Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

Configure a distributed firewall policy.

An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.Which failover detection protocol must be used to meet this requirement?

Bidirectional Forwarding Detection (BFD)

Host Standby Router Protocol (HSRP)

Bidirectional Forwarding Detection (BFD)

Virtual Router Redundancy Protocol (VRRP)

A user is assigned these two roles in NSX Manager:LB AdminNetwork EngineerWhat privileges does this user have in the system?

full access permissions on all networking services and full access permissions on load balancing features

read permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and read permissions on load balancing features

read permissions on all networking services and read permissions on load balancing features

Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

virsh dumpxml <VM Name> | grep interfaceid

virsh show <VM Name> | grep interfaceid

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Identify security vulnerabilities in the workloads.

Quarantine workloads based on vulnerabilities.

Identify security vulnerabilities in the workloads.

Use agentless antivirus with Guest Introspection.

Quarantine workloads based on vulnerabilities.

Identify risk and reputation of accessed websites.

Gain insight about micro-segmentation traffic flows.

Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

get support-bundle file vcpnv.tgz

set support-bundle file vcpnv.tgz

esxcli system syslog config logger set --id=nsxmanager

Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

set service manager logging-level debug

set service nsx-manager logging-level debug

set service nsx-manager log-level debug

set service manager log-level debug

set service manager logging-level debug

The NSX Control Plane is responsible for which two functions? (Choose two.)

push stateless configurations to forwarding engines

receive and validate configuration from NSX Policy

push stateless configurations to forwarding engines

maintain packet-level statistics

An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

vmkping ++netstack=vxlan-d -s 1572 <destination IP address>

esxcli network diag ping -H <destination IP address>

vmkping ++netstack=geneve -d -s 1572 <destination IP address>

vmkping ++netstack=vxlan-d -s 1572 <destination IP address>

esxcli network diag ping -I vmk0 -H <destination IP address>

How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

Automatically created when Tier-1 is connected with Tier-0 from NSX UI.

Automatically created when Tier-1 is created.

Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.

Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.

Automatically created when Tier-1 is connected with Tier-0 from NSX UI.

Which two statements are true about the implementation of multicast in NSX-T Data Center?(Choose two.)

Multicast routing is implemented with PIM Sparse-Mode.

IGMP Snooping is used to populate multicast forwarding tables.

Multicast routing is implemented with PIM Sparse-Mode.

IGMP Snooping is used to populate multicast forwarding tables.

Tier-0 gateways can be the Rendezvous Point.

Multicast is supported in ESXi and KVM transport nodes.

An Edge can be the Rendezvous Point.

An NSX administrator has deployed an NSX Edge on a bare-metal server.Which command registers the NSX Edge with the NSX Manager?

join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint <nsx-manager-thumbprint>

join management-cluster <nsx-cluster-IP> username admin password <adminpassword> thumbprint <nsx-manager-thumbprint>

join cluster <nsx-cluster-IP> username root password <root-password> thumbprint <nsx-manager—thumbprint>

join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint <nsx-manager-thumbprint>

join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint <nsx-manager-thumbprint>

How does the Traceflow tool identify issues in a network?

Injects synthetic traffic into the data plane and observes the results in the control plane.

Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

Injects synthetic traffic into the data plane and observes the results in the control plane.

Injects ICMP traffic into the data plane and observes the results in the control plane.

Which statement is true about an alarm in a Suppressed state?

An alarm can be suppressed for a specific duration in hours.

An alarm can be suppressed for a specific duration in days.

An alarm can be suppressed for a specific duration in minutes.

An alarm can be suppressed for a specific duration in seconds.

An alarm can be suppressed for a specific duration in hours.

A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway. A NSX-T Data Center administrator used the get logical-routers command to retrieve this information: Which two commands must be executed to check BGP neighbor status? (Choose two.)

sa-nsxedge-01(tier0_sr)> get bgp neighbor

sa-nsxedge-01(tier1_sr)> get bgp neighbor

sa-nsxedge-01(tier0_sr)> get bgp neighbor

sa-nsxedge-01(tier0_dr)> get bgp neighbor

Which step must be performed before deploying an additional NSX Manager from the NSX-T UI?

Register vCenter Server as a Compute Manager.

Prepare the ESXi hosts as Transport Nodes.

Configure the Virtual IP of the cluster.

Register vCenter Server as a Compute Manager.

Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

get host-switch <Host-Switch-Name> tunnels

get transport-node tunnel status

get host-switch <Host-Switch-Name> tunnel status

get transport-node tunnel state

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node? (Choose two.)

esxcli network ip interface ipv4 get

VMware 2V0-41.20 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time.

Which CLI command disables the nsxcli time out value on NSX Manager?

set cli-timeout 0

set cli-timeout enabled

set cli-timeout disabled

set cli-timeout 1

Comment (0)

VMware 2V0-41.20 Practice Test 1

Question

VMware 2V0-41.20 Practice Tests

Practice Tests