VMware 2V0-41.20 Online Practice Questions and Exam Preparation

VMware 2V0-41.20 Online Questions & Answers

• Question 81:

  Which two choices are solutions of the NSX portfolio (Choose two.)?

  A. vRealize Automation
  B. NSX Distributed IDS/IPS
  C. vRealize Network Insight
  D. Tanzu Kubernetes Grid
  E. NSX Service Mesh
  B. NSX Distributed IDS/IPS
  E. NSX Service Mesh

• Question 82:

  When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

  A. SR and DR doesn't need to be connected to provide any stateful services.
  B. DR is instantiated and automatically connected with SR.
  C. SR is instantiated and automatically connected with DR.
  D. SR and DR is instantiated but requires manual connection.
  C. SR is instantiated and automatically connected with DR.

• Question 83:

  What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

  A. Segment Port
  B. Group
  C. Segment
  D. DFW
  E. Tier-1 Gateway
  B. Group
  D. DFW

• Question 84:

  Which CLI command shows syslog on NSX Manager?

  A. show log manager follow
  B. get log-file auth.log
  C. get log-file syslog
  D. /var/log/sysloq/syslog.log
  C. get log-file syslog

  ---

  https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-406AF9C3-E8F7-447A-8E3D-92AFB9D5E973.html

• Question 85:

  When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?

  A. Create a secondary vNIC on each quest VM for SVM communication.
  B. Place a partner SVM on each compute cluster node.
  C. Centralize partner SVMs in a service cluster.
  D. Add partner SVMs to an edge cluster.
  B. Place a partner SVM on each compute cluster node.

  ---

  "For SVMs deployed on compute hosts, an SVM does not need to be installed on every host. Some customers prefer to deploy the partner SVM on each host to achieve the least amount of traffic hairpinning. When the partner SVM is deployed in a service cluster, traffic is sent from the compute hosts across the overlay to the hosts in the service cluster."

• Question 86:

  Refer to the exhibit.

  

  Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

  A. SNAT
  B. Reverse NAT
  C. DNAT
  D. 1:1 NAT
  A. SNAT

• Question 87:

  Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

  A. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.
  B. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.
  C. Create an OAuth 2.0 client in VMware Identity Manager.
  D. Enter the Identity Provider (IdP) metadata URL in NSX Manager.
  E. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.
  C. Create an OAuth 2.0 client in VMware Identity Manager.
  E. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

• Question 88:

  An NSX administrator has configured a KVM hypervisor as a transport node. Which kernel module on KVM implements a N-VDS?

  A. openvswitch
  B. etherswitch
  C. nsx-vswitch
  D. dyswitch
  A. openvswitch

• Question 89:

  Which CLI command is used to start the NSX Manager virtual machine in the KVM environment?

  A. virsh start
  B. virsh poweron
  C. virsh start
  D. virsh poweron
  C. virsh start

• Question 90:

  In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.

  Which two actions could address low throughput and congestion? (Choose two.)

  A. Deploy Large size Edge node/s.
  B. Configure ECMP on the Tier-0 gateway.
  C. Configure NAT on the Tier-0 gateway.
  D. Add an additional vNIC to the NSX Edge node.
  E. Configure a Tier-1 gateway and connect it directly to the physical routers.
  A. Deploy Large size Edge node/s.
  B. Configure ECMP on the Tier-0 gateway.