B, C, and D represent the intended physical-design decisions for this requirement set.

B aligns with VCF network design because 10 GbE is an accepted baseline for ESX hosts , while moving to 25 GbE provides additional headroom for vSAN, NSX overlay, management, and future workload-domain traffic. Broadcom identifies 10-Gbps-or-faster NICs as a minimum hardware consideration for VCF hosts.

C aligns with the customer ' s preference for an all-flash architecture and future scalability. vSAN ESA uses a single-tier, high-performance storage model and is the appropriate architecture when designing new VCF infrastructure around modern flash/NVMe storage. The exact raw-capacity figure should always be validated against the selected storage policy, RAID scheme, FTT, operational reserve, and growth assumptions, but ESA is clearly preferable to the hybrid OSA design in F .

D provides sufficient compute and memory headroom for the management stack and anticipated growth. Management-domain sizing must consider not only current vCenter, NSX, SDDC Manager, and VCF services but also future lifecycle and operational services.

A is incorrect because VCF guidance recommends uniform host configurations within the management-domain cluster to ensure predictable performance and rebuild behavior. E is incorrect because a standard single-site vSAN-backed VCF Management Domain requires a minimum of four ESX hosts , not three.

Study Guide References/Topics: VCF Management Domain Physical Design; Host Sizing; vSAN ESA Design; Network Architecture and MTU; Management Domain Scalability; Uniform Host Configuration; Capacity and Growth Planning.

B is correct. vSphere Lifecycle Manager provides image-based lifecycle management at the cluster level , defining the required ESX version, vendor add-ons, firmware/driver add-ons, and additional components. Because the Management Domain and Workload Domain have different hardware/lifecycle characteristics—particularly the presence of DPUs in the WLD—separate composite image configurations provide the required hardware-specific desired state. Current VCF 9.x also supports heterogeneous hardware through composite images containing additional image definitions, allowing different server generations to receive appropriate vendor drivers and firmware while maintaining a common ESX base version. ( VMware Blogs )

The DPU constraint is decisive. For a DPU-backed cluster, VMware requires the participating hosts to use DPUs from the same vendor and model ; a DPU-backed cluster cannot simply mix arbitrary DPU models. Broadcom also documents that a cluster retains an association with its DPU vendor and rejects hosts using an incompatible DPU vendor.

C is incorrect because baseline-based lifecycle management is deprecated and VCF 9 requires image-based lifecycle management. A incorrectly permits different DPU models, while D unnecessarily specifies two independent WLD images rather than using the composite-image mechanism designed to accommodate hardware variations.

Study Guide References/Topics: vSphere Lifecycle Manager Images; VCF Composite Images; Hardware Support Managers; Heterogeneous Host Clusters; DPU/Distributed Services Engine Requirements; NSX and vSAN ESA Lifecycle Management.

B addresses the network-isolation requirement by keeping security-policy enforcement within the individual VPC boundary . VMware VPCs are designed as isolated networking and security domains in which tenant administrators can maintain VPC-specific firewall and networking policies. NSX VPC security provides distributed firewalling and microsegmentation close to workload interfaces, allowing east-west traffic to be restricted without depending on a shared tenant security object. Broadcom describes VPC administrators ' network and security policies as contained within their VPC and not affecting other VPCs. ( VMware Blogs )

C addresses identity isolation. VCF Automation organizations provide independent administrative and access-control boundaries, and each organization can configure its Identity Provider connection and organization-specific users/groups . This enables API consumers to authenticate within the appropriate organizational identity scope instead of sharing credentials or tenant identities.

A introduces shared provider-managed security constructs, conflicting with the no-shared-security-objects requirement. D concerns IP-address efficiency rather than zero-trust enforcement. E introduces shared routing infrastructure and depends on route filtering rather than enforcing isolation directly at each VPC boundary.

Study Guide References/Topics: VCF VPC Security Architecture; VPC Isolation; Distributed Firewall and Microsegmentation; VCF Automation Organizations; IAM and Identity Provider Integration; Zero-Trust Tenant Design.

The scenario maps directly to Availability, Manageability, and Recoverability , three of VMware ' s core AMPRS design qualities. VMware defines availability as the ability of a system to continue operating without interruption, recoverability as its ability to recover following failure or disaster, and manageability as how easily the environment can be deployed, configured, and controlled. ( VMware )

Recoverability (D) is central because the environment can enter a corrupted state and must be restored to a known reliable condition without damaging historical data. Recovery sequencing, backups, recovery points, and dependency-aware restoration therefore become critical design considerations.

Manageability (C) is required because restoration involves a complex and sensitive dependency chain. The design should reduce operational complexity through standardized procedures, automation, orchestration, configuration control, and repeatable recovery workflows. A recovery process that depends heavily on error-prone manual sequencing represents a manageability risk.

Availability (A) is required because stakeholders want some services to remain operational while the broader environment is being restored. The architecture therefore needs mechanisms that preserve service continuity or degraded-but-functional operation during recovery.

Performance and Scalability are not stated concerns. Security remains important generally, but the audit-data issue here concerns preserving recoverable state rather than an explicit confidentiality, access-control, or threat-protection requirement.

Study Guide References/Topics: AMPRS Design Qualities; Availability; Manageability; Recoverability; Business Continuity; Dependency-Aware Recovery; Operational Resilience.

