VCP-Cloud Official Cert Guide (with DVD): VMware Certified Professional - Cloud

by Tom Ralph, Nathan Raper

Overview

VCP-Cloud Official Cert Guide presents you with an organized test-preparation routine through the use of proven series elements and techniques. "Do I Know This Already?" quizzes open each chapter and enable you to decide how much time you need to spend on each section. Exam topic lists make referencing easy. Chapter-ending Exam Preparation Tasks help you drill on key concepts you must know thoroughly.

• Master VMware VCP-Cloud exam topics

• Assess your knowledge with chapter-opening quizzes

• Review key concepts with exam preparation tasks

• Practice with realistic exam questions on the DVD

VCP-Cloud Official Cert Guide focuses specifically on the objectives for the VMware Certified Professional - Cloud exam. VMware Certified Design Experts Tom Ralph and Nathan Raper share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

The companion DVD contains a powerful Pearson IT Certification Practice Test engine that enables you to focus on individual topic areas or take a complete, timed exam. The assessment engine also tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most.

Well-regarded for its level of detail, assessment features, comprehensive design scenarios, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.

VCP-Cloud Official Cert Guide is part of a recommended learning path from VMware that includes simulation and hands-on training from authorized VMware instructors and self-study products from VMware Press. To find out more about instructor-led training, e-learning, and hands-on instruction offered worldwide, please visit www.vmware.com/training.

The official study guide helps you master many of the topics on the VCP-Cloud exam, including

• Installing vCloud Director and vShield Manager

• Learning the differences between roles and privileges and the principles of role-based access controls

• Coverage of the vCenter Chargeback Manager product, introducing the concept of chargeback and why it is needed in a cloud environment

• Understanding and troubleshooting vCloud Connector, including identification and functionality of the different components

• Constructing different types of vCloud networks and network pools and the requirements for each

• Creating and modifying vCloud Director organizations

• Allocating and managing vCloud resources

• Monitoring a vCloud implementation

Product Details

ISBN-13:	9780789751652
Publisher:	VMware Press
Publication date:	11/04/2013
Series:	VMware Press Certification Series
Pages:	384
Product dimensions:	9.70(w) x 12.20(h) x 1.40(d)

About the Author

Tom Ralph is a senior cloud services architect at VMware. He is a senior member of VMware Global Services organization and has worked for VMware for more than 2 years. Prior to joining VMware, he worked for Catholic Health Initiatives in Denver, Colorado.

He is certified as a VMware Certified Design Expert (VCDX 3, 4, and 5), VMware Certified Advanced Professional (4 and 5)-DCD, VCP (3, 4, and 5), VCP5-Cloud, CISSP, CCSK, MCSE: Messaging, MCITP: Enterprise, and ITIL Foundations.

When VMware started to build a cloud team to deliver vCloud, he was one of the first members to be recruited from outside of VMware. Tom has become an expert in this field and delivered several vCloud seminars and troubleshooting workshops at various VMware public events in the United States and around the world.

Tom lives in Colorado with his wife and daughters and can be found on Twitter at @tomralph.

Nathan Raper is a highly skilled IT professional with 15 years of experience designing, engineering, administering, and supporting physical and virtual infrastructures. He has worked as both a customer and a consultant, participating in all phases of engagement—sales, design, engineering, implementation, training, and support. An early believer in VMware solutions, Nate began server consolidations on the VMware ESX Server 1.5 platform and earned his first VMware certification (VCP2 #306) in early 2004. Following tours with customers and a VMware/EMC/Cisco partner, Nate now works for the VMware Global Center of Excellence (CoE) with several of his VCDX peers.

Nate lives in Colorado with his extraordinarily patient wife and his three adorable children. You can find him on Twitter at @nateraper and on LinkedIn at www.linkedin.com/pub/nathan-raper/8/934/b41/.

