Archive for November 2016

An administrator has received reports of intermittent connectivity between virtual machines on an NSX network. The network team has verified that all physical network devices have been set to 1600 MTU. What other configuration could cause this issue?

Add Comment

An administrator has received reports of intermittent connectivity between virtual machines on an NSX network. The network team has verified that all physical network devices have been set to 1600 MTU.
What other configuration could cause this issue? 





A. An MTU value of 1500 on the vDS Switch
B. An MTU value of 1500 on the distributed firewall
C. An MTU value of 1500 on the logical router
D. An MTU value of 1500 on the logical load balancer








Answer: A

An administrator configures the IPSec VPN service on an NSX Edge instance, but the negotiation fails. Examining the log file, the administrator notices the following message: INVALID_ID_INFORMATION Which misconfiguration caused the error?

Add Comment

An administrator configures the IPSec VPN service on an NSX Edge instance, but the negotiation fails. Examining the log file, the administrator notices the following message:
INVALID_ID_INFORMATION
Which misconfiguration caused the error? 







A. Pre-shared key (PSK) does not match
B. Diffie-Hellman (DH) Group does not match
C. Perfect Forward Secrecy (PFS) does not match
D. VPN tunnel address incorrect







Answer: A

An administrator can only log into the NSX manager using local credentials and not Active Directory credentials. Which option would cause this issue?

Add Comment

An administrator can only log into the NSX manager using local credentials and not Active Directory credentials. Which option would cause this issue? 





A. The NSX manager has not been connected to the vCenter Server
B. The NSX manager has not been connected to the lookup service
C. The NSX manager has not been connected to an SSO server
D. The NSX manager has not been connected to Active Directory






Answer: B

An administrator has deployed and powered on a new virtual machine configured to get its networking information via DHCP. The virtual machine is connected to an NSX network and connectivity has been verified. After reconfiguring the virtual machine with a static IP address, network connectivity is lost. Which statement explains what happened?

Add Comment

An administrator has deployed and powered on a new virtual machine configured to get its networking information via DHCP. The virtual machine is connected to an NSX network and connectivity has been verified. After reconfiguring the virtual machine with a static IP address, network connectivity is lost.
Which statement explains what happened? 







A. SpoofGuard is disabled
B. SpoofGuard is enabled and the operation mode is set to automatic
C. SpoofGuard is enabled and the operation mode is set to manual
D. SpoofGuard is enabled but not configured







Answer: B

You have deployed a vShield Endpoint for antivirus and malware detection on an NSX network and need to monitor audit messages for the endpoint. Which log file are the audit messages recorded in?

Add Comment

You have deployed a vShield Endpoint for antivirus and malware detection on an NSX network and need to monitor audit messages for the endpoint.
Which log file are the audit messages recorded in? 







A. vmkwarning.log on the ESXi host
B. vmware.log on the virtual machine
C. cloudnet_cpp.log on the NSX Controller
D. messages.log on the NSX Manager








Answer: B

A user needs to be given the ability to make configuration changes on a specific NSX Edge device. What role and scope could be used to meet this requirement?

Add Comment

A user needs to be given the ability to make configuration changes on a specific NSX Edge device. What role and scope could be used to meet this requirement? 







A. NSX Administrator role and Limit Access scope
B. Security Administrator role and Limit Access scope
C. NSX Administrator role and No restriction scope
D. Security Administrator role and No restriction scope







Answer: B

A Distributed Router and an NSX Edge Gateway are connected to a Logical Switch with a VNI of 7321. Both also have connections to the external network.The Distributed Router serves as the default gateway for the virtual machines in VNI 7321. A vSphere administrator does not want to advertise the subnet in VNI 7321 to the rest of the network, but still wants to allow virtual machines in the segment to access external resources. What two steps should the vSphere administrator take to achieve this?

Add Comment

A Distributed Router and an NSX Edge Gateway are connected to a Logical Switch with a VNI of 7321. Both also have connections to the external network.The Distributed Router serves as the default gateway for the virtual machines in VNI 7321. A vSphere administrator does not want to advertise the subnet in VNI 7321 to the rest of the network, but still wants to allow virtual machines in the segment to access external resources. What two steps should the vSphere administrator take to achieve this?  






A. Make the NSX Edge Gateway the default gateway for VNI 7321.
B. Configure a SNAT rule for VNI 7321 on the NSX Edge Gateway.
C. Configure a static route to the NSX Edge Gateway in the upstream router.
D. Create an inbound Access Control List on the Distributed Router.







Answer: A,B

An organization requires a high performance firewall as part of an NSX deployment. What is the minimum NSX Edge Services Gateway configuration that would be suitable for the organization's requirements?

Add Comment

An organization requires a high performance firewall as part of an NSX deployment. What is the minimum NSX Edge Services Gateway configuration that would be suitable for the organization's requirements? 






A. X-Large
B. Quad-Large
C. Large
D. Compact








Answer: B

A vSphere administrator deploys the NSX Edge Load Balancer in Inline mode. Which is not a requirement for the Load Balancer to operate correctly?

