VMware Advanced VMware Cloud Foundation 9.0 Architect - 3V0-12.26 Exam Questions

QUESTION NO: 1
An architect is designing a new VMware Cloud Foundation (VCF) Workload Domain for a software development organization. During the requirements gathering phase, the customer has provided the following requirements:
* The platform must enable multiple development teams to provision both Virtual Machines (VM) and Kubernetes clusters within the same self-service project space.
* Each development team must be separated at network level to ensure isolation within the cloud network.
* The solution must also leverage auto SNAT for automated outbound connectivity for workloads.
Which NSX Tier-0 Gateway HA Mode must the architect choose?

QUESTION NO: 2
An architect is designing a VMware Cloud Foundation (VCF) solution for a customer. During a workshop with the customer, the architect records the following information about the scope:
* The organization is looking to reduce the amount of time its administrators spend on manual tasks.
* There is a current procurement contract in place for server hardware that must be used for the solution.
* The organization is subject to legislation including DORA (Digital Operational Resilience Act) in the EU and SOX (Sarbanes-Oxley Act) in the USA.
* The solution will be subject to a security penetration test at least once per year by a third-party organization.
Which statement recorded by the architect is a technical requirement?

QUESTION NO: 3
The following information has been collected from an architect during initial VMware Cloud Foundation (VCF) design discussions:
* Applications must be designed to tolerate the failure of a single data center.
* Service account passwords must be stored and retrieved from the company password vault.
* The self service catalog must meet the Service Level Objective (SLO) of 75% successful requests measured over a 12 month period.
* Management plane applications must return to operation (RTO) in under 10 minutes.
* Third-party pen testing must be executed against the solution yearly with a pass rate of 80 percent or higher.
* The solution must provide the ability for users to view and track the progress of their requests.
* All Identity management must use an external SAML based identity provider.
Which four statements are Functional Requirements? (Choose four.)

QUESTION NO: 4
An architect is defining the management-plane identity architecture for a VMware Cloud Foundation (VCF) platform. Requirements include:
* Single sign-on (SSO) across VCF Components.
* Integration to a corporate Identity Provider that supports SAML 2.0 or OIDC.
* Eliminate the dependency on local, per-domain identity silos.
Which identity architecture should the architect select?

QUESTION NO: 5
An architect is designing VMware Cloud Foundation (VCF) Automation projects for two organizations:
* Sales is a VM Apps organization .
* Development is an All Apps organization .
When designing a new project in the Development organization, the architect notices that the available network options differ from those seen in the Sales organization.
Which two factors explain the architectural differences? (Choose two.)

QUESTION NO: 6
A technology provider offers standardized digital workspaces to hundreds of corporate customers. Their internal provisioning engine must deliver a uniform setup experience, free of manual intervention, regardless of customer size or complexity. The team also mentions concerns about inconsistent identity handling, but these are secondary to the challenge of keeping tenant deployments repeatable and automated. When Clients request custom integrations, the engineering team rejects these because deviations from the standard pattern would break long-term operational stability.
Based on the above scenario, what are the two design traits the architect needs to focus on in the VMware Cloud Foundation (VCF) design? (Choose two.)

QUESTION NO: 7
A national cyber-defense enterprise operates a VMware Cloud Foundation (VCF) environment with strict organization isolation based solely on Virtual Private Cloud (VPC) constructs. They have been recently audited, and some new requirements were presented:
* Zero lateral movement between VPCs at both Layer 2 and Layer 3.
* No shared security objects between tenants.
* Strict identity-based access segregation for all VCF Automation API consumers.
* All enforcement must remain local to each VPC.
Which two design decisions correctly address the design trait of security based on the new requirements?
(Choose two.)