An NSX administrator wants to create a Tler-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?

Bidirectional Forwarding Detection (BFD)

Virtual Router Redundancy Protocol (VRRP)

Host Standby Router Protocol (HSRP)

Which two statements describe the characteristics of an Edge Cluster in NSX? (Choose two.)

Can have a maximum of 10 edge nodes

Can contain multiple types of edge nodes (VM or bare metal)

Can have a maximum of 10 edge nodes

Can have a maximum of 8 edge nodes

Can contain multiple types of edge nodes (VM or bare metal)

Must contain only one type of edge nodes (VM or bare metal)

Must have only active-active edge nodes

Which two tools are used for centralized logging in VMware NSX? (Choose two.)

VMware Aria Operations for Logs

VMware Aria Operations for Networks

An administrator wants to validate the BGP connection status between the Tier-O Gateway and the upstream physical router.What sequence of commands could be used to check this status on NSX Edge node?

get gateways vrf <number> get bgp neighbor

set vrf <ID> show logical-routers show <LR-D> bgp

show logical-routers get vrf show ip route bgp

get gateways vrf <number> get bgp neighbor

enable <LR-D> get vrf <ID> show bgp neighbor

Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

Set service manager logging-level debug

Set service manager log-level debug

Set service manager logging-level debug

Set service nsx-manager log-level debug

Set service nsx-manager logging-level debug

Which two choices are solutions offered by the VMware NSX portfolio? (Choose two.)

VMware NSX Advanced Load Balancer

VMware Tanzu Kubernetes Cluster

VMware NSX Advanced Load Balancer

When a stateful service is enabled for the first lime on a Tier-0 Gateway, what happens on the NSX Edge node'

SR is instantiated and automatically connected with DR.

DR Is instantiated and automatically connected with SR.

SR and DR Is instantiated but requites manual connection.

SR and DR doesn't need to be connected to provide any stateful services.

A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers.The naming convention will be:* WKS-WEB-SRV-XXX* WKY-APP-SRR-XXX* WKI-DB-SRR-XXXWhat is the optimal way to group them to enforce security policies from NSX?

Group all by means of tags membership.

Use Edge as a firewall between tiers.

Do a service insertion to accomplish the task.

Group all by means of tags membership.

Create an Ethernet based security policy.

Which three of the following describe the Border Gateway Routing Protocol (BGP) configuration on a Tier-0 Gateway? (Choose three.)

Can be used as an Exterior Gateway Protocol.

It supports a 4-byte autonomous system number.

Can be used as an Exterior Gateway Protocol.

It supports a 4-byte autonomous system number.

The network is divided into areas that are logical groups.

Which two statements are true about IDS Signatures? (Choose two.)

An IDS signature contains data used to identify known exploits and vulnerabilities.

An IDS signature contains a set of instructions that determine which traffic is analyzed.

Users can upload their own IDS signature definitions.

An IDS signature contains data used to identify known exploits and vulnerabilities.

An IDS signature contains data used to identify the creator of known exploits and vulnerabilities.

IDS signatures can be High Risk, Suspicious, Low Risk and Trustworthy.

An IDS signature contains a set of instructions that determine which traffic is analyzed.

Which NSX CLI command is used to change the authentication policy for local users?

Get auth-policy minimum-password-length

Which statement is true about an alarm in a Suppressed state?

An alarm can be suppressed for a specific duration in hours.

An alarm can be suppressed for a specific duration in seconds.

An alarm can be suppressed for a specific duration in days.

An alarm can be suppressed for a specific duration in minutes.

An alarm can be suppressed for a specific duration in hours.

How is the RouterLink port created between a Tier-1 Gateway and Tler-0 Gateway?

Automatically created when Tier-t Is connected with Tier-0 from NSX UI.

Manually create a Logical Switch and connect to bother Tler-1 and Tier-0 Gateways.

Automatically created when Tler-1 is created.

Manually create a Segment and connect to both Titrr-1 and Tier-0 Gateways.

Automatically created when Tier-t Is connected with Tier-0 from NSX UI.

Which two statements are true for IPSec VPN? (Choose two.)

IPSec VPN services can be configured at Tler-0 and Tler-1 gateways.

IPSec VPNs use the DPDK accelerated performance library.

