NEW QUESTION 1
Exhibit:

Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

• A. Within Compute Cluster 1, Layer 2 would function, but Layer 3 would fail.
• B. Within Compute Cluster 1, Layer 2 would fail, and Layer 3 would fail.
• C. Within ComputeCluster 1, Layer 2 would fail, but Layer 3 would function.
• D. Within Compute Cluster 1, Layer 2 would function, and Layer 3 would function.

Answer: A

Explanation:
This has an interesting side effect: if you didn’t add all clusters of a given DVS to the TZ, those clusters you haven’t added will still have access to that Logical Switch. Let’s have a look at the following diagram:
From <https://telecomoccasionally.wordpress.com/2014/12/27/nsx-for-vsphere- understanding-transport-zone-scoping/>
his means that in out hypothetical case, if we were to create a DLR and connect to it that
LS we’ve created earlier, DLR instance would get created on hosts in clusters Comp B and
Mgmt / Edge, but not on hosts in clusteCr omp A:
From <https://telecomoccasionally.wordpress.com/2014/12/27/nsx-for-vsphere-understanding-transport-zone-scoping/

NEW QUESTION 2
Which two networking and security components are contained m the backup configuration data of an NSX Manager backup file? (Choose two )

• A. vSphere Distributed Switch
• B. Resource Pools
• C. Edge Services Gateway
• D. Grouping Objects

Answer: CD

NEW QUESTION 3
A user has configured a specific distributed firewall rule preventing VM-A (172.16.10.11) on the Web-Logical Switch to communicate to VM-B (172.16.20.11), running on the same switch. After the changes, the user is still able to communicated to VM-A from VM-B.
To debug this anomaly, the user will need to obtain logs from which component?

• A. The Distributed Logical Router
• B. The Edge Services Gateway
• C. The appropriate ESXi Hosts(s)
• D. The appropriate NSX Controller(s)

Answer: C

NEW QUESTION 4
An administrator is attempting to troubleshoot a routing issue between the Edge Services Gateway (ESG) and the Distributed Logical Router (DLR).

Based on the exhibit, which method CANNOT be used to troubleshoot the issue?

• A. SSH session into 192.168.100.3 on the ESG.
• B. Console session into the ESG.
• C. Console session into the DLR.
• D. SSH session into 192.168.10.5 on the DLR.

Answer: A

NEW QUESTION 5
An NSX administrator is creating a filter as shown below.

What would be the purpose of creating a filter?

• A. To quickly add a new rule.
• B. To temporarily filter traffic.
• C. To quickly remove a rule.
• D. To quickly identify rules.

Answer: D

NEW QUESTION 6
What are the correct steps for connecting a virtual machine to a logical switch?

• A. Select the logical switch, click the Add Virtual Machine Icon, select the VM, select thevNIC to connect
• B. Select the Add Virtual Machine icon, select the logical switch, vNIC to connect
• C. Select the logical switch, select the virtual machine, click the Add Virtual Machine .co
• D. select the vNIC to connect
• E. Select the vNIC, click the Add Virtual Machine Icon, select the logical switch

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.2/com.vmware.nsx.admin.doc/GUID-571237B3-1665-4B92-A3A9- 51C078EC601D.html

NEW QUESTION 7
What needs to be deployed before configuring the identify Firewall?

• A. Guest Introspection
• B. Data Security
• C. Network hit inspection
• D. LDAP Integration

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.2/rn/releasenotes_nsx_vsphere_624.html

NEW QUESTION 8
The fact that NSX Data Security has visibility into sensitive data provides which two benefits? (Choose two )

• A. It helps address compliance and risk management requirements.
• B. It acts as a forensic tool to analyze TCP and UDP connections between virtual machines
• C. It is able to trace packets between a source and destination without requiring access to the guest OS
• D. It eliminates the typical agent footprint that exists with legacy software agents

Answer: AB

NEW QUESTION 9
Which two options are correct regarding vSphere Distributed Switches? (Choose two )

• A. A single vDS can span multiple vCenter Servers
• B. A single host can be attached to multiple vDS
• C. A single vDS can span multiple hosts across multiple clusters
• D. A vDS is automatically created when a new 802.1Q trunk is configured

Answer: AB

NEW QUESTION 10
An administrator has implemented VMware NSX on a leaf-spine underlay. They have deployed the following in the data center:
• Two racks for a management cluster that is not prepared for VMware NSX
• Six racks for compute clusters
• Two racks for an Edge cluster which holds a DLR control VM for bridging, and North/South Edge Service Gateways
Which three of the following are true regarding the physical and logical networking of the environment? (Choose three )

• A. At least one VXLAN segment spans across all the racks
• B. VXLAN segments span the compute and Edge racks
• C. At least one VLAN spans the compute racks
• D. At least one VLAN spans across the two management racks
• E. At least 2 VLANs span across the two Edge racks.

