VMware 5V0-23-20 Exam Questions

Questions for the 5V0-23-20 were updated on : Dec 01 ,2025

Page 1 out of 9. Viewing questions 1-15 out of 124

Question 1

How can the vSphere administrator generate a certificate signing request for the Supervisor Cluster
API endpoint certificate?

  • A. Use kubectl to generate a certificate signing request for the Supervisor Cluster API endpoint certificate.
  • B. Use the certificate-manager CLI utility to generate a certificate signing request for the Supervisor Cluster API endpoint certificate.
  • C. Use the vSphere Client to generate a certificate signing request for the NSX Load Balancer certificate.
  • D. Use the vSphere Client to generate a certificate signing request for the Workload platform MTG certificate.
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 2

An administrator needs to assign access to a vSphere Namespace.
Which two valid roles may be assigned to a user or a group of users? (Choose two.)

  • A. Create
  • B. Modify
  • C. Delete
  • D. View
  • E. Edit
Answer:

D, E

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%

Discussions
vote your answer:
A
B
C
D
E
0 / 1000

Question 3

Which type of application will typically require a persistent volume?

  • A. API gateway
  • B. Proxy server
  • C. Relational database
  • D. Web server
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 4

Which process should be used to enable the embedded Harbor image registry in vSphere with
Tanzu?

  • A. Deploy the Harbor OVF template to the cluster.
  • B. Use kubectl, and deploy a Harbor deployment specification.
  • C. Deploy the Harbor Helm chart.
  • D. Enable directly through the vSphere Client.
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 5

What provides the North-South connectivity from NSX-T Data Center to the physical infrastructure?

  • A. Tier-1 uplink
  • B. vSphere Distributed Switch
  • C. Tier-0 uplink segment
  • D. Transport Zones
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 6

Which three characteristics are true of Control Plane VMs? (Choose three.)

  • A. They can be resized by administrators directly through vCenter Inventory View.
  • B. They each run the Spherelet.
  • C. They each expose the Kubernetes API.
  • D. They do not run any Kubernetes Pods.
  • E. They are connected to a Management portgroup.
  • F. They are deployed via a vCenter Service.
Answer:

A, B, E

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
F
50%

Discussions
vote your answer:
A
B
C
D
E
F
0 / 1000

Question 7

Which corresponding object is automatically created in the embedded Registry Service when a new
Namespace is created in the Supervisor Cluster?

  • A. Pod
  • B. Project
  • C. Container
  • D. Image
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 8

Which object is deployed on the workload network when vSphere with Tanzu is configured with
vSphere network stack?

  • A. Windows Virtual Machines
  • B. Registry Service
  • C. Tanzu Kubernetes clusters
  • D. NSX Edge
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 9

An administrator needs to label and push an image into Harbor.
Which command should the administrator run first?

  • A. docker tag demoapp01:14.04 /demo/demoapp01:14.04
  • B. kubectl tag demoapp01:14.04 /demo/demoapp01:14.04
  • C. kubectl label demoapp01:14.04 /demo/demoapp01:14.04
  • D. docker label demoapp01:14.04 /demo/demoapp01:14.04
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 10

Which step is necessary in order to allocate storage to a newly created namespace?

  • A. Assign a VM Storage Policy
  • B. Assign permissions to users
  • C. Define resource limits
  • D. Add a content library
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 11

Which kubectl command is used to deploy the application when using a Kubernetes deployment
specification file, my-app.yaml?

  • A. kubectl run my-app.yaml
  • B. kubectl apply -f my-app.yaml
  • C. kubectl create my-app.yaml
  • D. kubectl apply spеc my-app.yaml
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 12

How are updates applied to Tanzu Kubernetes clusters?

  • A. The cluster is shutdown, Update Manager applies patches to VMs, and the cluster is restarted.
  • B. Worker nodes are shutdown while Controllers are patched and restarted after the update.
  • C. New nodes are incrementally added with new Kubernetes versions so as a new node is added, an older node is removed.
  • D. A new cluster is completely configured and runs in parallel to the primary cluster prior to switchover.
Answer:

C

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 13

A development team has submitted a YAML specification to create a Tanzu Kubernetes cluster called
dev-cluster and wants to verify that the cluster is running.
Which command should be run to obtain this verification?

  • A. kubectl show tkc dev-cluster
  • B. kubectl get cluster dev-cluster
  • C. kubectl get tkc dev-cluster
  • D. kubectl list cluster dev-cluster
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 14

Which kubectl command is used to list the Kubernetes services in the current active namespace?

  • A. kubectl get services
  • B. kubectl get loadbalancer
  • C. kubectl services get ip
  • D. kubectl list services
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 15

What is automatically created within NSX-T when an administrator creates a new namespace in the
vSphere client?

  • A. A new segment connected to a Tier-1 gateway and a new overlay transport zone
  • B. A new segment connected to a Tier-0 gateway and a new overlay transport zone
  • C. A new segment connected to a Tier-0 gateway and an existing overlay transport zone
  • D. A new segment connected to a Tier-1 gateway and an existing overlay transport zone
Answer:

D

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000
To page 2