Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

A. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

B. Create an OAuth 2.0 client in VMware Identity Manager.

C. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

D. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.

E. Enter the Identity Provider (IdP) metadata URL in NSX Manager.

Which NSX CLI command will enable the SSH service on the NSX Edge node?

A. set service ssh enabled

B. start service ssh

C. start service ssh start-on-boot

D. set service ssh start-on-boot enabled

Which technology is leveraged in the NSX Edge for fast packet processing?

A. Intel Data Plane Development Kit (DPDK)

B. Intel Speed Step

C. AMD Power Now

D. Non-Uniform Memory Access (NUMA)

An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway. In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

A. Information

B. Advertise All LB SNAT IP Routes

C. Advertise All LB VIP Routes

D. All Static Routes

E. Advertise All NAT Routes

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A. Syslog is not configured on the NSX Manager

B. Distributed Firewall Rule logging is not enabled

C. Zero Trust Security is not enabled

D. Syslog is not configured on the ESXi transport node

Which protocol uses the 6081 UDP port?

A. Network Virtualization using Generic Routing Encapsulation (NVGRE)

B. Generic Network Virtualization Encapsulation (GENEVE)

C. Stateless Transport Tunneling (STT)

D. Virtual Extensible LAN (VXLAN)

While planning a NSX-T Data Center deployment with a network administrator, you are told the physical network uses Open Shortest Path First (OSPF) for the
Interior Gateway Protocol (IGP). The OSPF design is flat with the data center containing one OSPF area, area 0. The network administrator would like to extend area 0 into NSX-T so that dynamic routing updates will be learned bidirectionally.
Which meets the requirement?

A. Utilize static routes between the NSX-T topology and the physical network.

B. Recommend creating a new area for NSX-T to protect NSX-T’s control plane from Link State Advertisement (LSA) floods from OSPF area 0.

C. Utilize the Border Gateway Protocol (BGP) on NSX-T and configure the physical network for route redistribution.

D. Utilize multi-protocol Border Gateway Protocol (BGP) in the NSX-T topology and configure the physical network for route redistribution.

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. MONITORING

D. GROUPING

Which two statements describe the characteristics of an Edge Cluster in NSX-T 2.4 Data Center? (Choose two.)

A. must contain only one type of edge nodes (VM or bare metal)

B. can contain multiple types of edge nodes (VM or bare metal)

C. must have only active-active edge nodes

D. can have a maximum of 10 edge nodes

E. can have a maximum of 8 edge nodes

Refer to the exhibit.
 
A vSphere administrator is trying to connect T1-Web-01 virtual machine to a NSX-T logical switch and is receiving an error.
Which service must be restarted to connect the virtual machine to a NSX-T logical switch?

A. /etc/init.d/nsx-opsagent start

B. /etc/init.d/nsx-proxy start

C. /etc/init.d/nsxa start

D. /etc/init.d/nsx-datapath start

The security administrator turns on logging for a firewall rule.
Where is the log stored on ESXi and KVM transport nodes?

A. /var/log/vmware/nsx/firewall.log

B. /var/log/fw.log

C. /var/log/messages.log

D. /var/log/dfwpktlogs.log

Which three hardware-based offloads provide maximum performance for physical network interface cards? (Choose three.)

A. Netfilter Flow Offload (NFO)

B. Priority Flow Control (PFC)

C. Receive Side Scaling (RSS)

D. TCP Segmentation Offload (TSO)

E. Source Route Bridging (SRB)

F. Large Receive Offload (LRO)

Which vmkernel module implements the N-VDS on an ESXi transport node?

A. openvswitch

B. etherswitch

C. nsxt-vswitch

D. dvswitch

What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

A. Network Operator

B. Network Engineer

C. Cloud Service Administrator

D. NSX Administrator

Which component does the hyperbus interface (vmk50) provide network connectivity to?

