Which three hardware-based offloads provide maximum performance for physical network interface cards? (Choose three.)

A. Netfilter Flow Offload (NFO)

B. Priority Flow Control (PFC)

C. Receive Side Scaling (RSS)

D. TCP Segmentation Offload (TSO)

E. Source Route Bridging (SRB)

F. Large Receive Offload (LRO)

Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

A. virsh list-interface

B. virsh get-interface

C. virsh dumpxml | grep interfaceid

D. virsh show | grep interfaceid

Which command is used to verify the application of Distributed Firewall Rules applied to a VM on a KVM transport node?

A. esxcli network firewall get

B. esxcli network ip connection list

C. ovs-vsctl add-br br-int

D. ovs-appctl -t /var/run/openvswitch/nsxa-ctl dfw/rules

An organization with two data centers is planning an active-active multi-site deployment of NSX-T Data Center.
The two data centers have this network connectivity configuration:
✑ Redundant 1Gbps links with 200 millisecond RTT
✑ Global load balancing is not being utilized
✑ 1600 MTU
✑ vSphere 6.5U2
Which configuration prevents the use of an active-active architecture?

A. vSphere 6.7 is the minimum supported version for active-active on vSphere

B. 9000 MTU is required for active-active state replication

C. global load-balancing is required to support NSX Manager DNS namespace

D. RTT must be under 150 ms

A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

A. Policy

B. Profile

C. Service

D. Source

Which security feature on Tier-1 Gateways helps limit malicious traffic?

A. Unicast Reverse Path Forwarding (URPF)

B. Centralized Service Port (CSP)

C. Promiscuous Mode

D. Reverse Path Forwarding (RPF)

When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

A. SR and DR doesn’t need to be connected to provide any stateful services.

B. SR is instantiated and automatically connected with DR.

C. SR and DR is instantiated but requires manual connection.

D. DR is instantiated and automatically connected with SR.

Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

A. SPAN mirrors

B. Port Mirroring

C. Traceflow

D. IPFIX

An NSX administrator is applying QoS to guarantee bandwidth for critical production workloads.
Which three actions must be taken? (Choose three.)

A. Edit the exported JSON file.

B. Export transport node NIOC profile.

C. Create a QoS segment profile.

D. Specify QoS parameters.

E. Change Segment QoS profile.

F. Upload the JSON file and apply configuration.

Refer to the exhibit.
 
An administrator is trying to configure a medium load balancer in a production environment, but is getting the error message shown in the exhibit.
Which step must the administrator perform to remediate the problem?

A. Reduce the size of the virtual pool.

B. Restart the NSX Manager.

C. Power-off the existing load balancer and change its size.

D. Place the Tier-1 Gateway in a large edge cluster and redeploy the load balancer.

Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

A. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

B. Create an OAuth 2.0 client in VMware Identity Manager.

C. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

D. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.

E. Enter the Identity Provider (IdP) metadata URL in NSX Manager.

An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.
Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

A. N-VDS Profile

B. Uplink Profile

C. Host Switch Profile

D. Transport Node Profile

How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?

A. 3

B. 5

C. 4

D. 6

Which is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with QCOW2 image

B. deploy NSX Edge VM with ISO image

C. deploy NSX Edge on a bare-metal server

D. deploy NSX Edge VM with OVF template

Which NSX CLI command will enable the SSH service on the NSX Edge node?

A. set service ssh enabled

B. start service ssh

C. start service ssh start-on-boot

D. set service ssh start-on-boot enabled

Which technology is leveraged in the NSX Edge for fast packet processing?

A. Intel Data Plane Development Kit (DPDK)

B. Intel Speed Step

C. AMD Power Now

D. Non-Uniform Memory Access (NUMA)

An NSX administrator would like to configure syslog for a KVM transport node.
Which host log files could be exported to a remote syslog server?

A. /var/log/vmware/nsx-syslog

B. /var/log/cfgAgent.log

C. /var/log/nsx-audit.log

D. /var/log/cloudnet/nsx-ccp.log

Which three steps must be taken to assign a new IP address to a member of a NSX Management Cluster that was deployed manually? (Choose three.)

A. Delete NSX Manager VM

B. Change IP address of NSX Manager in vApp Properties

C. Execute detach node from the NSX Manager CLI

D. Deploy new NSX Manager VM

E. Delete NSX Management cluster member from NSX Simplified UI

Which vmkernel module implements the N-VDS on an ESXi transport node?

