An NSX administrator has deployed a single NSX Manager node and will be adding two additional nodes to form a 3-node NSX Management Cluster for a production environment. The administrator will deploy these two additional nodes and Cluster VIP using the NSX Simplified UI.
What are the pre-requisites for this configuration?

A. All nodes must be in the same subnet.

B. A compute manager must be configured.

C. All nodes must be in separate subnets.

D. NSX Manager must reside on a Windows Server.

E. The cluster configuration must be completed using API.

Which CLI command is used to restart the Syslog service on a KVM transport node?

A. service.sh stop | start syslog

B. systemctl restart syslog

C. systemctl restart rsyslog

D. yum restart syslog

Which visual tool within the NSX User Interface should an administrator use to monitor hop-by-hop connectivity between two virtual machines or logical ports?

A. IPFIX

B. Port Connection

C. Port Mirroring

D. Port Status

Refer to the exhibit.
 
Considering Transport Zone limitations, how many NSX managed virtual distributed switches (N-VDSs) are needed on each ESXi to join all the Transport Zones?

A. 4

B. 3

C. 2

D. 1

What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

A. Network Operator

B. Network Engineer

C. Cloud Service Administrator

D. NSX Administrator

While planning a NSX-T Data Center deployment with a network administrator, you are told the physical network uses Open Shortest Path First (OSPF) for the
Interior Gateway Protocol (IGP). The OSPF design is flat with the data center containing one OSPF area, area 0. The network administrator would like to extend area 0 into NSX-T so that dynamic routing updates will be learned bidirectionally.
Which meets the requirement?

A. Utilize static routes between the NSX-T topology and the physical network.

B. Recommend creating a new area for NSX-T to protect NSX-T’s control plane from Link State Advertisement (LSA) floods from OSPF area 0.

C. Utilize the Border Gateway Protocol (BGP) on NSX-T and configure the physical network for route redistribution.

D. Utilize multi-protocol Border Gateway Protocol (BGP) in the NSX-T topology and configure the physical network for route redistribution.

What are three NSX Manager roles? (Choose three.)

A. zookeeper

B. manager

C. policy

D. controller

E. cloud

F. master

Refer to the exhibit.
 
An administrator is trying to configure a medium load balancer in a production environment, but is getting the error message shown in the exhibit.
Which step must the administrator perform to remediate the problem?

A. Reduce the size of the virtual pool.

B. Restart the NSX Manager.

C. Power-off the existing load balancer and change its size.

D. Place the Tier-1 Gateway in a large edge cluster and redeploy the load balancer.

Which command is used to verify the application of Distributed Firewall Rules applied to a VM on a KVM transport node?

A. esxcli network firewall get

B. esxcli network ip connection list

C. ovs-vsctl add-br br-int

D. ovs-appctl -t /var/run/openvswitch/nsxa-ctl dfw/rules

An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-active high availability mode.
Which NAT rule type is supported for this configuration?

A. Destination NAT

B. 1:1 NAT

C. Reflexive NAT

D. Source NAT

The security administrator turns on logging for a firewall rule.
Where is the log stored on ESXi and KVM transport nodes?

A. /var/log/vmware/nsx/firewall.log

B. /var/log/fw.log

C. /var/log/messages.log

D. /var/log/dfwpktlogs.log

An NSX administrator has created a segment named WEB-LS from the simplified UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

A. Since the Compute Manager is disconnected in Simplified UI, the WEB-LS segment will not be realized on the KVM Transport Node.

B. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.

C. The virtual machines running on the KVM Transport Node are not connected to the VDS.

D. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.

E. The virtual machines running on the KVM transport node are not connected to the WEB-LS Segment.

Which protocol uses the 6081 UDP port?

A. Network Virtualization using Generic Routing Encapsulation (NVGRE)

B. Generic Network Virtualization Encapsulation (GENEVE)

C. Stateless Transport Tunneling (STT)

D. Virtual Extensible LAN (VXLAN)

The NSX Control Plane is responsible for which two functions? (Choose two.)