VPNs can be configured on the command line Interface on the NSX manager.

IPSec VPN services can be configured at Tler-0 and Tler-1 gateways.

IPSec VPNs use the DPDK accelerated performance library.

Dynamic routing Is supported for any IPSec mode In NSX.

What should an NSX administrator check to verify that VMware Identity Manager Integration Is successful?

From the NSX UI the status of the VMware Identity Manager Integration must be 'Enabled'.

From VMware Identity Manager the status of the remote access application must be green.

From the NSX UI the status of the VMware Identity Manager Integration must be 'Enabled'.

From the NSX CLI the status of the VMware Identity Manager Integration must be 'Configured'.

From the NSX UI the URI in the address bar must have 'locaNfatse' part of it.

What is the VMware recommended way to deploy a virtual NSX Edge Node?

Through the OVF command line tool

Through automated or Interactive mode using an ISO

Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?

The option to set time-based rule is a clock Icon in the policy.

The option to set time-based rule is a clock Icon in the rule.

The option to set time based rule is a field in the rule Itself.

There Is no option in the NSX UI. It must be done via command line interface.

The option to set time-based rule is a clock Icon in the policy.

Which three data collection sources are used by NSX Network Detection and Response to create correlations/Intrusion campaigns? (Choose three.)

Files and anti-malware (lie events from the NSX Edge nodes and the Security Analyzer

IDS/IPS events from the ESXi hosts and NSX Edge nodes

Suspicious Traffic Detection events from NSX Intelligence

Files and anti-malware (lie events from the NSX Edge nodes and the Security Analyzer

East-West anti-malware events from the ESXi hosts

Distributed Firewall flow data from the ESXi hosts

IDS/IPS events from the ESXi hosts and NSX Edge nodes

Suspicious Traffic Detection events from NSX Intelligence

Which VMware GUI tool is used to identify problems in a physical network?

VMware Aria Operations Networks

An NSX administrator has deployed a single NSX Manager node and will be adding two additional nodes to form a 3-node NSX Management Cluster for a production environment. The administrator will deploy these two additional nodes and Cluster VIP using the NSX UI.What two are the prerequisites for this configuration? (Choose two.)

All nodes must be in the same subnet.

A compute manager must be configured.

All nodes must be in separate subnets.

The cluster configuration must be completed using API.

NSX Manager must reside on a Windows Server.

All nodes must be in the same subnet.

A compute manager must be configured.

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Quarantine workloads based on vulnerabilities.

Identify security vulnerabilities in the workloads.

Use agentless antivirus with Guest Introspection.

Quarantine workloads based on vulnerabilities.

Identify risk and reputation of accessed websites.

Gain Insight about micro-segmentation traffic flows.

Identify security vulnerabilities in the workloads.

Which two of the following features are supported for the Standard NSX Application Platform Deployment? (Choose two.)

NSX Network Detection and Response

NSX Intrusion Detection and Prevention

NSX Network Detection and Response

Which troubleshooting step will resolve an error with code 1001 during the configuration of a time-based firewall rule?

Restarting the NTPservice on the ESXi host.

Reinstalling the NSX VIBs on the ESXi host.

Restarting the NTPservice on the ESXi host.

Changing the lime zone on the ESXi host.

Reconfiguring the ESXI host with a local NTP server.

A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway. An NSX administrator used the get gateways command to retrieve this Information: Which two commands must be executed to check BGP neighbor status? (Choose two.)

sa-nexedge-01(tier0_sr> get bgp neighbor

sa-nexedge-01(tier1_sr> get bgp neighbor

sa-nexedge-01(tier0_sr> get bgp neighbor

sa-nexedge-01(tier1_dr)> get bgp neighbor

VMware 2V0-41.23 Practice Test 1 - Free Online Exam Prep & Questions

Which two logical router components span across all transport nodes? (Choose two.)

A.

SFRVICE_ROUTER_TJER0

B.

TIERO_DISTRI BUTE D_ ROUTER

C.

DISTRIBUTED_R0UTER_TIER1

D.

DISTRIBUTED_ROUTER_TIER0

E.

SERVICE_ROUTER_TIERl

VMware 2V0-41.23 Practice Test 1

Question

VMware 2V0-41.23 Practice Tests

Practice Tests