Table of Contents

Introduction xxi

Chapter 1 Introduction to the vCloud Suite Certifications 3

Foundation Topics 3

VMware Certification Overview 3

VCP — VMware Certified Professional 4

VCAP — VMware Certified Advanced Professional 4

VCDX — VMware Certified Design Expert 4

The vCloud Suite Certifications 5

VCP-Cloud 5

VCAP-CIA (Cloud Infrastructure Administration) 7

VCAP-CID (Cloud Infrastructure Design) 7

VCDX-Cloud 8

Preparing for vCloud Certifications 9

Chapter 2 Install and Configure vCloud 11

“Do I Know This Already?” Quiz 11

Foundation Topics 14

Preparing to Install vCloud Director 14

Requirements for RHEL Server Installation 14

Configuring vCloud Director for Multiple Cells 15

Load Balancer Requirements 15

NFS Transfer Export 16

Activity 2-1: Configuring NFS Export 17

Activity 2-2: Installing vCloud Director 17

Certificate Creation 18

Activity 2-3: Creating Certificate Keystore 19

Activity 2-4: Creating Signed Certificates 20

Configuring the vCloud Director Database Server 21

Oracle Database 21

SQL Server 21

Installing vCloud Director 22

Activity 2-5: Installing vCloud Director 22

Installing and Configuring vShield Manager 27

Activity 2-6: Deploying vShield Manager 27

Activity 2-7: Configuring vShield Manager 31

License Options for vShield (vCloud Network and Security) 33

Activity 2-8: Registering vShield Manager to vCenter 34

Final Configuration of vCloud Director 34

vCloud Director System Settings 36

General 36

Email 38

LDAP 38

Password Policy 38

Branding 39

Public Addresses 39

Extensibility 39

Federation 40

Summary 40

Exam Preparation Tasks 40

Review All Key Topics 40

Definitions of Key Terms 41

Review Questions 41

Chapter 3 Administer vCloud Users, Roles, and Privileges 45

“Do I Know This Already?” Quiz 45

Foundation Topics 48

Privileges and Roles 48

What Are Privileges? 48

What Are Roles? 48

Predefined Roles in vCloud Director 48

Activity 3-1: Allowing an Organization to Publish Catalogs 50

Activity 3-2: Publishing a Catalog for Public Use 51

Custom Roles in vCloud Director 54

Activity 3-3: Creating a Custom Role from Scratch in vCloud Director 54

Activity 3-4: Creating a Custom Role by Copying an Existing Role in vCloud Director 55

Activity 3-5: Modifying an Existing Role in vCloud Director 56

Activity 3-6: Deleting an Existing Role in vCloud Director 57

Troubleshooting Roles and Privileges 57

Users and Groups in vCloud Director 57

Local Users 58

Activity 3-7: Adding a Local System Administrator to vCloud Director 58

Activity 3-8: Adding a Local User to an Organization 60

LDAP Users and Groups 60

Activity 3-9: Importing an LDAP User as a System Administrator 60

Activity 3-10: Importing an LDAP Group as a System Administrator 62

Activity 3-11: Importing an LDAP User to an Organization 63

Activity 3-12: Importing an LDAP Group to an Organization 64

LDAP Integration 64

LDAP Authentication Methods 65

Simple Authentication 65

Activity 3-13: Configuring LDAP Integration for vCloud Director Using Simple Authentication 66

Kerberos Authentication 67

Activity 3-14: Configuring LDAP Integration for vCloud Director Using Kerberos 68

Configure LDAP Settings for Organizations 70

Activity 3-15: Configuring LDAP Integration for an Organization 71

Additional LDAP Options and Actions 72

Activity 3-16: Testing System LDAP Settings 72

Activity 3-17: Setting the LDAP Synchronization Interval 73

Activity 3-18: Manually Synchronizing with the LDAP Server 74

Federation with vCenter Single Sign-On and Horizon Application Manager 75

Activity 3-19: Configuring vCloud Director to Connect to a vCenter Single Sign-On Repository 76

