An administrator is designing a VCF Automation service catalog item that enables development teams from multiple business units to deploy standardized environments for microservices applications.
The solution must support consistent configuration, minimize environment sprawl, and enforce automated decommissioning policies.
Which three capabilities of VMware Cloud Foundation (VCF) Automation can be used to meet these requirements? (Choose three.)

• A. Create a custom cloud-init configuration to installing standard company tooling.
• B. Provide a Virtual Machine (VM) template running Ubuntu with Docker pre-installed.
• C. Allow predefined firewall rules for outbound access.
• D. Define and assign a lease policy.
• E. Create DNS entry for cost center tracking.

A provider is designing for a regulated environment where some organizations must share infrastructure to reduce costs, while others require dedicated resources for compliance. Which two characteristics describe a hard tenancy deployment in VMware Cloud Foundation (VCF)?
(Choose two.)

• A. VCF Operations allocates compute from a common pool across organizations.
• B. Physical separation of infrastructure supports regulatory compliance.
• C. Logical isolation is provided through NSX projects and policy-based controls.
• D. Each tenant is assigned a dedicated workload domain or cluster.
• E. Shared management plane and infrastructure improves utilization efficiency.

During a peer review, a developer accidentally committed a YAML manifest containing a plaintext API token, triggering a security alert and raising concerns about the current handling of sensitive values in infrastructure code.
The development team uses an All Apps Organization in VMware Cloud Foundation (VCF) Automation and must adhere to security guidelines while minimizing manual steps in the processes.
Which approach to manage, store, and distribute sensitive data supports secure automation workflows for Supervisor and vSphere Kubernetes Service (VKS) clusters in VCF Automation?

• A. Store secrets in a private Git repository and use environment-variable substitution in the CI/CD pipeline to inject them into blueprints at build time.
• B. Use the Secret Store Service (SSS) and reference the required secrets during deployment.
• C. Pass secrets as secure input variables during deployments from VCF Automation's UI, so the sensitive values are never included directly in blueprints.
• D. Store secrets in the YAML manifest files in Git, but mark the Git repository as private to limit exposure.

An administrator needs to ensure that workloads deployed in VMware Cloud Foundation Automation can consume compute resources with placement policies across multiple Supervisors. Which construct enables resource aggregation and placement control?

• A. Region
• B. Cloud Zone
• C. Organization
• D. Project

Hotspot Question
An administrator clicks on Orchestrator to create a workflow in a VM Apps organization as shown.
Where would the administrator go next to enable Orchestrator?