Practice Question: A customer has enough host capacity for current VMs but requires quarterly maintenance, N+1 availability, and possible use of external storage for selected workload domains. What must be added to the sizing model?
A. Only the current VM count, because VCF sizing is linear by inventory item
B. Maintenance reserve, N+1 headroom, storage protocol and policy overhead, growth reserve, and operations-management overhead
C. Only datastore free space, because compute reserve can be corrected by DRS after deployment
D. Only the number of administrators, because fleet operations capacity is user-count based
Correct Answer: B
Explanation: B is correct because the scenario requires a defensible first move, and "Maintenance reserve, N+1 headroom, storage protocol and policy overhead, growth reserve, and operations-management overhead" ties the decision to VCF capacity model instead of a familiar but lower-priority tool. A sounds close, but "Only the current VM count, because VCF sizing is linear by inventory item" would make the review depend on an inference rather than the requested evidence. C moves attention away from VCF capacity model; the option may help another team, but it does not answer this architecture prompt. D is too indirect for the scenario because "Only the number of administrators, because fleet operations capacity is user-count based" cannot confirm the condition that the question is testing.
Exam Takeaway: The best answer is the one that proves workload inventory, storage policy/protocol selection, n+1 reserve, lifecycle window, and fleet management scope before the platform state changes.
Normalize workload inventory into demand profiles, not just VM count. Add host failure or rack failure reserve, storage policy overhead, external storage constraints where supported, network throughput, and lifecycle staging space. For VCF 9.0, include the operational footprint of fleet management and central visibility rather than treating each instance as isolated.
The technical object is VCF capacity model. The tested attribute is sizing dimension, with an expected range of CPU, memory, storage protocol, IOPS, network throughput, growth reserve, operations overhead. In a real design review, this object starts from VM-count-only estimate until the architect proves workload inventory, storage policy/protocol selection, N+1 reserve, lifecycle window, and fleet management scope. The evidence must be concrete enough for another engineer to reproduce the decision or incident analysis.
| Object | Attribute | Value Range | Default State | Dependency | Failure State |
|---|---|---|---|---|---|
| VCF capacity model | sizing dimension | CPU, memory, storage protocol, IOPS, network throughput, growth reserve, operations overhead | VM-count-only estimate | workload inventory, storage policy/protocol selection, N+1 reserve, lifecycle window, and fleet management scope | The platform deploys but lacks headroom for maintenance, growth, lifecycle operations, or storage-policy overhead. |
| Evidence package | Validation source | capacity worksheet, workload assessment, storage design, lifecycle reserve model | Missing or incomplete during draft design | Access to supported VCF 9.0 UI, API, logs, or inventory | The answer becomes an unsupported assumption |
| Version boundary | Product workflow owner | VCF Installer, VCF Operations, VCF Automation, vCenter, NSX, storage system | Ambiguous when old terms are reused | Target release and supported workflow | Legacy process is selected for a current VCF 9.0 scenario |
| Operating runbook | Execution state | Assess, validate, execute, verify, document | Draft until approved | Maintenance window, rollback, identity, and ownership model | Change succeeds locally but creates fleet or lifecycle drift |
Command or evidence confidence note:
Configuration inventory evidence: compare assessment data with vCenter performance metrics, storage-array evidence where applicable, and VCF Operations capacity views.
Expected evidence: capacity worksheet, workload assessment, storage design, lifecycle reserve model
Use only commands, APIs, UI paths, and product terms validated for the active VCF 9.0 documentation and customer environment.
Workload demand becomes normalized capacity. Storage and failure policy inflate that capacity into usable design requirements. Operations and lifecycle workflows add reserve. If the architect ignores any layer, the design may pass day-one deployment but fail the first maintenance or growth cycle.
The workflow is safe only when the evidence closes the loop from requirement to object state to operational result. Skipping one link leaves the platform change hard to defend.
| Task | Precise Command or Path | Verification Standard |
|---|---|---|
| Validate workload baseline | Assessment export plus vCenter performance views | Peak and sustained demand are captured for compute, storage, and network. |
| Validate reserve model | Capacity worksheet -> N+1, maintenance, growth reserve fields | Reserve remains after policy overhead and failure assumptions. |
| Validate operations overhead | VCF Operations -> capacity and fleet health views | Management and monitoring overhead are included in the design. |
Practice Question: After adding a host to a workload domain, workloads on that host cannot communicate over overlay segments. What is the best first validation?