D is correct. NSX supplies system-defined default segment profiles that establish a consistent operational and security baseline for newly created segments. These profiles cover functions such as segment security, IP discovery, MAC discovery, SpoofGuard, QoS, and multicast behavior . Broadcom confirms that the system-defined profiles are read-only by design to preserve configuration consistency ; when different behavior is required, administrators create a separate custom profile and bind it to the applicable segment.

Using the defaults therefore reduces unnecessary customization across multiple VCF workload domains. This supports standardized configuration, minimizes configuration drift, simplifies troubleshooting, and reduces lifecycle-management overhead. Custom profiles should be introduced only where a documented workload requirement requires behavior different from the baseline.

A is incorrect because default profiles do not inherently provide superior overlay performance. B is incorrect because default profiles are not exclusive to VLAN-backed segments, and custom profiles can be assigned when required. C is incorrect because Distributed Firewall enforcement is independent of whether default or custom segment profiles are used; segment profiles configure Layer-2/network behavior rather than replacing overlay networking. Broadcom also identifies segment profiles as the preferred persistent mechanism for applying NSX Layer-2 security settings.

Study Guide References/Topics: NSX Segment Profiles; Default versus Custom Profiles; Segment Security; IP/MAC Discovery; SpoofGuard; Standardized VCF Network Design; Configuration Consistency and Lifecycle Management.

The two design qualities represented by the requirements are Availability and Performance .

Availability (D) is the dominant requirement because each manufacturing site must continue providing its critical local production functions even when connectivity to headquarters is lost. The architecture therefore needs to eliminate inappropriate WAN dependencies and provide sufficient local compute, storage, networking, and service redundancy so that a WAN or remote-site failure does not cause the business service itself to become unavailable. VMware infrastructure design uses redundancy, clustering, and fault-domain separation specifically to maintain service availability during component or connectivity failures. Broadcom ' s VCF guidance similarly associates sufficient cluster redundancy with satisfying availability requirements.

Performance (E) is also explicitly represented because the customer identifies degraded order-processing response during periods of high traffic. Performance is concerned with throughput, latency, resource contention, and maintaining acceptable response characteristics as demand changes. Broadcom notes that excessive network latency can degrade workload performance and recommends minimizing latency for stable operation during high-demand periods. Network I/O controls can likewise protect critical traffic during contention.

Recoverability concerns restoration after failure rather than continuous operation during a connectivity outage. Manageability and Security remain general architectural concerns but are not the primary qualities expressed in this scenario.

Study Guide References/Topics: Architecture Quality Attributes; Availability and Resiliency; Performance and Scalability; Fault Domains; Network Latency and Contention; Distributed/Site-Local Service Design.

The determining constraint is the supported network latency between VCF Operations and the VCF instances belonging to its Fleet . Broadcom ' s VCF 9 architecture guidance specifies 100 ms round-trip latency between VCF Operations and VCF instances, together with a 10 Mbps network-bandwidth consideration.

Data center A has 90 ms RTT , which falls within that design threshold. Its new VCF instance can therefore be incorporated into the existing VCF Fleet , allowing it to consume the Fleet ' s centralized services. VCF 9 specifically supports expanding an existing Fleet by deploying additional VCF instances, with Fleet-level VCF Operations and VCF Automation shared across those instances . ( VMware Blogs )

Data center B has 120 ms RTT , exceeding the 100 ms Fleet design guideline. It should therefore receive a separate VCF Fleet , avoiding excessive latency between that VCF instance and the existing Fleet ' s management services.

This arrangement also satisfies the requirement for the minimum additional footprint : only the site that exceeds the latency boundary receives another Fleet. Creating separate Fleets at both sites would add unnecessary management infrastructure, while adding both instances to the existing Fleet would place the 120 ms site outside the recommended latency design.

Study Guide References/Topics: VCF Fleet Design; Fleet Network Connectivity; 100 ms RTT Requirement; Expanding an Existing VCF Fleet; VCF Operations and Automation Placement; Multi-Site VCF Architecture.

Deploying a separate Workload Domain for each department most directly satisfies the stated requirements for scalability, flexibility, future expansion, and infrastructure independence.

A VCF Workload Domain is an administrative and lifecycle boundary containing its associated vSphere infrastructure and related configuration. New workload domains can be added to the VCF environment as organizational or application requirements grow. Current VCF workflows explicitly support creating additional workload domains through VCF Operations, including assigning a unique workload-domain identity and configuring the associated vCenter and NSX resources.

D therefore provides the strongest fit because each department can scale its compute, storage, networking, policies, and lifecycle requirements without forcing unrelated departments into the same infrastructure boundary.

A and B scale only one workload domain and therefore reduce organizational and infrastructure separation. They may increase raw capacity, but they do not meet the requirement for independent workload-domain growth.

C is architecturally inconsistent. Multiple workload domains cannot simply be combined into one common vSphere cluster; the cluster is managed within the context of its workload domain. VCF operational workflows also treat workload domains as distinct management entities—for example, synchronization operations are executed independently for each workload domain.

Study Guide References/Topics: VCF Workload Domain Architecture; Workload Domain Scalability; Administrative and Lifecycle Boundaries; VCF Operations; Adding Workload Domains; Infrastructure Isolation and Growth Planning.