An architect is creating a Tenant design for VMware Cloud Foundation (VCF) Automation with the following requirements and constraints:
* To simplify management, the VCF instance count should be kept at a minimum.
* The Analytics department requires specialized GPU hardware.
* Financial data and workloads must run on separate hardware from other departments.
Which set of design decisions address the requirements?

• A. Single VCF Instance, Shared Management Domain, One Workload Domain for each Tenant
• B. Single VCF Instance for each Tenant, Shared Management Domain, One Workload Domain for each Instance
• C. Single VCF Instance for each Tenant, One Management Domain for each Instance, Shared Workload Domain
• D. Single VCF Instance, One Management Domain for each Tenant, Shared Workload Domain

An architect is developing a VMware Cloud Foundation (VCF) solution for a single tenant with the following requirements:
* The configuration must prevent advertisements from being dropped by the Border Gateway Protocol (BGP) loop detection check.
* High bandwidth (40+ Gbps) is needed to support workload traffic.
* Workloads use a mixture of virtual machines and containers.
* Bidirectional Forwarding Detection (BFD) cannot be used due to limitations in the upstream switches.
* Workload traffic is divided between tenants, and packets should not ingress/egress from the same endpoints.
* There is only enough existing hardware to support one Workload Domain.
The architect makes a design decision to use NSX VPC Full Services Model based on the information provided.
When designing the network architecture to support this solution, which two elements should be considered as part of the physical network design? (Choose two.)

• A. Use distributed VPC traffic across multiple VLANs to separate tenant traffic ingress/egress.
• B. Adjust the default BGP timers to 3 retries and 12 hold down.
• C. Configure the Edge datapath interfaces to Uniform Passthrough (UPT) mode.
• D. Use a unique, private BGP AS number for each Tier-0 gateway.
• E. Use iBGP as the routing protocol between the Tier-0 gateway and the physical network.
• F. Use multiple Tier-0 gateways to separate tenant traffic ingress/egress.

A national cyber-defense enterprise operates a VMware Cloud Foundation (VCF) environment with strict organization isolation based solely on Virtual Private Cloud (VPC) constructs. They have been recently audited, and some new requirements were presented:
* Zero lateral movement between VPCs at both Layer 2 and Layer 3.
* No shared security objects between tenants.
* Strict identity-based access segregation for all VCF Automation API consumers.
* All enforcement must remain local to each VPC.
Which two design decisions correctly address the design trait of security based on the new requirements?
(Choose two.)

• A. Enforce VPC(s) local firewall policies with no inheritance from provider-level DFW sections, to maintain an isolated security posture.
• B. Use provider-managed dynamic security groups referencing VM metadata to simplify organization rule management across all VPCs.
• C. Use globally shared Tier-0 gateways to consolidate routing, relying on per-organization route filters to prevent cross-VPC traffic exposure.
• D. Enable VPC Address Pool sharing to reduce IP fragmentation across organizations while maintaining isolation through routing separation.
• E. Create per-Organization IAM integrations in VCF Automation so each organization authenticates against its own Identity Provider (IdP) scope.

An architect wants to track and alert on combined network and CPU consumption as a percentage for each Virtual Machine (VM). The following formula is to be used:
Utilization = (% CPU + % Network) / 2
Which design decision meets the requirements?

• A. Design an Alert Definition using a Super Metric.
• B. Design a Notification Definition using Calculated Metrics.
• C. Design a Notification Definition using a Super Metric.
• D. Design an Alert Definition using Calculated Metrics.

The following information has been collected from an architect during initial VMware Cloud Foundation (VCF) design discussions:
* Applications must be designed to tolerate the failure of a single data center.
* Service account passwords must be stored and retrieved from the company password vault.
* The self service catalog must meet the Service Level Objective (SLO) of 75% successful requests measured over a 12 month period.
* Management plane applications must return to operation (RTO) in under 10 minutes.
* Third-party pen testing must be executed against the solution yearly with a pass rate of 80 percent or higher.
* The solution must provide the ability for users to view and track the progress of their requests.
* All Identity management must use an external SAML based identity provider.
Which four statements are Functional Requirements? (Choose four.)

• A. The self service catalog must meet the Service Level Objective (SLO) of 75% successful requests measured over a 12 month period.
• B. All Identity management must use an external SAML based identity provider.
• C. The solution must provide the ability for users to view and track the progress of their requests.
• D. Third-party pen testing must be executed against the solution yearly with a pass rate of 80 percent or higher.
• E. Service account passwords must be stored and retrieved from the company password vault.
• F. Management plane applications must return to operation (RTO) in under 10 minutes.
• G. Applications must be designed to tolerate the failure of a single datacenter.