All VMware by Broadcom exams
Free 2V0-13.25 practice test: 30 questions with answers
30 original questions for VMware Cloud Foundation 9.0 Architect (VCP-VCF Architect), drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.
- Free questions
- 30
- Full bank
- 112 questions
- Real exam
- 60 questions, 135 min
- Passing score
- 300 (scaled)
All 30 2V0-13.25 questions with answers
The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.
Section 1 - IT Architectures, Technologies, Standards (10 questions)
Question 1
A retail company's sponsor states that marketing must be able to launch a campaign within one business day instead of one week. How should this statement be classified?
- AA business requirement, because it states an outcome the organization needs to achieve
- BAn assumption, because marketing staff are expected to learn the new tools
- CA constraint, because it limits how much the project may spend in its first year
- DA technical requirement that fixes the hypervisor version to be used for the marketing workloads
Show answer and explanationHide answer
Correct answer: AThe sentence states a business outcome (a faster campaign launch) without describing how the platform will be built, so it is a business requirement. The hypervisor option describes a technical solution, the training statement is an assumption, and the spending limit is a constraint.
Question 2
Which description best distinguishes conceptual design from logical design in a VCF architecture?
- AConceptual design lists vendor product SKUs and rack elevations, while logical design lists hardware models and firmware levels
- BConceptual design shows high-level components and relationships, while logical design maps them to domains and networks
- CConceptual design is the final bill of materials, while logical design is an early sketch shown only to executive stakeholders
- DConceptual and logical designs are identical, and differ only in the diagram tool used to draw them
Show answer and explanationHide answer
Correct answer: BConceptual design captures the high-level components and how they relate without technology detail, and logical design turns that into a technology-independent structure of domains and networks. The other options confuse the stages, for example by placing physical product details or procurement lists into the conceptual or logical stage.
Question 3
During a design review, the team writes that the existing top-of-rack switches must be reused because the customer has no budget to replace network hardware. How should this statement be classified?
- AA constraint, because the fixed budget limits which options the design team can choose
- BA requirement, because the reused switches must carry all of the new workload traffic without changes
- CA risk, because the switches might fail during the migration window
- DAn assumption, because the switches are expected to meet the throughput the workloads need
Show answer and explanationHide answer
Correct answer: AA constraint is a fixed limit the design must work within, and the no-budget statement restricts the options. The requirement option describes what the solution must do, the risk describes a possible future event, and the assumption describes an unverified expectation rather than a limit.
Question 4
A design review for a hospital's imaging platform focuses on how long it takes to bring the service back after an outage and how the team would recover data from backups after a site loss. Which AMPRS dimension is the primary focus?
- AAvailability, measured by the share of time the service is accessible to users
- BPerformance, measured by response times under the peak clinical workload
- CRecoverability, measured by how quickly service is restored after a failure
- DManageability, measured by how easily operators can patch and monitor the platform
Show answer and explanationHide answer
Correct answer: CRecoverability covers restoring service and data after a failure, including restore time and backup-based recovery after a site loss. Availability is about uptime during normal operation, performance is about response times, and manageability is about operating the platform.
Question 5
An architect wants future engineers to understand why a storage design was chosen, which alternatives were rejected, and what follows from the choice. Which practice best meets this need?
- AKeep the final configuration export in the storage console, which lists every setting on each array and volume
- BEmail a summary of the decision to the project sponsor and archive the message thread
- CRecord only the chosen product name and version in the design inventory
- DWrite an architecture decision record with the context, options considered, decision, and consequences
Show answer and explanationHide answer
Correct answer: DAn architecture decision record captures the context, the alternatives, the decision and its consequences, so future engineers can follow the reasoning. A configuration export records settings but not reasoning, an email thread is hard to find later, and a product name alone omits the rationale.
Question 6
Before a new VCF design goes to production, the team wants direct evidence that its failover behaviour works in their own environment. Which validation approach provides that evidence most directly?
