A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

A. Policy

B. Profile

C. Service

D. Source

What is the correct prioritization for gateway policy categories?

A. Shared Pre-rules > Emergency > System > Local Gateway > Auto Service > Default

B. Shared Pre-rules > Emergency > Local Gateway > System > Auto Service > Default

C. Emergency > System > Shared Pre-rules > Auto Service > Local Gateway > Default

D. Emergency > System > Shared Pre-rules > Local Gateway > Auto Service > Default

Refer to the exhibit.
 
An NSX administrator is retrieving a log bundle at the request of VMware Global Support. It is taking a long time to get the log bundle. The administrator reviews the configuration.
Which two changes to the configuration must be made to speed up the creation of the bundle. (Choose two.)

A. Disable upload bundle to remote file server

B. Change transfer protocol

C. Do not use ssh fingerprint

D. Create the support bundle from vCenter

E. Disable Include core files and audit logs

Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

A. SPAN mirrors

B. Port Mirroring

C. Traceflow

D. IPFIX

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. MONITORING

D. GROUPING

Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A. Destination MAC

B. Failover Order

C. Load Balanced Source

D. Load Balanced Source IP

E. Destination Port

F. Load Balanced Source MAC

An NSX administrator has configured a KVM hypervisor as a transport node.
Which kernel module on KVM implements a N-VDS?

A. dvswitch

B. nsx-vswitch

C. openvswitch

D. etherswitch

Which denies all network traffic unless exclusively specified?

A. Blacklist

B. Whitelist

C. Default List

D. Trusted List

An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

A. Port NAT

B. Source NAT

C. Destination NAT

D. 1:1 NAT

E. Reflexive NAT

What are the supported N-VDS modes?

A. DPDK Datapath

B. Enhanced Datapath

C. Overlay Datapath

D. Standard Datapath

E. Secure Datapath

The NSX Control Plane is responsible for which two functions? (Choose two.)

A. push stateless configurations to forwarding engines

B. propagate topology information

C. receive and validate configuration from NSX Policy

D. host API services

E. maintain packet-level statistics

Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

A. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

B. Create an OAuth 2.0 client in VMware Identity Manager.

C. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

D. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.

E. Enter the Identity Provider (IdP) metadata URL in NSX Manager.

What is VMware's recommendation for the minimum MTU requirements when planning a NSX-T Data Center deployment?

A. MTU should be set to 1550 or less across the data center network including inter-data center connections.

B. MTU should be set to 1500 or less only on inter-data center connections.

C. Configure Path MTU Discovery and rely on fragmentation.

D. MTU should be set to 1600 or greater across the data center network including inter-data center connections.

Which two statements describe the characteristics of an Edge Cluster in NSX-T 2.4 Data Center? (Choose two.)

A. must contain only one type of edge nodes (VM or bare metal)

B. can contain multiple types of edge nodes (VM or bare metal)

C. must have only active-active edge nodes

D. can have a maximum of 10 edge nodes

E. can have a maximum of 8 edge nodes

Which protocol uses the 6081 UDP port?

A. Network Virtualization using Generic Routing Encapsulation (NVGRE)

B. Generic Network Virtualization Encapsulation (GENEVE)

C. Stateless Transport Tunneling (STT)

D. Virtual Extensible LAN (VXLAN)

Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

A. Distributed Firewall

B. Service Insertion

C. Gateway Firewall

D. Virtual Private Network

E. Distributed Routing

F. Packet Forwarding

Which three CLI commands will list the TEP IPs configured on an ESXi transport node? (Choose three.)

A. esxcfg-vswitch -1

B. esxcfg-vmknic -1

C. esxcli network ip address list

D. esxcli network ip netstack list

E. esxcli network ip interface ipv4 get

F. esxcli network ip interface list

Which two statements describe the characteristics of the Services Router (SR) component of a Tier-0 Gateway? (Choose two.)

