Which two statements describe the characteristics of an Edge Cluster in NSX-T 2.4 Data Center? (Choose two.)

A. must contain only one type of edge nodes (VM or bare metal)

B. can contain multiple types of edge nodes (VM or bare metal)

C. must have only active-active edge nodes

D. can have a maximum of 10 edge nodes

E. can have a maximum of 8 edge nodes

When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

A. SR and DR doesn’t need to be connected to provide any stateful services.

B. SR is instantiated and automatically connected with DR.

C. SR and DR is instantiated but requires manual connection.

D. DR is instantiated and automatically connected with SR.

Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

A. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

B. Create an OAuth 2.0 client in VMware Identity Manager.

C. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

D. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.

E. Enter the Identity Provider (IdP) metadata URL in NSX Manager.

An organization with two data centers is planning an active-active multi-site deployment of NSX-T Data Center.
The two data centers have this network connectivity configuration:
✑ Redundant 1Gbps links with 200 millisecond RTT
✑ Global load balancing is not being utilized
✑ 1600 MTU
✑ vSphere 6.5U2
Which configuration prevents the use of an active-active architecture?

A. vSphere 6.7 is the minimum supported version for active-active on vSphere

B. 9000 MTU is required for active-active state replication

C. global load-balancing is required to support NSX Manager DNS namespace

D. RTT must be under 150 ms

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A. Syslog is not configured on the NSX Manager

B. Distributed Firewall Rule logging is not enabled

C. Zero Trust Security is not enabled

D. Syslog is not configured on the ESXi transport node

Refer to the exhibit.
 
An NSX administrator is retrieving a log bundle at the request of VMware Global Support. It is taking a long time to get the log bundle. The administrator reviews the configuration.
Which two changes to the configuration must be made to speed up the creation of the bundle. (Choose two.)

A. Disable upload bundle to remote file server

B. Change transfer protocol

C. Do not use ssh fingerprint

D. Create the support bundle from vCenter

E. Disable Include core files and audit logs

Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

A. virsh list-interface

B. virsh get-interface

C. virsh dumpxml | grep interfaceid

D. virsh show | grep interfaceid

What is the maximum supported ECMP paths in NSX-T 2.4 Data Center?

A. 6

B. 8

C. 9

D. 7

Which command on ESXi Is used to verify the Local Control Plane connectivity with Central Control Plane?

A. esxcli network ip connection list | grep ccpd

B. esxcli network ip connection list | grep 1234

C. esxcli network ip connection list | grep netcpa

D. esxcli network ip connection list | grep 1235

Which CLI command is used for packet capture on the KVM Transport Node?

A. tcpdump

B. debug

C. set capture

D. tcpdump-uw

Which path is used to view the NSX Controller log file?

A. /var/log/cloudnet/nsx-ccp.log

B. /var/log/controller.log

C. /var/log/cloud/nsx-Icp.log

D. /var/log/ccp.log

Which two commands could be used on an ESXi transport node to validate connectivity to the NSX Manager? (Choose two.)

A. nsxcli –cmd get manager status

B. esxcli network ip connection list i grep rabbitmq

C. nsxcli –cmd get managers

D. nsxcli –cmd get manager connectivity status

E. esxcli network ip connection list i grep 5671

Which denies all network traffic unless exclusively specified?

A. Blacklist

B. Whitelist

C. Default List

D. Trusted List

While planning a NSX-T Data Center deployment with a network administrator, you are told the physical network uses Open Shortest Path First (OSPF) for the
Interior Gateway Protocol (IGP). The OSPF design is flat with the data center containing one OSPF area, area 0. The network administrator would like to extend area 0 into NSX-T so that dynamic routing updates will be learned bidirectionally.
Which meets the requirement?

A. Utilize static routes between the NSX-T topology and the physical network.

B. Recommend creating a new area for NSX-T to protect NSX-T’s control plane from Link State Advertisement (LSA) floods from OSPF area 0.

C. Utilize the Border Gateway Protocol (BGP) on NSX-T and configure the physical network for route redistribution.

D. Utilize multi-protocol Border Gateway Protocol (BGP) in the NSX-T topology and configure the physical network for route redistribution.

Which three steps must be taken to assign a new IP address to a member of a NSX Management Cluster that was deployed manually? (Choose three.)