Troubleshooting LDAP Integration Issues 77

Summary 78

Exam Preparation Tasks 78

Review All the Key Topics 78

Definitions of Key Terms 79

Troubleshooting Scenario 79

Review Questions 79

Chapter 4 Configure and Administer Chargeback 83

“Do I Know This Already?” Quiz 83

Foundation Topics 87

Installing vCenter Chargeback Manager 87

Hardware Requirements 87

Supported Operating Systems 87

Software Requirements 88

Supported Database Management Systems 88

Supported Web Browsers 89

Supported vCenter Server Versions 89

Supported vCloud Director Versions 89

Activity 4-1: Installing vCenter Chargeback Manager 2.5 89

vCenter Chargeback Manager Clusters 95

Configuring Chargeback Users, Roles, and Privileges 95

Privileges 96

Resource Types 96

Roles 98

Activity 4-2: Creating a Custom Role in vCenter Chargeback Manager 2.5 98

Activity 4-3: Modifying a Role in vCenter Chargeback Manager 2.5 101

Activity 4-4: Deleting a Role in vCenter Chargeback Manager 2.5 101

Users 102

Activity 4-5: Creating a Local User in vCenter Chargeback Manager 2.5 102

Activity 4-6: Configuring an LDAP server 103

Activity 4-7: Importing an LDAP User or Group in vCenter Chargeback Manager 2.5 104

Activity 4-8: Assigning a Role to a User in vCenter Chargeback Manager 2.5 104

Troubleshoot Users, Roles, and Privileges 106

Configuring and Managing Chargeback Cost Elements, Pricing Models, and Costing 106

Cost Elements 106

Billing Policies 108

Activity 4-9: Creating a Custom Billing Policy 109

Activity 4-10: Editing a Billing Policy 110

Hierarchies 111

Manage Cost/Pricing Models 112

Activity 4-11: Creating a Custom Pricing Model 112

Configure Entity-level Costs 114

Physical Infrastructure Costing 115

Activity 4-12: Setting Rate Factors for Hosts and Clusters 115

Activity 4-13: Setting Rate Factors for Datastores, Datastore Tiers, and Storage Profiles 116

