When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

A. SR and DR doesn’t need to be connected to provide any stateful services.

B. DR is instantiated and automatically connected with SR.

C. SR is instantiated and automatically connected with DR.

D. SR and DR is instantiated but requires manual connection.

Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

A. virsh dumpxml | grep interfaceid

B. virsh get-interface

C. virsh show | grep interfaceid

D. virsh list-interface

An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.
Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

A. e1000

B. VMXNET2

C. VMXNET3

D. Flexible

How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

A. Automatically created when Tier-1 is created.

B. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.

C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.

D. Automatically created when Tier-1 is connected with Tier-0 from NSX UI.

An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original failed node to become the Active node upon recovery.
Which failover policy meets this requirement?

A. Non-Preemptive

B. Preemptive

C. Enable Preemptive

D. Disable Preemptive

Which CLI command is used to start the NSX Manager virtual machine in the KVM environment?

A. virsh start

B. virsh poweron

C. virsh start

D. virsh poweron

Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A. Destination MAC

B. Load Balanced Source IP

C. Failover Order

D. Destination Port

E. Load Balanced Source MAC

F. Load Balanced Source

Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

A. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.

B. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

C. Create an OAuth 2.0 client in VMware Identity Manager.

D. Enter the Identity Provider (IdP) metadata URL in NSX Manager.

E. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

Refer to the exhibit.
 
Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

A. SNAT

B. Reverse NAT

C. DNAT

D. 1:1 NAT

What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.)

A. stateful services leveraged

B. Failover of services

C. traffic predictability

D. traffic load balancing

E. increased north/south bandwidth

What are three NSX Manager roles? (Choose three.)

A. cloud

B. manager

C. zookeeper

D. policy

E. master

F. controller

An NSX administrator has configured a KVM hypervisor as a transport node.
Which kernel module on KVM implements a N-VDS?

A. openvswitch

B. etherswitch

C. nsx-vswitch

D. dvswitch

When running nsxcli on an ESXi host, which command will show the Replication mode?

A. get logical-switch status

B. get logical-switch

C. get logical-switches

D. get logical-switch status

What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

A. Service interface

B. Loopback Router Port

C. Downlink interface

D. VLAN Uplink

Which Network and Security virtualization solution provides network hybridity and mobility?

A. NSX Intelligence

B. VMware HCX

C. VMware Tanzu Service Mesh

D. NSX Advanced Load Balancer

What are two supported N-VDS modes? (Choose two.)

A. DPDK Datapath

B. Overlay Datapath

C. Secure Datapath

D. Enhanced Datapath

E. Standard Datapath

What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

A. Segment Port

B. Group

C. Segment

D. DFW

E. Tier-1 Gateway

Which CLI command shows syslog on NSX Manager?

A. show log manager follow

B. get log-file auth.log

C. get log-file syslog

D. /var/log/sysloq/syslog.log

Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

A. Create an IPsec service.

B. Add a local endpoint.

C. Configure an IPsec session.

D. Configure a distributed firewall policy.

E. Add a logical switch.

A user is assigned these two roles in NSX Manager:
✑ LB Admin
✑ Network Engineer
What privileges does this user have in the system?

A. read permissions on all networking services and full access permissions on load balancing features

B. full access permissions on all networking services and full access permissions on load balancing features

C. full access permissions on all networking services and read permissions on load balancing features

D. read permissions on all networking services and read permissions on load balancing features

An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.
In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

A. Advertise All LB SNAT IP Routes

B. All Static Routes

C. Information

D. Advertise All LB VIP Routes

E. Advertise All NAT Routes

Which network virtualization technologies can be used with an Ethernet VPN (EVPN) deployment in NSX-T Data Center? (Choose two.)

A. Virtual Extensible Local Area Network (VXLAN)

B. Multiprotocol Border Gateway Protocol (MP-BGP)

C. Open Shortest Path First (OSPF)

D. Multiprotocol Label Switching (MPLS)

E. Virtual Routing and Forwarding (VRF)

Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

A. get support-bundle file vcpnv.tgz

B. set support-bundle file vcpnv.tgz

C. vm-support

D. esxcli system syslog config logger set –id=nsxmanager

Which network tool could an administrator use on an ESXi 7 host to capture packets when troubleshooting connectivity issues?

A. Wireshark

B. pktcap-uw

C. tcpdump

D. net-stats

Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

A. Multicast

B. Anycast

C. Unicast

D. Broadcast

When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?

A. Create a secondary vNIC on each quest VM for SVM communication.

B. Place a partner SVM on each compute cluster node.

C. Centralize partner SVMs in a service cluster.

D. Add partner SVMs to an edge cluster.

Which log is used to see a failed NSX-T installation of a VIB package on ESXi transport nodes?