A. Edge cluster is mandatory for SR to be created.

B. SR can exist on both hypervisor transport nodes and Edge transport nodes.

C. SR is automatically created when stateful services are enabled.

D. Edge transport nodes are required for SR to be created.

E. SR can be created from the NSX Advanced Networking & Security tab in the UI.

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set audit user password command.

C. The audit user has read-write access to the NSX Manager.

D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.

E. The administrator must run the set user audit password command.

Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

A. get host-switch tunnels

B. get host-switch tunnel status

C. get transport-node tunnel state

D. get transport-node tunnel status

A customer is planning deployment of a third-party OpenStack application.
Which is used to grant permissions to the application on NSX Manager?

A. Guest Identity

B. Cloud Identity

C. Principal Identity

D. API Identity

Which CLI command is used for packet capture on the KVM Transport Node?

A. tcpdump

B. debug

C. set capture

D. tcpdump-uw

An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.
Which feature in the NSX Manager Simplified UI shows the mapping between the virtual NIC and the host's physical adapter?

A. N-VDS Visualization

B. Activity Monitoring

C. IPFIX

D. Port Mirroring

Which three steps must be taken to assign a new IP address to a member of a NSX Management Cluster that was deployed manually? (Choose three.)

A. Delete NSX Manager VM

B. Change IP address of NSX Manager in vApp Properties

C. Execute detach node from the NSX Manager CLI

D. Deploy new NSX Manager VM

E. Delete NSX Management cluster member from NSX Simplified UI

Which is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with QCOW2 image

B. deploy NSX Edge VM with ISO image

C. deploy NSX Edge on a bare-metal server

D. deploy NSX Edge VM with OVF template

In an enterprise-based single-tier routing topology, which routing component provides east-west routing functionality?

A. Tier-0 Gateway

B. Edge Node

C. Edge Cluster

D. Tier-1 Gateway

Refer to the exhibit.
 
A vSphere administrator is trying to connect T1-Web-01 virtual machine to a NSX-T logical switch and is receiving an error.
Which service must be restarted to connect the virtual machine to a NSX-T logical switch?

A. /etc/init.d/nsx-opsagent start

B. /etc/init.d/nsx-proxy start

C. /etc/init.d/nsxa start

D. /etc/init.d/nsx-datapath start

What is the function of a domain in a NSX-T Data Center?

A. defines the scope of transport zones

B. defines the scope of security policies and groups

C. defines the scope of physical networks

D. defines the scope of transport nodes

Which two are valid configurations when attempting to enable L2VPN services in a NSX-T Data Center? (Choose two.)

A. Connect the Segments to Edge Cluster.

B. Configure L2VPN on the Tier-1 Gateway.

C. Configure L2VPN on the Tier-0 Gateway.

D. Connect the Segments to Edge nodes.

E. Connect the Segments to Tier-0 or Tier-1 Gateway.

How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?

A. 3

B. 5

C. 4

D. 6

An administrator wants to validate the BGP connection status between the Tier-0 Gateway and the upstream physical router.
What sequence of commands could be used to check this status on NSX Edge node?

A. – set vrf – show logical-routers – show bgp

B. – show logical-routers – get vrf – show ip route bgp

C. – enable – get vrf – show bgp neighbor

D. – get logical-routers – vrf – get bgp neighbor

Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

A. Multicast

B. Anycast

C. Broadcast

D. Unicast

Which three hardware-based offloads provide maximum performance for physical network interface cards? (Choose three.)

A. Netfilter Flow Offload (NFO)

B. Priority Flow Control (PFC)

C. Receive Side Scaling (RSS)

D. TCP Segmentation Offload (TSO)

E. Source Route Bridging (SRB)

F. Large Receive Offload (LRO)

What is required to configure a load balancer in inline mode?

A. DNAT

B. SNAT

C. Client and server connected to different Tier-1 Gateways

D. Client and server running on different transport nodes

Which NSX CLI command will enable the SSH service on the NSX Edge node?