- AReviewing the vendor's marketing material for high-availability claims
- BRunning a proof of concept or pilot that simulates host and site failures
- CCounting the redundant components listed in the bill of materials
- DAsking the operations team to review the design document and confirm that it looks reasonable
Show answer and explanationHide answer
Correct answer: BA proof of concept or pilot that simulates failures produces measured evidence of how the design behaves in the target environment. Marketing claims, a document review, and a component count can be useful but do not show how failover actually performs.
Question 7
A design document states that the existing WAN link between the two sites is expected to provide enough bandwidth for replication during business hours. Which classification is most accurate?
- AA constraint, because the carrier owns the link and sets its service terms
- BA business requirement, because the company needs replication to succeed
- CAn assumption that must be validated, because the link capacity has not yet been measured
- DA risk that has already occurred, because replication jobs failed on two occasions during the last test cycle
Show answer and explanationHide answer
Correct answer: CThe sentence is an unverified expectation about link capacity, so it is an assumption that must be validated by measurement. Risks are uncertain future events, and the failed-test option describes a failure the sentence never mentions.
Question 8
An architect sketches a diagram showing a management domain, two workload domains, a shared management network segment, and the identity source. The diagram names no hardware or product models. Which design stage does it represent?
- ALogical design, because it shows structure without naming hardware or product models
- BAcceptance design, because it lists the tests used to sign off the environment
- CPhysical design, because it selects the server models and rack layout for each domain
- DConceptual design, because it captures the business goals behind each domain
Show answer and explanationHide answer
Correct answer: AA logical design describes the structure of the solution, such as domains, networks and services, without choosing specific hardware or products. Physical design adds models and layouts, conceptual design focuses on business goals, and acceptance testing is a separate activity rather than a design stage.
Question 9
The operations team wants one console showing the patch level of every host and wants to roll out configuration changes from a single place instead of logging in to each host. Which AMPRS dimension is the primary focus?
- ASecurity, because each host must authenticate administrators against the central identity source before any change
- BRecoverability, because each host must hold a current backup of its configuration before changes are made
- CPerformance, because hosts with the latest patches run workloads at higher speed
- DManageability, because it covers centralized operations, lifecycle changes, and visibility across hosts
Show answer and explanationHide answer
Correct answer: DManageability covers how easily the platform is operated, changed and monitored, including central control and patch visibility. Security, recoverability and performance are real AMPRS dimensions, but this scenario is about operating many hosts from one place, and patches do not automatically increase speed.
Question 10
Which two statements describe risks rather than requirements or assumptions? (Choose two.)
- AThe single WAN link between the sites could fail and halt all replication traffic
- BThe platform must encrypt replication traffic between the sites
- COperations staff will complete their certification before the go-live date
- DThe vendor may deliver the required switches after the planned cutover date
Show answer and explanationHide answer
Correct answer: A, DA risk is an uncertain future event with an impact, such as a single link failing or a delayed hardware delivery. The encryption statement is a requirement, and the certification statement is an assumption about what staff will do.
Section 2 - VMware Cloud Foundation (VCF) Fundamentals (10 questions)
Question 11
A company with a small number of hosts wants a single-site pilot in which management components and tenant workloads run on the same hardware. Which VCF architecture option fits this best?
- AFederated architecture, with each tenant running its own independent management stack
- BStandard architecture, with a dedicated management domain and separate workload domains for tenants
- CStretched architecture, with management components spread evenly across two availability zones
- DConsolidated architecture, with management and workload components in a single domain
Show answer and explanationHide answer
Correct answer: DA consolidated architecture runs management and workload components in one domain, which suits a small footprint. A standard architecture needs a separate management domain, and the other two labels describe availability or tenancy patterns rather than VCF architecture options.
Question 12
A regulated business unit needs its own change windows and an administrative boundary that other tenants cannot reach. Which VCF construct best matches this need?
- AAn additional vSphere cluster added to the existing management domain alongside the platform components
- BA distributed port group that is restricted by VLAN tags
- CA separate workload domain with its own lifecycle and administrative boundary
- DA resource pool with higher CPU shares assigned to the business unit
Show answer and explanationHide answer
Correct answer: CA workload domain is a separately managed unit with its own lifecycle and boundary, which fits the need for independent change windows and isolation. Adding a cluster to the management domain, a VLAN-restricted port group, or a CPU share setting does not give the same lifecycle or administrative separation.