A. Delete NSX Manager VM

B. Change IP address of NSX Manager in vApp Properties

C. Execute detach node from the NSX Manager CLI

D. Deploy new NSX Manager VM

E. Delete NSX Management cluster member from NSX Simplified UI

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

A. Reverse NAT

B. SNAT

C. 1:1 NAT

D. DNAT

Which visual tool within the NSX User Interface should an administrator use to monitor hop-by-hop connectivity between two virtual machines or logical ports?

A. IPFIX

B. Port Connection

C. Port Mirroring

D. Port Status

A company is planning to implement NSX-T Data Center and will be using load balancing for 50 unique production workloads.
Which is the minimum NSX-T Edge size configuration required to support the production load balancer?

A. Large (8 vCPU 16GB RAM)

B. Medium (4 vCPU 8GB RAM)

C. Extra Large (12 vCPU 24GB RAM)

D. Small (2 vCPU 4GB RAM)

A user is assigned these two roles in NSX Manager:
"¢ Load Balancer Administrator
"¢ Network Engineer
What privileges does this user have in the system?

A. full access permissions on all networking services and full access permissions on load balancing features

B. read permissions on all networking services and read permissions on load balancing features

C. read permissions on all networking services and full access permissions on load balancing features

D. full access permissions on all networking services and read permissions on load balancing features

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node?
(Choose two.)

A. esxcfg-vmknic -1

B. esxcli network ip interface ipv4 get

C. esxcli network nic list

D. net-dvs

E. esxcfg-nics -1

Which three hardware-based offloads provide maximum performance for physical network interface cards? (Choose three.)

A. Netfilter Flow Offload (NFO)

B. Priority Flow Control (PFC)

C. Receive Side Scaling (RSS)

D. TCP Segmentation Offload (TSO)

E. Source Route Bridging (SRB)

F. Large Receive Offload (LRO)

What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

A. Network Operator

B. Network Engineer

C. Cloud Service Administrator

D. NSX Administrator

Which port is used by a transport node to communicate with NSX Manager in NSX-T Data Center 2.4?

A. 5671

B. 1234

C. 1235

D. 5678

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. MONITORING

D. GROUPING

Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

A. esxcli network firewall ruleset -e syslog

B. esxcli network firewall ruleset set -a -e false

C. esxcli network firewall ruleset set -r syslog -e true

D. esxcli network firewall ruleset set -r sysloq -e false

Which protocol uses the 6081 UDP port?

A. Network Virtualization using Generic Routing Encapsulation (NVGRE)

B. Generic Network Virtualization Encapsulation (GENEVE)

C. Stateless Transport Tunneling (STT)

D. Virtual Extensible LAN (VXLAN)

The security administrator turns on logging for a firewall rule.
Where is the log stored on ESXi and KVM transport nodes?

A. /var/log/vmware/nsx/firewall.log

B. /var/log/fw.log

C. /var/log/messages.log

D. /var/log/dfwpktlogs.log

Refer to the exhibit.
 
An administrator is trying to configure a medium load balancer in a production environment, but is getting the error message shown in the exhibit.
Which step must the administrator perform to remediate the problem?

A. Reduce the size of the virtual pool.

B. Restart the NSX Manager.

C. Power-off the existing load balancer and change its size.

D. Place the Tier-1 Gateway in a large edge cluster and redeploy the load balancer.

What is required to configure a load balancer in inline mode?

A. DNAT

B. SNAT

C. Client and server connected to different Tier-1 Gateways

D. Client and server running on different transport nodes

Which component does the hyperbus interface (vmk50) provide network connectivity to?

A. virtual machines and containers running across transport nodes

B. virtual machines running on the same hypervisor

C. containers running on ESXi/KVM transport nodes

D. virtual machines running in the same segment

Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

A. get host-switch tunnels

B. get host-switch tunnel status

C. get transport-node tunnel state

D. get transport-node tunnel status

Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

A. Multicast

B. Anycast

C. Broadcast

D. Unicast

Which two statements describe the characteristics of the Services Router (SR) component of a Tier-0 Gateway? (Choose two.)

A. Edge cluster is mandatory for SR to be created.

B. SR can exist on both hypervisor transport nodes and Edge transport nodes.

C. SR is automatically created when stateful services are enabled.

D. Edge transport nodes are required for SR to be created.

E. SR can be created from the NSX Advanced Networking & Security tab in the UI.

Which two are valid configurations when attempting to enable L2VPN services in a NSX-T Data Center? (Choose two.)

