VMware 3V0-24.25 Exam - Topic 5 Question 3 Discussion

Actual exam question for VMware's 3V0-24.25 exam

Question #: 3
Topic #: 5

An administrator is modernizing the internal HR and payroll applications using vSphere Kubernetes Service (VKS). The applications are composed of multiple microservices deployed across Kubernetes clusters, fronted by Ingress controllers that route user traffic through Avi Kubernetes Operator. During testing, it is discovered that manually creating and renewing TLS certificates for each Ingress resource is error-prone and leads to periodic outages when certificates expire. The requirements also mandate that all application endpoints use trusted certificates issued through the corporate certificate authority (CA) with automatic renewal and rotation.

Which requirement can be met by using cert-manager?

ARouting requests based on HTTP headers.

BGenerating certificates by connecting only to external services.

CAdding certificates and certificate issuers as resource types in Kubernetes clusters.

DScanning container images stored in Harbor.

Show Suggested Answer

Suggested Answer: C

cert-manager addresses the operational risk described (manual creation/renewal causing outages) by making certificate lifecycle management anative, declarative Kubernetes workflow. Instead of treating TLS certificates as manually managed files, cert-manager extends the Kubernetes API with custom resources such asCertificate,Issuer, andClusterIssuer, so certificates and their issuing policies become first-class objects that can be version-controlled and automatically reconciled. This directly satisfies the requirement to usetrusted certificates issued through the corporate CA, because an Issuer/ClusterIssuer can represent that corporate CA integration and define how certificate requests are fulfilled. Once configured, cert-manager continuously monitors certificate validity andautomatically renews and rotatescertificates before expiration, then updates the referenced Kubernetes Secrets so Ingress endpoints remain protected without human intervention. In a vSphere Supervisor / VKS environment, VMware also uses cert-manager on the Supervisor for automated certificate rotation in platform integrations (for example, rotating certificates used by monitoring components), reinforcing the model of automated rotation rather than manual certificate handling.

by Mike at Apr 05, 2026, 02:52 PM

Limited Time Offer

25%

Off

Get Premium 3V0-24.25 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!