A. Transport-node status, TEP IP pool/VLAN mapping, MTU, and tunnel health for the new host
B. Application certificate renewal, because overlay connectivity depends on guest certificate rotation
C. VCF Automation catalog entitlement, because catalog policy controls packet forwarding
D. Validate backup repository reachability first because failed protection jobs may coincide with the host expansion window
Correct Answer: A
Explanation: A is correct because the stem is asking for traffic class and reachability requirement, and "Transport-node status, TEP IP pool/VLAN mapping, MTU, and tunnel health for the new host" is the only option that validates network profile, VLAN/IP pool table, MTU test, NSX transport node state, route table before the architecture choice is finalized. B may look relevant because it mentions "Application certificate renewal, because overlay connectivity depends on guest certificate rotation", but it leaves physical switch readiness, VLAN/IP plan, MTU consistency, routing adjacency, DNS/NTP, and firewall policy unproven. C shifts the decision toward "VCF Automation catalog entitlement, because catalog policy controls packet forwarding", which is adjacent to the topic but not the control plane that owns VCF network architecture. D could be useful later in a different runbook, but "Validate backup repository reachability first because failed protection jobs may coincide with the host expansion window" does not resolve the requirement stated in this scenario.
Exam Takeaway: Prefer the option that preserves the VCF 9.0 workflow owner for VCF network architecture; reject answers that only treat downstream symptoms.
Separate traffic by purpose and failure impact. Management and operations access must remain reachable during lifecycle workflows. vMotion and storage traffic require bandwidth and isolation. NSX TEP networks need MTU and routed reachability where the topology requires it. Edge uplinks need route adjacency and upstream firewall rules that match the north-south design.
The technical object is VCF network architecture. The tested attribute is traffic class and reachability requirement, with an expected range of management, vMotion, vSAN, host TEP, edge TEP, uplink, overlay, north-south, external service. In a real design review, this object starts from flat VLAN and untested MTU assumption until the architect proves physical switch readiness, VLAN/IP plan, MTU consistency, routing adjacency, DNS/NTP, and firewall policy. The evidence must be concrete enough for another engineer to reproduce the decision or incident analysis.
| Object | Attribute | Value Range | Default State | Dependency | Failure State |
|---|---|---|---|---|---|
| VCF network architecture | traffic class and reachability requirement | management, vMotion, vSAN, host TEP, edge TEP, uplink, overlay, north-south, external service | flat VLAN and untested MTU assumption | physical switch readiness, VLAN/IP plan, MTU consistency, routing adjacency, DNS/NTP, and firewall policy | Deployment or workload traffic fails because host TEP, edge TEP, uplink, MTU, or route dependencies were assumed rather than validated. |
| Evidence package | Validation source | network profile, VLAN/IP pool table, MTU test, NSX transport node state, route table | Missing or incomplete during draft design | Access to supported VCF 9.0 UI, API, logs, or inventory | The answer becomes an unsupported assumption |
| Version boundary | Product workflow owner | VCF Installer, VCF Operations, VCF Automation, vCenter, NSX, storage system | Ambiguous when old terms are reused | Target release and supported workflow | Legacy process is selected for a current VCF 9.0 scenario |
| Operating runbook | Execution state | Assess, validate, execute, verify, document | Draft until approved | Maintenance window, rollback, identity, and ownership model | Change succeeds locally but creates fleet or lifecycle drift |
Command or evidence confidence note:
Active-version validation: use supported vSphere and NSX diagnostics for VMkernel reachability, transport-node tunnel state, route adjacency, and MTU checks.
Expected evidence: network profile, VLAN/IP pool table, MTU test, NSX transport node state, route table
Use only commands, APIs, UI paths, and product terms validated for the active VCF 9.0 documentation and customer environment.
A packet leaves a VM or management appliance, enters a segment or VMkernel interface, crosses overlay or VLAN transport, reaches an edge or physical gateway, and returns through policy and routing state. A failure at TEP, MTU, uplink, or route level can look like an application problem unless the packet path is traced in order.