Add Comment

A vSphere administrator deploys the NSX Edge Load Balancer in Inline mode. Which is not a requirement for the Load Balancer to operate correctly? 







A. Perform Source NAT on the traffic from the clients.
B. Connect the Load Balancer directly to the same subnet as the VMs that are part of the Server Pool.
C. Perform Destination NAT on the traffic from the clients.
D. Point the virtual machines in the Server Pool to the Load Balancer as their default gateway.








Answer: A

A company hosts an internal website on multiple virtual machines on a Logical Switch with VNI 7321. A Distributed Router serves as the virtual machines' default gateway. When an user resolves the URL for the website, the internal DNS server responds with the IP address of one of the virtual machine's IP addresses in a round robin fashion. The company wants to deploy an NSX Edge Service Load Balancer and maintain the use of the Distributed Router for the virtual machines' default gateway. Which mode can the NSX Edge Load Balancer can be deployed to meet the Company's needs?

Add Comment

A company hosts an internal website on multiple virtual machines on a Logical Switch with VNI 7321. A Distributed Router serves as the virtual machines' default gateway.
When an user resolves the URL for the website, the internal DNS server responds with the IP address of one of the virtual machine's IP addresses in a round robin fashion. The company wants to deploy an NSX Edge Service Load Balancer and maintain the use of the Distributed Router for the virtual machines' default gateway.
Which mode can the NSX Edge Load Balancer can be deployed to meet the Company's needs? 








A. One-Arm
B. Transparent
C. Local
D. Global







Answer: A

What is a VXLAN LIF?

Add Comment

What is a VXLAN LIF? 








A. The Distributed Router interface that connects to a Logical Switch.
B. The Distributed Router interface that connects to the distributed portgroup.
C. The Logical Switch interface that connects to the Distributed Router.
D. The distributed portgroup that the Distributed Router connects to.








Answer: A

Where is the layer 2 bridge instance deployed when configuring a bridge connection between a logical switch and a VLAN?

Add Comment

Where is the layer 2 bridge instance deployed when configuring a bridge connection between a logical switch and a VLAN? 






A. On the ESXi host running the logical router
B. On the ESXi host running the logical switch
C. On both ESXi hosts that make up the layer 2 bridge
D. On each virtual machine that will utilize the layer 2 bridge







Answer: A

After consulting with the network team, it is decided that Transport Zones will be configured with Unicast Replication Mode for a new NSX for vSphere deployment. Which statement is true regarding the function of the VXLAN Tunnel End Points (VTEPs)?

Add Comment

After consulting with the network team, it is decided that Transport Zones will be configured with Unicast Replication Mode for a new NSX for vSphere deployment.
Which statement is true regarding the function of the VXLAN Tunnel End Points (VTEPs)? 





A. The VTEPs will send unicast frames to the NSX Controllers when the VTEPs do not have a MAC address in the MAC table.
B. The VTEPs will switch to Multicast Replication Mode for those VTEPs to which multicast path discovery is successful.
C. The VTEPs will send multicast frames to all other VTEPs in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.
D. The VTEPs will send unicast frames to all local VTEPs and remote proxies in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.







Answer: D

Which scenario can be configured to use 3DES encryption for virtual machine traffic?

Add Comment

Which scenario can be configured to use 3DES encryption for virtual machine traffic? 







A. Two virtual machines communicating across a point-to-point IPSec VPN connection.
B. Two virtual machines running on different ESXi hosts communicating across the same logical switch.
C. Two virtual machines communicating across a layer 2 bridge.
D. Two virtual machines configured to use NSX Data Security.








Answer: A

A NSX administrator attempts to create a Logical Switch, but assigns it a name of an existing Logical Switch. What will be the result?

Add Comment

A NSX administrator attempts to create a Logical Switch, but assigns it a name of an existing Logical Switch. What will be the result? 







A. The Logical Switch is created with the name assigned by the NSX Administrator.
B. NSX Manager will append a two digit number to the Logical Switch name, starting with 01.
C. The Logical Switch can't be attached to a Redistributed Router until it's name is changed.
D. An error message is displayeD.Unable to allocate an available resource.








Answer: A

What is a prerequisite to deploying a Logical Switch?

Add Comment

What is a prerequisite to deploying a Logical Switch? 






A. Configure the VXLAN Tunnel Endpoint's (VTEP) VLAN on the trunk in the physical switches.
B. Add the ESXi hosts to the same vSphere Distributed Switch.
C. Prepare and configure VTEPs on the ESXi hosts using the vSphere Web Client.
D. Create a port group on the vSphere Distributed Switch.








Answer: A

Which option is VMware's best practice for the deployment of NSX Manager and NSX Controller components?

Add Comment

Which option is VMware's best practice for the deployment of NSX Manager and NSX Controller components? 






A. Deploy the NSX Manager and NSX Controller components to a management cluster.
B. Deploy the NSX Manager component to a management cluster and the NSX Controller components to a resource cluster.
C. Deploy the NSX Controller components to a management cluster and the NSX Manager component to a resource cluster.
D. Deploy the NSX Manager and NSX Controller components to a resource cluster.








Answer: A
Subscribe to: Posts (Atom)