This course is in active development. Preview the scope below and create a free account to be notified the moment it goes live.
3V02325 VCF VKS Design (3V0-23.25)
The 3V0-23.25 course teaches advanced design of VMware Cloud Foundation 9.0 VKS, covering Kubernetes architecture, namespace governance, networking, storage, and security, enabling professionals to build resilient, scalable, and compliant cloud platforms.
Who Should Take This
It is intended for senior engineers, architects, and consultants who have at least three years of experience designing and operating VMware Cloud Foundation environments. These learners seek to deepen their strategic expertise in VKS design, align infrastructure with enterprise governance, and lead complex, multi‑domain implementations.
What's Covered
1
Domain 1: Kubernetes Architecture
2
Domain 2: Namespace Governance
3
Domain 3: Networking Design
4
Domain 4: Storage Design
5
Domain 5: Security Design
6
Domain 6: Observability Design
7
Domain 7: Lifecycle Design
What's Included in AccelaStudy® AI
Course Outline
70 learning goals
1
Domain 1: Kubernetes Architecture
2 topics
Supervisor Design
- Apply Supervisor cluster architecture design including control plane sizing and HA configuration and operational procedures for enterprise VMware environments.
- Apply Supervisor cluster architecture design including control plane sizing and HA best practices including deployment standards and integration with related components.
- Analyze Supervisor cluster architecture design including control plane sizing and HA configuration and data to identify issues, performance bottlenecks, and optimization opportunities.
- Analyze Supervisor cluster architecture design including control plane sizing and HA tradeoffs between different implementation approaches evaluating complexity, cost, and operational impact.
- Design a Supervisor cluster architecture design including control plane sizing and HA strategy that satisfies enterprise requirements for scalability, performance, security, and governance.
TKG Service Design
- Apply TKG service cluster design including node sizing, machine classes, and cluster topology techniques for complex scenarios requiring multi-component coordination and integration.
- Apply TKG service cluster design including node sizing, machine classes, and cluster topology integration with monitoring, automation, and third-party systems for unified management.
- Analyze TKG service cluster design including node sizing, machine classes, and cluster topology failures and degradation using diagnostic tools, logs, and metrics to determine root causes.
- Analyze the operational impact of TKG service cluster design including node sizing, machine classes, and cluster topology changes on dependent services and infrastructure stability.
- Design comprehensive TKG service cluster design including node sizing, machine classes, and cluster topology procedures including automation, monitoring, escalation, and documentation.
2
Domain 2: Namespace Governance
2 topics
Namespace Architecture
- Apply vSphere namespace design with resource quotas, permissions, and isolation boundaries configuration and operational procedures for enterprise VMware environments.
- Apply vSphere namespace design with resource quotas, permissions, and isolation boundaries best practices including deployment standards and integration with related components.
- Analyze vSphere namespace design with resource quotas, permissions, and isolation boundaries configuration and data to identify issues, performance bottlenecks, and optimization opportunities.
- Analyze vSphere namespace design with resource quotas, permissions, and isolation boundaries tradeoffs between different implementation approaches evaluating complexity, cost, and operational impact.
- Design a vSphere namespace design with resource quotas, permissions, and isolation boundaries strategy that satisfies enterprise requirements for scalability, performance, security, and governance.
Multi-Tenancy Design
- Apply Kubernetes multi-tenancy strategy with namespace policies and RBAC techniques for complex scenarios requiring multi-component coordination and integration.
- Apply Kubernetes multi-tenancy strategy with namespace policies and RBAC integration with monitoring, automation, and third-party systems for unified management.
- Analyze Kubernetes multi-tenancy strategy with namespace policies and RBAC failures and degradation using diagnostic tools, logs, and metrics to determine root causes.
- Analyze the operational impact of Kubernetes multi-tenancy strategy with namespace policies and RBAC changes on dependent services and infrastructure stability.
- Design comprehensive Kubernetes multi-tenancy strategy with namespace policies and RBAC procedures including automation, monitoring, escalation, and documentation.
