An NSX administrator has configured a KVM hypervisor as a transport node.
Which kernel module on KVM implements a N-VDS?

A. openvswitch

B. etherswitch

C. nsx-vswitch

D. dvswitch

An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.
Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

A. e1000

B. VMXNET2

C. VMXNET3

D. Flexible

Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

A. Create an IPsec service.

B. Add a local endpoint.

C. Configure an IPsec session.

D. Configure a distributed firewall policy.

E. Add a logical switch.

An NSX administrator would like to configure syslog for a KVM transport node.
Which host log files could be exported to a remote syslog server?

A. /var/log/cloudnet/nsx-ccp.log

B. /var/log/vmware/nsx-syslog

C. /var/log/cfgAgent. log

D. /var/log/nsx-audit.log

Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

A. Route Aggregation

B. Route Distribution

C. Graceful Restart

D. BGP Neighbors

E. Local AS

Which CLI command is used to disable SSH timeout on NSX Manager and NSX Edge nodes?

A. set cli ssh timeout 0

B. set cli-timeout 0

C. set esxcli ssh session off

D. nsxcli ssh session on

How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?

A. 5

B. 6

C. 3

D. 4

A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway. A NSX-T Data Center administrator used the get logical-routers command to retrieve this information:
 
Which two commands must be executed to check BGP neighbor status? (Choose two.)

A. vrf 3

B. vrf 1

C. vrf 4

D. sa-nsxedge-01(tier1_sr)> get bgp neighbor

E. sa-nsxedge-01(tier0_sr)> get bgp neighbor

F. sa-nsxedge-01(tier0_dr)> get bgp neighbor

What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.)

A. stateful services leveraged

B. Failover of services

C. traffic predictability

D. traffic load balancing

E. increased north/south bandwidth

Which step must be performed before deploying an additional NSX Manager from the NSX-T UI?

A. Prepare the ESXi hosts as Transport Nodes.

B. Configure the Virtual IP of the cluster.

C. Register vCenter Server as a Compute Manager.

D. Create an Edge Cluster.

Which two commands are used to query the arp-table of a logical switch? (Choose two.)

A. get logical-switch arp-table

B. get logical-switch arp-table

C. get logical-switch arp-table

D. get logical-switch arp-table

E. get logical-switch arp-table

An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

A. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.

B. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the KVM Transport Node.

C. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.

D. The virtual machines running on the KVM Transport Node are not connected to the VDS.

E. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.

Where do you configure the VLANs used in VRF Lite? (Choose two.)

A. uplink interface of the default Tier-0 gateway

B. uplink trunk segment

C. downlink interface of the default Tier-0 gateway

D. uplink interface of the VRF gateway

E. segment connected to the Tier-1 gateway

An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time.
Which CLI command disables the nsxcli time out value on NSX Manager?

A. set cli-timeout 0

B. set cli-timeout enabled

C. set cli-timeout disabled

D. set cli-timeout 1

An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.
Which failover detection protocol must be used to meet this requirement?

A. Beacon Probing (BP)

B. Host Standby Router Protocol (HSRP)

C. Bidirectional Forwarding Detection (BFD)

D. Virtual Router Redundancy Protocol (VRRP)

A user is assigned these two roles in NSX Manager:
✑ LB Admin
✑ Network Engineer
What privileges does this user have in the system?

A. read permissions on all networking services and full access permissions on load balancing features

B. full access permissions on all networking services and full access permissions on load balancing features

C. full access permissions on all networking services and read permissions on load balancing features

D. read permissions on all networking services and read permissions on load balancing features

Which two logical router components span across all transport nodes? (Choose two.)

A. DISTRIBUTED_ROUTER_TIER0

B. SERVICE_ROUTER_TIER0

C. TIER0_DISTRIBUTED_ROUTER

D. DISTRIBUTED_ROUTER_TIER1

E. SERVICE_ROUTER_TIER1

Which command is used to change the NSX CLI administrator password?

A. set user administrator password

B. set user admin password

C. set user admin password old-password

D. set user administrator password old-password

When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?

A. Create a secondary vNIC on each quest VM for SVM communication.

B. Place a partner SVM on each compute cluster node.

C. Centralize partner SVMs in a service cluster.

D. Add partner SVMs to an edge cluster.

Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

A. set time-server

B. get timezone

C. set ntp-server

D. set timezone

What are three NSX Manager roles? (Choose three.)

A. cloud

B. manager

C. zookeeper

D. policy

E. master

F. controller

Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

A. IPFIX

B. Port Mirroring

C. Traceflow

D. SPAN mirrors

An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.
Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

A. N-VDS/VDS Profile

B. Transport Node Profile

C. Host Switch Profile

D. Uplink Profile

Refer to the exhibit.
 
Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

A. SNAT

B. Reverse NAT

C. DNAT

D. 1:1 NAT

Which tool could be used to configure BGP on a Tier-0 Gateway?