A. set service ssh enabled

B. start service ssh

C. start service ssh start-on-boot

D. set service ssh start-on-boot enabled

A company is planning to implement NSX-T Data Center and will be using load balancing for 50 unique production workloads.
Which is the minimum NSX-T Edge size configuration required to support the production load balancer?

A. Large (8 vCPU 16GB RAM)

B. Medium (4 vCPU 8GB RAM)

C. Extra Large (12 vCPU 24GB RAM)

D. Small (2 vCPU 4GB RAM)

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

A. Reverse NAT

B. SNAT

C. 1:1 NAT

D. DNAT

Which two commands could be used on an ESXi transport node to validate connectivity to the NSX Manager? (Choose two.)

A. nsxcli –cmd get manager status

B. esxcli network ip connection list i grep rabbitmq

C. nsxcli –cmd get managers

D. nsxcli –cmd get manager connectivity status

E. esxcli network ip connection list i grep 5671

An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?

A. join cluster username root password thumbprint

B. join management-plane username admin password thumbprint

C. join policy-manager username root password thumbprint

D. join management-cluster username admin password thumbprint

An NSX administrator has created a segment named WEB-LS from the simplified UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

A. Since the Compute Manager is disconnected in Simplified UI, the WEB-LS segment will not be realized on the KVM Transport Node.

B. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.

C. The virtual machines running on the KVM Transport Node are not connected to the VDS.

D. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.

E. The virtual machines running on the KVM transport node are not connected to the WEB-LS Segment.

An NSX administrator would like to configure syslog for a KVM transport node.
Which host log files could be exported to a remote syslog server?

A. /var/log/vmware/nsx-syslog

B. /var/log/cfgAgent.log

C. /var/log/nsx-audit.log

D. /var/log/cloudnet/nsx-ccp.log

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide East-West routing for the VMs.
Which routing component must be deployed?

A. Tier-0 Gateway

B. Edge Cluster

C. Tier-1 Gateway

D. Edge Node

Which two commands are used to query the arp-table of a logical switch? (Choose two.)

A. get logical-switch arp-table

B. get logical-switch arp-table

C. get logical-switch arp-table

D. get logical-switch arp-table

E. get logical-switch arp-table

Which security feature on Tier-1 Gateways helps limit malicious traffic?

A. Unicast Reverse Path Forwarding (URPF)

B. Centralized Service Port (CSP)

C. Promiscuous Mode

D. Reverse Path Forwarding (RPF)

When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

A. SR and DR doesn’t need to be connected to provide any stateful services.

B. SR is instantiated and automatically connected with DR.

C. SR and DR is instantiated but requires manual connection.

D. DR is instantiated and automatically connected with SR.

Which three different transport nodes could be configured in the data plane? (Choose three.)

A. vShield Edge VM

B. ESXi and KVM

C. Linux-based Bare Metal server

D. NSX Edge VM on KVM

E. ESXi and Hyper-V

F. VM or Bare Metal NSX Edge

A user is assigned these two roles in NSX Manager:
"¢ Load Balancer Administrator
"¢ Network Engineer
What privileges does this user have in the system?

A. full access permissions on all networking services and full access permissions on load balancing features

B. read permissions on all networking services and read permissions on load balancing features

C. read permissions on all networking services and full access permissions on load balancing features

D. full access permissions on all networking services and read permissions on load balancing features

What are two supported VPN configuration types in a NSX-T Data Center? (Choose two.)

A. OpenVPN

B. MPLS

C. L3VPN

D. L2VPN

E. SSLVPN+

What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

A. Loopback Router Port

B. Centralized Service Port

C. VLAN Uplink

D. Downlink

Refer to the exhibit.
 
An administrator is trying to configure a medium load balancer in a production environment, but is getting the error message shown in the exhibit.
Which step must the administrator perform to remediate the problem?

A. Reduce the size of the virtual pool.

B. Restart the NSX Manager.

C. Power-off the existing load balancer and change its size.

D. Place the Tier-1 Gateway in a large edge cluster and redeploy the load balancer.