VMware VCP6-CMA 2V0-642 Questions & Answers

• Question 1:

  What can be enabled on the vSphere Distributed Switch to monitor IP packets that are passing through a distributed port group?

  A. Traffic Marking

  B. TraceFlow

  C. Traffic Filtering

  D. NetFlow

  Correct Answer: D

• Question 2:

  An NSX administrator notices that when configuring Flow Monitoring, the graphs do not include the IPFix flows. Where are these flows displayed?

  A. In the IPFix collector's interface.

  B. In the Flow Monitor UI.

  C. In the vRealize Operations UI.

  D. In the IPFix tab of the NSX Manager UI.

  Correct Answer: A

• Question 3:

  Where does an administrator configure logging for the NSX Manager?

  A. In the vSphere Web Client

  B. In the NSX Manager GUI

  C. In the NSX Manager command line interface (CLI)

  D. In the vSphere Syslog Collector

  Correct Answer: B

• Question 4:

  An NSX Administrator is examining traffic on the network shown below.

  

  What is the packet flow when VM1 communicates to VM5?

  A. Host A will perform a destination lookup, route the packet, switch the packet onto segment 5002, then encapsulate and send the packet to Host C.

  B. Host A will perform a destination lookup, switch the packet onto segment 5002, route the packet, then encapsulate the packet and send it to the DLR control VM.

  C. Host A will encapsulate the packet, send the encapsulated packet to host C, Host C will perform a destination lookup and switch the packet onto segment 5002.

  D. Host A will encapsulate the packet, perform a destination lookup, route the packet to the DLR control VM, the control DLR will bridge the packet onto segment 5002.

  Correct Answer: A

• Question 5:

  An NSX administrator determines that routing adjacency a NSX Edge device and a Top Of Rack L3 switch CANNOT be established. Which two logs would be the most useful in resolving this issue? (Choose two.)

  A. NSX Manager Logs

  B. Edge Services Gateway logs

  C. Distributed Router Logs

  D. NSX Controller logs

  Correct Answer: BD

• Question 6:

  Which tool is used to detect rogue services?

  A. NSX Logical Firewall

  B. NSX Logical Router

  C. Activity Monitoring

  D. Flow Monitoring

  Correct Answer: D

• Question 7:

  Which NSX component can validate that security policies at your organization are being enforced correctly?

  A. Activity Monitoring

  B. Flow Monitoring

  C. ERSPAN

  D. Distributed firewalls

  Correct Answer: A

• Question 8:

  What is one of the benefits of a spine-leaf network topology?

  A. A loop prevention protocol is not required.

  B. Automatic propagation of security policies to all nodes.

  C. Allows for VXLANs to be defined in a traditional network topology.

  D. Network virtualization relies on spine leaf topologies to create logical switches.

  Correct Answer: A

• Question 9:

  Your environment has two sites designated as Site A and Site B. Each site has its own vCenter Server instance with NSX installed and configured in standalone mode. You are migrating the environment to Cross vCenter and have already promoted Site A to the Primary role. What action must be taken before the NSX Manager at Site B can be changed to Secondary?

  A. Migrate the Site B Controllers to Site A.

  B. Convert the Site B Controllers to Universal Controllers.

  C. Remove any logical switches from the Site B NSX Controller.

  D. Delete the Controllers at Site B.

  Correct Answer: D

• Question 10:

  An administrator needs to verify which port the switch manager is using. Which command should be used?

  A. show controller-cluster status

  B. show controller-cluster core stats

  C. show controller-cluster connections

  D. show controller-cluster logical-switches

  Correct Answer: C