A. PowerShell

B. ESX CLI

C. API

D. NSX CLI

An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

A. 1:1 NAT

B. Destination NAT

C. Port NAT

D. Reflexive NAT

E. Source NAT

What are two supported N-VDS modes? (Choose two.)

A. DPDK Datapath

B. Overlay Datapath

C. Secure Datapath

D. Enhanced Datapath

E. Standard Datapath

Which two statements are true about the implementation of multicast in NSX-T Data Center? (Choose two.)

A. Multicast routing is implemented with PIM Sparse-Mode.

B. IGMP Snooping is used to populate multicast forwarding tables.

C. Tier-0 gateways can be the Rendezvous Point.

D. Multicast is supported in ESXi and KVM transport nodes.

E. An Edge can be the Rendezvous Point.

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

A. Identify security vulnerabilities in the workloads.

B. Use agentless antivirus with Guest Introspection.

C. Quarantine workloads based on vulnerabilities.

D. Identify risk and reputation of accessed websites.

E. Gain insight about micro-segmentation traffic flows.

How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

A. Automatically created when Tier-1 is created.

B. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.

C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.

D. Automatically created when Tier-1 is connected with Tier-0 from NSX UI.

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set user audit password command.

C. The audit user must be created and have its password changed to log into the NSX Manager.

D. The administrator must run the set audit user password command.

E. The audit user has read-write access to the NSX Manager.

Which statement is true about an alarm in a Suppressed state?

A. An alarm can be suppressed for a specific duration in days.

B. An alarm can be suppressed for a specific duration in minutes.

C. An alarm can be suppressed for a specific duration in seconds.

D. An alarm can be suppressed for a specific duration in hours.

An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original failed node to become the Active node upon recovery.
Which failover policy meets this requirement?

A. Non-Preemptive

B. Preemptive

C. Enable Preemptive

D. Disable Preemptive

Which three protocols could an NSX administrator use to transfer log messages to a remote log server? (Choose three.)

A. SSL

B. HTTPS

C. TLS

D. UDP

E. SSH

F. TCP

Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A. Destination MAC

B. Load Balanced Source IP

C. Failover Order

D. Destination Port

E. Load Balanced Source MAC

F. Load Balanced Source

Which Network and Security virtualization solution provides network hybridity and mobility?

A. NSX Intelligence

B. VMware HCX

C. VMware Tanzu Service Mesh

D. NSX Advanced Load Balancer

When running nsxcli on an ESXi host, which command will show the Replication mode?

A. get logical-switch status

B. get logical-switch

C. get logical-switches

D. get logical-switch status

Which three services are compatible with VRF Lite? (Choose three.)

A. VPN

B. Intrusion Detection

C. NAT

D. Load Balancer

E. DHCP

What are three characteristics of a transport zone? (Choose three.)

A. defines the scope and reachability of a Segment

B. defines the potential reach of transport nodes

C. configured with multiple N-VDS/VDS

D. optional for creating a segment

E. configured with a Single N-VDS/VDS

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. GROUPING

D. MONITORING

Which two statements are true for a Tier-1 Gateway? (Choose two.)

A. supports ECMP

B. owned and configured by the Tenant

C. always configured in active-standby mode

D. owned and configured by Service Provider

E. connects to physical networks

Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

A. esxcli network firewall ruleset set -a -e false

B. esxcli network firewall ruleset -e syslog

C. esxcli network firewall ruleset set -r syslog -e false

D. esxcli network firewall ruleset set -r syslog -e true

An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

A. esxcli network diag ping -H

B. vmkping ++netstack=geneve -d -s 1572

C. vmkping ++netstack=vxlan-d -s 1572

D. esxcli network diag ping -I vmk0 -H

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

A. Tier-1 Gateway

B. Edge Services Gateway

C. Tier-0 Gateway

D. Layer 2 Gateway

An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?

A. join management-cluster username admin password thumbprint

B. join cluster username root password thumbprint

C. join policy-manager username root password thumbprint

D. join management-plane username admin password thumbprint

What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

A. Service interface

B. Loopback Router Port

C. Downlink interface

D. VLAN Uplink

Which discovery protocol is supported for hypervisor transport nodes?

A. Adobe Real-time CDP

B. Cisco Discovery Protocol

C. Link Layer Discovery Protocol

D. Neighbor Discovery Protocol

Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

A. get support-bundle file vcpnv.tgz

B. set support-bundle file vcpnv.tgz

C. vm-support

D. esxcli system syslog config logger set –id=nsxmanager

A DevOps user has deployed a Kubernetes Pod in vSphere.
What does the term ClusterIP represent within NSX-T?

A. Deployment of T1 with NLB service.

B. Deployment of Distributed Router.

C. Deployment of Distributed Load Balancing service.

D. Deployment of T0 and T1

Which log is used to see a failed NSX-T installation of a VIB package on ESXi transport nodes?

A. /var/log/vmware/eam/eam.log

B. /var/log/esxupdate.log

C. /var/log/syslog.log

D. /var/log/hostd.Iog