Pricing Matrix for Virtual Machines 116

vCenter Chargeback Manager Reporting 116

Activity 4-15: Generating a Report 117

Schedule Reports 117

Manage and Archive Reports 118

Summary 118

Exam Preparation Tasks 119

Review All the Key Topics 119

Definitions of Key Terms 120

Review Questions 120

Chapter 5 vCloud Connector 125

“Do I Know This Already?” Quiz 125

Foundation Topics 127

What Is vCloud Connector? 127

vCloud Connector Core 127

vCloud Connector Advanced 127

vCloud Connector Components 128

vCloud Connector Installation 128

Install Server 129

Activity 5-1: Installing vCloud Connector Server 129

Install Nodes 135

Activity 5-2: Installing vCloud Connector Node 135

Activity 5-3: Registering the vCloud Connector Node 143

Register vCloud Connector to vCenter 146

Activity 5-4: Registering vCloud Connector to vCenter 147

vCloud Connector Data Flow 147

Summary 148

Exam Preparation Tasks 148

Review All the Key Topics 148

Definitions of Key Terms 149

Review Questions 149

Chapter 6 Configure and Administer vCloud Networking 153

“Do I Know This Already?” Quiz 153

Foundation Topics 156

External Networks 156

Activity 6-1: Add External Network to vCloud Director 156

Activity 6-2: Modifying External Network Settings 161

External Routed Network 163

Organization vDC Networks 164

Types of Organization Networks 165

Direct Network 165

Routed Network 165

Internal Network 166

Create, Modify, and Remove Organization Networks 166

Activity 6-3: Creating a Routed Network 166

Activity 6-4: Creating a Direct Network 171

Activity 6-5: Creating an Internal Organization Network 171

Configure and Administer vCloud Network Pools 173

Types of Network Pools 173

VXLAN 174

Activity 6-6: Enabling VXLAN 174

vCloud Director — Network Isolated Network 177

Port-Group Backed 177

VLAN-Backed 177

Create/Delete a Network Pool 178

Activity 6-7: Creating a vCD-NI Network Pool 178

Activity 6-8: Creating a Port-Group Backed Network Pool 179

Activity 6-9: Creating a VLAN-Backed Network Pool 181

Troubleshooting Common Network Pool Problems 183

Configure and Administer vApp Networks 183

vApp Network Types 184

Direct-Connect Networks 184

Routed Networks 184

Managed Network Services 185

vShield Edge Sizing 185

Compact 185

Large 185

vShield Edge Services 186

Firewall 186

Static Routing 186

Load Balancer–Layer 4 and Layer 7 186

High Availability 187

DHCP 187

DNS Relay 187

SNAT 187

DNAT 187

Firewall 188

Static Routing 188

IPsec VPN 188

SSL VPN-Plus 188

Layer 7 Load Balancer 189

Third-Party Support 189

Configuring vShield Edge Services 189

Activity 6-10: Configuring a DHCP Server 189

Activity 6-11: Configuring NAT Rules 190

Activity 6-12: Creating a VPN Session (IPsec and SSL) 192

Summary 192

Exam Preparation Tasks 193

Review All Key Topics 193

Definitions of Key Terms 194

Review Questions 194

Chapter 7 Configure and Administer vCloud Organizations 197

“Do I Know This Already?” Quiz 197

Foundation Topics 199

What Is a vCloud Director Organization? 199

Create an Organization 199

Activity 7-1: Creating an Organization 201

Modifying an Organization 208

Activity 7-2: Modifying an Organization 209

Configuring an Organization for Federation 218

Activity 7-3: Configuring Federation in vCloud Director 219

Export XML Metadata from vCloud Director to Identity Provider 221

Summary 222

Exam Preparation Tasks 223

Review All the Key Topics 223

Definitions of Key Terms 223

Review Questions 224

Chapter 8 Allocate and Manage vCloud Resources 227

“Do I Know This Already?” Quiz 227

Foundation Topics 230

What Is a vCloud Resource? 230

Create and Administer Provider vDCs 230

What Is an Elastic Provider vDC? 230

Activity 8-1: Creating a Provider vDC 231

Prepare a Provider vDC 235

Activity 8-2 Preparing a Host 235

Enable Provider Storage 238

Activity 8-3: Assigning a Storage Profile to a Datastore 239

Decommission a Provider vDC 241

Activity 8-4: Disabling a Provider vDC 241

Activity 8-5: Deleting a Provider vDC 243

Storage Profile in vCenter 246

Activity 8-6: Syncing vCenter Storage Profiles 246

Create and Administer Organization vDCs 248

Pay-As-You-Go 248

Allocation Pool Model 251

Reservation Pool Model 253

Select the Right Allocation Model 255

Create an Organization vDC 255

Activity 8-7: Creating an Org vDC 255

Delete an Organization vDC 259

Activity 8-8: Preparing to Remove an Organization Virtual Datacenter 259

Catalog Management 264

Activity 8-9: Creating a Catalog 264

Populate Catalogs 268

Summary 268

Exam Preparation Tasks 269

Review All Key Topics 269

Definitions of Key Terms 269

Review Questions 269

Chapter 9 Monitor a vCloud Implementation 273

“Do I Know This Already?” Quiz 273

Foundation Topics 276

Monitoring vCloud 276

View Events in vCloud 276

Search for Tasks in vCloud 278

vCloud Director Log File Locations 280

vShield Manager Logs 280

Syslog Settings 282

Monitoring Provider vDC Resources 284

CPU 285

Memory 286

Storage 288

Monitoring Org vDC Resources 291

CPU 291

Memory 293

Storage 294

Monitoring Network Resources 294

External Networks 294

Organization Networks 295

Network Pools 296

vShield Manager Log File Gathering 297

Troubleshooting vCenter Chargeback Manager 297

Log Files 297

Troubleshooting Utility 299

Summary 299

Exam Preparation Tasks 300

Review All the Key Topics 300

Definitions of Key Terms 301

Review Questions 301

Chapter 10 What Do I Do Now? 305

Foundation Topics 306

Download the Exam Blueprint 306

Gain Hands-On Experience 306

Practice Exams and Preparation Material 307

Register for the Exam 308

Exam Day 308

Appendix A Answers to the “Do I Know This Already?” Quizzes and Review Questions 311

Appendix B vCenter to vCloud Resource Table 317

Appendix C Configuring vSphere for vCloud Director 319

Glossary 325

9780789751652 TOC 9/13/2013