Download VMware Tanzu Application Architect Practice Exam Questions and more Exams Technology in PDF only on Docsity!
Question 1. Which of the following best defines a cloud-native application? A) An application running on virtual machines B) An application designed for scalability, resilience, and agility using cloud platform features C) An application with a monolithic architecture D) An application using legacy technologies Answer: B Explanation: Cloud-native applications leverage cloud characteristics such as scalability, resilience, and agility to deliver modern solutions. Question 2. In the Twelve-Factor App methodology, which factor focuses on separating configuration from code? A) Codebase B) Config C) Build, release, run D) Backing services Answer: B Explanation: The "Config" factor recommends storing configuration in environment variables, keeping it separate from code. Question 3. Which architectural pattern is preferable for high scalability and independent deployment? A) Monolithic architecture B) Microservices architecture C) Layered architecture D) Client-server architecture Answer: B Explanation: Microservices architecture enables independent scaling and deployment of services.
Question 4. What is a primary challenge of stateful applications in Kubernetes? A) High CPU usage B) Persistent storage management C) Stateless request handling D) Rapid scaling Answer: B Explanation: Stateful applications require persistent storage, which is more complex to manage in Kubernetes. Question 5. Which modernization strategy aims to move an application with minimal changes to the cloud? A) Refactoring B) Replatforming C) Rehosting D) Rewriting Answer: C Explanation: Rehosting, or "lift and shift," migrates applications with minimal code changes. Question 6. What is the purpose of a Dockerfile? A) To configure network policies B) To define instructions for building a container image C) To manage Kubernetes clusters D) To monitor application performance Answer: B Explanation: Dockerfiles contain instructions for building container images.
A) Application stores data on disk B) Application maintains no session state between requests C) Application requires persistent storage D) Application uses external APIs Answer: B Explanation: Stateless applications do not maintain session state between requests, improving scalability. Question 11. In Tanzu Kubernetes Grid, what is the role of the Management Cluster? A) Running application workloads B) Managing and provisioning workload clusters C) Hosting external services D) Performing security scans Answer: B Explanation: The Management Cluster provisions and manages workload clusters. Question 12. Which component is essential for declarative cluster management in TKG? A) Helm B) Cluster API C) Service Mesh D) StorageClass Answer: B Explanation: Cluster API enables declarative management of Kubernetes clusters. Question 13. What is the primary function of Tanzu Application Platform's Supply Chain? A) Managing cluster networking
B) Automating build, test, scan, and deploy stages C) Enforcing security policies D) Monitoring application metrics Answer: B Explanation: Supply Chains automate the stages of building, testing, scanning, and deploying applications. Question 14. Which Carvel tool is used for templating and overlaying Kubernetes manifests? A) kapp B) kbld C) ytt D) imgpkg Answer: C Explanation: ytt is used for templating and overlaying Kubernetes configuration files. Question 15. What does Tanzu Mission Control enable for Kubernetes clusters? A) CPU resource allocation B) Centralized management, governance, and security C) Container image scanning D) Application development Answer: B Explanation: Tanzu Mission Control provides centralized management for Kubernetes clusters. Question 16. Which object in Kubernetes is used to expose services externally via a cloud provider's load balancer? A) ClusterIP
C) By exposing services externally D) By managing containers Answer: A Explanation: NetworkPolicies restrict traffic between pods, enforcing micro-segmentation. Question 20. Which CNI plugin provides advanced network policy features in Tanzu environments? A) Flannel B) Antrea C) Weave D) Host networking Answer: B Explanation: Antrea supports advanced network policies and is commonly used in Tanzu. Question 21. What is the recommended method for storing container images securely in Tanzu? A) Local file system B) Docker Hub C) Harbor registry D) Kubernetes Secrets Answer: C Explanation: Harbor provides secure storage, vulnerability scanning, and image signing. Question 22. What is "Image Signing" in the context of container security? A) Ensuring images are stored in a registry B) Verifying image integrity and source authenticity C) Scheduling pods on secure nodes
D) Providing persistent storage Answer: B Explanation: Image signing verifies the integrity and authenticity of container images. Question 23. What is the purpose of Pod Security Standards in Kubernetes? A) Managing application configuration B) Restricting pod capabilities and permissions C) Enforcing network policies D) Automating deployments Answer: B Explanation: Pod Security Standards limit what pods can do to enhance cluster security. Question 24. Which tool can be used to securely inject secrets into applications running on Kubernetes? A) Helm B) External Secrets Operator C) Service Binding Operator D) Prometheus Answer: B Explanation: External Secrets Operator securely injects secrets from external sources. Question 25. What is Just-in-Time (JIT) access in IAM design? A) Granting permanent admin privileges B) Providing temporary, time-bound access to resources C) Exposing services externally D) Creating persistent volumes
Explanation: Jaeger enables distributed tracing for visibility across microservices. Question 29. What is an effective alerting rule for application monitoring? A) Alert on every log entry B) Alert on critical thresholds for performance or availability metrics C) Alert on pod creation events D) Alert on image downloads Answer: B Explanation: Alerting should be based on critical thresholds to avoid noise and support incident response. Question 30. What does the Container Storage Interface (CSI) provide in Kubernetes? A) Network management B) Persistent volume provisioning from external storage systems C) Application deployment D) Cluster monitoring Answer: B Explanation: CSI enables Kubernetes to provision persistent volumes from various storage providers. Question 31. Which object defines storage characteristics and provisioning in Kubernetes? A) Service B) StorageClass C) Pod D) Deployment Answer: B Explanation: StorageClass specifies storage characteristics such as performance and provisioning.
