An architect is designing an environment to make three applications available to five users using a self-service catalog in VMware Cloud Foundation (VCF) Automation.
* Users 1 and 5 need the ability to deploy the marketing application.
* Users 2 and 3 need the ability to deploy the inventory application.
* Users 1, 3, and 4 need the ability to deploy the HR application.
* If a user does not need access to an application, it should not be presented in their catalog.
Which design decision will present the listed applications to the associated users?

• A. Map each application to a separate project. Assign users 1 and 3 to the shared applications project, and users 2, 4, and 5 to the dedicated applications project.
• B. Map all three applications to a single project. Assign users 1 and 3 to the shared applications project, and users 2, 4, and 5 to the dedicated applications project.
• C. Map all three application blueprints to a single project. Assign users 1 and 5 to the marketing blueprint, users 2 and 3 to the inventory blueprint, and users 1, 3, and 4 to the HR blueprint.
• D. Map each application blueprint to a separate project. Assign users 1 and 5 to the marketing project, users 2 and 3 to the inventory project, and users 1, 3, and 4 to the HR project.

An architect is designing a VMware Cloud Foundation (VCF) Private Cloud. During a requirements gathering workshop, the customer supplied the following information:
* The solution must support the existing workloads.
* There are currently 10,000 virtual machine workloads running within the existing environment.
* All guest operating systems must be monitored by the solution.
* All infrastructure components must be monitored by the solution.
The solution must ensure that the 99.9% uptime Service Level Agreement can be met.
The solution must be resilient to a single-node failure.
The following logical design decisions have been made within the design:
* Deploy the VCF Operations cluster following the High Availability Model.
The following table is from the VCF Operations sizing guide:
Small
Medium
Single-Node Object Maximum
10,000
30,000
Single-Node Max Collected Metrics
1,600,000
5,000,000
Maximum Nodes in a cluster
2
8
Multi-Node Object Maximum
6,000
17,000
Multi-Node Max Collected Metrics
1,400,000
4,000,000
Maximum Objects in a Cluster
12,000
136,000
Maximum Metrics in a Cluster
2,800,000
32,000,000
Given the information above, which three physical design decisions meet the stated requirements? (Choose three.)

• A. Deploy two small VCF Operations nodes.
• B. Apply a vSphere Distributed Resource Scheduler (DRS) anti-affinity rule to the VCF Operations cluster nodes.
• C. Enable Fault Tolerance in vSphere.
• D. Enable High Availability in VCF Operations.
• E. Deploy three medium VCF Operations nodes.
• F. Apply a vSphere Distributed Resource Scheduler (DRS) affinity rule to the VCF Operations cluster nodes.

As part of a design for a VMware Cloud Foundation (VCF) solution, an architect has documented the following dependencies and constraints:
* CON001 - Internet access will not be permitted from anywhere within the VCF solution.
* CON002 - The password must not be stored in plain text anywhere within the VCF solution.
* DEP001 - The customer must make the required VCF binaries accessible to the VCF Installer appliance during the deployment phase.
Which design decision should the architect include in the design for the download of the VCF binaries for initial installation?

• A. The Offline Bundle Transfer Utility will be used on the VCF Installer appliance.
• B. The VCF Installer appliance will be configured to connect to an online depot.
• C. The VCF Installer appliance will be configured to connect to an offline depot.
• D. The VCF Download Tool will be used on the VCF Installer appliance.

A national cyber-defense enterprise operates a VMware Cloud Foundation (VCF) environment with strict organization isolation based solely on Virtual Private Cloud (VPC) constructs. They have been recently audited, and some new requirements were presented:
* Zero lateral movement between VPCs at both Layer 2 and Layer 3.
* No shared security objects between tenants.
* Strict identity-based access segregation for all VCF Automation API consumers.
* All enforcement must remain local to each VPC.
Which two design decisions correctly address the design trait of security based on the new requirements?
(Choose two.)

• A. Use provider-managed dynamic security groups referencing VM metadata to simplify organization rule management across all VPCs.
• B. Create per-Organization IAM integrations in VCF Automation so each organization authenticates against its own Identity Provider (IdP) scope.
• C. Enforce VPC(s) local firewall policies with no inheritance from provider-level DFW sections, to maintain an isolated security posture.
• D. Use globally shared Tier-0 gateways to consolidate routing, relying on per-organization route filters to prevent cross-VPC traffic exposure.
• E. Enable VPC Address Pool sharing to reduce IP fragmentation across organizations while maintaining isolation through routing separation.

An architect is designing a VMware Cloud Foundation (VCF) solution for a customer who needs to provide a standardized architecture across multiple geographically dispersed locations.
During workshops with the customer, the architect gathered the following information:
* There are ten locations in scope for the initial design, with plans for an additional five to be added within the next two years.
* One location is a dedicated datacenter (DC1) owned by the customer.
* The network links between the datacenter and all branch locations have a maximum latency of 100ms and a minimum bandwidth of 10 Mbps.
* Each of the remaining locations for the design are customer branch locations.
* Each branch location operates independently, and all compute resources should be dedicated to the branch.
* There is existing NFS storage available at each of the locations.
Based on this information, the architect decides that VCF Edge design patterns would be the best approach for meeting the customer ' s requirements.
Which two design decisions should the architect include? (Choose two.)

• A. Deploy multiple workload domains that span branch locations grouped based on geographical proximity.
• B. Deploy a VCF fleet with a single VCF instance at DC1.
• C. Deploy a single workload domain that spans all branch locations regardless of geographical proximity.
• D. Deploy a VCF fleet with a single VCF instance at each datacenter and branch location.
• E. Deploy a single workload domain for each branch location.