A. /var/log/vmware/eam/eam.log

B. /var/log/esxupdate.log

C. /var/log/syslog.log

D. /var/log/hostd.Iog

Which tool could be used to inspect the path of a packet in the data plane?

A. Port Connection

B. Port Mirroring Session

C. Netflow

D. Traceflow

Which discovery protocol is supported for hypervisor transport nodes?

A. Adobe Real-time CDP

B. Cisco Discovery Protocol

C. Link Layer Discovery Protocol

D. Neighbor Discovery Protocol

What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

A. Cloud Service Administrator

B. Network Engineer

C. Network Operator

D. NSX Administrator

An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

A. esxcli network diag ping -H

B. vmkping ++netstack=geneve -d -s 1572

C. vmkping ++netstack=vxlan-d -s 1572

D. esxcli network diag ping -I vmk0 -H

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. GROUPING

D. MONITORING

Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

A. ifconfig

B. tcpdump

C. debug

D. ipconfig

Which tool could be used to configure BGP on a Tier-0 Gateway?

A. PowerShell

B. ESX CLI

C. API

D. NSX CLI

Which three can an administrator define in a transport node profile? (Choose three.)

A. Logical Router

B. Segment Profile

C. Segment

D. Uplink Profile

E. VDS switch configuration

F. N-VDS switch configuration

Which two statements are true for a Tier-1 Gateway? (Choose two.)

A. supports ECMP

B. owned and configured by the Tenant

C. always configured in active-standby mode

D. owned and configured by Service Provider

E. connects to physical networks

Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

A. MTU 1500

B. MTU 1400

C. vSphere Distributed Switch 6.5

D. vSphere Distributed Switch 7.0

E. MTU 1600

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A. Syslog is not configured on the ESXi transport node

B. Distributed Firewall Rule logging is not enabled

C. Syslog is not configured on the NSX Manager

D. Zero Trust Security is not enabled

Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

A. Service Insertion

B. Distributed Routing

C. Packet Forwarding

D. Gateway Firewall

E. Distributed Firewall

F. Virtual Private Network

Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

A. esxcli network firewall ruleset set -a -e false

B. esxcli network firewall ruleset -e syslog

C. esxcli network firewall ruleset set -r syslog -e false

D. esxcli network firewall ruleset set -r syslog -e true

An NSX administrator would like to configure syslog for a KVM transport node.
Which host log files could be exported to a remote syslog server?

A. /var/log/cloudnet/nsx-ccp.log

B. /var/log/vmware/nsx-syslog

C. /var/log/cfgAgent. log

D. /var/log/nsx-audit.log

Which two tools are used for centralized logging in NSX-T Data Center? (Choose two.)

A. vRealize Log Insight

B. Syslog Server

C. vRealize Network Insight

D. vRealize Operations

E. vRealize Automation

A DevOps user has deployed a Kubernetes Pod in vSphere.
What does the term ClusterIP represent within NSX-T?

A. Deployment of T1 with NLB service.

B. Deployment of Distributed Router.

C. Deployment of Distributed Load Balancing service.

D. Deployment of T0 and T1

Which two statements are true about the implementation of multicast in NSX-T Data Center? (Choose two.)

A. Multicast routing is implemented with PIM Sparse-Mode.

B. IGMP Snooping is used to populate multicast forwarding tables.

C. Tier-0 gateways can be the Rendezvous Point.

D. Multicast is supported in ESXi and KVM transport nodes.

E. An Edge can be the Rendezvous Point.

An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.
Which feature in the NSX UI shows the mapping between the virtual NIC and the host's physical adapter?

A. Switch Visualization

B. Port Mirroring

C. Activity Monitoring

D. IPFIX

Which three protocols could an NSX administrator use to transfer log messages to a remote log server? (Choose three.)

A. SSL

B. HTTPS

C. TLS

D. UDP

E. SSH

F. TCP

Which three steps must be carried out to configure North-South / East-West Network Inspection? (Choose three.)

A. Service Deployment

B. Service Insertion

C. Service Consumption

D. Service Registration

E. Service Introspection

An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.
Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

A. N-VDS/VDS Profile

B. Transport Node Profile

C. Host Switch Profile

D. Uplink Profile

Which choice is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with OVF template

B. deploy NSX Edge on a bare-metal server

C. deploy NSX Edge VM with QCOW2 image

D. deploy NSX Edge on physical switch

Which two choices are solutions of the NSX portfolio (Choose two.)?

A. vRealize Automation

B. NSX Distributed IDS/IPS

C. vRealize Network Insight

D. Tanzu Kubernetes Grid

E. NSX Service Mesh