2V0-17.25 Exam Questions and Answers

QUESTION: 9

During creation of a new Organization for All Applications in VCF Automation, which four NSX constructs are automatically configured at the regional networking step? (Choose four.)

A Default Virtual Private Cloud (VPC)
A Provider Tier-0 Gateway
An outbound Destination Network Address Translation (DNAT) rule
An NSX Transit Gateway
An outbound Source Network Address Translation (SNAT) rule
A Virtual Distributed Switch (VDS)
A Virtual Private Cloud (VPC) connectivity profile

Answer(s): A,B,E,G

Explanation:

Comprehensive and Detailed
The VCF Automation Networking Guide (9.0) documents that when an Organization for All Applications is created, networking constructs are provisioned automatically to provide immediate connectivity. Specifically, "During region creation, the system automatically deploys a Default VPC, a Provider Tier-0 Gateway, a VPC connectivity profile, and default SNAT rules to enable outbound access." .
DNAT rules are not provisioned by default (they must be configured for inbound services). Likewise, NSX Transit Gateway is a multi-region design element, not automatically deployed for a single org setup. A VDS is a vSphere construct and not part of the NSX automation performed at this stage. Therefore, the automatically created items are: Default VPC (A), Provider Tier-0 Gateway (B), SNAT rule (E), and VPC Connectivity Profile (G).

Reveal Solution Next Question

QUESTION: 10

An administrator creates a custom alert in VCF Operations for a VM with a symptom definition:
"Read Latency > 1 ms." The alert should trigger immediately once the symptom condition occurs.
What additional step is required to ensure the alert functions?

Enable the alert in an Active Policy.
Create a new Payload Template.
Create an instance of the REST Notification Plugin.
Create and enable a super metric for read latency in the Active Policy.

Answer(s): A

Explanation:

Comprehensive and Detailed
The VCF Operations 9.0 Monitoring Guide specifies: "For any alert definition to be active in the environment, it must be associated with and enabled in an Active Policy." . Creating symptom and alert definitions only defines conditions; they do not generate alerts until policies include them. REST notification plugins or payload templates are used for outbound integrations, not for enabling alerts. A super metric is only needed for custom composite KPIs, not for native read latency which is a standard metric already available. Therefore, the required step is to enable the alert in an Active Policy so that when the symptom triggers (latency > 1 ms), the alert activates.

Reveal Solution Next Question

QUESTION: 11

A large corporation recently experienced a power outage at one of its primary data centers resulting in service disruption for customers in that region. An administrator is tasked to assess the current infrastructure and propose a plan to improve resiliency.
Current configuration:
Single-site vSAN Express Storage Architecture (ESA) cluster 12 hosts
Cluster resource utilization (CPU, memory, and storage) is under 30% Which solution would improve resiliency and minimize service disruption in data center outages with a recovery point objective (RPO) of zero without requiring additional hosts?

Relocate six ESX hosts to another data center and configure a vSAN Stretched Cluster.
Deploy VMware Live Recovery to maintain an identical copy in a secondary site.
Convert existing production workload to a 2 failures RAID-1 storage policy.
Configure the twelve ESX hosts into six fault domains.

Answer(s): A

Explanation:

The VCF 9.0 Design Guide highlights that for resiliency across sites with RPO = 0, the recommended approach is a vSAN Stretched Cluster. Documentation states: "Stretched clusters provide site-level resilience by mirroring data across two fault domains (sites). In the event of a full site outage,

workloads remain available with no data loss (RPO = 0)." Relocating six hosts to another site creates the two fault domains required for vSAN Stretched Cluster. Options B and C provide backup or redundancy but not synchronous replication with zero RPO. Option D (fault domains) protects against host/rack failures, not entire data center loss. Therefore, the correct solution is to relocate hosts and configure a stretched cluster.

Reveal Solution Next Question

QUESTION: 12

An organization wants to enable Service and Application Discovery across their VMware Cloud Foundation (VCF) fleet.
Which optional VMware Cloud Foundation (VCF) solution must the administrator enable or deploy to facilitate this capability?

vSphere Supervisor
VCF Operations for Logs
VCF Operations Collector
VCF Operations for Networks

Answer(s): D

Explanation:

The VCF Operations for Networks (formerly vRNI) enables Application Discovery and Network Visibility. According to VCF 9.0: "Operations for Networks provides flow-based application discovery, dependency mapping, and security planning. This allows administrators to visualize application topology and relationships across the VCF fleet." By contrast, VCF Operations for Logs provides log aggregation, while the Collector provides integration for metrics, not discovery. The vSphere Supervisor enables Kubernetes workloads, not application discovery. Therefore, to achieve Service and Application Discovery, administrators must deploy VCF Operations for Networks.

Reveal Solution Next Question

QUESTION: 13

An administrator is responsible for monitoring VMware vSAN performance across a VMware Cloud Foundation (VCF) instance. The administrator confirms VCF Operations is configured correctly.
When viewing Storage Operations, the vSAN Cluster Performance widget is not displaying any data. What additional configuration should the administrator complete to ensure the widget displays data?

