VMware VCP-NV 2020 2V0-41.20 Questions & Answers

• Question 81:

  Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

  A. Identify security vulnerabilities in the workloads.

  B. Use agentless antivirus with Guest Introspection.

  C. Quarantine workloads based on vulnerabilities.

  D. Identify risk and reputation of accessed websites.

  E. Gain insight about micro-segmentation traffic flows.

  Correct Answer: AC

• Question 82:

  An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.

  Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

  A. e1000

  B. VMXNET2

  C. VMXNET3

  D. Flexible

  Correct Answer: C

• Question 83:

  What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

  A. Service interface

  B. Loopback Router Port

  C. Downlink interface

  D. VLAN Uplink

  Correct Answer: A

  "The service interface is a special-purpose port to enable services for mainly VLAN-based networks. North-south service insertion is another use case that requires a service interface to connect a partner appliance and redirect north-south traffic for partner services. Service interfaces are supported on both active-standby Tier-0 logical routers and Tier-1 routers. Firewall, NAT, and VPNs are supported on this interface. The service interface is also a downlink"

• Question 84:

  Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

  A. ifconfig

  B. tcpdump

  C. debug

  D. ipconfig

  Correct Answer: A

  https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-B7E7371E-A9F6-4880B184-E00A62C0C818.html

• Question 85:

  Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

  A. Create an IPsec service.

  B. Add a local endpoint.

  C. Configure an IPsec session.

  D. Configure a distributed firewall policy.

  E. Add a logical switch.

  Correct Answer: ABC

• Question 86:

  An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?

  A. Beacon Probing (BP)

  B. Host Standby Router Protocol (HSRP)

  C. Bidirectional Forwarding Detection (BFD)

  D. Virtual Router Redundancy Protocol (VRRP)

  Correct Answer: C

• Question 87:

  What are two supported N-VDS modes? (Choose two.)

  A. DPDK Datapath

  B. Overlay Datapath

  C. Secure Datapath

  D. Enhanced Datapath

  E. Standard Datapath

  Correct Answer: DE

  https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-37BC3CEF-DCC1-4C6F960D-CFBB31908D1C.html

• Question 88:

  A user is assigned these two roles in NSX Manager:

  LB Admin Network Engineer What privileges does this user have in the system?

  A. read permissions on all networking services and full access permissions on load balancing features

  B. full access permissions on all networking services and full access permissions on load balancing features

  C. full access permissions on all networking services and read permissions on load balancing features

  D. read permissions on all networking services and read permissions on load balancing features

  Correct Answer: B

• Question 89:

  An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.

  Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

  A. N-VDS/VDS Profile

  B. Transport Node Profile

  C. Host Switch Profile

  D. Uplink Profile

  Correct Answer: D

• Question 90:

  Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

  A. MTU 1500

  B. MTU 1400

  C. vSphere Distributed Switch 6.5

  D. vSphere Distributed Switch 7.0

  E. MTU 1600

  Correct Answer: DE

  https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-BA34FB2A-6780-41C5B895-F37E5A7B7BAE.html