A. Connect the Segments to Edge Cluster.

B. Configure L2VPN on the Tier-1 Gateway.

C. Configure L2VPN on the Tier-0 Gateway.

D. Connect the Segments to Edge nodes.

E. Connect the Segments to Tier-0 or Tier-1 Gateway.

Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

A. esxcli network vswitch dvs vmware list

B. esxcfg-nics -1

C. esxcfg-vmsvc/get.networks

D. esxcfg-vmknic -1

E. esxcli network nic list

What is VMware's recommendation for the minimum MTU requirements when planning a NSX-T Data Center deployment?

A. MTU should be set to 1550 or less across the data center network including inter-data center connections.

B. MTU should be set to 1500 or less only on inter-data center connections.

C. Configure Path MTU Discovery and rely on fragmentation.

D. MTU should be set to 1600 or greater across the data center network including inter-data center connections.

Which command is used to verify the application of Distributed Firewall Rules applied to a VM on a KVM transport node?

A. esxcli network firewall get

B. esxcli network ip connection list

C. ovs-vsctl add-br br-int

D. ovs-appctl -t /var/run/openvswitch/nsxa-ctl dfw/rules

An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.
Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM to allow participation in overlay and VLAN transport zones?

A. VMXNET3

B. VMXNET2

C. e1000

D. Flexible

What are three characteristics of a transport zone? (Choose three.)

A. defines the potential reach of transport nodes

B. configured with a Single N-VDS

C. defines the scope and reachability of a Segment

D. configured with multiple N-VDS

E. optional for creating a segment

Which technology is leveraged in the NSX Edge for fast packet processing?

A. Intel Data Plane Development Kit (DPDK)

B. Intel Speed Step

C. AMD Power Now

D. Non-Uniform Memory Access (NUMA)

An NSX administrator created a Segment from the Simplified UI and wants to find the Replication Mode configured on the Segment. Which NSX CLI command lists the Replication mode?

A. get logical-switches

B. get logical-switch

C. get logical-switch status

D. get logical-switch status

Which security feature on Tier-1 Gateways helps limit malicious traffic?

A. Unicast Reverse Path Forwarding (URPF)

B. Centralized Service Port (CSP)

C. Promiscuous Mode

D. Reverse Path Forwarding (RPF)

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set audit user password command.

C. The audit user has read-write access to the NSX Manager.

D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.

E. The administrator must run the set user audit password command.

An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway. In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

A. Information

B. Advertise All LB SNAT IP Routes

C. Advertise All LB VIP Routes

D. All Static Routes

E. Advertise All NAT Routes

What is the correct prioritization for gateway policy categories?

A. Shared Pre-rules > Emergency > System > Local Gateway > Auto Service > Default

B. Shared Pre-rules > Emergency > Local Gateway > System > Auto Service > Default

C. Emergency > System > Shared Pre-rules > Auto Service > Local Gateway > Default

D. Emergency > System > Shared Pre-rules > Local Gateway > Auto Service > Default

An NSX administrator is migrating vSphere port groups configured in vSphere to N-VDS.
What are two migration options? (Choose two.)

A. Migrate vSphere port groups using the esxcli command line.

B. Migrate vSphere port group through the NSX Manager API Calls.

C. Migrate Networking from the vCenter Server.

D. Migrate from the NSX Manager UI, go to Fabric -> Profile -> Uplink Profiles path.

E. Migrate from the NSX Simplified UI> Click Transport Node > Configure NSX > PNIC Only Migration path.

What are three functions of a Tier-0 Gateway in a multi-tenant service provider environment? (Choose three.)

A. acts as a default gateway for the tenant workloads

B. enables east-west connectivity to the tenant workloads

C. interconnects the Tier-1 gateways of multiple tenants

D. provides isolation between the tenants

E. provides first-hop routing for the tenant workloads

F. enables north-south connectivity to the tenant workloads

Which two components are involved in the logical switching and N-VDS configuration during ESXi transport node installation? (Choose two.)

A. etherswitch

B. Open vSwitch

C. nsx-opsAgent

D. vdl2

E. nsx-vswitch

Refer to the exhibit.
 
Considering Transport Zone limitations, how many NSX managed virtual distributed switches (N-VDSs) are needed on each ESXi to join all the Transport Zones?

A. 4

B. 3

C. 2

D. 1

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

A. Tier-0 Gateway

B. Edge Node

C. Tier-1 Gateway

D. Edge Cluster