Which feature is not supported by the vSphere 5.5 Distributed Switch?

Which feature is not supported by the vSphere 5.5 Distributed Switch? 

A. Multiple link aggregation groups
B. Differentiated Service Code Point (DSCP) QOS at layer3
C. Packet captures at the uplink, virtual switch port, or vNIC
D. IGMP snooping at layer 2







Answer: D

An administrator has received reports of intermittent connectivity between virtual machines on an NSX network. The network team has verified that all physical network devices have been set to 1600 MTU. What other configuration could cause this issue?

An administrator has received reports of intermittent connectivity between virtual machines on an NSX network. The network team has verified that all physical network devices have been set to 1600 MTU.
What other configuration could cause this issue? 

A. An MTU value of 1500 on the vDS Switch
B. An MTU value of 1500 on the distributed firewall
C. An MTU value of 1500 on the logical router
D. An MTU value of 1500 on the logical load balancer








Answer: A

Which port must be available for communication between the NSX Manager and vCenter Server, ESXi hosts, and NSX appliances?

Which port must be available for communication between the NSX Manager and vCenter Server, ESXi hosts, and NSX appliances? 

A. 22
B. 80
C. 443
D. 902







Answer: C

Which condition could prevent an ESXi host from receiving VXLAN Tunnel End Point (VTEP) tables?

Which condition could prevent an ESXi host from receiving VXLAN Tunnel End Point (VTEP) tables? 

A. The ESXi host is disconnected from vCenter Server
B. The netcpa agent is not running on the ESXi host
C. The vsfwd agent is not running on the ESXi host
D. The NSX controller on the ESXi host is down







Answer: B

An administrator configures the IPSec VPN service on an NSX Edge instance, but the negotiation fails. Examining the log file, the administrator notices the following message: INVALID_ID_INFORMATION Which misconfiguration caused the error?

An administrator configures the IPSec VPN service on an NSX Edge instance, but the negotiation fails. Examining the log file, the administrator notices the following message:
INVALID_ID_INFORMATION
Which misconfiguration caused the error? 

A. Pre-shared key (PSK) does not match
B. Diffie-Hellman (DH) Group does not match
C. Perfect Forward Secrecy (PFS) does not match
D. VPN tunnel address incorrect







Answer: A

An administrator can only log into the NSX manager using local credentials and not Active Directory credentials. Which option would cause this issue?

An administrator can only log into the NSX manager using local credentials and not Active Directory credentials. Which option would cause this issue? 

A. The NSX manager has not been connected to the vCenter Server
B. The NSX manager has not been connected to the lookup service
C. The NSX manager has not been connected to an SSO server
D. The NSX manager has not been connected to Active Directory






Answer: B

An administrator has deployed and powered on a new virtual machine configured to get its networking information via DHCP. The virtual machine is connected to an NSX network and connectivity has been verified. After reconfiguring the virtual machine with a static IP address, network connectivity is lost. Which statement explains what happened?

An administrator has deployed and powered on a new virtual machine configured to get its networking information via DHCP. The virtual machine is connected to an NSX network and connectivity has been verified. After reconfiguring the virtual machine with a static IP address, network connectivity is lost.
Which statement explains what happened? 

A. SpoofGuard is disabled
B. SpoofGuard is enabled and the operation mode is set to automatic
C. SpoofGuard is enabled and the operation mode is set to manual
D. SpoofGuard is enabled but not configured







Answer: B

Which configuration change on the physical infrastructure is required when deploying NSX?

Which configuration change on the physical infrastructure is required when deploying NSX? 

A. Increase the MTU size on the physical switches
B. Enable multicast when the control plane mode is set to unicast
C. Disable spanning tree protocol
D. Enable IGMP snooping when the control plane mode is set to multicast








Answer: A

Where is the net-vdr command used?

Where is the net-vdr command used? 

A. ESXi host
B. NSX Controller
C. NSX Edge
D. vSphere Management Assistant (vMA)








Answer: A

An administrator needs to verify which port the switch manager is using. Which command should be used?

An administrator needs to verify which port the switch manager is using. Which command should be used? 

A. show controller-cluster status
B. show controller-cluster core stats
C. show controller-cluster connections
D. show controller-cluster logical-switches







Answer: C

Which time frequency is not available when scheduling NSX backups?

Which time frequency is not available when scheduling NSX backups? 

A. Hourly
B. Daily
C. Weekly
D. Monthly







Answer: D

Which two are pieces of information required to perform an NSX backup?

Which two are pieces of information required to perform an NSX backup?  

A. Transfer protocol
B. Default Port
C. Number of backups retained
D. Filename prefix








Answer: A,D

Which two protocols are used to perform NSX backups?

Which two protocols are used to perform NSX backups?  

A. FTP
B. HTTP
C. SFTP
D. HTTPS








Answer: A,C

How many syslog servers can be configured for an NSX Edge device?

How many syslog servers can be configured for an NSX Edge device? 

A. 1
B. 2
C. 3
D. 4







Answer: B

Where does an administrator configure logging for the NSX Manager?

Where does an administrator configure logging for the NSX Manager? 

A. In the vSphere Web Client
B. In the NSX Manager GUI
C. In the NSX Manager command line interface (CLI)
D. In the vSphere Syslog Collector







Answer: B

Which NSX component can validate that security policies at your organization are being enforced correctly?

Which NSX component can validate that security policies at your organization are being enforced correctly? 

A. Activity Monitoring
B. Flow Monitoring
C. ERSPAN
D. Distributed firewalls







Answer: A

You have deployed a vShield Endpoint for antivirus and malware detection on an NSX network and need to monitor audit messages for the endpoint. Which log file are the audit messages recorded in?

You have deployed a vShield Endpoint for antivirus and malware detection on an NSX network and need to monitor audit messages for the endpoint.
Which log file are the audit messages recorded in? 

A. vmkwarning.log on the ESXi host
B. vmware.log on the virtual machine
C. cloudnet_cpp.log on the NSX Controller
D. messages.log on the NSX Manager








Answer: B

What is the maximum time span for viewing Flow Monitoring data?

What is the maximum time span for viewing Flow Monitoring data? 

A. 2 hours
B. 1 week
C. 2 weeks
D. 1 month








Answer: C

Which tool is used to detect rogue services?

Which tool is used to detect rogue services? 

A. NSX Logical Firewall
B. NSX Logical Router
C. Activity Monitoring
D. Flow Monitoring







Answer: D

Which two web browsers are supported for programming the NSX REST API?

Which two web browsers are supported for programming the NSX REST API?  

A. Internet Explorer
B. Chrome
C. Firefox
D. Safari








Answer: B,C