Question 13
An architect expects an environment to grow many clusters over time inside one consolidated domain. What is the main drawback of keeping everything in that one domain as it grows?
- AShared lifecycle and administrative boundaries mean that maintenance and changes affect more tenants at once
- BEach workload domain must run a different hypervisor build, which increases licensing and patch testing across the estate
- CTenant networks can no longer be created with NSX overlay segments in any cluster
- DThe management domain cannot be patched while any workload is running on the hosts
Show answer and explanationHide answer
Correct answer: AA single shared domain couples lifecycle and administration, so a change or outage can reach every tenant and cluster in it. The other options describe restrictions that are not part of the architecture, such as a requirement for a different build per domain.
Question 14
A team proposes running tenant virtual machines inside the management domain to save two hosts. Which concern should the architect raise first?
- ATenant workloads would no longer be able to attach to NSX overlay segments once they moved into that domain
- BThe management domain would need a separate witness host to store tenant data
- CManagement components would have to be re-licensed on a per-virtual-machine basis
- DTenant workloads may compete with management components for resources and share their failure impact
Show answer and explanationHide answer
Correct answer: DMixing tenant workloads into the management domain removes the separation between the management plane and tenant load, so resource contention and shared failures become likely. The other options describe consequences that do not follow from this design choice.
Question 15
In an NSX design, which component provides the north-south edge that connects logical networks to the physical network?
- ATier-0 gateway that peers with the physical network for north-south traffic
- BDistributed firewall rule set that is applied to each virtual machine's vNIC on every host
- CTier-1 gateway attached to each tenant segment and peered directly with the top-of-rack switches
- DGeneve tunnel endpoint that runs on each host and carries overlay traffic
Show answer and explanationHide answer
Correct answer: AThe Tier-0 gateway is the north-south edge that exchanges routes with the physical network. A Tier-1 gateway connects upstream to a Tier-0 rather than peering with the physical switches, the distributed firewall enforces policy at each vNIC, and tunnel endpoints only carry overlay traffic between hosts.
Question 16
In a multi-tenant NSX design, which role is typically given to a Tier-1 gateway?
- APeering with the top-of-rack switches to exchange external routes for the whole environment
- BStoring the distributed firewall rules in a central database that every host queries on demand
- CEncapsulating frames between hosts with Geneve tunnels so that overlay segments can span clusters
- DProviding routing and services for tenant segments, connected upstream to a Tier-0 gateway
Show answer and explanationHide answer
Correct answer: DTier-1 gateways serve tenant or application segments and connect upstream to a Tier-0 gateway for external access. Peering with the physical switches is the Tier-0 role, Geneve encapsulation happens between tunnel endpoints on the hosts, and firewall rules are distributed to hosts rather than queried from a central database.
Question 17
A design requires tenant networks that can span hosts in several clusters without reconfiguring VLANs on every physical switch. Which NSX capability meets this requirement?
- APort groups tagged with one VLAN per tenant on each host, configured by hand on every server
- BStatic routes added to every top-of-rack switch for each new tenant subnet
- COverlay segments that encapsulate traffic between hosts, so networks can span clusters
- DA separate physical network per tenant, connected with dedicated cabling for each tenant
Show answer and explanationHide answer
Correct answer: CNSX overlay segments encapsulate tenant traffic between hosts, so the physical network does not need per-tenant VLAN changes. VLAN-tagged port groups need manual configuration on each host, static routes add switch work for every subnet, and a dedicated network per tenant does not scale.
Question 18
When a new VCF instance is being built, which step comes first in the sequence?
- ACreate a workload domain so that tenants can start deploying their applications
- BDeploy the management domain, which hosts the components that deploy and manage other domains
- CInstall the NSX Edge cluster in a workload domain before the hosts in that domain are prepared and joined
- DAttach the external storage array to a workload cluster before any hosts are configured
Show answer and explanationHide answer
Correct answer: BThe management domain is deployed first because it hosts the components used to create and operate the other domains. Workload domains, storage attachment and Edge clusters all depend on the management layer existing first.