The reason this sequence matters is that the selected action must change or verify the dependency named by the stem. A nearby operational task can be useful and still be the wrong answer when it leaves the architecture risk untouched.
| Task | Precise Command or Path | Verification Standard |
|---|---|---|
| Validate TEP and MTU path | NSX transport node and tunnel health views plus supported MTU test | Host and edge transport paths are healthy with expected MTU. |
| Validate north-south route | NSX edge route table and upstream adjacency evidence | Required prefixes are learned or statically present and forwarding is expected. |
| Validate management service reachability | VCF Installer/Operations prerequisite or health view for DNS, NTP, identity, repository | Core services are reachable before deployment or lifecycle workflow. |
Practice Question: A customer asks whether a VCF 9.0 workload domain can use external FC storage for a latency-sensitive database instead of assuming vSAN. What is the architect's best response?
A. Reject the request immediately because every VCF 9.0 domain must use vSAN in all circumstances
B. Accept the request without design review because external storage always removes VCF lifecycle risk
C. Move the database to the management domain because management components have the broadest storage permissions
D. Validate the target VCF version's supported storage options, then design FC fabric, multipathing, policy, backup, and monitoring evidence for that workload domain
Correct Answer: D
Explanation: D is correct because "Validate the target VCF version's supported storage options, then design FC fabric, multipathing, policy, backup, and monitoring evidence for that workload domain" follows the workflow owner first and then asks for evidence from storage support decision, greenfield or import/converge path, fabric readiness, datastore compliance, vSAN or array health evidence. A is tempting because "Reject the request immediately because every VCF 9.0 domain must use vSAN in all circumstances" sounds operational, but it starts after the governing dependency should already have been validated. B inspects a neighboring layer; the stem is testing storage service choice, not the artifact described by "Accept the request without design review because external storage always removes VCF lifecycle risk". C overcorrects toward "Move the database to the management domain because management components have the broadest storage permissions" and would train the candidate to fix a visible symptom before proving ownership.
Exam Takeaway: If two options sound technically useful, choose the one that creates reviewable evidence for storage support decision, greenfield or import/converge path, fabric readiness, datastore compliance, vSAN or array health evidence.
Storage architecture is a policy and operations decision, not just a datastore type. vSAN gives integrated policy and object health. External storage choices introduce array, fabric, zoning, multipathing, protocol, snapshot, and recovery dependencies. In VCF 9.0, some principal storage options can be selected directly in greenfield deployment workflows, while others may appear through import or converge adoption paths. The architect must validate the target release, deployment path, Day 2 lifecycle impact, and workload objective before selecting the storage model.
The technical object is VCF storage design. The tested attribute is storage service choice, with an expected range of vSAN, NFS, Fibre Channel, iSCSI, policy-based placement, object compliance. In a real design review, this object starts from vSAN-only assumption until the architect proves target VCF version support, array capability, network/fabric readiness, policy model, and recovery objective. The evidence must be concrete enough for another engineer to reproduce the decision or incident analysis.
| Object | Attribute | Value Range | Default State | Dependency | Failure State |
|---|---|---|---|---|---|
| VCF storage design | storage service choice | vSAN, NFS, Fibre Channel, iSCSI, policy-based placement, object compliance | vSAN-only assumption | target VCF version support, array capability, network/fabric readiness, policy model, and recovery objective | The design assumes an old storage limitation and rejects a supported architecture, or selects external storage without validating fabric, policy, and lifecycle impacts. |
| Evidence package | Validation source | storage support decision, greenfield or import/converge path, fabric readiness, datastore compliance, vSAN or array health evidence | Missing or incomplete during draft design | Access to supported VCF 9.0 UI, API, logs, or inventory | The answer becomes an unsupported assumption |
| Version boundary | Product workflow owner | VCF Installer, VCF Operations, VCF Automation, vCenter, NSX, storage system | Ambiguous when old terms are reused | Target release and supported workflow | Legacy process is selected for a current VCF 9.0 scenario |
| Operating runbook | Execution state | Assess, validate, execute, verify, document | Draft until approved | Maintenance window, rollback, identity, and ownership model | Change succeeds locally but creates fleet or lifecycle drift |
Command or evidence confidence note:
Supported evidence: inspect vCenter datastore and policy compliance, vSAN health where used, and vendor-supported array/fabric health for external storage.