Answer: BCD

NEW QUESTION 11
Which two statements are true about NSX Data Security support? (Choose two )

• A. It supports HIPAA and PCI-DSS compliance policies as well as U.
• B. Driver License and Social Security numbers.
• C. It supports both Windows and Linux-based virtual machines.
• D. It only supports HIPAA and PCI-DSS compliance policies.
• E. It only supports Windows-based virtual machines.

Answer: BC

Explanation:
Referencehttps://www.vmware.com/products/nsx.html

NEW QUESTION 12
In a Cross-vCenter environment where is information about local logical switches and local logical routers maintained?

• A. Platform Services Controller
• B. Local transport /one
• C. Local Controller Cluster
• D. Universal Controller Cluster

Answer: D

NEW QUESTION 13
What vSphere Distributed Switch security policy allows virtual machines to send frames w*h a MAC Address that is different from the one specified in the vmx file?

• A. MAC Address Changes
• B. Failover detection
• C. Forged Transmits
• D. Promiscuous Mode

Answer: C

Explanation:
Reference http://www.vmwarearena.com/vsphere-distributed-switch-part-16/

NEW QUESTION 14
Which vSphere network object obstructs the physical network, provides access-level switching in the hypervisor and enables support tot overlay networking?

• A. Standard Switch
• B. Distributed Port Group
• C. Distributed Switch
• D. Logical Switch

Answer: C

Explanation:
Referencehttps://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/ nsx/vmw-nsx-network-virtualization-design-guide.pdf

NEW QUESTION 15
What is a requirement of NSX Data Security?

• A. NSX manager must be configured for Active Directory integration
• B. The Global Flow Collection Status must be set to Enabled
• C. Guest Introspection must be installed on the cluster
• D. AN IP Pool must be created.

Answer: C

Explanation:
Referencehttp://pubs.vmware.com/NSX-61/index.jsp?topic=%2Fcom.vmware.nsx.install.doc%2FGUID-62B22E0C-ABAC-42D8-93AA-BDFCD0A43FEA.html

NEW QUESTION 16
You have deployed an Edge Services Gateway with the following interface configuration:

Your customer has requested that you provide the ability to use Remote Desktop Protocol to log into a virtual machine that has a tenant IP address of 192.168.7.21 using the provider IP address 192.168.100.4. You have performed the following configuration however, you cannot RDP into the virtual machine.

What configuration change do you need to make to allow this connection?

• A. ChangeApplied Onto “Uplink”
• B. Change theProtocolto “any”.
• C. Change theTranslated Port/Rangeto “rdp”.
• D. Swap theOriginal IP/RangeandTranslated IP/RangeIP Addresses.

Answer: A

NEW QUESTION 17
Which two functions are provided by VMkernel ports? (Choose two)

• A. VXLAN Port Configuration
• B. vSphere vMotion
• C. ESXi Host Management
• D. 802.1Q VLAN tagging

Answer: BC

Explanation:
Referencehttp://www.pearsonitcertification.com/articles/article.aspx?p=2190191&seqNum= 10

NEW QUESTION 18
An NSX administrator determines that routing adjacency a NSX Edge device and a top-of- rack L3 switch CANNOT be established. Which two logs would be the most useful in resolving this issue? (choose two)

• A. NSX Manager Logs
• B. Edge Services Gateway logs
• C. Distributed Router Logs
• D. NSX Controller logs

Answer: D

NEW QUESTION 19
When deploying a standalone NSX Edge as a Layer 2 VPN client, which port needs to be configured on the client vSphere Distributed Switch?

• A. Trunk port
• B. Span port
• C. Sink port
• D. Mirror port

Answer: A

Explanation:
Referencehttps://pubs.vmware.com/NSX-62/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-C9E2B0E4-F1C1-44A7- B142-F814F801FA42.html

NEW QUESTION 20
Which three methods can be used by the NSX Distributed Firewall to discover IP addresses? (Choose three )

• A. DHCP Snooping
• B. IP Sets
• C. Spoofguard configured forTrust on First Use.
• D. VMware Tools installed on every guest virtual machine.
• E. ARP Spoofing

Answer: ACD

Explanation:
Referencehttps://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2125437

NEW QUESTION 21
Which two NSX rotes could be used to create security policies? (Choose two.)

• A. Enterprise Administrator
• B. Security Administrator
• C. NSX Administrator
• D. Auditor

Answer: AB

Explanation:
Referencehttps://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-79F9067D-2F29-45DA- 85C7-09EFC31549EA.html

NEW QUESTION 22
......