Which discovery protocol is supported for hypervisor transport nodes?

A. Adobe Real-time CDP

B. Cisco Discovery Protocol

C. Link Layer Discovery Protocol

D. Neighbor Discovery Protocol

Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

A. get host-switch tunnels

B. get transport-node tunnel status

C. get host-switch tunnel status

D. get transport-node tunnel state

Which choice is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with OVF template

B. deploy NSX Edge on a bare-metal server

C. deploy NSX Edge VM with QCOW2 image

D. deploy NSX Edge on physical switch

An administrator has a requirement to have consistent policy configuration and enforcement across NSX-T instances.
What feature of NSX-T Data Center fulfills this requirement?

A. Multi-hypervisor support

B. Policy-driven configuration

C. Load balancer

D. Federation

Which Network and Security virtualization solution provides network hybridity and mobility?

A. NSX Intelligence

B. VMware HCX

C. VMware Tanzu Service Mesh

D. NSX Advanced Load Balancer

An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.
Which feature in the NSX UI shows the mapping between the virtual NIC and the host's physical adapter?

A. Switch Visualization

B. Port Mirroring

C. Activity Monitoring

D. IPFIX

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node?
(Choose two.)

A. esxcfg-nics -1

B. net-dvs

C. esxcli network nic list

D. esxcfg-vmknic -1

E. esxcli network ip interface ipv4 get

Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

A. virsh dumpxml | grep interfaceid

B. virsh get-interface

C. virsh show | grep interfaceid

D. virsh list-interface

An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.
In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

A. Advertise All LB SNAT IP Routes

B. All Static Routes

C. Information

D. Advertise All LB VIP Routes

E. Advertise All NAT Routes

Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

A. set service nsx-manager logging-level debug

B. set service nsx-manager log-level debug

C. set service manager log-level debug

D. set service manager logging-level debug

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. GROUPING

D. MONITORING

Which two tools are used for centralized logging in NSX-T Data Center? (Choose two.)

A. vRealize Log Insight

B. Syslog Server

C. vRealize Network Insight

D. vRealize Operations

E. vRealize Automation

Where are Distributed Firewall logs containing access decisions stored?

A. NSX API

B. NSX Edge

C. NSX Manager

D. Hypervisor transport node

Which component does the hyperbus interface (vmk50) provide network connectivity to?

A. containers running on ESXi/KVM transport nodes

B. virtual machines and containers running across transport nodes

C. virtual machines running on the same hypervisor

D. virtual machines running in the same segment

Which statement describes the VMware Virtual Cloud Network Vision?

A. Virtual Cloud Network connects and protects virtual machines running in KVM environments.

B. Virtual Cloud Network connects and protects virtual machines running in vSphere environments.

C. Virtual Cloud Network connects and protects applications, regardless of their physical locations.

D. Virtual Cloud Network connects and protects applications and data, regardless of their physical locations.

What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

A. Cloud Service Administrator

B. Network Engineer

C. Network Operator

D. NSX Administrator

Which two statements are true for a Tier-1 Gateway? (Choose two.)

A. supports ECMP

B. owned and configured by the Tenant

C. always configured in active-standby mode

D. owned and configured by Service Provider

E. connects to physical networks

Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)

A. can have a maximum of 8 edge nodes

B. must have only active-active edge nodes

C. can have a maximum of 10 edge nodes

D. can contain multiple types of edge nodes (VM or bare metal)

E. must contain only one type of edge nodes (VM or bare metal)

Which three steps must be carried out to configure North-South / East-West Network Inspection? (Choose three.)

A. Service Deployment

B. Service Insertion

C. Service Consumption

D. Service Registration

E. Service Introspection

Which CLI command is used to disable SSH timeout on NSX Manager and NSX Edge nodes?

A. set cli ssh timeout 0

B. set cli-timeout 0

C. set esxcli ssh session off

D. nsxcli ssh session on

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set user audit password command.

C. The audit user must be created and have its password changed to log into the NSX Manager.

D. The administrator must run the set audit user password command.

E. The audit user has read-write access to the NSX Manager.

An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.
Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

A. N-VDS/VDS Profile

B. Transport Node Profile

C. Host Switch Profile

D. Uplink Profile

Which CLI command shows syslog on NSX Manager?

A. show log manager follow

B. get log-file auth.log

C. get log-file syslog

D. /var/log/sysloq/syslog.log

Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

A. MTU 1500

B. MTU 1400

C. vSphere Distributed Switch 6.5

D. vSphere Distributed Switch 7.0

E. MTU 1600

When running nsxcli on an ESXi host, which command will show the Replication mode?

A. get logical-switch status

B. get logical-switch

C. get logical-switches

D. get logical-switch status

Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

A. IPFIX

B. Port Mirroring

C. Traceflow

D. SPAN mirrors

An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?