A. openvswitch

B. etherswitch

C. nsxt-vswitch

D. dvswitch

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

A. Reverse NAT

B. SNAT

C. 1:1 NAT

D. DNAT

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. MONITORING

D. GROUPING

An administrator wants to validate the BGP connection status between the Tier-0 Gateway and the upstream physical router.
What sequence of commands could be used to check this status on NSX Edge node?

A. – set vrf – show logical-routers – show bgp

B. – show logical-routers – get vrf – show ip route bgp

C. – enable – get vrf – show bgp neighbor

D. – get logical-routers – vrf – get bgp neighbor

An NSX administrator has observed connectivity issues between the NSX Manager and the KVM Transport Node.
Which two log files could be used to troubleshoot the issue on the KVM Transport Node? (Choose two.)

A. /var/log/vmware/nsx-syslog

B. /usr/vmware/log/syslog

C. /var/log/nsx/syslog

D. /usr/vmware/nsx-syslog

E. /var/log/syslog

What is required to configure a load balancer in inline mode?

A. DNAT

B. SNAT

C. Client and server connected to different Tier-1 Gateways

D. Client and server running on different transport nodes

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide East-West routing for the VMs.
Which routing component must be deployed?

A. Tier-0 Gateway

B. Edge Cluster

C. Tier-1 Gateway

D. Edge Node

What is the correct prioritization for gateway policy categories?

A. Shared Pre-rules > Emergency > System > Local Gateway > Auto Service > Default

B. Shared Pre-rules > Emergency > Local Gateway > System > Auto Service > Default

C. Emergency > System > Shared Pre-rules > Auto Service > Local Gateway > Default

D. Emergency > System > Shared Pre-rules > Local Gateway > Auto Service > Default

What are three functions of a Tier-0 Gateway in a multi-tenant service provider environment? (Choose three.)

A. acts as a default gateway for the tenant workloads

B. enables east-west connectivity to the tenant workloads

C. interconnects the Tier-1 gateways of multiple tenants

D. provides isolation between the tenants

E. provides first-hop routing for the tenant workloads

F. enables north-south connectivity to the tenant workloads

An NSX administrator has configured a KVM hypervisor as a transport node.
Which kernel module on KVM implements a N-VDS?

A. dvswitch

B. nsx-vswitch

C. openvswitch

D. etherswitch

Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A. Destination MAC

B. Failover Order

C. Load Balanced Source

D. Load Balanced Source IP

E. Destination Port

F. Load Balanced Source MAC

An NSX administrator is migrating vSphere port groups configured in vSphere to N-VDS.
What are two migration options? (Choose two.)

A. Migrate vSphere port groups using the esxcli command line.

B. Migrate vSphere port group through the NSX Manager API Calls.

C. Migrate Networking from the vCenter Server.

D. Migrate from the NSX Manager UI, go to Fabric -> Profile -> Uplink Profiles path.

E. Migrate from the NSX Simplified UI> Click Transport Node > Configure NSX > PNIC Only Migration path.

Which denies all network traffic unless exclusively specified?

A. Blacklist

B. Whitelist

C. Default List

D. Trusted List

Which two commands could be used on an ESXi transport node to validate connectivity to the NSX Manager? (Choose two.)

A. nsxcli –cmd get manager status

B. esxcli network ip connection list i grep rabbitmq

C. nsxcli –cmd get managers

D. nsxcli –cmd get manager connectivity status

E. esxcli network ip connection list i grep 5671

An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway. In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

A. Information

B. Advertise All LB SNAT IP Routes

C. Advertise All LB VIP Routes

D. All Static Routes

E. Advertise All NAT Routes

An NSX administrator has deployed a single NSX Manager node and will be adding two additional nodes to form a 3-node NSX Management Cluster for a production environment. The administrator will deploy these two additional nodes and Cluster VIP using the NSX Simplified UI.
What are the pre-requisites for this configuration?

A. All nodes must be in the same subnet.

B. A compute manager must be configured.

C. All nodes must be in separate subnets.

D. NSX Manager must reside on a Windows Server.

E. The cluster configuration must be completed using API.

A NSX-T Data Center administrator wants to ensure that any machine on a public network can communicate with a Web VM running in a NSX-T Data Center environment.
Which NAT type must be created on the Tier-0 or Tier-1 Gateway to achieve this?

