2V0-41.19 시험 - VMware실제시험문제와 답 - 105문항

Question No : 1

Which visual tool within the NSX User Interface should an administrator use to monitor hop-by-hop connectivity between two virtual machines or logical ports?

A.IPFIX
B.Port Connection
C.Port Mirroring
D.Port Status

정답:
Explanation:
Port connection tool C this tool is a visualization of connectivity between two container logical ports. As the topology is built, realized state data like machine information, logical port status, and tunnel health status, gets represented as hop by hop connectivity between various points in the path.
Reference: https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/nsx/vmwarecontainers-and-container-networking-whitepaper.pdf

Question No : 2

The security administrator turns on logging for a firewall rule.
Where is the log stored on ESXi and KVM transport nodes?

A./var/log/vmware/nsx/fIrewall.log
B./var/log/fw.log
C./var/log/messages.log
D./var/log/dfwpktlogs.log

정답:

Question No : 3

The NSX Control Plane is responsible for which two functions? (Choose two.)

A.push stateless configurations to forwarding engines
B.propagate topology information
C.receive and validate configuration from NSX Policy
D.host API services
E.maintain packet-level statistics

정답:

Question No : 4

A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to allow simple 3-tier app forms through web, app, and database.
The naming convention will be:
• WKS-WEB-SRV-XXX
• WKY-APP-SRR-XXX
• WKI-DB-SRR-XXX
What is the optimal way to group them in order to enforce security policies from NSX-T Data Center?

A.Use Edge as a firewall between tiers.
B.Create an Ethernet based security policy.
C.Do a service Insertion to accomplish the task.
D.Group all by means of tags membership.

정답:

Question No : 5

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A.Syslog Is not configured on the NSX Manager
B.Distributed Firewall Rule Logging is not enabled
C.Zero Trust Security Is not enabled
D.Syslog is not configured on the ESXI transport node

정답:

Question No : 6

An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.
Which failover detection protocol must be used to meet this requirement?

A.Host Standby Router Protocol (HSRP)
B.Beacon Probing (BP)
C.Virtual Router Redundancy Protocol (VRRP)
D.Bidirectional Forwarding Detection (BFD)

정답:

Question No : 7

What is VMware's recommendation for the minimum MTU requirements when planning a NSX-T Data Center deployment?

A.MTU should be set to 1550 or less across the data center network including inter-data center connections.
B.MTU should be set to 1500 or less only on inter-data center connections.
C.Configure Path MTU Discovery and rely on fragmentation.
D.MTU should be set to 1600 or greater across the data center network including inter-data center connections.

정답:

Question No : 8

Which two logical router components span across all transport nodes? (Choose two.)

A.SERVICE_ROUTER_TIER0
B.DISTRIBUTED_ROUTER_TIER0
C.SERVICE_ROUTER_TIER1
D.DISTRIBUTED_ROUTER_TIER1
E.TIER0_DISTRIBUTED_ROUTER

정답:
Explanation:
Reference: https://theoverlays.com/2018/12/19/nsx-t-logical-routers/

Question No : 9

Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A.Destination MAC
B.Failover Order
C.Load Balanced Source
D.Load Balanced Source IP
E.Destination Port
F.Load Balanced Source MAC

정답:

Question No : 10

Which port is used by a transport node to communicate with NSX Manager in NSX-T Data Center 2.4?

A.5671
B.1234
C.1235
D.5678

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/nsxt_24_install.pdf

Question No : 11

What is the function of a domain in a NSX-T Data Center?

A.defines the scope of transport zones
B.defines the scope of security policies and groups
C.defines the scope of physical networks
D.defines the scope of transport nodes

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4.0/rn/VMware-NSX-T-DataCenter-240-Release-Notes.html

Question No : 12

An NSX administrator is migrating vSphere port groups configured in vSphere to N-VDS.
What are two migration options? (Choose two.)

A.Migrate vSphere port groups using the esxcli command line.
B.Migrate vSphere port group through the NSX Manager API Calls.
C.Migrate Networking from the vCenter Server.
D.Migrate from the NSX Manager UI, go to Fabric -> Profile -> Uplink Profiles path.
E.Migrate from the NSX Simplified UI> Click Transport Node > Configure NSX > PNIC OnlyMigration path.

정답:

Question No : 13

Which statement Is true regarding the audit user account? (Choose two.)

A.The admin user must set the password for the audit account to log in to NSX Manager.
B.The administrator must run the set audit user password <password> command.
C.The audit user has read-write access to the NSX Manager.
D.The audit user is disabled by default and must be enabled to log in to the NSX Manager.
E.The administrator must run the set user audit password <password> command.

정답:

Question No : 14

Which two statements describe the characteristics of the Services Router (SR) component of a Tier-0 Gateway? (Choose two.)

A.Edge cluster is mandatory for SR to be created.
B.SR can exist on both hypervisor transport nodes and Edge transport nodes.
C.SR is automatically created when stateful services are enabled.
D.Edge transport nodes are required for SR to be created.
E.SR can be created from the NSX Advanced Networking & Security tab in the U

정답:

Question No : 15

Which two commands could be used on an ESXI transport node to validate connectivity to the NSX Manager? (Choose two.)

A.nsxcli --cmd get manager status
B.esxcli network ip connection list I grep rabbitmq
C.nsxcli --cmd get managers
D.nsxcli --cmd get manager connectivity status
E.esxcli network ip connection list I grep 5671

정답:

VMware 2V0-41.19 시험