2V0-71.23 Question 125
Single answerYour organization has multiple Kubernetes clusters across AWS, Azure, and an on-premises data center. You have been tasked with ensuring consistent policy enforcement for resource quotas and security policies across all clusters. How can you achieve this using Tanzu Mission Control (TMC)?
- A
Use Tanzu Mission Control to create and apply a workspace, then attach policies at the workspace level.
- B
Use Tanzu Mission Control to create a cluster group, then define and apply policies to the group.
- C
Manually apply the same policies to each individual cluster using kubectl commands.
- D
Use Tanzu Mission Control to deploy Helm charts with resource quota and security policies to each cluster.
Show answer and explanation
Correct answer: B
Explanation
Tanzu Mission Control enables centralized management of Kubernetes clusters across multiple environments. By using cluster groups, you can define and enforce policies, such as resource quotas and security policies, consistently across multiple clusters. This simplifies operations and ensures compliance without manual intervention on each cluster.
- A. Incorrect.
While workspaces in Tanzu Mission Control help organize namespaces, they are not used for cluster-wide policy enforcement.
- B. Correct.
This is the correct answer. Tanzu Mission Control allows you to create cluster groups and apply consistent policies, such as resource quotas and security policies, across all clusters within the group.
- C. Incorrect.
Manually applying policies with kubectl commands is error-prone and not scalable for multi-cluster environments.
- D. Incorrect.
Deploying Helm charts might be an option, but Tanzu Mission Control provides a built-in capability to enforce policies across clusters, making this approach unnecessary in this context.