A. virtual machines and containers running across transport nodes

B. virtual machines running on the same hypervisor

C. containers running on ESXi/KVM transport nodes

D. virtual machines running in the same segment

Which three different transport nodes could be configured in the data plane? (Choose three.)

A. vShield Edge VM

B. ESXi and KVM

C. Linux-based Bare Metal server

D. NSX Edge VM on KVM

E. ESXi and Hyper-V

F. VM or Bare Metal NSX Edge

What is the correct prioritization for gateway policy categories?

A. Shared Pre-rules > Emergency > System > Local Gateway > Auto Service > Default

B. Shared Pre-rules > Emergency > Local Gateway > System > Auto Service > Default

C. Emergency > System > Shared Pre-rules > Auto Service > Local Gateway > Default

D. Emergency > System > Shared Pre-rules > Local Gateway > Auto Service > Default

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

A. Reverse NAT

B. SNAT

C. 1:1 NAT

D. DNAT

Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

A. get host-switch tunnels

B. get host-switch tunnel status

C. get transport-node tunnel state

D. get transport-node tunnel status

What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

A. Group

B. Tier-1 Gateway

C. Segment Port

D. Segment

E. DFW

In an enterprise-based single-tier routing topology, which routing component provides east-west routing functionality?

A. Tier-0 Gateway

B. Edge Node

C. Edge Cluster

D. Tier-1 Gateway

An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

A. Tier-0 Gateway

B. Edge Node

C. Tier-1 Gateway

D. Edge Cluster

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set audit user password command.

C. The audit user has read-write access to the NSX Manager.

D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.

E. The administrator must run the set user audit password command.

Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

A. Distributed Firewall

B. Service Insertion

C. Gateway Firewall

D. Virtual Private Network

E. Distributed Routing

F. Packet Forwarding

How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?

A. 3

B. 5

C. 4

D. 6

When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

A. SR and DR doesn’t need to be connected to provide any stateful services.

B. SR is instantiated and automatically connected with DR.

C. SR and DR is instantiated but requires manual connection.

D. DR is instantiated and automatically connected with SR.

Which two are valid configurations when attempting to enable L2VPN services in a NSX-T Data Center? (Choose two.)

A. Connect the Segments to Edge Cluster.

B. Configure L2VPN on the Tier-1 Gateway.

C. Configure L2VPN on the Tier-0 Gateway.

D. Connect the Segments to Edge nodes.

E. Connect the Segments to Tier-0 or Tier-1 Gateway.

Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A. Destination MAC

B. Failover Order

C. Load Balanced Source

D. Load Balanced Source IP

E. Destination Port

F. Load Balanced Source MAC

Refer to the exhibit.
 
Considering Transport Zone limitations, how many NSX managed virtual distributed switches (N-VDSs) are needed on each ESXi to join all the Transport Zones?

A. 4

B. 3

C. 2

D. 1

A customer is planning deployment of a third-party OpenStack application.
Which is used to grant permissions to the application on NSX Manager?

A. Guest Identity

B. Cloud Identity

C. Principal Identity

D. API Identity

Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

A. virsh list-interface

B. virsh get-interface

C. virsh dumpxml | grep interfaceid

D. virsh show | grep interfaceid

Which is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with QCOW2 image

B. deploy NSX Edge VM with ISO image

C. deploy NSX Edge on a bare-metal server

D. deploy NSX Edge VM with OVF template

Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

A. esxcli network vswitch dvs vmware list

B. esxcfg-nics -1

C. esxcfg-vmsvc/get.networks

D. esxcfg-vmknic -1

E. esxcli network nic list

Which denies all network traffic unless exclusively specified?

A. Blacklist

B. Whitelist

C. Default List

D. Trusted List

What is the maximum supported ECMP paths in NSX-T 2.4 Data Center?

A. 6

B. 8

C. 9

D. 7

An organization with two data centers is planning an active-active multi-site deployment of NSX-T Data Center.
The two data centers have this network connectivity configuration:
✑ Redundant 1Gbps links with 200 millisecond RTT
✑ Global load balancing is not being utilized
✑ 1600 MTU
✑ vSphere 6.5U2
Which configuration prevents the use of an active-active architecture?

