VCP-VCF Administrator 2024 Question 121
Select 3A VMware Cloud Foundation Administrator is tasked with implementing a backup and recovery strategy for the management domain of the VMware Cloud Foundation environment. Which of the following steps should they include to meet best practices for protecting the SDDC Manager and other key components?
- A
Configure file-based backups for the SDDC Manager using an external NFS share.
- B
Enable vSphere Replication to replicate the entire management domain to a secondary site.
- C
Regularly test the restoration of backups for the SDDC Manager in a sandbox environment.
- D
Back up NSX-T Manager configuration using the built-in backup feature and store it in a secure external location.
- E
Disable backup encryption to ensure faster recovery times.
Show answer and explanation
Correct answers: A, C, D
Explanation
To implement a robust backup and recovery strategy for VMware Cloud Foundation components, administrators must follow best practices such as configuring file-based backups for the SDDC Manager, testing the restoration process, and securing backups for critical components like NSX-T Manager. These steps ensure that the management domain and essential configurations can be restored reliably in case of a failure or disaster, while maintaining security through encryption.
- A. Correct.
Configuring file-based backups for the SDDC Manager and storing them on an external NFS share is a best practice for protecting the management domain. The SDDC Manager is a critical component that must be backed up regularly.
- B. Incorrect.
vSphere Replication is not a supported method for backing up the management domain in VMware Cloud Foundation. It is primarily used for VM replication and disaster recovery, not for protecting the SDDC Manager and other critical components.
- C. Correct.
Testing the restoration of backups is a key component of any backup strategy. This ensures that the backups are valid and can be successfully restored if needed.
- D. Correct.
Backing up NSX-T Manager configuration using its built-in backup feature and storing the backups in a secure external location is necessary to protect the network configuration in the event of a failure.
- E. Incorrect.
Disabling backup encryption is not recommended as it compromises the security of the backups. Encryption ensures that the backups are protected from unauthorized access.