A. join management-cluster username admin password thumbprint

B. join cluster username root password thumbprint

C. join policy-manager username root password thumbprint

D. join management-plane username admin password thumbprint

Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

A. set time-server

B. get timezone

C. set ntp-server

D. set timezone

Which statement is true about an alarm in a Suppressed state?

A. An alarm can be suppressed for a specific duration in days.

B. An alarm can be suppressed for a specific duration in minutes.

C. An alarm can be suppressed for a specific duration in seconds.

D. An alarm can be suppressed for a specific duration in hours.

A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to secure a simple application composed of web, app, and database tiers.
The naming convention will be:
✑ WKS-WEB-SRV-XXX
✑ WKY-APP-SRR-XXX
✑ WKI-DB-SRR-XXX
What is the optimal way to group them in order to enforce security policies from NSX-T Data Center?

A. Create an Ethernet based security policy.

B. Group all by means of tags membership.

C. Use Edge as a firewall between tiers.

D. Do a service insertion to accomplish the task.

Which tool could be used to configure BGP on a Tier-0 Gateway?

A. PowerShell

B. ESX CLI

C. API

D. NSX CLI

Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

A. Multicast

B. Anycast

C. Unicast

D. Broadcast

The NSX Control Plane is responsible for which two functions? (Choose two.)

A. receive and validate configuration from NSX Policy

B. host API services

C. propagate topology information

D. push stateless configurations to forwarding engines

E. maintain packet-level statistics

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A. Syslog is not configured on the ESXi transport node

B. Distributed Firewall Rule logging is not enabled

C. Syslog is not configured on the NSX Manager

D. Zero Trust Security is not enabled

A customer is preparing to deploy VMware Kubernetes on an NSX-T Data Center.
What is the minimum MTU size for the UPLINK profile?

A. 1500

B. 1650

C. 1550

D. 1600

An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time.
Which CLI command disables the nsxcli time out value on NSX Manager?

A. set cli-timeout 0

B. set cli-timeout enabled

C. set cli-timeout disabled

D. set cli-timeout 1

Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

A. esxcli network firewall ruleset set -a -e false

B. esxcli network firewall ruleset -e syslog

C. esxcli network firewall ruleset set -r syslog -e false

D. esxcli network firewall ruleset set -r syslog -e true

What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

A. Segment Port

B. Group

C. Segment

D. DFW

E. Tier-1 Gateway

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

A. Identify security vulnerabilities in the workloads.

B. Use agentless antivirus with Guest Introspection.

C. Quarantine workloads based on vulnerabilities.

D. Identify risk and reputation of accessed websites.

E. Gain insight about micro-segmentation traffic flows.

A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

A. Profile

B. Source

C. Service

D. Policy

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

A. Tier-1 Gateway

B. Edge Services Gateway

C. Tier-0 Gateway

D. Layer 2 Gateway

When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

A. SR and DR doesn’t need to be connected to provide any stateful services.

B. DR is instantiated and automatically connected with SR.

C. SR is instantiated and automatically connected with DR.

D. SR and DR is instantiated but requires manual connection.

Which two commands are used to query the arp-table of a logical switch? (Choose two.)

A. get logical-switch arp-table

B. get logical-switch arp-table

C. get logical-switch arp-table

D. get logical-switch arp-table

E. get logical-switch arp-table

What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

A. Service interface

B. Loopback Router Port

C. Downlink interface

D. VLAN Uplink

A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway. A NSX-T Data Center administrator used the get logical-routers command to retrieve this information:
 
Which two commands must be executed to check BGP neighbor status? (Choose two.)

A. vrf 3

B. vrf 1

C. vrf 4

D. sa-nsxedge-01(tier1_sr)> get bgp neighbor

E. sa-nsxedge-01(tier0_sr)> get bgp neighbor

F. sa-nsxedge-01(tier0_dr)> get bgp neighbor

Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

A. get support-bundle file vcpnv.tgz

B. set support-bundle file vcpnv.tgz

C. vm-support

D. esxcli system syslog config logger set –id=nsxmanager

Which two choices are solutions of the NSX portfolio (Choose two.)?

A. vRealize Automation

B. NSX Distributed IDS/IPS

C. vRealize Network Insight

D. Tanzu Kubernetes Grid

E. NSX Service Mesh

Which two logical router components span across all transport nodes? (Choose two.)

A. DISTRIBUTED_ROUTER_TIER0

B. SERVICE_ROUTER_TIER0

C. TIER0_DISTRIBUTED_ROUTER

D. DISTRIBUTED_ROUTER_TIER1

E. SERVICE_ROUTER_TIER1

In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

A. Deploy Large size Edge node/s.

B. Configure ECMP on the Tier-0 gateway.

C. Configure NAT on the Tier-0 gateway.

D. Add an additional vNIC to the NSX Edge node.

E. Configure a Tier-1 gateway and connect it directly to the physical routers.

An NSX administrator has configured a KVM hypervisor as a transport node.
Which kernel module on KVM implements a N-VDS?

A. openvswitch

B. etherswitch

C. nsx-vswitch

D. dvswitch