A. push stateless configurations to forwarding engines

B. propagate topology information

C. receive and validate configuration from NSX Policy

D. host API services

E. maintain packet-level statistics

An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway. In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

A. Information

B. Advertise All LB SNAT IP Routes

C. Advertise All LB VIP Routes

D. All Static Routes

E. Advertise All NAT Routes

Which is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with QCOW2 image

B. deploy NSX Edge VM with ISO image

C. deploy NSX Edge on a bare-metal server

D. deploy NSX Edge VM with OVF template

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

A. Reverse NAT

B. SNAT

C. 1:1 NAT

D. DNAT

Which two commands could be used on an ESXi transport node to validate connectivity to the NSX Manager? (Choose two.)

A. nsxcli –cmd get manager status

B. esxcli network ip connection list i grep rabbitmq

C. nsxcli –cmd get managers

D. nsxcli –cmd get manager connectivity status

E. esxcli network ip connection list i grep 5671

A customer is planning deployment of a third-party OpenStack application.
Which is used to grant permissions to the application on NSX Manager?

A. Guest Identity

B. Cloud Identity

C. Principal Identity

D. API Identity

Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

A. esxcli network firewall ruleset -e syslog

B. esxcli network firewall ruleset set -a -e false

C. esxcli network firewall ruleset set -r syslog -e true

D. esxcli network firewall ruleset set -r sysloq -e false

Which security feature on Tier-1 Gateways helps limit malicious traffic?

A. Unicast Reverse Path Forwarding (URPF)

B. Centralized Service Port (CSP)

C. Promiscuous Mode

D. Reverse Path Forwarding (RPF)

In an enterprise-based single-tier routing topology, which routing component provides east-west routing functionality?

A. Tier-0 Gateway

B. Edge Node

C. Edge Cluster

D. Tier-1 Gateway

Which path is used to view the NSX Controller log file?

A. /var/log/cloudnet/nsx-ccp.log

B. /var/log/controller.log

C. /var/log/cloud/nsx-Icp.log

D. /var/log/ccp.log

An NSX administrator has observed connectivity issues between the NSX Manager and the KVM Transport Node.
Which two log files could be used to troubleshoot the issue on the KVM Transport Node? (Choose two.)

A. /var/log/vmware/nsx-syslog

B. /usr/vmware/log/syslog

C. /var/log/nsx/syslog

D. /usr/vmware/nsx-syslog

E. /var/log/syslog

What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

A. Loopback Router Port

B. Centralized Service Port

C. VLAN Uplink

D. Downlink

Which three hardware-based offloads provide maximum performance for physical network interface cards? (Choose three.)

A. Netfilter Flow Offload (NFO)

B. Priority Flow Control (PFC)

C. Receive Side Scaling (RSS)

D. TCP Segmentation Offload (TSO)

E. Source Route Bridging (SRB)

F. Large Receive Offload (LRO)

Which command on ESXi Is used to verify the Local Control Plane connectivity with Central Control Plane?

A. esxcli network ip connection list | grep ccpd

B. esxcli network ip connection list | grep 1234

C. esxcli network ip connection list | grep netcpa

D. esxcli network ip connection list | grep 1235

An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.
Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM to allow participation in overlay and VLAN transport zones?

A. VMXNET3

B. VMXNET2

C. e1000

D. Flexible

A NSX-T Data Center administrator wants to ensure that any machine on a public network can communicate with a Web VM running in a NSX-T Data Center environment.
Which NAT type must be created on the Tier-0 or Tier-1 Gateway to achieve this?

A. 1:1 NAT

B. Reverse NAT

C. DNAT

D. SNAT

Which port is used by a transport node to communicate with NSX Manager in NSX-T Data Center 2.4?

A. 5671

B. 1234

C. 1235

D. 5678

An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

A. Port NAT

B. Source NAT

C. Destination NAT

D. 1:1 NAT

E. Reflexive NAT

A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

A. Policy

B. Profile

C. Service

D. Source

Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

A. Multicast

B. Anycast

C. Broadcast

D. Unicast

An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.
Which feature in the NSX Manager Simplified UI shows the mapping between the virtual NIC and the host's physical adapter?

