Which service provides container orchestration for Kubernetes in Tanzu?
ATanzu Kubernetes Grid
BCloudHealth
CNSX-T
DvSphere
Explanation
Tanzu Kubernetes Grid is specifically designed for Kubernetes orchestration, while others serve different purposes.
Q152
A company needs to optimize AWS costs and usage reports. What should they use?
ACloudTrail
BCloudHealth
CAWS Lambda
DS3 Lifecycle
Explanation
CloudHealth provides advanced tools for cost optimization and usage analysis, while other options serve different functions.
Q153
You are configuring compliance policies in CloudHealth. What is the consequence of a policy violation?
ANo immediate effect
BAutomatic instance termination
CAlert notifications to admins
DPolicy is permanently disabled
Explanation
Violated compliance policies trigger alert notifications to administrators, while others imply more severe or unrealistic actions.
Q154
Which service is used for automated container orchestration in Tanzu?
ATanzu Kubernetes Grid
BCloudFormation
CAWS ECS
DElastic Beanstalk
Explanation
Tanzu Kubernetes Grid provides automated orchestration for Kubernetes containers, while the others serve different purposes.
Q155
A company needs to monitor cloud costs efficiently. Which CloudHealth feature should they use?
ACost Assessment
BBudget Alerts
COps Reporting
DHealth Checks
Explanation
Budget Alerts helps companies monitor costs and stay within budget efficiently, while the others have different uses.
Q156
You are configuring AWS IAM roles for Tanzu applications. What happens when you attach a policy with 'Deny' permissions?
APolicy is ignored by AWS
BAccess is permanently blocked
CPolicies negate others always
DAccess is evaluated based on rules
Explanation
AWS IAM evaluates policies, allowing 'Allow' overrides unless explicitly denied, making option D correct.
Q157
Which service allows automated monitoring and management of AWS cost and usage?
AAWS Budgets
BAWS Lambda
CAWS Lambda@Edge
DAWS CloudFormation
Explanation
AWS Budgets provides cost monitoring and alerts, while others do not specifically focus on cost management.
Q158
A company needs to maintain security compliance across its AWS resources. Which tool should they utilize?
AAWS Inspector
BAWS CLI
CAWS CodePipeline
DAWS CloudTrail
Explanation
AWS Inspector assesses security compliance automatically; the other options have different focuses.
Q159
You are configuring network isolation in Tanzu Kubernetes Grid. What happens when you add a new network segment?
AAll workloads on old segments are deleted
BExisting workloads remain unaffected
CNew segments auto-apply to all workload types
DNetwork isolation is bypassed for pods
Explanation
Existing workloads in previous segments are not affected by the addition of a new segment; the other options misrepresent network isolation behavior.
Q160
Which service allows management of containerized applications in Tanzu?
ATanzu Mission Control
BEC2
CS3
DCloudFormation
Explanation
Tanzu Mission Control manages Kubernetes clusters, EC2 is for compute, S3 is for storage, and CloudFormation is for infrastructure as code.