A. 1:1 NAT

B. Reverse NAT

C. DNAT

D. SNAT

Which component does the hyperbus interface (vmk50) provide network connectivity to?

A. virtual machines and containers running across transport nodes

B. virtual machines running on the same hypervisor

C. containers running on ESXi/KVM transport nodes

D. virtual machines running in the same segment

While planning a NSX-T Data Center deployment with a network administrator, you are told the physical network uses Open Shortest Path First (OSPF) for the
Interior Gateway Protocol (IGP). The OSPF design is flat with the data center containing one OSPF area, area 0. The network administrator would like to extend area 0 into NSX-T so that dynamic routing updates will be learned bidirectionally.
Which meets the requirement?

A. Utilize static routes between the NSX-T topology and the physical network.

B. Recommend creating a new area for NSX-T to protect NSX-T’s control plane from Link State Advertisement (LSA) floods from OSPF area 0.

C. Utilize the Border Gateway Protocol (BGP) on NSX-T and configure the physical network for route redistribution.

D. Utilize multi-protocol Border Gateway Protocol (BGP) in the NSX-T topology and configure the physical network for route redistribution.

What are two supported VPN configuration types in a NSX-T Data Center? (Choose two.)

A. OpenVPN

B. MPLS

C. L3VPN

D. L2VPN

E. SSLVPN+

In an enterprise-based single-tier routing topology, which routing component provides east-west routing functionality?

A. Tier-0 Gateway

B. Edge Node

C. Edge Cluster

D. Tier-1 Gateway

A company is planning to implement NSX-T Data Center and will be using load balancing for 50 unique production workloads.
Which is the minimum NSX-T Edge size configuration required to support the production load balancer?

A. Large (8 vCPU 16GB RAM)

B. Medium (4 vCPU 8GB RAM)

C. Extra Large (12 vCPU 24GB RAM)

D. Small (2 vCPU 4GB RAM)

Refer to the exhibit.
 
A vSphere administrator is trying to connect T1-Web-01 virtual machine to a NSX-T logical switch and is receiving an error.
Which service must be restarted to connect the virtual machine to a NSX-T logical switch?

A. /etc/init.d/nsx-opsagent start

B. /etc/init.d/nsx-proxy start

C. /etc/init.d/nsxa start

D. /etc/init.d/nsx-datapath start

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A. Syslog is not configured on the NSX Manager

B. Distributed Firewall Rule logging is not enabled

C. Zero Trust Security is not enabled

D. Syslog is not configured on the ESXi transport node

A customer is planning deployment of a third-party OpenStack application.
Which is used to grant permissions to the application on NSX Manager?

A. Guest Identity

B. Cloud Identity

C. Principal Identity

D. API Identity

Which two are valid configurations when attempting to enable L2VPN services in a NSX-T Data Center? (Choose two.)

A. Connect the Segments to Edge Cluster.

B. Configure L2VPN on the Tier-1 Gateway.

C. Configure L2VPN on the Tier-0 Gateway.

D. Connect the Segments to Edge nodes.

E. Connect the Segments to Tier-0 or Tier-1 Gateway.

Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

A. Distributed Firewall

B. Service Insertion

C. Gateway Firewall

D. Virtual Private Network

E. Distributed Routing

F. Packet Forwarding

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

A. Tier-0 Gateway

B. Edge Node

C. Tier-1 Gateway

D. Edge Cluster

Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

A. get host-switch tunnels

B. get host-switch tunnel status

C. get transport-node tunnel state

D. get transport-node tunnel status

Which protocol uses the 6081 UDP port?

A. Network Virtualization using Generic Routing Encapsulation (NVGRE)

B. Generic Network Virtualization Encapsulation (GENEVE)

C. Stateless Transport Tunneling (STT)

D. Virtual Extensible LAN (VXLAN)

What are three characteristics of a transport zone? (Choose three.)

A. defines the potential reach of transport nodes

B. configured with a Single N-VDS

C. defines the scope and reachability of a Segment

D. configured with multiple N-VDS

E. optional for creating a segment

Which path is used to view the NSX Controller log file?

A. /var/log/cloudnet/nsx-ccp.log

B. /var/log/controller.log

C. /var/log/cloud/nsx-Icp.log

D. /var/log/ccp.log