A customer is deploying VMware Cloud Foundation (VCF) in an enterprise environment. During a series of workshops with stakeholders, the following requirements were identified:
* The network solution must be capable of complete logical isolation.
* The network solution must be capable of supporting independent upgrade cycles for network stacks.
* The network solution must be capable of tenant-specific customization of NSX configurations.
The architect has made the following design decisions:
* The solution will consist of a single VCF instance.
* The solution will include a management domain and two workload domains.
Based on the scenario, which additional design decision meets all of the stated requirements?

• A. Use a shared NSX instance across both workload domains.
• B. Deploy NSX only in the management domain and use VLAN-backed segments in the workload domains.
• C. Use a global NSX Federation configuration across workload domains.
• D. Deploy a dedicated NSX instance per workload domain.

An architect is developing a VMware Cloud Foundation (VCF) solution for a single tenant with the following requirements:
* The configuration must prevent advertisements from being dropped by the Border Gateway Protocol (BGP) loop detection check.
* High bandwidth (40+ Gbps) is needed to support workload traffic.
* Workloads use a mixture of virtual machines and containers.
* Bidirectional Forwarding Detection (BFD) cannot be used due to limitations in the upstream switches.
* Workload traffic is divided between tenants, and packets should not ingress/egress from the same endpoints.
* There is only enough existing hardware to support one Workload Domain.
The architect makes a design decision to use NSX VPC Full Services Model based on the information provided.
When designing the network architecture to support this solution, which two elements should be considered as part of the physical network design? (Choose two.)

• A. Configure the Edge datapath interfaces to Uniform Passthrough (UPT) mode.
• B. Use a unique, private BGP AS number for each Tier-0 gateway.
• C. Use iBGP as the routing protocol between the Tier-0 gateway and the physical network.
• D. Use distributed VPC traffic across multiple VLANs to separate tenant traffic ingress/egress.
• E. Use multiple Tier-0 gateways to separate tenant traffic ingress/egress.
• F. Adjust the default BGP timers to 3 retries and 12 hold down.

An architect is designing a new VMware Cloud Foundation (VCF) Workload Domain for a software development organization. During the requirements gathering phase, the customer has provided the following requirements:
* The platform must enable multiple development teams to provision both Virtual Machines (VM) and Kubernetes clusters within the same self-service project space.
* Each development team must be separated at network level to ensure isolation within the cloud network.
* The solution must also leverage auto SNAT for automated outbound connectivity for workloads.
Which NSX Tier-0 Gateway HA Mode must the architect choose?

• A. Active/Standby
• B. Active/Active Stateless
• C. Active/Active Stateful
• D. Distributed Only

An architect is designing a VMware Cloud Foundation (VCF) private cloud that is integrated with VCF Automation to support multiple internal departments.
The following requirements were provided:
* Some departments build and operate full application stacks, while others only deploy standardized virtual machines through pre-approved templates.
* Central IT must enforce quota limits, approval workflows, and cost visibility per department, while ensuring strict isolation between departments and least operational overhead.
* The solution must implement the minimum number of organizations to address the above requirements.
Which two tenant design decisions satisfy the requirements? (Choose two.)

• A. Use VM Apps Organizations for departments consuming standardized virtual machines only.
• B. Use All Apps Organizations for departments managing full application lifecycles.
• C. Place all departments into a single Organization and separate them using multiple Regions.
• D. Create multiple Organizations, one per department, to enforce isolation and governance boundaries.
• E. Deploy a single Organization and rely on project-level RBAC to isolate departments.

An architect is designing an identity management solution that addresses the following requirements and constraints:
* A single fleet that extends across seven VMware Cloud Foundation (VCF) instances.
* The VCF instances are located in two geographically separated data centers.
* The design should use the minimum footprint required for identity management.
Which two design decisions meet the requirements? (Choose two.)

• A. Deploy VCF Identity Broker in VCF Management Services.
• B. Deploy VCF Identity Broker in the Workload Domains.
• C. Deploy seven VCF Identity Brokers in Embedded mode.
• D. Deploy two VCF Identity Brokers in VCF Management Services.
• E. Deploy VCF Identity Broker in a Management Domain.