5V0-35.21 Exam Dumps : VMware vRealize Operations Specialist

The regulatory, standards-based compliance pack that is available in vRealize Operations is the CIS Security Standards. The CIS Security Standards are a set of best practices and recommendations for securing IT systems and data against cyberattacks. The CIS Security Standards are developed and maintained by the Center for Internet Security (CIS), a nonprofit organization that provides cybersecurity resources and guidance to organizations and individuals1. The vRealize Operations Compliance Pack for CIS provides alerts, policies,and reports to validate the vSphere resources against the CIS hardening guide. The following resources are being validated using this content: ESXi Host, Virtual Machine, vCenter Server, Distributed Switch, Distributed Port Group, and Distributed Firewall2. The vRealize Operations Compliance Pack for CIS can be downloaded and installed from the VMware Marketplace3. The Sarbanes-Oxley Act (SOX) (option A) is not a regulatory, standards-based compliance pack that is available in vRealize Operations. SOX is a federal law that regulates the financial reporting and auditing of public companies in the United States. SOX does not provide specific technical guidelines or benchmarks for securing IT systems and data4. The Common Vulnerabilities and Exposures (CVE) (option B) is not a regulatory, standards-based compliance pack that is available in vRealize Operations. CVE is a list of publicly known cybersecurity vulnerabilities and exposures that are assigned unique identifiers and descriptions. CVE does not provide specific security standards or recommendations for securing IT systems and data5. The General Data Protection Regulation (GDPR) (option D) is not a regulatory, standards-based compliance pack that is available in vRealize Operations. GDPR is a legal framework that regulates the collection, processing, and transfer of personal data of individuals in the European Union and the European Economic Area. GDPR does not provide specific technical guidelines or benchmarks for securing IT systems and data. References:

• 1: CIS Security Standards - cisecurity.org, CIS, 2021, [7].
• 2: vRealize Operations Compliance Pack for CIS - VMware Marketplace, VMware, 2021, 1.
• 3: vRealize Operations Manager User Guide, VMware, 2021, p. 237.
• 4: Sarbanes-Oxley Act (SOX) - investopedia.com, Investopedia, 2021, [8].
• 5: Common Vulnerabilities and Exposures (CVE) - cve.mitre.org, MITRE, 2021, [9].
• [6]: General Data Protection Regulation (GDPR) - ec.europa.eu, European Commission, 2021, [10].
• [7]: CIS Security Standards - cisecurity.org, CIS, 2021, [7].
• [8]: Sarbanes-Oxley Act (SOX) - investopedia.com, Investopedia, 2021, [8].
• [9]: Common Vulnerabilities and Exposures (CVE) - cve.mitre.org, MITRE, 2021, [9].
• [10]: General Data Protection Regulation (GDPR) - ec.europa.eu, European Commission, 2021, [10].

To generate a daily email report of a list of VMs that have been provisioned from vRA, you need to follow these steps:

• Create a custom view that displays the VM name, owner, and creation date for the deployments in the defined cluster. You can use the vRealize Automation Reporting - vRA8 deployment resources and statuses sample as a reference1.
• Create a report that uses the custom view as the template and select the output format as CSV or JSON.
• Schedule the report to run daily and set the start date and recurrence to daily (option A).
• In the Email addresses text box, enter the email addresses that must receive the report, and select an outbound rule (option B). You also need to configure an email server in vRealize Automation Service Broker to send notifications2.
• Click on Schedule, select vSphere Hosts and Clusters, expand vSphere World, and select the specific cluster (option E). This will filter the report data to only include the VMs provisioned to the defined cluster.
• Save the report and verify that it is sent to the email recipients as expected.

Option C is not required because the report is sent via email and does not need to be stored in an external location. Option D is redundant because the start date and recurrence are already set in option A. Option F is incorrect because it will include all the VMs in the vCenter, not just the ones in the defined cluster. References:

• Create and Configure Reports
• Send email notifications to Service Broker users
• vRealize Automation Reporting - vRA8 deployment resources and statuses

 According to the VMware vRealize Operations Reference Materials, the cloud provider that needs to be added as a custom cloud provider when running a What-If Analysis is Oracle Cloud. The What-If Analysis feature allows the administrator to compare the cost and performance of running workloads in different public cloud providers, such as AWS, IBM Cloud, Microsoft Azure, Google Cloud, and Alibaba Cloud. These public cloud providers are supported out-of-the-box in vRealize Operations, and the administrator can select them from the predefined list when creating a migration scenario. However, if the administrator wants to compare the cost and performance of running workloads in Oracle Cloud, they need to add it as a custom cloud provider, and upload a rate card that contains the pricing information for Oracle Cloud services. The other options are incorrect because they are supported out-of-the-box in vRealize Operations, and they do not need to be added as a custom cloud provider when running a What-If Analysis. References: What-If-Analysis - Migration Planning: Public Cloud; VMware vRealize Operations What-If Analysis; VMware vRealize Operations for Public Cloud