How does the Traceflow tool identify issues in a network?

Injects synthetic traffic into the data plane and observes the results in the control plane.

Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

Injects ICMP traffic into the data plane and observes the results in the control plane.

Injects synthetic traffic into the data plane and observes the results in the control plane.

Which two statements are correct about East-West Malware Prevention? (Choose two.)

A SVM is deployed on every ESXi host.

NSX Application Platform must have Internet access.

A SVM is deployed on every ESXi host.

NSX Application Platform must have Internet access.

An agent must be installed on every ESXi host.

An agent must be installed on every NSX Edge node.

NSX Edge nodes must have Internet access.

What are two functions of the Service Engines in NSX Advanced Load Balancer? (Choose two.)

It collects real-time analytics from application traffic flows.

It performs application load-balancing operations.

It collects real-time analytics from application traffic flows.

It stores the configuration and policies related to load-balancing services.

It performs application load-balancing operations.

It deploys web servers to perform load-balancing operations.

It provides a user interface to perform configuration and management tasks.

Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

esxcli network vswitch dvs wmare list

Which two of the following will be used for Ingress traffic on the Edge node supporting a Single Tier topology? (Choose two.)

Downlink Interface for the Tier-0 DR

Inter-Tier interface on the Tier-0 gateway

Downlink Interface for the Tier-0 DR

Downlink Interface for the Tier-1 DR

The security administrator turns on logging for a firewall rule.Where is the log stored on an ESXi transport node?

/var/log/vmware/nsx/firewall.log

An architect receives a request to apply distributed firewall in a customer environment without making changes to the network and vSphere environment. The architect decides to use Distributed Firewall on VDS.Which two of the following requirements must be met in the environment? (Choose two.)

NSX version must be 3.2 and later

NSX version must be 3.0 and later

An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

vmkping ++netstack=geneve -d -s 1572 <destination IP address>

esxcli network diag ping -I vmk0O -H <destination IP address>

vmkping ++netstack=geneve -d -s 1572 <destination IP address>

esxcli network diag ping -H <destination IP address>

vmkping ++netstack=vxlan -d -s 1572 <destination IP address>

Which of the following settings must be configured in an NSX environment before enabling stateful active-active SNAT?

An Interface Group for the NSX Edge uplinks

Tier-1 gateway in active-standby mode

Tier-1 gateway in distributed only mode

An Interface Group for the NSX Edge uplinks

A Punting Traffic Group for the NSX Edge uplinks

As part of an organization's IT security compliance requirement, NSX Manager must be configured for 2FA (two-factor authentication).What should an NSX administrator have ready before the integration can be configured? O

VMware Identity Manager with an OAuth Client added

Active Directory LDAP integration with OAuth Client added

VMware Identity Manager with an OAuth Client added

Active Directory LDAP integration with ADFS

VMware Identity Manager with NSX added as a Web Application

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the Geneve protocol on the ESXi transport node? (Choose two.)

esxcli network ip interface ipv4 get

Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX to support role-based access control? (Choose two.)

Create an OAuth 2.0 client in VMware Identity Manager.

Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.

Enter the Identity Provider (IdP) metadata URL in NSX Manager.

Create an OAuth 2.0 client in VMware Identity Manager.

Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

VMware 2V0-41.23 Practice Test 3 - Free Online Exam Prep & Questions

In an NSX environment, an administrator is observing low throughput and congestion between the Tier-O Gateway and the upstream physical routers.

Which two actions could address low throughput and congestion? (Choose two.)

Become a Premium Member for full access

Unlock Premium Member

VMware 2V0-41.23 Practice Test 3

Question

VMware 2V0-41.23 Practice Tests

Practice Tests