Question 32. How does vSphere with Tanzu provide persistent storage to Kubernetes clusters? A) Using Docker volumes B) Leveraging vSAN and vSphere Storage Policies C) Using NFS shares only D) Via Kubernetes ConfigMaps Answer: B Explanation: vSphere with Tanzu uses vSAN and storage policies for persistent storage. Question 33. What is the purpose of a PersistentVolumeClaim (PVC)? A) To expose services externally B) To request storage resources from the cluster C) To manage pod lifecycles D) To monitor application health Answer: B Explanation: PVCs are used by pods to request persistent storage resources. Question 34. Which operator helps applications connect to backing services in a cloud-native way? A) Helm Operator B) Service Binding Operator C) External Secrets Operator D) Cluster API Operator Answer: B Explanation: Service Binding Operator automates connecting applications to backing services.
A) ArgoCD B) Helm C) Prometheus D) Tanzu Mission Control Answer: A Explanation: ArgoCD enables GitOps principles for declarative management. Question 39. What does Helm provide for Kubernetes application management? A) Logging aggregation B) Package management and templating for application manifests C) Network policy enforcement D) Persistent storage provisioning Answer: B Explanation: Helm packages and templates Kubernetes manifests for easier management. Question 40. Why is automated end-to-end testing important in CI/CD pipelines? A) It reduces deployment speed B) It increases manual errors C) It ensures application functionality before production deployment D) It disables security policies Answer: C Explanation: Automated end-to-end tests validate overall application functionality before deployment. Question 41. Which Tanzu tool is used for image packaging and distribution? A) kapp
B) ytt C) imgpkg D) Prometheus Answer: C Explanation: imgpkg packages and distributes container images and Kubernetes resources. Question 42. What is the purpose of the Tanzu Developer Portal in TAP? A) Deploying Kubernetes clusters B) Providing a user interface for developers to manage supply chains and view application status C) Monitoring application metrics D) Enforcing storage policies Answer: B Explanation: The Developer Portal offers a UI for managing supply chains and viewing app status. Question 43. What is the main benefit of using Kubernetes for cloud-native applications? A) Manual resource scheduling B) Automated container orchestration, scaling, and self-healing C) Legacy monolithic deployment support D) Complex manual networking Answer: B Explanation: Kubernetes automates orchestration, scaling, and healing of containers. Question 44. Which Tanzu Mission Control feature supports security compliance? A) Log forwarding B) Policy inspection and enforcement
D) Managing persistent volumes Answer: B Explanation: ClusterIP exposes services only within the cluster for internal communication. Question 48. Why are stateless applications easier to scale horizontally? A) They store state in local disks B) They require complex load balancers C) They do not rely on session or persistent state D) They use monolithic architecture Answer: C Explanation: Stateless apps don't maintain session state, making horizontal scaling easier. Question 49. Which Tanzu tool supports declarative application deployment and management? A) ytt B) kapp C) imgpkg D) Tanzu Mission Control Answer: B Explanation: kapp manages declarative deployment and lifecycle of applications. Question 50. What is a key advantage of microservices over monolithic architecture? A) Centralized failure point B) Independent scalability and deployment C) Single codebase management D) Fixed technology stack
Answer: B Explanation: Microservices allow independent scaling and deployment, improving flexibility. Question 51. Which Kubernetes probe prevents traffic until an application is fully started? A) Liveness probe B) Startup probe C) Readiness probe D) Health probe Answer: B Explanation: Startup probes block traffic until the application is ready. Question 52. What does a Kubernetes Namespace provide? A) Network routing B) Logical isolation of resources within a cluster C) Persistent storage provisioning D) Pod lifecycle management Answer: B Explanation: Namespaces logically separate resources in a Kubernetes cluster. Question 53. Which Tanzu Service Mesh feature enables global service discovery? A) Circuit breaking B) Layer 7 routing C) Global namespace D) Pod security standards Answer: C
Question 57. What does the "build, release, run" factor emphasize in the Twelve-Factor App methodology? A) Combining build and run stages B) Strictly separating build, release, and run stages for predictability C) Storing secrets in code D) Hard-coding service endpoints Answer: B Explanation: Build, release, and run stages should be strictly separated for reliability. Question 58. Which Tanzu component automates cluster scaling and upgrades? A) Tanzu Mission Control B) Cluster API C) Harbor D) Service Mesh Answer: B Explanation: Cluster API automates cluster scaling and upgrades. Question 59. What is the main function of the Tanzu Application Live View? A) Persistent storage provisioning B) Real-time application observability and status monitoring C) Image vulnerability scanning D) Cluster provisioning Answer: B Explanation: Application Live View provides real-time visibility into application status.
Question 60. What is the role of Prometheus in Kubernetes? A) Logging aggregation B) Metrics collection and alerting C) Image registry management D) Pod scheduling Answer: B Explanation: Prometheus collects metrics and supports alerting in Kubernetes. Question 61. Which Kubernetes resource defines a group of pods with a common label selector? A) Namespace B) ReplicaSet C) Service D) Deployment Answer: C Explanation: Service uses label selectors to group pods for traffic routing. Question 62. What is an advantage of using declarative configuration management in Kubernetes? A) Manual intervention required for updates B) Automatic reconciliation to desired state C) Persistent storage only D) Network isolation Answer: B Explanation: Declarative management ensures Kubernetes maintains the desired state. Question 63. Which Tanzu tool overlays custom configuration on existing Kubernetes manifests?
