NEW QUESTION 1
When running nsxcli on an ESXi host, which command will show the Replication mode?

• A. get logical-switch <Local-Switch-UUID> status
• B. get logical-switch <Logical-Switch-UUID>
• C. get logical-switches
• D. get logical-switch status

Answer: B

Explanation:
https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/8264

NEW QUESTION 2
Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

• A. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.
• B. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.
• C. Create an OAuth 2.0 client in VMware Identity Manager.
• D. Enter the Identity Provider (IdP) metadata URL in NSX Manager.
• E. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

Answer: CE

NEW QUESTION 3
An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image. Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

• A. e1000
• B. VMXNET2
• C. VMXNET3
• D. Flexible

Answer: C

NEW QUESTION 4
Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

• A. MTU 1500
• B. MTU 1400
• C. vSphere Distributed Switch 6.5
• D. vSphere Distributed Switch 7.0
• E. MTU 1600

Answer: DE

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-BA34FB2A-6780-41C5-B895

NEW QUESTION 5
Where are Distributed Firewall logs containing access decisions stored?

• A. NSX API
• B. NSX Edge
• C. NSX Manager
• D. Hypervisor transport node

Answer: D

Explanation:
https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.logging.doc/GUID-6 https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-D57429A1-A0A9-42BE-A

NEW QUESTION 6
An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original failed node to become the Active node upon recovery.
Which failover policy meets this requirement?

• A. Non-Preemptive
• B. Preemptive
• C. Enable Preemptive
• D. Disable Preemptive

Answer: A

NEW QUESTION 7
An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

• A. esxcli network diag ping -H <destination IP address>
• B. vmkping ++netstack=geneve -d -s 1572 <destination IP address>
• C. vmkping ++netstack=vxlan-d -s 1572 <destination IP address>
• D. esxcli network diag ping -I vmk0 -H <destination IP address>

Answer: C

Explanation:
https://kb.vmware.com/s/article/1003728

NEW QUESTION 8
What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)

• A. policy-based IPSec VPN
• B. Layer-7 based IPSec VPN
• C. route-based IPSec VPN
• D. Open source based IPSec VPN
• E. SSL based IPSec VPN

Answer: AC

NEW QUESTION 9
Which three different transport nodes could be configured in the data plane? (Choose three.)

• A. vShield Edge VM
• B. ESXi and KVM
• C. Bare Metal server
• D. NSX Edge VM on KVM
• E. ESXi and Hyper-V
• F. VM or Bare Metal NSX Edge

Answer: BCF

NEW QUESTION 10
How is the intra-tier transit link connection created between SR and DR for a Tier-0 Gateway?

• A. Manually create a gateway interface and mark it as transit.
• B. Automatically created when DR is created.
• C. Automatically created when SR is initialized.
• D. Manually create external uplink interface and mark it as transit.

Answer: C

NEW QUESTION 11
Which Network and Security virtualization solution provides network hybridity and mobility?

• A. VMware HCX
• B. VMware Tanzu Service Mesh
• C. NSX Advanced Load Balancer
• D. NSX Intelligence

Answer: A

NEW QUESTION 12
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

• A. SR and DR doesn’t need to be connected to provide any stateful services.
• B. DR is instantiated and automatically connected with SR.
• C. SR is instantiated and automatically connected with DR.
• D. SR and DR is instantiated but requires manual connection.

Answer: C

NEW QUESTION 13
How does Traceflow tool identify issues in a network?

• A. Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.
• B. Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.
• C. Injects synthetic traffic into the data plane and observes the results in the control plane.
• D. Injects ICMP traffic into the data plane and observes the results in the control plane.

Answer: C

NEW QUESTION 14
Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)

• A. can have a maximum of 8 edge nodes
• B. must have only active-active edge nodes
• C. can have a maximum of 10 edge nodes
• D. can contain multiple types of edge nodes (VM or bare metal)
• E. must contain only one type of edge nodes (VM or bare metal)

Answer: CD

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-14183A62-8E8D-43CC-92E0

NEW QUESTION 15
Which CLI command is used to disable SSH timeout on NSX Manger and NSX Edge nodes?

• A. set cli ssh timeout 0
• B. set esxcli ssh session off
• C. set cli-timeout 0
• D. nsxcli ssh session on

Answer: C

NEW QUESTION 16
Which is correct when deploying a NSX Edge in a KVM only environment?

• A. deploy NSX Edge VM with QCOW2 image
• B. deploy NSX Edge VM with ISO image
• C. deploy NSX Edge on a bare-metal server
• D. deploy NSX Edge VM with OVF template

Answer: C

NEW QUESTION 17
An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

• A. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.
• B. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the KVM Transport Node.
• C. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.
• D. The virtual machines running on the KVM Transport Node are not connected to the VDS.
• E. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.

Answer: BE

NEW QUESTION 18
How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

• A. Automatically created when Tier-1 is created.
• B. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.
• C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.
• D. Automatically created when Tier-1 is connected with Tier-0 from NSX UI.

Answer: D

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-3F163DEE-1EE6-4D80-B

NEW QUESTION 19
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

• A. Deploy Large size Edge node/s.
• B. Configure ECMP on the Tier-0 gateway.
• C. Configure NAT on the Tier-0 gateway.
• D. Add an additional vNIC to the NSX Edge node.
• E. Configure a Tier-1 gateway and connect it directly to the physical routers.

Answer: AB

NEW QUESTION 20
Which tool could be used to inspect the path of a packet in the data plane?

• A. Port Connection
• B. Port Mirroring Session
• C. Netflow
• D. Traceflow

Answer: D

NEW QUESTION 21
......