VMware VMware Certifications 2V0-641 Questions & Answers

• Question 41:

  -- Exhibit --- Exhibit -

  

  The Exhibit shows two possible physical network architectures. Each architecture provides a means in dealing with the pictured failure.

  Based on the exhibit, which architecture provides the highest degree of connectivity in the event of the pictured failure?

  A. Both designs will provide the same percentage of connectivty in times of failure.

  B. Neither design is properly architected to work around the displayed failure.

  C. Diagram A's architecture will provide the highest percentage of connectivity in times of failure.

  D. Diagram B's architecture will provide the highest percentage of connectivity in times of failure.

  Correct Answer: D

• Question 42:

  Where does the Distributed Logical Firewall enforce firewall rules?

  A. At the Virtual Machine's virtual Network Interface Card (vNIC).

  B. At the Logical Switch virtual port that the Virtual Machine connects to.

  C. At the NSX Controller's firewall kernel module.

  D. At the ESXi host vmnic used by the vSphere Distributed Switch.

  Correct Answer: A

• Question 43:

  -- Exhibit -

  

  -- Exhibit -An NSX administrator creates the NSX network in the exhibit.

  What destination IP address will Host-A use when sending a VXLAN frame to Host-B?

  A. The IP address of one of Host-B's new vmkernel ports created during host configuration.

  B. The IP address of Host-B's management vmkernel port, which is also the VTEP IP address.

  C. The IP address of Host-B's NSX Controller. The NSX Controller forwards the VXLAN frame to Host-

  D. The IP address Host-B provided to Host-A during VXLAN tunnel setup negotiations.

  Correct Answer: A

• Question 44:

  -- Exhibit --- Exhibit -

  

  An administrator has created the NSX network shown in the exhibit.

  Both VMs use the same Distributed Router for their default gateway. VM-B receives an IP message from

  VM-A.

  What is the source MAC address of the IP message received by VM-B?

  A. VM-A's MAC address.

  B. VM-B's default gateway's MAC Address.

  C. VM-A's default gateway's MAC address.

  D. Logical Switch 7321's MAC address

  Correct Answer: A

• Question 45:

  Which two statements are true regarding NSX High Availability (HA)? (Choose two.)

  A. NSX HA is configured as Active-Active.

  B. NSX HA is configured as Active-Standby.

  C. If an Active node fails, there is no service interruption during failover.

  D. If an Active node fails, there is a 15 second service interruption during failover.

  Correct Answer: BC

• Question 46:

  High Availability (HA) was not initially configured when an administrator deployed an NSX Edge Service Gateway. What should the administrator do to configure the NSX Edge with HA?

  A. Select the NSX Edge instance from the NSX Edges view in Networking and Security. Go to Manage> Settings> Configuration and add a NSX Edge appliance.

  B. Delete the NSX Edge instance and redeploy it with HA. The existing NSX Edge configuration data will be lost.

  C. Delete the NSX Edge instance and redeploy it with HA. The configuration data is retained by NSX Manager and pushed to the new NSX Edge instance.

  D. Select the NSX Edge appliance from the Virtual Machines and Templates view. Go to Actions> All vCenter Actions> Enable HA to configure High Availability.

  Correct Answer: A

• Question 47:

  -- Exhibit -Exhibit -

  

  An administrator has created an NSX network as shown in the exhibit.

  Both VMs in the exhibit use the same distributed router for their default gateway. VM-B obtains its IP

  address via DHCP. VM-A wants to send a packet to VM-B.

  How does VM-A learn VM-B's MAC address?

  A. If Host-A is made aware by the NSX Controller of VM-B's MAC and IP addresses, Host-A replies directly to VM-A with an ARP response.

  B. If Host-A is made aware by Host-B of VM-B's MAC and IP addresses, Host-A replies directly to VM- A with an ARP response.

  C. If the NSX Controller is made aware by Host-B of VM-B's MAC and IP addresses, the NSX Controller replies directly to VM-A with an ARP response.

  D. If Host-B is aware of VM-B's MAC and IP addresses, Host-B is able to reply directly to VM-A with an ARP response.

  Correct Answer: A

• Question 48:

  Which two actions take place when an active NSX Edge instance fails? (Choose two.)

  A. Once the original NSX Edge instance is recovered, it preempts the other NSX Edge instance and takes over the active role.

  B. The standby NSX Edge instance becomes the active instance and requests routing updates from the routing neighbors.

  C. Once the original NSX Edge instance is recovered, the NSX Manager attempts to place it on a different host from the other NSX Edge instance.

  D. The standby NSX Edge instance becomes the active instance and retains any routing neighbor adjacencies.

  Correct Answer: CD

• Question 49:

  An NSX Edge Service Gateway has two interfaces:

  Internal interface named Internal Access -- IP address = 10.10.10.1 -- Network mask = 255.255.255.0

  Uplink interface named Physical Uplink -- IP address = 20.20.20.1 -- Network mask = 255.255.255.0 A vSphere administrator wants to add a SNAT rule to allow traffic from the internal network segment to

  access external resources via the uplink interface.

  Which three steps should the vSphere administrator do to add the SNAT rule? (Choose three.)

  A. Apply the SNAT rule to the Internal Access interface.

  B. Select 10.10.10.1 as the translated source IP.

  C. Apply the SNAT rule on the Physical Uplink interface.

  D. Select 10.10.10.0/24 as the original subnet.

  E. Choose 20.20.20.2 as the translated source IP address.

  Correct Answer: CDE

• Question 50:

  An administrator manages a TFTP server virtual machine that is connected to a Logical Switch with a VNI of 7321. The TFTP server has been configured to use port 1069. An NSX Edge Service Gateway is connected to VNI 7321 and has an uplink interface with access to the physical network. Assume external users can reach the Service Gateway.

  What should the administrator configure to ensure external connections to the TFTP server are successful?

  A. Create a DNAT rule with the original port of 69 and translated port of 1069.

  B. Create a SNAT rule with the original port of 1069 and translated port of 69.

  C. Create a SNAT rule with the original port of 69 and translated port of 1069.

  D. Create a DNAT rule with the original port of 1069 and translated port of 69.

  Correct Answer: A