Expected evidence: storage support decision, greenfield or import/converge path, fabric readiness, datastore compliance, vSAN or array health evidence
Use only commands, APIs, UI paths, and product terms validated for the active VCF 9.0 documentation and customer environment.
The workload requirement selects a storage service, but the deployment path controls how that service is introduced. Greenfield workflows may expose one set of principal storage choices, while import or converge paths may allow additional existing storage models after eligibility checks. The storage service then selects validation evidence: object compliance for vSAN, fabric and array health for FC/iSCSI/NFS/NVMe-style paths where supported, and vCenter policy evidence for placement. Selecting the datastore without validating the service path leaves recovery and performance behavior unproven.
The causal test is whether the evidence would let another architect reproduce the same decision. If it cannot, the answer is only a product association, not a validated architecture action.
| Task | Precise Command or Path | Verification Standard |
|---|---|---|
| Validate storage support boundary | Design checklist -> target VCF version, supported storage option, and greenfield/import/converge path | Chosen storage option is supported for the domain, workload type, and adoption workflow. |
| Validate vSAN compliance | vCenter -> VM Storage Policies -> compliance and vSAN health | vSAN objects are compliant and health is clean where vSAN is used. |
| Validate external storage path | Array/fabric console plus vCenter datastore path status | Paths, zoning, protocol health, and latency meet the design requirement. |
Practice Question: A customer already runs a healthy vSphere environment and wants to bring it under VCF 9.0 operations rather than rebuild every cluster. What should the architect evaluate first?
A. A mandatory full redeployment, because VCF cannot adopt any existing vSphere estate
B. VCF Import or convergence eligibility, existing vCenter health, licensing, identity, storage/network compatibility, and rollback criteria
C. Only VM hardware versions, because import decisions are based only on virtual hardware
D. VCF Automation cloud templates, because imported vCenter resources may later be exposed through a self-service catalog
Correct Answer: B
Explanation: B is correct because "VCF Import or convergence eligibility, existing vCenter health, licensing, identity, storage/network compatibility, and rollback criteria" preserves the VCF 9.0 boundary for VCF import and convergence plan and produces evidence that another architect can review. A does not fail because it is useless; it fails because "A mandatory full redeployment, because VCF cannot adopt any existing vSphere estate" does not prove existing vSphere health, vCenter ownership, license readiness, NSX/storage compatibility, and rollback plan. C names a plausible platform action, but "Only VM hardware versions, because import decisions are based only on virtual hardware" answers a different control-plane question. D would be a reasonable follow-up only after the primary evidence is clean; it is not the first decision point here.
Exam Takeaway: Match the scenario clue to VCF import and convergence plan first; a real VMware task is still wrong when it proves a different dependency.
Import and converge are architecture choices. They require clean inventory, supported versions, identity and licensing readiness, network/storage compatibility, and rollback criteria. The architect must decide whether to import an existing vCenter as a workload domain, converge an environment into VCF management, or deploy new and migrate workloads.
The technical object is VCF import and convergence plan. The tested attribute is adoption path, with an expected range of greenfield deployment, import existing vCenter, converge management domain, migrate workload. In a real design review, this object starts from rebuild-only migration assumption until the architect proves existing vSphere health, vCenter ownership, license readiness, NSX/storage compatibility, and rollback plan. The evidence must be concrete enough for another engineer to reproduce the decision or incident analysis.
| Object | Attribute | Value Range | Default State | Dependency | Failure State |
|---|---|---|---|---|---|
| VCF import and convergence plan | adoption path | greenfield deployment, import existing vCenter, converge management domain, migrate workload | rebuild-only migration assumption | existing vSphere health, vCenter ownership, license readiness, NSX/storage compatibility, and rollback plan | The customer is forced into unnecessary rebuild or migration risk because import and convergence options were not evaluated. |
| Evidence package | Validation source | existing-environment assessment, import eligibility checklist, VCF Operations inventory, rollback plan | Missing or incomplete during draft design | Access to supported VCF 9.0 UI, API, logs, or inventory | The answer becomes an unsupported assumption |
| Version boundary | Product workflow owner | VCF Installer, VCF Operations, VCF Automation, vCenter, NSX, storage system | Ambiguous when old terms are reused | Target release and supported workflow | Legacy process is selected for a current VCF 9.0 scenario |
| Operating runbook | Execution state | Assess, validate, execute, verify, document | Draft until approved | Maintenance window, rollback, identity, and ownership model | Change succeeds locally but creates fleet or lifecycle drift |
Command or evidence confidence note:
Supported workflow evidence: review VCF Import or convergence prerequisites and VCF Operations inventory before execution.
