Which three are required by URL Analysis? (Choose three.)

OFW rule allowing traffic OUT to Internet

Layer 7 DNS firewall rule on NSX Edge cluster

NSX Enterprise or higher license key

OFW rule allowing traffic OUT to Internet

Medium-sized edge node (or higher), or a physical form factor edge

Layer 7 DNS firewall rule on NSX Edge cluster

Which two are requirements for URL Analysis? (Choose two.)

A layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic,

The NSX Edge nodes require access to the Internet to download category and reputation definitions.

The ESXi hosts require access to the Internet to download category and reputation definitions.

A layer 7 gateway firewall rule must be configured on the tier-0 gateway uplink to capture DNS traffic.

A layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic,

The NSX Edge nodes require access to the Internet to download category and reputation definitions.

The NSX Manager requires access to the Internet to download category and reputation definitions.

In a brownfield environment with NSX-T Data Center deployed and configured, a customer is interested in Endpoint Protection integrations. What recommendation should be provided to the customer when it comes to their existing virtual machines?

A custom install of VMware tools is required to select the drivers.

Virtual machine must be protected by vSphere HA.

Virtual machine hardware should be version 10 or higher.

A minimum installation of VMware tools is required.

A custom install of VMware tools is required to select the drivers.

Which two are true of the NSX Gateway Firewall? (Choose two.)

Firewall rules in Pre Rule category are applied to all gateways.

Security Groups can be used in Applied-To column.

Firewall rules in System category cannot be edited.

Firewall rules in Pre Rule category are applied to all gateways.

NAT service can be configured in NSX Gateway Firewall policy.

Security Groups can be used in Applied-To column.

Applied-To can be configured at Firewall Policy level.

Which are two use-cases for the NSX Distributed Firewall' (Choose two.)

Lateral Movement of Attacks prevention

A Security Administrator needs to update their NSX Distributed IDS/IPS policy to detect new attacks with critical CVSS scoring that leads to credential theft from targeted systems.Which actions should you take?

• Update Distributed IDS/IPS signature database• Edit your profile from Security > Distributed IDS > Profiles• Select Critical severity, filter on attack type and select Successful Credential Theft Detected• Check the profile is applied in Distributed IDS rules

• Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules• Filter on attack type and select Successful Credential Theft Detected• Update Mode to detect and prevent• Click on gear icon and change direction to OUT

• Create a new profile from Security > Distributed IDS > Profiles• Select Critical severity, filter on attack type and select Successful Credential Theft Detected• Check the profile is applied In Distributed IDS rules• Monitor Distributed IDS alerts to validate changes are applied

• Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules• Filter on attack type and select Successful Credential Theft Detected• Update Mode to detect and prevent• Click on gear icon and change direction to IN-OUT

An NSX administrator has been tasked with configuring a remote logging server (192.168.110.60) to send FW connections and packets logs to a remote logging server. The administrator is using this command syntax found in the NSX-T 3.1 documentation: Which of the following commands does the administrator use to complete the configuration task?

set logging-server 192.168.110.60 proto udp level info facility syslog message Id FIREWALLPKTLOG

set logging-server 192.168.110.60 proto udp level info facility syslog message Id FIREWALLCONNECTION

set logging-server 192.168.110.60 proto udp level info facility syslog message!- monitor. Firewall

set logging-server 192.168.110.60 proto udp level info facility syslog message Id FIREWALLPKTLOG

set logging-server 192.168.110.60 proto udp level info facility syslog message Id system, fabric

A security administrator has configured NSX Intelligence for discovery. They would like to get recommendations based on the changes in the scope of the input entities every hour.What needs to be configured to achieve the requirement?

Adjust the time range to 1 hour.

Toggle the monitoring option on.

Adjust the time range to 1 hour.

Which of the following describes the main concept of Zero-Trust Networks for network connected devices?

Network connected devices should only be trusted if their identity and integrity can be verified continually.

Network connected devices should only be trusted if they are issued by the organization.

Network connected devices should only be trusted if the user can be successfully authenticated.