3
Domain 3: Networking Design
2 topics
Pod Networking
- Apply pod networking architecture design with Antrea CNI, network policies, and service routing configuration and operational procedures for enterprise VMware environments.
- Apply pod networking architecture design with Antrea CNI, network policies, and service routing best practices including deployment standards and integration with related components.
- Analyze pod networking architecture design with Antrea CNI, network policies, and service routing configuration and data to identify issues, performance bottlenecks, and optimization opportunities.
- Analyze pod networking architecture design with Antrea CNI, network policies, and service routing tradeoffs between different implementation approaches evaluating complexity, cost, and operational impact.
- Design a pod networking architecture design with Antrea CNI, network policies, and service routing strategy that satisfies enterprise requirements for scalability, performance, security, and governance.
Ingress and Load Balancing
- Apply ingress controller and load balancer design with NSX ALB integration techniques for complex scenarios requiring multi-component coordination and integration.
- Apply ingress controller and load balancer design with NSX ALB integration integration with monitoring, automation, and third-party systems for unified management.
- Analyze ingress controller and load balancer design with NSX ALB integration failures and degradation using diagnostic tools, logs, and metrics to determine root causes.
- Analyze the operational impact of ingress controller and load balancer design with NSX ALB integration changes on dependent services and infrastructure stability.
- Design comprehensive ingress controller and load balancer design with NSX ALB integration procedures including automation, monitoring, escalation, and documentation.
4
Domain 4: Storage Design
2 topics
Persistent Storage
- Apply persistent storage architecture design with CSI drivers, StorageClasses, and volume management configuration and operational procedures for enterprise VMware environments.
- Apply persistent storage architecture design with CSI drivers, StorageClasses, and volume management best practices including deployment standards and integration with related components.
- Analyze persistent storage architecture design with CSI drivers, StorageClasses, and volume management configuration and data to identify issues, performance bottlenecks, and optimization opportunities.
- Analyze persistent storage architecture design with CSI drivers, StorageClasses, and volume management tradeoffs between different implementation approaches evaluating complexity, cost, and operational impact.
- Design a persistent storage architecture design with CSI drivers, StorageClasses, and volume management strategy that satisfies enterprise requirements for scalability, performance, security, and governance.
Storage Policies
- Apply storage policy design mapping Kubernetes workload requirements to vSAN and external storage techniques for complex scenarios requiring multi-component coordination and integration.
- Apply storage policy design mapping Kubernetes workload requirements to vSAN and external storage integration with monitoring, automation, and third-party systems for unified management.
- Analyze storage policy design mapping Kubernetes workload requirements to vSAN and external storage failures and degradation using diagnostic tools, logs, and metrics to determine root causes.
- Analyze the operational impact of storage policy design mapping Kubernetes workload requirements to vSAN and external storage changes on dependent services and infrastructure stability.
- Design comprehensive storage policy design mapping Kubernetes workload requirements to vSAN and external storage procedures including automation, monitoring, escalation, and documentation.
5
Domain 5: Security Design
2 topics
Cluster Security
- Apply Kubernetes cluster security design with RBAC, PodSecurity, admission controllers, and image policies configuration and operational procedures for enterprise VMware environments.
- Apply Kubernetes cluster security design with RBAC, PodSecurity, admission controllers, and image policies best practices including deployment standards and integration with related components.
- Analyze Kubernetes cluster security design with RBAC, PodSecurity, admission controllers, and image policies configuration and data to identify issues, performance bottlenecks, and optimization opportunities.
- Analyze Kubernetes cluster security design with RBAC, PodSecurity, admission controllers, and image policies tradeoffs between different implementation approaches evaluating complexity, cost, and operational impact.
- Design a Kubernetes cluster security design with RBAC, PodSecurity, admission controllers, and image policies strategy that satisfies enterprise requirements for scalability, performance, security, and governance.
Supply Chain Security
- Apply container supply chain security design with image scanning, signing, and policy enforcement techniques for complex scenarios requiring multi-component coordination and integration.
- Apply container supply chain security design with image scanning, signing, and policy enforcement integration with monitoring, automation, and third-party systems for unified management.
