Which network tool could an administrator use on an ESXi 7 host to capture packets when troubleshooting connectivity issues?

A. Wireshark

B. pktcap-uw

C. tcpdump

D. net-stats

How does Traceflow tool identify issues in a network?

A. Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

B. Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

C. Injects synthetic traffic into the data plane and observes the results in the control plane.

D. Injects ICMP traffic into the data plane and observes the results in the control plane.

Which statement is true about an alarm in a Suppressed state?

A. An alarm can be suppressed for a specific duration in days.

B. An alarm can be suppressed for a specific duration in minutes.

C. An alarm can be suppressed for a specific duration in seconds.

D. An alarm can be suppressed for a specific duration in hours.

Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

A. Service Insertion

B. Distributed Routing

C. Packet Forwarding

D. Gateway Firewall

E. Distributed Firewall

F. Virtual Private Network

The NSX Control Plane is responsible for which two functions? (Choose two.)

A. receive and validate configuration from NSX Policy

B. host API services

C. propagate topology information

D. push stateless configurations to forwarding engines

E. maintain packet-level statistics

What are two supported N-VDS modes? (Choose two.)

A. DPDK Datapath

B. Overlay Datapath

C. Secure Datapath

D. Enhanced Datapath

E. Standard Datapath

Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

A. IPFIX

B. Port Mirroring

C. Traceflow

D. SPAN mirrors

Which three services are compatible with VRF Lite? (Choose three.)

A. VPN

B. Intrusion Detection

C. NAT

D. Load Balancer

E. DHCP

An NSX administrator has observed connectivity issues between the NSX Manager and the KVM Transport Node.
Which two log files could be used to troubleshoot the issue on the KVM Transport Node? (Choose two.)

A. /usr/vmware/nsx-syslog

B. /var/log/vmware/nsx-syslog

C. /usr/vmware/log/syslog

D. /var/log/syslog

E. /var/log/nsx/syslog

Which two tools are used for centralized logging in NSX-T Data Center? (Choose two.)

A. vRealize Log Insight

B. Syslog Server

C. vRealize Network Insight

D. vRealize Operations

E. vRealize Automation

Which three different transport nodes could be configured in the data plane? (Choose three.)

A. VM or Bare Metal NSX Edge

B. vShield Edge VM

C. Bare Metal server

D. ESXi and Hyper-V

E. NSX Edge VM on KVM

F. ESXi and KVM

A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway. A NSX-T Data Center administrator used the get logical-routers command to retrieve this information:
 
Which two commands must be executed to check BGP neighbor status? (Choose two.)

A. vrf 3

B. vrf 1

C. vrf 4

D. sa-nsxedge-01(tier1_sr)> get bgp neighbor

E. sa-nsxedge-01(tier0_sr)> get bgp neighbor

F. sa-nsxedge-01(tier0_dr)> get bgp neighbor

Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)

A. can have a maximum of 8 edge nodes

B. must have only active-active edge nodes

C. can have a maximum of 10 edge nodes

D. can contain multiple types of edge nodes (VM or bare metal)

E. must contain only one type of edge nodes (VM or bare metal)

Which statement is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.

B. The administrator must run the set user audit password command.

C. The audit user must be created and have its password changed to log into the NSX Manager.

D. The administrator must run the set audit user password command.

E. The audit user has read-write access to the NSX Manager.

Which network virtualization technologies can be used with an Ethernet VPN (EVPN) deployment in NSX-T Data Center? (Choose two.)

A. Virtual Extensible Local Area Network (VXLAN)

B. Multiprotocol Border Gateway Protocol (MP-BGP)

C. Open Shortest Path First (OSPF)

D. Multiprotocol Label Switching (MPLS)

E. Virtual Routing and Forwarding (VRF)

An NSX administrator has configured a KVM hypervisor as a transport node.
Which kernel module on KVM implements a N-VDS?

A. openvswitch

B. etherswitch

C. nsx-vswitch

D. dvswitch

What are three characteristics of a transport zone? (Choose three.)

A. defines the scope and reachability of a Segment

B. defines the potential reach of transport nodes

C. configured with multiple N-VDS/VDS

D. optional for creating a segment

E. configured with a Single N-VDS/VDS

Which step must be performed before deploying an additional NSX Manager from the NSX-T UI?

A. Prepare the ESXi hosts as Transport Nodes.

B. Configure the Virtual IP of the cluster.

C. Register vCenter Server as a Compute Manager.

D. Create an Edge Cluster.

Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

A. ifconfig

B. tcpdump

C. debug

D. ipconfig

Which two statements are true for a Tier-1 Gateway? (Choose two.)

A. supports ECMP

B. owned and configured by the Tenant

C. always configured in active-standby mode

D. owned and configured by Service Provider

E. connects to physical networks

Which tool could be used to inspect the path of a packet in the data plane?

A. Port Connection

B. Port Mirroring Session

C. Netflow

D. Traceflow

A customer is preparing to deploy VMware Kubernetes on an NSX-T Data Center.
What is the minimum MTU size for the UPLINK profile?

A. 1500

B. 1650

C. 1550

D. 1600

Where are Distributed Firewall logs containing access decisions stored?

A. NSX API

B. NSX Edge

C. NSX Manager

D. Hypervisor transport node

How is the intra-tier transit link connection created between SR and DR for a Tier-0 Gateway?