A. N-VDS Visualization

B. Activity Monitoring

C. IPFIX

D. Port Mirroring

An NSX administrator is applying QoS to guarantee bandwidth for critical production workloads.
Which three actions must be taken? (Choose three.)

A. Edit the exported JSON file.

B. Export transport node NIOC profile.

C. Create a QoS segment profile.

D. Specify QoS parameters.

E. Change Segment QoS profile.

F. Upload the JSON file and apply configuration.

Which CLI command is used for packet capture on the KVM Transport Node?

A. tcpdump

B. debug

C. set capture

D. tcpdump-uw

Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?

A. Host Profile

B. Switching Profile

C. Uplink Profile

D. Transport Node Profile

What is the function of a domain in a NSX-T Data Center?

A. defines the scope of transport zones

B. defines the scope of security policies and groups

C. defines the scope of physical networks

D. defines the scope of transport nodes

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. MONITORING

D. GROUPING

Which two statements describe the characteristics of the Services Router (SR) component of a Tier-0 Gateway? (Choose two.)

A. Edge cluster is mandatory for SR to be created.

B. SR can exist on both hypervisor transport nodes and Edge transport nodes.

C. SR is automatically created when stateful services are enabled.

D. Edge transport nodes are required for SR to be created.

E. SR can be created from the NSX Advanced Networking & Security tab in the UI.

What are three characteristics of a transport zone? (Choose three.)

A. defines the potential reach of transport nodes

B. configured with a Single N-VDS

C. defines the scope and reachability of a Segment

D. configured with multiple N-VDS

E. optional for creating a segment

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node?
(Choose two.)

A. esxcfg-vmknic -1

B. esxcli network ip interface ipv4 get

C. esxcli network nic list

D. net-dvs

E. esxcfg-nics -1

Refer to the exhibit.
 
An NSX administrator is retrieving a log bundle at the request of VMware Global Support. It is taking a long time to get the log bundle. The administrator reviews the configuration.
Which two changes to the configuration must be made to speed up the creation of the bundle. (Choose two.)

A. Disable upload bundle to remote file server

B. Change transfer protocol

C. Do not use ssh fingerprint

D. Create the support bundle from vCenter

E. Disable Include core files and audit logs

Which two statements describe the characteristics of an Edge Cluster in NSX-T 2.4 Data Center? (Choose two.)

A. must contain only one type of edge nodes (VM or bare metal)

B. can contain multiple types of edge nodes (VM or bare metal)

C. must have only active-active edge nodes

D. can have a maximum of 10 edge nodes

E. can have a maximum of 8 edge nodes

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set audit user password command.

C. The audit user has read-write access to the NSX Manager.

D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.

E. The administrator must run the set user audit password command.

Which vmkernel module implements the N-VDS on an ESXi transport node?

A. openvswitch

B. etherswitch

C. nsxt-vswitch

D. dvswitch

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A. Syslog is not configured on the NSX Manager

B. Distributed Firewall Rule logging is not enabled

C. Zero Trust Security is not enabled

D. Syslog is not configured on the ESXi transport node

Refer to the exhibit.
 
A vSphere administrator is trying to connect T1-Web-01 virtual machine to a NSX-T logical switch and is receiving an error.
Which service must be restarted to connect the virtual machine to a NSX-T logical switch?

A. /etc/init.d/nsx-opsagent start

B. /etc/init.d/nsx-proxy start

C. /etc/init.d/nsxa start

D. /etc/init.d/nsx-datapath start

Which three CLI commands will list the TEP IPs configured on an ESXi transport node? (Choose three.)

A. esxcfg-vswitch -1

B. esxcfg-vmknic -1

C. esxcli network ip address list

D. esxcli network ip netstack list

E. esxcli network ip interface ipv4 get

F. esxcli network ip interface list

What are the supported N-VDS modes?

A. DPDK Datapath

B. Enhanced Datapath

C. Overlay Datapath

D. Standard Datapath

E. Secure Datapath