Enable Support Insight for all vSAN Clusters in vCenter.
Select a Cloud proxy as Collector in the vSAN integration.
Select "Enable SMART data collection" in the vCenter integration.
Enable Performance Service for all vSAN Clusters in vCenter.

Answer(s): D

Explanation:

According to the VCF 9.0 Operations and vSAN Integration Guide, performance metrics in the vSAN Cluster Performance widget are only available when the vSAN Performance Service is enabled. The documentation states:
"The vSAN Performance Service must be enabled in vCenter Server for each vSAN cluster to collect and visualize performance statistics in VCF Operations. Without this service, performance dashboards and widgets will not display data."
Option A (Support Insight) relates to telemetry with VMware, not performance widgets. Option B (Cloud proxy as Collector) is required for general collection but not specific to vSAN widget visibility.
Option C (SMART data collection) provides disk health analytics, not cluster-level performance stats. Option D is correct, because enabling the vSAN Performance Service ensures that VCF Operations receives and displays data in the vSAN Performance dashboards. Therefore, the administrator must enable the vSAN Performance Service for all vSAN clusters in vCenter.

Reveal Solution Next Question

QUESTION: 14

An administrator is tasked to configure network connectivity to the organization's corporate network for their container workloads to be deployed on VMware Kubernetes Service (VKS) clusters backed by VMware NSX networking on a new VMware Cloud Foundation (VCF) deployment.
Which gateway connectivity type should the administrator deploy?

Round-robin Connectivity
Distributed Connectivity
Physical Connectivity
Centralized Connectivity

Answer(s): D

Explanation:

The VMware Cloud Foundation 9.0 networking design documentation specifies that container workloads running on VMware Kubernetes Service (VKS) with NSX networking require external connectivity via a Centralized Connectivity model. This is implemented using an NSX Tier-0 (T0) Gateway which provides north-south routing to the corporate physical network. The guide states: "In VKS deployments backed by NSX networking, workloads achieve external reachability through a centralized Tier-0 Gateway, ensuring integration with corporate networking and enterprise services." This model ensures traffic consolidation, policy enforcement, and simplified routing for Kubernetes workloads.
Round-robin Connectivity is not a supported NSX gateway connectivity model. Distributed Connectivity refers to east-west NSX overlay communication, not north-south connectivity.
Physical Connectivity is not precise, as workloads do not connect directly to the physical network; instead, they use logical routing.
Centralized Connectivity is the correct model, where the T0 Gateway centralizes external routing for container workloads.

Reference:

VMware Cloud Foundation 9.0 NSX Networking and VKS Deployment Guide (Tier-0 Gateway connectivity model).

Reveal Solution Next Question

QUESTION: 15

What is the purpose of Istio Service Mesh?

Provides service discovery across multiple clusters.
Provides an infrastructure layer that makes communication between applications possible, structured, and observable.
Provides dynamic application load balancing and autoscaling across multiple clusters and sites.
Provides a centralized, global routing table to simplify and optimize traffic management.

Answer(s): B

Explanation:

The VCF 9.0 Service Mesh Integration Guide defines Istio as: "Istio Service Mesh provides an infrastructure layer that transparently handles service-to-service communication, securing, observing, and controlling traffic between microservices." The key purpose is enabling structured and observable communication between applications.
While Istio includes discovery and load balancing, those are features, not the overarching purpose. A centralized routing table (Option D) is not the core definition. VMware documentation highlights Istio's role in service-to-service communication, observability, and policy enforcement within the service mesh. Therefore, the correct answer is B.

Reveal Solution Next Question

QUESTION: 16

An administrator is deciding on a storage solution to create the first management workload domain for a new VMware Cloud Foundation (VCF) instance.
Which three storage solutions can be used as principal storage? (Choose three.)

NVMe/TCP
Virtual Volumes (vVols)
VMFS on Fibre Channel (FC)
NFSv3
vSAN OSA

Answer(s): C,D,E

Explanation:

The VCF 9.0 Architecture Guide outlines valid principal storage options for the management domain. It states: "The management domain must be deployed using vSAN, NFS, or Fibre Channel (FC). Supported protocols include NFSv3 and VMFS on FC." vSAN (including OSA) is the default recommended option, but NFSv3 and VMFS on FC are also supported for environments where external storage arrays are required.
NVMe/TCP and vVols are not supported for the initial management domain's principal storage. vVols may be used in workload domains after deployment, but they are not a supported foundation for the management domain. Therefore, the three correct storage solutions for the first management workload domain are: VMFS on FC, NFSv3, and vSAN OSA.

Reveal Solution Next Question

VMware 2V0-17.25 Exam (page: 2) VMware Cloud Foundation 9.0 Administrator Updated on: 12-Feb-2026

QUESTION: 9

Explanation:

QUESTION: 10

Explanation:

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Explanation:

QUESTION: 16

Explanation:

VMware 2V0-17.25 Exam (page: 2)
VMware Cloud Foundation 9.0 Administrator
Updated on: 12-Feb-2026