A. Manually create a gateway interface and mark it as transit.

B. Automatically created when SR is initialized.

C. Automatically created when DR is created.

D. Manually create external uplink interface and mark it as transit.

Which command is used to change the NSX CLI administrator password?

A. set user administrator password

B. set user admin password

C. set user admin password old-password

D. set user administrator password old-password

An NSX administrator would like to configure syslog for a KVM transport node.
Which host log files could be exported to a remote syslog server?

A. /var/log/cloudnet/nsx-ccp.log

B. /var/log/vmware/nsx-syslog

C. /var/log/cfgAgent. log

D. /var/log/nsx-audit.log

Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

A. get support-bundle file vcpnv.tgz

B. set support-bundle file vcpnv.tgz

C. vm-support

D. esxcli system syslog config logger set –id=nsxmanager

An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?

A. join management-cluster username admin password thumbprint

B. join cluster username root password thumbprint

C. join policy-manager username root password thumbprint

D. join management-plane username admin password thumbprint

Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

A. Multicast

B. Anycast

C. Unicast

D. Broadcast

Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)

A. 5685

B. 1235

C. 5671

D. 5678

E. 1234

Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

A. get host-switch tunnels

B. get transport-node tunnel status

C. get host-switch tunnel status

D. get transport-node tunnel state

When running nsxcli on an ESXi host, which command will show the Replication mode?

A. get logical-switch status

B. get logical-switch

C. get logical-switches

D. get logical-switch status

Which choice is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with OVF template

B. deploy NSX Edge on a bare-metal server

C. deploy NSX Edge VM with QCOW2 image

D. deploy NSX Edge on physical switch

Which component does the hyperbus interface (vmk50) provide network connectivity to?

A. containers running on ESXi/KVM transport nodes

B. virtual machines and containers running across transport nodes

C. virtual machines running on the same hypervisor

D. virtual machines running in the same segment

An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.
Which feature in the NSX UI shows the mapping between the virtual NIC and the host's physical adapter?

A. Switch Visualization

B. Port Mirroring

C. Activity Monitoring

D. IPFIX

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node?
(Choose two.)

A. esxcfg-nics -1

B. net-dvs

C. esxcli network nic list

D. esxcfg-vmknic -1

E. esxcli network ip interface ipv4 get

Which CLI command is used to disable SSH timeout on NSX Manager and NSX Edge nodes?

A. set cli ssh timeout 0

B. set cli-timeout 0

C. set esxcli ssh session off

D. nsxcli ssh session on

When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?

A. Create a secondary vNIC on each quest VM for SVM communication.

B. Place a partner SVM on each compute cluster node.

C. Centralize partner SVMs in a service cluster.

D. Add partner SVMs to an edge cluster.

Which three steps must be carried out to configure North-South / East-West Network Inspection? (Choose three.)

A. Service Deployment

B. Service Insertion

C. Service Consumption

D. Service Registration

E. Service Introspection

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

A. Syslog is not configured on the ESXi transport node

B. Distributed Firewall Rule logging is not enabled

C. Syslog is not configured on the NSX Manager

D. Zero Trust Security is not enabled

Which two statements are true about the implementation of multicast in NSX-T Data Center? (Choose two.)

A. Multicast routing is implemented with PIM Sparse-Mode.

B. IGMP Snooping is used to populate multicast forwarding tables.

C. Tier-0 gateways can be the Rendezvous Point.

D. Multicast is supported in ESXi and KVM transport nodes.

E. An Edge can be the Rendezvous Point.

Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

A. MTU 1500

B. MTU 1400

C. vSphere Distributed Switch 6.5

D. vSphere Distributed Switch 7.0

E. MTU 1600

Which two logical router components span across all transport nodes? (Choose two.)

A. DISTRIBUTED_ROUTER_TIER0

B. SERVICE_ROUTER_TIER0

C. TIER0_DISTRIBUTED_ROUTER

D. DISTRIBUTED_ROUTER_TIER1

E. SERVICE_ROUTER_TIER1

Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

A. set time-server

B. get timezone

C. set ntp-server

D. set timezone

Which tool could be used to configure BGP on a Tier-0 Gateway?

A. PowerShell

B. ESX CLI

C. API

D. NSX CLI

Which statement describes the VMware Virtual Cloud Network Vision?

A. Virtual Cloud Network connects and protects virtual machines running in KVM environments.

B. Virtual Cloud Network connects and protects virtual machines running in vSphere environments.

C. Virtual Cloud Network connects and protects applications, regardless of their physical locations.

D. Virtual Cloud Network connects and protects applications and data, regardless of their physical locations.

An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM

B. FABRIC

C. GROUPING

D. MONITORING

Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

A. Create an IPsec service.

B. Add a local endpoint.

C. Configure an IPsec session.

D. Configure a distributed firewall policy.

E. Add a logical switch.

An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original failed node to become the Active node upon recovery.
Which failover policy meets this requirement?

A. Non-Preemptive

B. Preemptive

C. Enable Preemptive

D. Disable Preemptive

Which two commands are used to query the arp-table of a logical switch? (Choose two.)

A. get logical-switch arp-table

B. get logical-switch arp-table

C. get logical-switch arp-table

D. get logical-switch arp-table

E. get logical-switch arp-table