How does N5X Distributed IDS/IPS keep up to date with signatures?

NSX Distributed IDS/IPS signatures are retrieved from updates.vmware.com.

NSX Edge uses manually uploaded signatures by the security administrator.

NSX-T Data Center is using a cloud based database to download the IDS/IPS signatures.

NSX Manager has a local IDS/IPS signatures database that does not need to be updated.

NSX Distributed IDS/IPS signatures are retrieved from updates.vmware.com.

Which two statements are true about NSX Intelligence? (Choose two.)

NSX Intelligence assists to build service insertion with Partner SVM.

NSX Intelligence supports planning of NSX-T Edge Firewall rules and policy.

NSX Intelligence assists to build service insertion with Partner SVM.

NSX Intelligence supports planning of distributed firewall rules and policy.

NSX Intelligence can help to visualize network physical infrastructure.

NSX Intelligence can be used in conjunction with vRealize Network Insight.

NSX Intelligence supports planning of NSX-T Edge Firewall rules and policy.

An administrator wants to use Distributed Intrusion Detection. How is this implemented in an NSX-T Data Center?

As a distributed solution across multiple NSX Edge nodes.

As a distributed solution across multiple ESXi hosts.

As a distributed solution across multiple KVM hosts.

As a distributed solution across multiple NSX Managers.

As a distributed solution across multiple NSX Edge nodes.

Which are the four use cases for NSX Tags?

Accountability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability)

Accountability, Third-party sharing/context sharing. Security, and Logging

Manageability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability)

Accountability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability)

Manageability, Third-party sharing/context sharing. Security, and Logging

Refer to the exhibit. An administrator configured a firewall rule on their Edge Gateway to allow access to web servers.What is missing in the Gateway Firewall policy to have the firewall rule applied?

Firewall rule needs to be moved to Default category.

Firewall service needs to be enabled on gateway.

Firewall rule needs to be moved to Default category.

Firewall rule needs to be enabled.

Firewall rule needs to be published

An organization is using VMware Identity Manager (vIDM) to authenticate NSX-T Data Center users Which two selections are prerequisites before configuring the service? (Choose two.)

Certificate Thumbprint from vIDM

Information Security Management (ISM) describes a set of controls that organizations employ to protect which properties?

confidentiality, integrity, and availability

confidentiality, interoperability, and availability

configuration. Integrity, and availability

confidentiality. Integrity, and accessibility

An NSX administrator is trying to find the dvfilter name of the sa-web-01 virtual machine to capture the sa-web-01 VM traffic. What could be a reason the sa-web-01 VM dvfilter name is missing from the command output?

sa-web-01 is powered Off on ESXi host.

sa-web-01 VM has the no firewall rules configured.

sa-web-01 is powered Off on ESXi host.

ESXi host has the firewall turned off.

What is an unprotected traffic flow in NSX Intelligence?

A traffic flow that matches the default distributed firewall rule.

A traffic flow that matches an allow rule more granular than the default.

A traffic flow that matches a drop rule more granular than the default.

A traffic flow that matches a reject rule more granular than the default.

Refer to the exhibit. A security administrator is configuring a time window to create a time-based distributed firewall rule.While configuring the time window, an error displayed as shown in the exhibit. Which action will resolve the problem?

Configure the ESXl host to use a remote NTP server.

Change the time window interval.

Restart me NTP service on the ESXl host.

Configure the ESXl host to use a remote NTP server.

Change the time windows frequency

Which 3 CU commands ant required to configure remote logging on an ESXI host? (Choose three.)

esxcli systex syslog config set "loghost-udp://<log server IP>:<port>

esxcli network firewall ruleset set -r syslog -e true

esxcl; systex syslcg -sx firewall enable

esxcli network services restart --firewall

esxcli systex syslog config set "loghost-udp://<log server IP>:<port>

esxcli network firewall ruleset set -r syslog -e true

A customer has deployed NSX Intelligence appliance with an incorrect IP address.What should the customer do to correct the IP address?

In the CU, update intelligence manager node host-ip-addr.

Add a new network interface to the appliance and replace the old one.

Shutdown the appliance and change the vApp IP properties.

In the CU, update intelligence manager node host-ip-addr.

Redeploy the appliance with the correct parameters.

A security administrator recently enabled Guest Introspection on NSX-T Data Center.Which would be a reason none of the Microsoft Windows based VMs are reporting any information?

NSX Manager needs to be reconfigured.

VMware Tools need to be reconfigured.

NSX Manager needs to be reconfigured.

What is one of the main use-cases of NSX-T Endpoint Protection?

Use Network Security Services of a third party vendor

A security administrator is required to protect East-West virtual machine traffic with the NSX Distributed Firewall. What must be completed with the virtual machine's vNIC before applying the rules?

It is connected to an NSX managed segment.

It is connected to the underlay.

It must be connected to a vSphere Standard Switch.

It is connected to an NSX managed segment.

It is connected to a transport zone.

When configuring members of a Security Group, which membership criteria art permitted?

Virtual Machine, Physical Machine, Cloud Native Service Instance, and IP Set

Segment Port, Segment, Virtual Machine, and IP Set

Virtual Interface, Segment, Cloud Native Service Instance, and IP Set.

Virtual Interface, Segment, Physical Machine, and IP Set

Which three are required to configure a firewall rule on a getaway to allow traffic from the internal to web servers? (Choose three.)

Enable Firewall Service for gateway.

Create a firewall policy in Local Gateway category.

Add a firewall rule in Local Gateway category.

Create a URL analysis profile for web hosting category.

Create a firewall rule in System category.

Enable Firewall Service for gateway.

Create a firewall policy in Local Gateway category.

Add a firewall rule in Local Gateway category.

Disable the firewall rule in Default category.

VMware 5V0-41.21 Practice Test 2 - Free Online Exam Questions 41-70

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

VMware 5V0-41.21 Practice Test 2

Question

VMware 5V0-41.21 Practice Tests

Practice Tests