Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
Q1. Which statement describes proper packet processing of layer 3 traffic in an NSX for vSphere topology?
A. All packets are processed by the distributed router. No packets are processed by the Logical Router Control VM.
B. Only packets requiring routing to another VM on the same host are processed by the distributed router. Other packets are processed by the Logical Router Control VM.
C. Only packets requiring routing to another VM on a different host are processed by the distributed router. Other packets are processed by the Logical Router Control VM.
D. All packets requiring routing are processed by performing a lookup in the Logical Router Control VM and then forwarded.
Answer: A
Q2. An administrator wants to perform Activity Monitoring on a large group of virtual machines in an NSX environment. How would this task be accomplished with minimal administrative effort?
A. Create a PowerCLI script to enable virtual machine data collection on each virtual machine.
B. Create a security group in Service Composer and add the virtual machines to the security group.
C. Add the virtual machines to the pre-defined Activity Monitoring security group in Service Composer.
D. Add the virtual machines to a VM folder in vCenter Server and enable data collection.
Answer: C
Q3. Which two characteristics of the underlying physical network does VMware NSX require for robust IP transport? (Choose two.)
A. The physical network should provide scalable network I/O using Layer 2 Multipathing (L2MP) and Multichassis Link Aggregation (MLAG).
B. The physical network should provide scalable network I/O using Equal Cost Multipathing (ECMP).
C. QoS is not necessary since classification and marking will be done in the overlay.
D. QoS classification and marking is required to provide end-to-end flow control.
Answer: B, D
Q4. What is the earliest version of vCloud Network and Security (vCNS) that can be upgraded to VMware NSX for vSphere 6.0?
A. vCNS 5.0
B. vCNS 5.1
C. vCNS 5.5
D. vCNS 6.0
Answer: C
Q5. A network security administrator wants to monitor traffic on several VLANs configured on a vSphere Distributed Switch. The traffic will be sent to another distributed port. What type of port mirroring session must be configured to meet these requirements?
A. Select the session type Distributed Port Mirroring when configuring the Port Mirroring session.
B. Select the session type Remote Mirroring Source when configuring the Port Mirroring session.
C. Select the session type Remote Mirroring Destination when configuring the Port Mirroring session.
D. Select the session type Distributed Port Mirroring (legacy) when configuring the Port Mirroring session.
Answer: C
Q6. A company hosts an internal website on multiple virtual machines attached to a Logical Switch with VNI 7321. A Distributed Router serves as the virtual machines' default gateway. When a user resolves the URL for the website, the internal DNS server responds with the IP address of one of the virtual machine's IP addresses in a round robin fashion. This approach results in some virtual machines having a much higher number of user sessions than others. The company wants to deploy a NSX Edge Service Load Balancer to improve on this situation. Which distribution method can be configured on the NSX Edge Load Balancer to meet the company's needs?
A. LEAST_CONN
B. IP_HASH
C. LEAST_LOAD
D. URI
Answer: A
Q7. Where must you go to manually register a third-party service with VMware NSX?
A. vSphere Web Client -> Networking & Security -> Installation -> Service Deployments tab
B. vSphere Web Client -> Networking & Security -> Service Composer -> Service Deployments tab
C. vSphere Web Client -> Networking & Security -> Service Definitions
D. vSphere Web Client -> Networking & Security -> Distributed Firewall -> Service Definitions
Answer: C
Q8. -- Exhibit --
-- Exhibit --The Exhibit details the network connectivity from an NSX network and the supporting physical network. Locations C and D may be required to process packets with QoS tags. Based on the exhibit, which statement details proper processing of packets if they are QoS tagged?
A. Locations C and D will trust the QoS tags of the encapsulated frame when passing packets.
B. Location B should trust the QoS tags of the encapsulated frames that are switched.
C. Location A will mark the inner header of the encapsulated frame.
D. Location B should trust the QoS tags of the external header.
Answer: D
Q9. Where does the Distributed Logical Firewall enforce firewall rules?
A. At the Virtual Machine's virtual Network Interface Card (vNIC).
B. At the Logical Switch virtual port that the Virtual Machine connects to.
C. At the NSX Controller's firewall kernel module.
D. At the ESXi host vmnic used by the vSphere Distributed Switch.
Answer: A
Q10. What is the minimum number of vSphere Distributed Switches (vDS) that must be configured before deploying VMware NSX for vSphere?
A. 0
B. 1
C. 2
D. 4
Answer: B
Q11. What is the minimum MTU size recommended by VMware for the physical network when deploying NSX for vSphere?
A. 1550
B. 1600
C. 2148
D. 9000
Answer: B
Q12. Which two options are valid SpoofGuard operational modes? (Choose two.)
A. Allow Local Address as Valid Address in This Namespace
B. Allow and Approve DHCP Requests Regardless of Enabled Mode
C. Automatically Trust IP Assignments on Their First Use
D. Manually Inspect and Approve All IP Assignments Before Use
Answer: C, D
Q13. Where are the distributed NSX firewall decisions logged?
A. NSX Manager
B. vCenter Server
C. NSX Edge
D. ESXi host
Answer: D
Q14. In a data center using a leaf and spine architecture, which two statements define the connectivity between the leaf and spine tiers required to provide optimal network connectivity for NSX? (Choose two.)
A. Links are required between leaf and spine switches, and from each spine switch to other spine switches in the architecture.
B. Links are required between leaf and spine switches in the architecture to form a point-to- point connection between the two tiers.
C. High availalability and scalability should be achieved using NSX High Availability.
D. High availability and scalability should be achieved using Equal Cost Multipathing (ECMP).
Answer: B, D
Q15. Which port is used for NSX REST API Requests?
A. 80
B. 443
C. 5480
D. 8443
Answer: B
Q16. A new ESXi 5.5 host is deployed in a vSphere environment with VMware NSX for vSphere.
How can the host be prepared for VMware NSX for vSphere?
A. By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution.
B. By leveraging VMware Update Manager to install the new NSX for vSphere VIBs into each of the hosts.
C. By creating a new VMkernel port in the host from the Host and Clusters inventory view in vSphere Web Client.
D. By entering the ESXi 5.5 management IP address in the NSX Controllers so the VIBs can be installed.
Answer: A