Network connected devices should only be trusted if their identity and integrity can be verified continually.

Network connected devices should only be trusted if they are within the organizational boundary.

A company's CTO has requested that all logging should be enabled for all NSX-T Data Center Distributed Firewall rules. What should be considered prior to executing this request?

Large amounts of log information can fill up the vSphere Server database.

Logging can only be enabled for sections and not for single rules.

Once logging is enabled for all rules it cannot be disabled afterwards.

Large amounts of log information will likely affect performance.

What type of IDS/IPS system deployment allows an administrator to block a known attack?

A system deployed inline with ALERT and DROP action.

A system deployed in SPAN port mode.

A system deployed inline with ALERT and DROP action.

A system deployed inline with ALERT action.

A system deployed in TERM mode.

A security administrator is verifying the health status of an NSX Service Instance.Which two parameters must be functioning for the health status to show as Up? (Choose two.)

VMs must be available on the host.

VMs must have at least one vNIC.

VMs must not have existing endpoint protection rules.

VMs must have virtual hardware version 9 or higher.

VMs must be available on the host.

To which object can time based rules be applied?

DFW or Gateway Firewall, but not both at the same time

An organization wants to add security controls for contractor virtual desktops. Which statement Is true when configuring an NSX Identity firewall rule?

User Identity can only be used in the Source section of the firewall rule.

User Identity can be used in the both the Source and the Destination sections of the firewall rule.

User Identity can only be used in the Source section of the firewall rule.

User Identity cannot be used in Source or Destination sections of the firewall rule.

User Identity can only be used in the Destination Section of the firewall rule.

Which two statements are true about IDS/IPS signatures? (Choose two.)

An IDS signature contains data used to identify known exploits and vulnerabilities.

An IDS signature contains a set of instructions that determine which traffic is analyzed.

Users can upload their own IDS signature definitions from the NSX UI.

IDS Signatures can be High Risk, Suspicious, Low Risk and Trustworthy.

Users can create their own IDS signature definitions from the NSX UI.

An IDS signature contains data used to identify known exploits and vulnerabilities.

An IDS signature contains a set of instructions that determine which traffic is analyzed.

Which three criteria help to determine the severity for a Distributed IDS/IPS? (Choose three.)

The type-rating associated with the classification type.

The Common Vulnerability Scoring System score specified in the signature.

The severity specified in the signature itself

The type-rating associated with the classification type.

The Common Vulnerability Scoring System score specified in the signature.

The load balancer deployment type.

The Distributed Intrusion Detection and Intrusion Prevention rules.

The severity specified in the signature itself

Where is a partner security virtual machine (Partner SVM) deployed to process the redirected North- South traffic in an efficient manner?

Deployed close to the NSX Edge nodes.

Deployed close to the Partner Manager.

Deployed close to the NSX Edge nodes.

Deployed close to the VMware vCenter Server.

Deployed close to the compute nodes.

To which network operations does a user with the Security Engineer role have full access permission?

Networking IP Address Pools, Networking NAT, Networking DHCP

Networking Forwarding Policies, Networking NAT, Networking VPN

Networking Load Balancing, Networking DNS, Networking Forwarding Policies

Networking DHCP, Networking NAT, Networking Segments

An administrator has enabled the "logging" option on a specific firewall rule. The administrator does not see messages on the Logging Server related to this firewall rule. What could be causing the issue?

The logging on the firewall policy needs to be enabled.

Firewall Rule Logging is only supported in Gateway Firewalls.

NSX Manager must have Firewall Logging enabled.

The logging server on the transport nodes is not configured.

VMware 5V0-41.21 Practice Test 1 - Free Online Exam Questions 1-40

Question 1 / 40

Which esxcli command lists the firewall configuration on ESXi hosts?

esxcli network firewall ruleset list

vsipioct1 getrules -filter <filter-name>

esxcli network firewall rules

vsipioct1 getrules -f <filter-name>

Comment (0)

VMware 5V0-41.21 Practice Test 1

Question

VMware 5V0-41.21 Practice Tests

Practice Tests