Expected evidence: existing-environment assessment, import eligibility checklist, VCF Operations inventory, rollback plan
Use only commands, APIs, UI paths, and product terms validated for the active VCF 9.0 documentation and customer environment.
An existing vSphere environment is assessed for health and eligibility. The selected adoption path determines whether VCF Installer, VCF Operations, vCenter, NSX, or storage evidence comes first. A poor path choice turns architecture adoption into avoidable migration risk.
The important layer is the dependency boundary. Once that boundary is proven, the later configuration step has a reason; before that proof, it is only a guess.
| Task | Precise Command or Path | Verification Standard |
|---|---|---|
| Validate existing environment health | vCenter health, cluster status, storage/network readiness, certificate state | No blocking health or compatibility issue exists before import planning. |
| Validate import readiness | VCF Operations -> import or VCF instance onboarding workflow evidence | vCenter and required dependencies are eligible for the selected path. |
| Validate rollback plan | Migration runbook -> rollback checkpoint and acceptance criteria | Application owners know how service will be restored if adoption fails. |
What inputs should drive sizing for VCF management and workload domains?
Use workload demand, resilience targets, storage requirements, lifecycle boundaries, operational overhead, and growth assumptions.
Domain sizing must support both workload placement and the platform services that operate the environment. Management components, VI workload clusters, storage policies, host counts, failure domains, and lifecycle windows all influence the design. A capacity-only answer is incomplete if it ignores resilience, manageability, and future expansion.
Demand Score: 91
Exam Relevance Score: 97
How should a VCF network design handle management, vMotion, vSAN, overlay, edge, and external connectivity requirements?
Separate the traffic types logically, validate VLANs or overlays, confirm IP pools and MTU, and map edge connectivity to the required north-south paths.
VCF networking depends on clear ownership of management access, migration traffic, storage traffic, overlay transport, edge routing, and external service connectivity. A design that omits IP pool, MTU, routing, or uplink validation can pass diagram review but fail during deployment or workload onboarding. Exam answers usually favor the option that proves both logical segmentation and physical readiness.
Demand Score: 92
Exam Relevance Score: 98
When planning VCF storage, how should an architect choose between vSAN and supported external storage?
Select the storage option that satisfies performance, availability, lifecycle, operational ownership, supportability, and workload requirements.
Storage design in VCF is not only a capacity decision. vSAN and supported external storage options differ in operational model, policy handling, dependency ownership, failure behavior, and lifecycle coordination. The correct exam choice should align the storage platform with the workload and with the VCF 9.0 support boundary.
Demand Score: 89
Exam Relevance Score: 95
What should be validated before importing or converging an existing vSphere environment into VCF?
Validate inventory, version compatibility, certificates, identity, networking, storage, licensing, backups, and adoption prerequisites.
Import and converge workflows depend on the existing environment being ready for VCF control. Hidden certificate, identity, storage, or networking problems can block adoption or create fleet-management gaps after onboarding. Exam scenarios often reward the option that checks prerequisites and rollback evidence before starting the adoption action.
Demand Score: 94
Exam Relevance Score: 99
Why should failure domains and recovery objectives be planned before selecting the final workload-domain layout?
They determine whether the domain, cluster, storage, and network design can meet availability and recovery requirements.
Workload domains are architecture boundaries with operational consequences. If failure-domain placement, site constraints, storage replication, or recovery objectives are not known, the architect may choose a topology that cannot meet the customer's availability requirement. This is especially important in VCF architecture questions where domain separation, recovery, and lifecycle ownership are tested together.
Demand Score: 88
Exam Relevance Score: 95