Question 19
Which two statements about the standard and consolidated architecture options are correct? (Choose two.)
- AA standard architecture separates the management domain from workload domains
- BA consolidated architecture runs management and tenant workloads in one domain
- CWorkload domains must be created before the management domain can be deployed
- DA consolidated architecture is mandatory whenever NSX is part of the design
Show answer and explanationHide answer
Correct answer: A, BA standard architecture keeps the management domain separate from workload domains, while a consolidated architecture combines both in one domain. Workload domains depend on the management domain existing first, and NSX does not force the choice of a consolidated architecture.
Question 20
An operations team must upgrade a VCF environment that contains one management domain and several workload domains. Which sequence follows the recommended approach?
- AUpgrade the management domain first, and then upgrade the workload domains
- BUpgrade all workload domains first, so that the management components can be updated afterwards with no dependency
- CUpgrade every domain at the same time to reduce the total length of the maintenance window
- DUpgrade the workload domains, then the management domain, and finally the network layer of the environment
Show answer and explanationHide answer
Correct answer: AThe management domain hosts the components that manage the other domains, so it is upgraded first and the workload domains follow. Upgrading workload domains first, or all domains in parallel, ignores that dependency.
Section 3 - Plan and Design (10 questions)
Question 21
An architect has interviewed the CIO and the finance lead. The CIO wants faster provisioning of workloads and finance wants predictable chargeback. What should the architect do first to build the conceptual model?
- ASelect hardware models that match the vendor's reference architecture
- BCreate the physical rack elevation so that the budget can be checked early
- CTranslate each objective into measurable outcomes and identify the components that support them
- DStart configuring tenant networks and VM templates so business users can test the platform early in the project
Show answer and explanationHide answer
Correct answer: CA conceptual model starts from business objectives, so each objective is turned into a measurable outcome and linked to the components that deliver it. Selecting hardware, drawing racks or configuring networks jumps ahead to physical or logical design before the objectives are understood.
Question 22
During logical and physical design, an architect lists several items. Which item belongs in the physical design rather than the logical design?
- AWhich workload domains will exist and what each one will host
- BThe number of uplinks per host and the speed of the top-of-rack switch ports
- CThe VLAN and subnet plan that each traffic type will use across all domains and clusters
- DHow tenant overlay segments map to Tier-0 and Tier-1 gateways
Show answer and explanationHide answer
Correct answer: BPhysical design fixes concrete hardware and connectivity details such as uplink counts and port speeds. Domain layout, gateway mapping, and the VLAN and subnet plan are logical design decisions that remain valid even if the hardware changes.
Question 23
The operations team must deploy new workload domains through a repeatable and auditable process, not through manual steps. Which design element addresses this requirement?
- AScheduling nightly manual backups of the management database to a shared folder that operators check each morning
- BAdding more memory to the management appliances so that deployments finish faster
- CDefining automated workflows and reusable templates for domain deployment as part of the operations design
- DGiving each engineer a personal copy of the deployment runbook in a spreadsheet
Show answer and explanationHide answer
Correct answer: CAutomated, templated workflows make domain deployments repeatable and leave an audit trail, which is what the operations requirement asks for. Extra memory, manual backups, and personal spreadsheet runbooks do not make deployment repeatable or auditable.
Question 24
A latency-sensitive database cluster shares hosts with batch workloads, and users report inconsistent response times. Which design measure most directly protects the database's performance?
- AApply CPU and memory reservations to the database virtual machines inside a defined resource pool
- BTurn off the performance monitoring that tracks the batch workloads running on these hosts
- CRemove every resource limit from all tenant workloads so that each one can burst freely during peak periods
- DMove the database to the lowest-cost storage tier, regardless of the latency that tier provides
Show answer and explanationHide answer
Correct answer: AReservations guarantee the database a share of CPU and memory, and a resource pool groups it under a defined policy so batch load cannot take those resources. Removing limits can increase contention, disabling monitoring hides the problem, and slower storage worsens latency.
