather the most relevant log bundle for this purpose?

    Show answer details

    Correct answer: B

    The sos utility on the SDDC Manager appliance has specific options to target log collection. The --collect --domain-manager flag specifically gathers logs from the Domain Manager service, which is responsible for tasks like creating, deleting, and updating workload domains. This is the most direct way to get logs relevant to a failed domain management workflow.

  10. 10

    A cloud architect is designing a stretched cluster for a new VI Workload Domain in VCF 5.2 to provide high availability across two physical sites. Which TWO components are essential prerequisites that must be configured and available before SDDC Manager can orchestrate the deployment of a stretched cluster? (Select TWO).

    Show answer details

    Correct answer: B, E

    SDDC Manager requires a pre-existing vSAN witness appliance to be available. It does not deploy the witness itself but consumes the existing one during the stretched cluster creation workflow.

    A fundamental requirement for a vSAN stretched cluster is that the vSAN and vMotion networks must be stretched (L2 adjacency) across the two data sites to allow for synchronous data replication and live migration of VMs.

Create an account to continue.