VMware VCP6-CMA 2V0-642 Questions & Answers

• Question 21:

  Which is a best practice to secure system traffic, ensure optimal performance and satisfy prerequisites for NSX?

  A. Configure a single VMkernel and a single distributed port group for all the system traffic.

  B. Configure a single distributed port group with a single VMkernel for Management and iSCSI traffic, a separate VMkernel for vMotion and VSAN traffic.

  C. Dedicate separate VMkernel adapters for each type of system traffic. Dedicate separate distributed port groups for each VMkernel adapter and isolate the VLANs for each type of system traffic.

  D. Dedicate separate VMkernel adapters for each type of system traffic and dedicate separate standard switches for each type of system traffic connected to a single physical network.

  Correct Answer: C

• Question 22:

  An administrator wants to perform Activity Monitoring on a large group of virtual machines in an NSX environment. How would this task be accomplished with minimal administrative effort?

  A. Create a PowerCLI script to enable virtual machine data collection on each virtual machine.

  B. Create a security group in Service Composer and add the virtual machines to the security group.

  C. Add the virtual machines to the pre-defined Activity Monitoring security group in Service Composer.

  D. Add the virtual machines to a VM folder in vCenter Server and enable data collection.

  Correct Answer: C

• Question 23:

  Activity Monitoring has been enabled for a host with several virtual machines. However, only one virtual machine appears in the list.

  

  Which two additional configuration steps are required to allow the other virtual machines on the host to be selected? (Choose two.)

  A. Guest Introspection driver must be installed.

  B. Virtual Machine Data Collection must be enabled on the other VMs.

  C. NSX Manager must be linked to Active Directory.

  D. Guest Introspection appliance must be deployed on the host.

  Correct Answer: AB

• Question 24:

  What resource must a partner security service be registered with before the service is available to a security policy?

  A. NSX Manager

  B. ESXi host

  C. Service Composer

  D. vCenter Server

  Correct Answer: A

• Question 25:

  Which two are accurate statements with regards to Guest Introspection installation? (Choose two.)

  A. The service virtual machine performs data security and activity monitoring.

  B. The installation deploys a virtual machine to hosts prepared for VMware NSX.

  C. A security policy weight of 4300 is assigned to hosts prepared to Guest Introspection.

  D. Guest Introspection is deployed with NSX Data Security by default.

  Correct Answer: AB

• Question 26:

  Which tool is used to display VXLAN connection information?

  A. pktcap-uw

  B. NSX Controller CLI

  C. esxtop

  D. VDS Health Check

  Correct Answer: B

• Question 27:

  Which two options are correct regarding vSphere Distributed Switches? (Choose two.)

  A. A single vDS can span multiple vCenter Servers.

  B. A single host can be attached to multiple vDS.

  C. A single vDS can span multiple hosts across multiple clusters.

  D. A vDS is automatically created when a new 802.1Q trunk is configured.

  Correct Answer: BC

• Question 28:

  What is a requirement of NSX Data Security?

  A. NSX manager must be configured for Active Directory integration.

  B. The Global Flow Collection Status must be set to Enabled.

  C. Guest Introspection must be installed on the cluster.

  D. AN IP Pool must be created.

  Correct Answer: C

• Question 29:

  Which type of VPN should be configured to ensure application mobility between data centers?

  A. Application VPN

  B. L2VPN

  C. IPSec VPN

  D. SSL VPN-Plus

  Correct Answer: B

• Question 30:

  A security administrator needs to create a Security Group based on an Active Directory group. However, AD Groups are not available as an option. What must the administrator configure before AD Groups are available?

  A. Guest Introspection virtual machines must be joined to the domain

  B. Inventory Service must be registered with a domain account

  C. NSX Manager must be registered with Active Directory

  D. NSX Controller must be registered with Active Directory

  Correct Answer: C