Question 25
A critical application has an RPO of one hour. Which statement correctly describes what this target means?
- AService must be restored within one hour after an outage occurs
- BNo more than one hour of data may be lost when service is restored after a disruption
- CBackup copies of the application data must be retained for one full hour before they can be overwritten by newer copies
- DThe application must be restarted by operations staff at least once every hour as a health check
Show answer and explanationHide answer
Correct answer: BRPO, the recovery point objective, is the maximum tolerable amount of data loss measured in time. The time needed to restore service is the RTO, which is why the first option is wrong, and the retention and restart options describe unrelated behaviour.
Question 26
A team must move about 300 virtual machines from an older platform. Several applications allow only a very short downtime window. Which migration approach is most suitable for those applications?
- AExport each virtual machine to a file and import it during a planned weekend outage
- BShut down each application and copy its disks with a file utility after business hours
- CRebuild each application from installation media in the target domain and re-enter its data by hand from the old system
- DUse a live migration method that keeps each workload running during the move, with a brief switchover
Show answer and explanationHide answer
Correct answer: DLive migration keeps workloads running during the move and limits downtime to a short switchover, which fits tight windows. Export and import, shutting down to copy disks, and rebuilding applications all require longer outages or substantial rework.
Question 27
A platform team must let each tenant see its own resource consumption and receive quota alerts, while tenants are blocked from other tenants' data. Which approach best meets this?
- AGive all tenants read access to one shared dashboard that lists every project and every virtual machine
- BCreate a scoped organization per tenant with quotas, and filter dashboards and alerts by tenant
- CSend weekly spreadsheets of total cluster usage to every tenant administrator
- DLimit monitoring to the platform team and answer tenant questions from memory
Show answer and explanationHide answer
Correct answer: BA scoped organization with quotas, combined with tenant-filtered dashboards and alerts, gives each tenant its own view and limits without exposing other tenants' data. A shared dashboard exposes everything, weekly totals do not provide per-tenant alerts, and answering from memory is not a monitoring strategy.
Question 28
Which two statements about designing availability across two availability zones are correct? (Choose two.)
- AA witness at a third site stores witness components so that quorum survives the loss of one data site
- BThe witness host stores a full second copy of every virtual machine's data for faster restores
- CStretching a cluster across zones requires inter-site latency within the range the product supports
- DBoth zones should share one power feed so that failover traffic stays local
Show answer and explanationHide answer
Correct answer: A, CIn a vSAN stretched design, the witness holds only witness components used for quorum, and cross-zone latency must stay within the supported range. A witness does not hold full data copies, and sharing one power feed removes the independence that separate zones are meant to provide.
Question 29
Which three measures support security in a multi-tenant VCF design? (Choose three.)
- AAssigning role-based access through directory groups with least-privilege roles
- BEncrypting vSAN datastores at rest with keys held in an external key management server
- CUsing distributed firewall rules to microsegment tenant workloads
- DGiving all operators one shared administrator account to simplify change tracking
- EDisabling audit logging on management components to reduce log storage use
Show answer and explanationHide answer
Correct answer: A, B, CLeast-privilege roles, encryption at rest with external key management, and microsegmentation each limit access or stop compromise from spreading between tenants. A shared administrator account removes individual accountability, and disabling audit logs removes the evidence needed to investigate changes.
Question 30
An architect reviews the objectives gathered from the business. Which statement is most useful as a design input?
- AThe new platform should make application teams more agile and happier with their infrastructure over time
- BOperations should feel confident that the platform is well run, easy to support and simple to explain
- CIT should look modern and align with the latest industry trends for cloud platforms and automation tools
- DProvisioning a standard development environment should take under one working day by the end of the second quarter
Show answer and explanationHide answer
Correct answer: DA useful design input is measurable, time-bound and tied to an outcome, so the design can be sized and tested against it. The other statements are vague or subjective, so the architect cannot derive a design decision or a pass or fail test from them.