- Analyze container supply chain security design with image scanning, signing, and policy enforcement failures and degradation using diagnostic tools, logs, and metrics to determine root causes.
- Analyze the operational impact of container supply chain security design with image scanning, signing, and policy enforcement changes on dependent services and infrastructure stability.
- Design comprehensive container supply chain security design with image scanning, signing, and policy enforcement procedures including automation, monitoring, escalation, and documentation.
6
Domain 6: Observability Design
2 topics
Monitoring Architecture
- Apply Kubernetes observability architecture with Prometheus, Grafana, and log aggregation configuration and operational procedures for enterprise VMware environments.
- Apply Kubernetes observability architecture with Prometheus, Grafana, and log aggregation best practices including deployment standards and integration with related components.
- Analyze Kubernetes observability architecture with Prometheus, Grafana, and log aggregation configuration and data to identify issues, performance bottlenecks, and optimization opportunities.
- Analyze Kubernetes observability architecture with Prometheus, Grafana, and log aggregation tradeoffs between different implementation approaches evaluating complexity, cost, and operational impact.
- Design a Kubernetes observability architecture with Prometheus, Grafana, and log aggregation strategy that satisfies enterprise requirements for scalability, performance, security, and governance.
Platform Monitoring
- Apply platform monitoring design for Supervisor, TKG clusters, and workload health techniques for complex scenarios requiring multi-component coordination and integration.
- Apply platform monitoring design for Supervisor, TKG clusters, and workload health integration with monitoring, automation, and third-party systems for unified management.
- Analyze platform monitoring design for Supervisor, TKG clusters, and workload health failures and degradation using diagnostic tools, logs, and metrics to determine root causes.
- Analyze the operational impact of platform monitoring design for Supervisor, TKG clusters, and workload health changes on dependent services and infrastructure stability.
- Design comprehensive platform monitoring design for Supervisor, TKG clusters, and workload health procedures including automation, monitoring, escalation, and documentation.
7
Domain 7: Lifecycle Design
2 topics
Cluster Lifecycle
- Apply TKG cluster lifecycle management design including upgrades, scaling, and backup configuration and operational procedures for enterprise VMware environments.
- Apply TKG cluster lifecycle management design including upgrades, scaling, and backup best practices including deployment standards and integration with related components.
- Analyze TKG cluster lifecycle management design including upgrades, scaling, and backup configuration and data to identify issues, performance bottlenecks, and optimization opportunities.
- Analyze TKG cluster lifecycle management design including upgrades, scaling, and backup tradeoffs between different implementation approaches evaluating complexity, cost, and operational impact.
- Design a TKG cluster lifecycle management design including upgrades, scaling, and backup strategy that satisfies enterprise requirements for scalability, performance, security, and governance.
Developer Experience
- Apply developer self-service platform design with accelerators, service bindings, and IDE integration techniques for complex scenarios requiring multi-component coordination and integration.
- Apply developer self-service platform design with accelerators, service bindings, and IDE integration integration with monitoring, automation, and third-party systems for unified management.
- Analyze developer self-service platform design with accelerators, service bindings, and IDE integration failures and degradation using diagnostic tools, logs, and metrics to determine root causes.
- Analyze the operational impact of developer self-service platform design with accelerators, service bindings, and IDE integration changes on dependent services and infrastructure stability.
- Design comprehensive developer self-service platform design with accelerators, service bindings, and IDE integration procedures including automation, monitoring, escalation, and documentation.
Scope
Included Topics
- VCF Kubernetes Services design including Supervisor cluster architecture, TKG service, namespace governance, persistent storage, networking, security, and observability.
- Enterprise-level VMware technology knowledge for VCF 9.0 VKS Design.
Not Covered
- Implementation details beyond stated certification scope.
- Vendor-specific third-party configurations.
- Current pricing and partner program details.
Official Exam Page
Learn more at VMware/Broadcom
3V0-23.25 is coming soon
Adaptive learning that maps your knowledge and closes your gaps.
Create Free Account to Be Notified