An architect is working on the data protection design for a VMware Cloud Foundation (VCF) solution. The solution consists of a single Workload Domain that has vSphere Supervisor activated. During a customer workshop, the customer requested thatvSphere Podsmust be used for a number of third-party applications that have to be protected via backup.
Which backup method or tool should be proposed by the architect to satisfy this requirement?

• A. Velero Plugin for vSphere.
• B. vCenter file-based backup.
• C. vSAN Snapshots.
• D. Standalone Velero with Restic.

A customer is required to enhance the security for a set of VMware vSphere Kubernetes Service (VKS) clusters that host services interacting with sensitive customer data. The solution must encrypt the transport and communications between services.
The VKS Admin recommends enabling Istio Service Mesh to satisfy the requirement. What type of encryption does Istio Service Mesh provide?

• A. IPsec with IKEv2
• B. SSH or TLS
• C. mTLS
• D. AES 256

A cloud operations team is managing multiple Supervisor Clusters across two regions. Each region hosts its own vSphere Kubernetes clusters, integrated through a federated service mesh to enable consistent service connectivity and policy enforcement across environments.
The application team wants to expose a multi-tier microservice named "GovApp", which includes front-end, API, and database services distributed between the two regions. Uniform traffic routing, identity, and security policies are also needed for these workloads regardless of the cluster or region in which they are deployed.
To meet these requirements, the architects decide to create a Global Namespace that spans both Supervisor Clusters.
Which two statements describe the requirements for a Global Namespace in a vSphere Kubernetes Service Mesh deployment? (Choose two.)

• A. Enables automatic placement of workloads to any global cluster based on traffic demand.
• B. Defines an application boundary across multiple clusters.
• C. Provides distributed Ingress and egress services to support multiple namespaces across multiple clusters.
• D. Applies a single policy to multiple namespaces across multiple clusters.
• E. Provides centralized logging for Service Mesh traffic.

A VKS administrator is tasked to leverage day-2 controls to monitor, scale, and optimize Kubernetes clusters across multiple operating systems and workload characteristics.
What two steps should the administrator take? (Choose two.)

• A. Disable Cluster Autoscaler to ensure resources in the pool are not depleted.
• B. Configure namespace quotas to set resource limits for CPU, memory, and storage.
• C. Ensure all node pools use the same Machine Deployment configuration for different workload characteristics.
• D. Set all VM Class limits to Compute Heavy to ensure worker nodes get all the resources needed.
• E. Deploy Prometheus and Grafana to collect and display scrapeable metrics on nodes, pods, and applications.