1
ADVANCED VCF 9.0 VSPHERE KUBERNETES
SERVICE (VKS) PRACTICE EXAM 2026-27
LATEST VERSION
Introduction
The Advanced VCF 9.0: vSphere Kubernetes Service Exam tests your ability to deploy, configure, and manage
vSphere with Kubernetes (VKS) in a VMware Cloud Foundation 9.0 environment. This exam focuses on:
• VCF Architecture: Management and workload domains.
• vSphere Kubernetes Service (VKS): Control plane and Supervisor cluster configuration.
• Tanzu Kubernetes Grid (TKG): Deployment, lifecycle, and management of Tanzu Kubernetes clusters.
• Networking & Security: NSX-T integration, load balancing, firewall, and connectivity.
• Storage & Policy Management: vSAN, storage policies, persistent volumes.
• Operational Tasks: Monitoring, troubleshooting, scaling, upgrades, and best practices.
Candidates are expected to demonstrate deep technical knowledge, hands-on deployment skills, and the ability to
troubleshoot complex VCF + VKS environments.
Exam Structure
• Total Questions: 100
• Format: Multiple choice, scenario-based, and troubleshooting exercises.
• Domains Covered:
Domain Number of Questions
VCF Architecture & Management 15
vSphere Kubernetes Service Configuration 20
Tanzu Kubernetes Grid Management 15
Networking & Security (NSX-T, Load Balancer) 15
Storage & Policies 10
,2
Domain Number of Questions
Operational Tasks (Monitoring, Troubleshooting) 15
Advanced Scenarios & Best Practices 10
Questions 1–100 with Answers and Rationales
1.
Which component in VCF 9.0 acts as the single source of truth
for management and workload domains?
A. vCenter Server Management Cluster
B. NSX Manager
C. vSAN Storage Cluster
D. Supervisor Cluster
Answer: A
Rationale:
The vCenter Server in the Management Domain maintains
inventory, roles, and configurations for all VCF domains. NSX
Manager manages networking, vSAN handles storage, and
Supervisor Cluster manages Kubernetes resources but relies on
vCenter for inventory.
2.
,3
What is the default network provider for vSphere with
Kubernetes in VCF 9.0?
A. NSX-T
B. vSphere Standard Switch
C. vSphere Distributed Switch
D. VXLAN
Answer: A
Rationale:
NSX-T is required for Supervisor Cluster networking in VCF 9.0,
providing overlay networks for Pods and Services. vSphere
switches are insufficient for container networking.
3.
Which command line tool is used to deploy Supervisor Clusters
in VCF 9.0?
A. vSphere with Kubernetes CLI (vSphere CLI)
B. kubectl
C. govc
D. PowerCLI
Answer: D
Rationale:
PowerCLI with VCF cmdlets is used for automation and
, 4
deployment of Supervisor Clusters. kubectl manages workloads
inside the Supervisor Cluster but cannot deploy it. govc is a
vSphere SDK client.
4. (Scenario)
You are deploying a Supervisor Cluster, but the cluster fails
during validation with the error: “Network segment not found.”
What is the likely cause?
A. NSX-T segment missing or misconfigured
B. vSAN not enabled
C. Management Domain is offline
D. Supervisor Cluster license expired
Answer: A
Rationale:
Supervisor Clusters require pre-configured NSX-T overlay
segments. Missing segments will prevent deployment. vSAN
and management domain availability are prerequisites, but the
error specifically indicates a network issue.
5.
Which storage policy type is required for Tanzu Kubernetes
workloads in VCF 9.0?
ADVANCED VCF 9.0 VSPHERE KUBERNETES
SERVICE (VKS) PRACTICE EXAM 2026-27
LATEST VERSION
Introduction
The Advanced VCF 9.0: vSphere Kubernetes Service Exam tests your ability to deploy, configure, and manage
vSphere with Kubernetes (VKS) in a VMware Cloud Foundation 9.0 environment. This exam focuses on:
• VCF Architecture: Management and workload domains.
• vSphere Kubernetes Service (VKS): Control plane and Supervisor cluster configuration.
• Tanzu Kubernetes Grid (TKG): Deployment, lifecycle, and management of Tanzu Kubernetes clusters.
• Networking & Security: NSX-T integration, load balancing, firewall, and connectivity.
• Storage & Policy Management: vSAN, storage policies, persistent volumes.
• Operational Tasks: Monitoring, troubleshooting, scaling, upgrades, and best practices.
Candidates are expected to demonstrate deep technical knowledge, hands-on deployment skills, and the ability to
troubleshoot complex VCF + VKS environments.
Exam Structure
• Total Questions: 100
• Format: Multiple choice, scenario-based, and troubleshooting exercises.
• Domains Covered:
Domain Number of Questions
VCF Architecture & Management 15
vSphere Kubernetes Service Configuration 20
Tanzu Kubernetes Grid Management 15
Networking & Security (NSX-T, Load Balancer) 15
Storage & Policies 10
,2
Domain Number of Questions
Operational Tasks (Monitoring, Troubleshooting) 15
Advanced Scenarios & Best Practices 10
Questions 1–100 with Answers and Rationales
1.
Which component in VCF 9.0 acts as the single source of truth
for management and workload domains?
A. vCenter Server Management Cluster
B. NSX Manager
C. vSAN Storage Cluster
D. Supervisor Cluster
Answer: A
Rationale:
The vCenter Server in the Management Domain maintains
inventory, roles, and configurations for all VCF domains. NSX
Manager manages networking, vSAN handles storage, and
Supervisor Cluster manages Kubernetes resources but relies on
vCenter for inventory.
2.
,3
What is the default network provider for vSphere with
Kubernetes in VCF 9.0?
A. NSX-T
B. vSphere Standard Switch
C. vSphere Distributed Switch
D. VXLAN
Answer: A
Rationale:
NSX-T is required for Supervisor Cluster networking in VCF 9.0,
providing overlay networks for Pods and Services. vSphere
switches are insufficient for container networking.
3.
Which command line tool is used to deploy Supervisor Clusters
in VCF 9.0?
A. vSphere with Kubernetes CLI (vSphere CLI)
B. kubectl
C. govc
D. PowerCLI
Answer: D
Rationale:
PowerCLI with VCF cmdlets is used for automation and
, 4
deployment of Supervisor Clusters. kubectl manages workloads
inside the Supervisor Cluster but cannot deploy it. govc is a
vSphere SDK client.
4. (Scenario)
You are deploying a Supervisor Cluster, but the cluster fails
during validation with the error: “Network segment not found.”
What is the likely cause?
A. NSX-T segment missing or misconfigured
B. vSAN not enabled
C. Management Domain is offline
D. Supervisor Cluster license expired
Answer: A
Rationale:
Supervisor Clusters require pre-configured NSX-T overlay
segments. Missing segments will prevent deployment. vSAN
and management domain availability are prerequisites, but the
error specifically indicates a network issue.
5.
Which storage policy type is required for Tanzu Kubernetes
workloads in VCF 9.0?
