VMware Certified Professional - Network Virtualization Set 2

1.

An NSX Edge Service Gateway has two interfaces:

Apply the SNAT rule to the Internal Access interface. Select 10.10.10.1 as the translated source IP. Apply the SNAT rule on the Physical Uplink interface. Select 10.10.10.0/24 as the original subnet. Choose 20.20.20.2 as the translated source IP.

2.

An administrator manages a TFTP server virtual machine that is connected to a Logical Switch with a VNI of 7321. The TFTP server has been configured to use port 1069. An NSX Edge Service Gateway is connected to VNI 7321 and has an uplink interface with access to the physical network. Assume external users can reach the Service Gateway. What should the administrator configure to ensure external connections to the TFTP server are successful?

Create a DNAT rule with the original port of 69 and translated port of 1069. Create a SNAT rule with the original port of 1069 and translated port of 69. Create a SNAT rule with the original port of 69 and translated port of 1069. Create a DNAT rule with the original port of 1069 and translated port of 69.

3.

Where does the Distributed Logical Firewall enforce firewall rules?

At the Virtual Machine's virtual Network Interface Card (vNIC). At the Logical Switch virtual port that the Virtual Machine connects to. At the NSX Controller's firewall kernel module. At the ESXi host vmnic used by the vSphere Distributed Switch.

4.

How are Logical Firewall rules applied to affected virtual machines?

They are pushed by the NSX Controllers into all the ESXi hosts in the same Transport Zone. They are pushed by the NSX Manager to the ESXi hosts running the source and/or destination virtual machines. They are pushed by the NSX Controllers to the ESXi hosts running the destination virtual machines. They are pushed by the NSX Manager to all the ESXi hosts in the NSX environment.

5.

An administrator wishes to control traffic flow between two virtual machines. The virtual machines are in the same subnet, but are located on separate ESXi hosts. The administrator deploys an Edge Firewall to one of the hosts and verifies the default firewall rule is set to deny, but the two virtual machines can still communicate with each other. What task will correct this issue?

Configure both ESXi host firewalls to deny traffic from the virtual machine on the other host. Deploy another Edge Firewall on the host running the second virtual machine. Remove any other firewall appliances that may exist on either of the ESXi hosts. Deploy a Distributed Firewall with firewall rules to prevent traffic between the virtual machines.

6.

An administrator wants to perform Activity Monitoring on a large group of virtual machines in an NSX environment. How would this task be accomplished with minimal administrative effort?

Create a PowerCLI script to enable virtual machine data collection on each virtual machine. Create a security group in Service Composer and add the virtual machines to the security group. Add the virtual machines to the pre-defined Activity Monitoring security group in Service Composer. Add the virtual machines to a VM folder in vCenter Server and enable data collection.

7.

Which action is not an option for adding Virtual Machines to a Security Group?

Adding Virtual Machines to a Security Group and nesting it within another Security Group. Defining Dynamic Membership in the Security Group. Adding Virtual Machines to a Security Policy and associating it with a Security Group. Selecting objects to include within a Security Group.

8.

What is the most restrictive NSX role that can be used to create and publish security policies and install virtual appliances?

Security Administrator NSX Administrator Auditor Enterprise Administrator

9.

Which port is used for NSX REST API Requests?

80 443 5480 8443

10.

Which component automates the consumption of third-party services and provides mapping to virtual machines using a logical policy?

NSX Manager Cloud Management Platform (CMP) Service Composer NSX Data Security

VMware Certified Professional - Network Virtualization Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

VMware Certified Professional - Network Virtualization Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner