Which three steps must be taken to assign a new IP address to a member of a NSX Management Cluster that was deployed manually? (Choose three.)

A. Delete NSX Manager VM

B. Change IP address of NSX Manager in vApp Properties

C. Execute detach node from the NSX Manager CLI

D. Deploy new NSX Manager VM

E. Delete NSX Management cluster member from NSX Simplified UI

Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A. Destination MAC

B. Failover Order

C. Load Balanced Source

D. Load Balanced Source IP

E. Destination Port

F. Load Balanced Source MAC

What are three characteristics of a transport zone? (Choose three.)

A. defines the potential reach of transport nodes

B. configured with a Single N-VDS

C. defines the scope and reachability of a Segment

D. configured with multiple N-VDS

E. optional for creating a segment

A company is planning to implement NSX-T Data Center and will be using load balancing for 50 unique production workloads.
Which is the minimum NSX-T Edge size configuration required to support the production load balancer?

A. Large (8 vCPU 16GB RAM)

B. Medium (4 vCPU 8GB RAM)

C. Extra Large (12 vCPU 24GB RAM)

D. Small (2 vCPU 4GB RAM)

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide East-West routing for the VMs.
Which routing component must be deployed?

A. Tier-0 Gateway

B. Edge Cluster

C. Tier-1 Gateway

D. Edge Node

Which two components are involved in the logical switching and N-VDS configuration during ESXi transport node installation? (Choose two.)

A. etherswitch

B. Open vSwitch

C. nsx-opsAgent

D. vdl2

E. nsx-vswitch

What is the correct prioritization for gateway policy categories?

A. Shared Pre-rules > Emergency > System > Local Gateway > Auto Service > Default

B. Shared Pre-rules > Emergency > Local Gateway > System > Auto Service > Default

C. Emergency > System > Shared Pre-rules > Auto Service > Local Gateway > Default

D. Emergency > System > Shared Pre-rules > Local Gateway > Auto Service > Default

An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway. In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

A. Information

B. Advertise All LB SNAT IP Routes

C. Advertise All LB VIP Routes

D. All Static Routes

E. Advertise All NAT Routes

Which protocol uses the 6081 UDP port?

A. Network Virtualization using Generic Routing Encapsulation (NVGRE)

B. Generic Network Virtualization Encapsulation (GENEVE)

C. Stateless Transport Tunneling (STT)

D. Virtual Extensible LAN (VXLAN)

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

A. Tier-0 Gateway

B. Edge Node

C. Tier-1 Gateway

D. Edge Cluster

Which is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with QCOW2 image

B. deploy NSX Edge VM with ISO image

C. deploy NSX Edge on a bare-metal server

D. deploy NSX Edge VM with OVF template

An organization with two data centers is planning an active-active multi-site deployment of NSX-T Data Center.
The two data centers have this network connectivity configuration:
✑ Redundant 1Gbps links with 200 millisecond RTT
✑ Global load balancing is not being utilized
✑ 1600 MTU
✑ vSphere 6.5U2
Which configuration prevents the use of an active-active architecture?

A. vSphere 6.7 is the minimum supported version for active-active on vSphere

B. 9000 MTU is required for active-active state replication

C. global load-balancing is required to support NSX Manager DNS namespace

D. RTT must be under 150 ms

Refer to the exhibit.
 
An NSX administrator is retrieving a log bundle at the request of VMware Global Support. It is taking a long time to get the log bundle. The administrator reviews the configuration.
Which two changes to the configuration must be made to speed up the creation of the bundle. (Choose two.)

A. Disable upload bundle to remote file server

B. Change transfer protocol

C. Do not use ssh fingerprint

D. Create the support bundle from vCenter

E. Disable Include core files and audit logs

What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

A. Loopback Router Port

B. Centralized Service Port

C. VLAN Uplink

D. Downlink

The security administrator turns on logging for a firewall rule.
Where is the log stored on ESXi and KVM transport nodes?

A. /var/log/vmware/nsx/firewall.log

B. /var/log/fw.log

C. /var/log/messages.log

D. /var/log/dfwpktlogs.log

Which port is used by a transport node to communicate with NSX Manager in NSX-T Data Center 2.4?

A. 5671

B. 1234

C. 1235

D. 5678

When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

A. SR and DR doesn’t need to be connected to provide any stateful services.

B. SR is instantiated and automatically connected with DR.

C. SR and DR is instantiated but requires manual connection.

D. DR is instantiated and automatically connected with SR.

Refer to the exhibit.
 
An administrator is trying to configure a medium load balancer in a production environment, but is getting the error message shown in the exhibit.
Which step must the administrator perform to remediate the problem?

A. Reduce the size of the virtual pool.

B. Restart the NSX Manager.

C. Power-off the existing load balancer and change its size.

D. Place the Tier-1 Gateway in a large edge cluster and redeploy the load balancer.

An NSX administrator has deployed a single NSX Manager node and will be adding two additional nodes to form a 3-node NSX Management Cluster for a production environment. The administrator will deploy these two additional nodes and Cluster VIP using the NSX Simplified UI.
What are the pre-requisites for this configuration?

A. All nodes must be in the same subnet.

B. A compute manager must be configured.

C. All nodes must be in separate subnets.

D. NSX Manager must reside on a Windows Server.

E. The cluster configuration must be completed using API.

Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?

A. Host Profile

B. Switching Profile

C. Uplink Profile

D. Transport Node Profile

An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.
Which feature in the NSX Manager Simplified UI shows the mapping between the virtual NIC and the host's physical adapter?

A. N-VDS Visualization

B. Activity Monitoring

C. IPFIX

D. Port Mirroring

Which three CLI commands will list the TEP IPs configured on an ESXi transport node? (Choose three.)

A. esxcfg-vswitch -1

B. esxcfg-vmknic -1

C. esxcli network ip address list

D. esxcli network ip netstack list

E. esxcli network ip interface ipv4 get

F. esxcli network ip interface list

Which visual tool within the NSX User Interface should an administrator use to monitor hop-by-hop connectivity between two virtual machines or logical ports?

A. IPFIX

B. Port Connection

C. Port Mirroring

D. Port Status

Which two statements describe the characteristics of the Services Router (SR) component of a Tier-0 Gateway? (Choose two.)

A. Edge cluster is mandatory for SR to be created.

B. SR can exist on both hypervisor transport nodes and Edge transport nodes.

C. SR is automatically created when stateful services are enabled.

D. Edge transport nodes are required for SR to be created.

E. SR can be created from the NSX Advanced Networking & Security tab in the UI.

An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?

A. join cluster username root password thumbprint

B. join management-plane username admin password thumbprint

C. join policy-manager username root password thumbprint

D. join management-cluster username admin password thumbprint

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set audit user password command.

C. The audit user has read-write access to the NSX Manager.

D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.

E. The administrator must run the set user audit password command.

Which command is used to verify the application of Distributed Firewall Rules applied to a VM on a KVM transport node?

A. esxcli network firewall get

B. esxcli network ip connection list

C. ovs-vsctl add-br br-int

D. ovs-appctl -t /var/run/openvswitch/nsxa-ctl dfw/rules

Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

A. Distributed Firewall

B. Service Insertion

C. Gateway Firewall

D. Virtual Private Network

E. Distributed Routing

F. Packet Forwarding

An NSX administrator is migrating vSphere port groups configured in vSphere to N-VDS.
What are two migration options? (Choose two.)

A. Migrate vSphere port groups using the esxcli command line.

B. Migrate vSphere port group through the NSX Manager API Calls.

C. Migrate Networking from the vCenter Server.

D. Migrate from the NSX Manager UI, go to Fabric -> Profile -> Uplink Profiles path.

E. Migrate from the NSX Simplified UI> Click Transport Node > Configure NSX > PNIC Only Migration path.

An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.
Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM to allow participation in overlay and VLAN transport zones?

A. VMXNET3

B. VMXNET2

C. e1000

D. Flexible

An NSX administrator has created a segment named WEB-LS from the simplified UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

A. Since the Compute Manager is disconnected in Simplified UI, the WEB-LS segment will not be realized on the KVM Transport Node.

B. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.

C. The virtual machines running on the KVM Transport Node are not connected to the VDS.

D. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.

E. The virtual machines running on the KVM transport node are not connected to the WEB-LS Segment.

What are two supported VPN configuration types in a NSX-T Data Center? (Choose two.)

A. OpenVPN

B. MPLS

C. L3VPN

D. L2VPN

E. SSLVPN+

What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

A. Network Operator

B. Network Engineer

C. Cloud Service Administrator

D. NSX Administrator

Refer to the exhibit.
 
A vSphere administrator is trying to connect T1-Web-01 virtual machine to a NSX-T logical switch and is receiving an error.
Which service must be restarted to connect the virtual machine to a NSX-T logical switch?

A. /etc/init.d/nsx-opsagent start

B. /etc/init.d/nsx-proxy start

C. /etc/init.d/nsxa start

D. /etc/init.d/nsx-datapath start

Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

A. SPAN mirrors

B. Port Mirroring

C. Traceflow

D. IPFIX

Which technology is leveraged in the NSX Edge for fast packet processing?

A. Intel Data Plane Development Kit (DPDK)

B. Intel Speed Step

C. AMD Power Now

D. Non-Uniform Memory Access (NUMA)

A NSX-T Data Center administrator wants to ensure that any machine on a public network can communicate with a Web VM running in a NSX-T Data Center environment.
Which NAT type must be created on the Tier-0 or Tier-1 Gateway to achieve this?

A. 1:1 NAT

B. Reverse NAT

C. DNAT

D. SNAT

What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

A. Group

B. Tier-1 Gateway

C. Segment Port

D. Segment

E. DFW

An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.
Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

A. N-VDS Profile

B. Uplink Profile

C. Host Switch Profile

D. Transport Node Profile

What is the maximum supported ECMP paths in NSX-T 2.4 Data Center?

A. 6

B. 8

C. 9

D. 7

Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

A. esxcli network vswitch dvs vmware list

B. esxcfg-nics -1

C. esxcfg-vmsvc/get.networks

D. esxcfg-vmknic -1

E. esxcli network nic list

A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

A. Policy

B. Profile

C. Service

D. Source

An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

A. Port NAT

B. Source NAT

C. Destination NAT

D. 1:1 NAT

E. Reflexive NAT

What are three NSX Manager roles? (Choose three.)

A. zookeeper

B. manager

C. policy

D. controller

E. cloud

F. master

Which three hardware-based offloads provide maximum performance for physical network interface cards? (Choose three.)

A. Netfilter Flow Offload (NFO)

B. Priority Flow Control (PFC)

C. Receive Side Scaling (RSS)

D. TCP Segmentation Offload (TSO)

E. Source Route Bridging (SRB)

F. Large Receive Offload (LRO)

Which denies all network traffic unless exclusively specified?

A. Blacklist

B. Whitelist

C. Default List

D. Trusted List

An NSX administrator has configured a KVM hypervisor as a transport node.
Which kernel module on KVM implements a N-VDS?

A. dvswitch

B. nsx-vswitch

C. openvswitch

D. etherswitch

Which NSX CLI command is used to change the authentication policy for local users?

A. set cli-timeout

B. set hardening-policy

C. get auth-policy minimum-password-length

D. set auth-policy

An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-active high availability mode.
Which NAT rule type is supported for this configuration?

A. Destination NAT

B. 1:1 NAT

C. Reflexive NAT

D. Source NAT

Which security feature on Tier-1 Gateways helps limit malicious traffic?

A. Unicast Reverse Path Forwarding (URPF)

B. Centralized Service Port (CSP)

C. Promiscuous Mode

D. Reverse Path Forwarding (RPF)