Broadcom Tanzu Platform for Cloud Foundry Technical Specialist (250-607) Certification Sample Questions

01. A release job's spec declares a property for the port its service listens on, and the job's ERB configuration template uses that property.
Where does a particular deployment supply the value for that property?
a) In the deployment manifest
b) In the package spec, with the files of the service
c) In the cloud config, alongside the vm_types
d) In the stemcell, read by the Agent at first boot

02. SSH is allowed for the deployment, for the space prod, and for the app orders, which was restarted after cf enable-ssh. A user whose only role is Space Auditor in prod runs cf ssh orders and is refused.
What explains the refusal?
a) The user must first get a password with cf ssh-code
b) A Space Manager must run cf allow-space-ssh prod again
c) App SSH is available only to Admins and Space Developers
d) The user must first run cf ssh-enabled orders to activate access

03. A user who holds only the Space Supporter role in the space dev is troubleshooting an app there. The user runs cf create-service to provision a new database instance for testing, and the request is refused as not authorized.
What explains the refusal?
a) The user needs the network.write UAA scope
b) Supporters cannot create service instances
c) Service creation must be run with --wait in cf CLI v8
d) The user must first be given an org role such as Org Auditor

04. A developer pushes an app from a Docker image rather than from source code.
What does Cloud Foundry do in place of buildpack staging?
a) Runs the detected buildpack against the image’s file system
b) Converts the image into a droplet tarball in the blobstore
c) Starts the image directly on a BOSH-managed VM outside Diego
d) Builds an LRP that runs the image’s start command

05. An operator wants every Space Developer on the foundation to be able to manage container-to-container network policies for apps in their own spaces, without granting a UAA scope to each user one by one.
What should the operator enable?
a) enable_space_developer_self_service
b) The user_org_creation feature flag
c) Dynamic ASGs for every space
d) cf allow-space-ssh in each space

06. A Space Developer runs cf add-network-policy frontend backend for two apps in a space where they deploy daily, and the command is refused for lack of permission. The administrator wants this developer to manage network policies for apps in the spaces the developer can access, and nothing broader.
What should the administrator grant?
a) The Org Manager role in the org
b) The network.admin UAA scope
c) The Space Manager role in the space
d) The network.write UAA scope

07. A buildpack app is pushed with the custom start command ./prepare.sh && ./server. Whenever its instances are stopped, the server never runs its graceful-shutdown handler and is always killed abruptly.
Which change lets the server process receive the termination signal?
a) Raise the app start timeout with cf push -t on the next push
b) Change the command to ./prepare.sh && exec ./server
c) Push with --strategy rolling
d) Switch the app’s health check type from port to process

08. An engineer is writing a runbook section on adding community-built commands to the cf CLI v8 from a shared repository.
Which of these commands are part of the command set for that work?
Select all that apply.
a) cf repo-plugins
b) cf create-service-broker
c) cf add-plugin-repo
d) cf set-label

09. A legacy app reads the port it should listen on from VCAP_APP_PORT.
True or False: VCAP_APP_PORT holds the instance’s external host-side port, the same value as CF_INSTANCE_PORT.
a) True
b) False

10. The app reports exists only so that one-off tasks, such as a nightly report job, can run with its code. The team wants it staged so that tasks can run, without any long-running app instance.
Which push supports this?
a) cf push reports --no-start
b) cf push reports --no-route
c) cf push reports -i 0
d) cf push reports --strategy rolling