A. vSphere 6.7 is the minimum supported version for active-active on vSphere

B. 9000 MTU is required for active-active state replication

C. global load-balancing is required to support NSX Manager DNS namespace

D. RTT must be under 150 ms

What is the function of a domain in a NSX-T Data Center?

A. defines the scope of transport zones

B. defines the scope of security policies and groups

C. defines the scope of physical networks

D. defines the scope of transport nodes

Which command on ESXi Is used to verify the Local Control Plane connectivity with Central Control Plane?

A. esxcli network ip connection list | grep ccpd

B. esxcli network ip connection list | grep 1234

C. esxcli network ip connection list | grep netcpa

D. esxcli network ip connection list | grep 1235

An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-active high availability mode.
Which NAT rule type is supported for this configuration?

A. Destination NAT

B. 1:1 NAT

C. Reflexive NAT

D. Source NAT

What is VMware's recommendation for the minimum MTU requirements when planning a NSX-T Data Center deployment?

A. MTU should be set to 1550 or less across the data center network including inter-data center connections.

B. MTU should be set to 1500 or less only on inter-data center connections.

C. Configure Path MTU Discovery and rely on fragmentation.

D. MTU should be set to 1600 or greater across the data center network including inter-data center connections.

What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

A. Loopback Router Port

B. Centralized Service Port

C. VLAN Uplink

D. Downlink

Which two components are involved in the logical switching and N-VDS configuration during ESXi transport node installation? (Choose two.)

A. etherswitch

B. Open vSwitch

C. nsx-opsAgent

D. vdl2

E. nsx-vswitch

What is required to configure a load balancer in inline mode?

A. DNAT

B. SNAT

C. Client and server connected to different Tier-1 Gateways

D. Client and server running on different transport nodes

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node?
(Choose two.)

A. esxcfg-vmknic -1

B. esxcli network ip interface ipv4 get

C. esxcli network nic list

D. net-dvs

E. esxcfg-nics -1

Which two commands could be used on an ESXi transport node to validate connectivity to the NSX Manager? (Choose two.)

A. nsxcli –cmd get manager status

B. esxcli network ip connection list i grep rabbitmq

C. nsxcli –cmd get managers

D. nsxcli –cmd get manager connectivity status

E. esxcli network ip connection list i grep 5671

What are three functions of a Tier-0 Gateway in a multi-tenant service provider environment? (Choose three.)

A. acts as a default gateway for the tenant workloads

B. enables east-west connectivity to the tenant workloads

C. interconnects the Tier-1 gateways of multiple tenants

D. provides isolation between the tenants

E. provides first-hop routing for the tenant workloads

F. enables north-south connectivity to the tenant workloads

An NSX administrator has observed connectivity issues between the NSX Manager and the KVM Transport Node.
Which two log files could be used to troubleshoot the issue on the KVM Transport Node? (Choose two.)

A. /var/log/vmware/nsx-syslog

B. /usr/vmware/log/syslog

C. /var/log/nsx/syslog

D. /usr/vmware/nsx-syslog

E. /var/log/syslog

Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?

A. Host Profile

B. Switching Profile

C. Uplink Profile

D. Transport Node Profile

Which command is used to verify the application of Distributed Firewall Rules applied to a VM on a KVM transport node?

A. esxcli network firewall get

B. esxcli network ip connection list

C. ovs-vsctl add-br br-int

D. ovs-appctl -t /var/run/openvswitch/nsxa-ctl dfw/rules

A company is planning to implement NSX-T Data Center and will be using load balancing for 50 unique production workloads.
Which is the minimum NSX-T Edge size configuration required to support the production load balancer?

A. Large (8 vCPU 16GB RAM)

B. Medium (4 vCPU 8GB RAM)

C. Extra Large (12 vCPU 24GB RAM)

D. Small (2 vCPU 4GB RAM)