VMware VMware Certifications 3V0-41.19 Questions & Answers

• Question 1:

  A customer wants to use ECMP to provide additional throughput and availability for their critical business applications. Some applications require load balancing for scale and availability. Which two Edge design choices can an architect present to the customer? (Choose two.)

  A. Configure ECMP and Load Balancing on the Tier-0 gateway.

  B. Create a Tier-0 gateway in Active/Standby mode and a Tier-1 gateway in Active/Standby mode.

  C. Configure ECMP on the Tler-0 gateway and Load Balancing on the Tier-1 gateway.

  D. Create a Tier-0 gateway in Active/Standby mode.

  E. Configure ECMP on the Tier-1 gateway and Load Balancing on the Tier-1 gateway.

  F. Create a Tier-0 gateway in Active/Active mode and a Tier-1 gateway in Active/Standby mode.

  Correct Answer: CF

  Tier 0 must be Active Active for ECMP, Tier 1 utilizes an LB --vetted

  https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/administration/GUID-443B6B0D- F179429E-83F3-E136038332E0.html

• Question 2:

  An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:

  1.

  Any solution should add more value to current and future customers engagements.

  2.

  The solution should improve the company's operational efficiency.

  3.

  The design should offer agility and freedom for application phases.

  4.

  There should be improvement in application life cycle SLAs.

  5.

  Current physical solution is composed of many vendors taking care of many layers of security, but it is getting complex. A reduction in complexity will be something expected from any solution.

  6.

  Current business continuity and disaster recovery plans are based on tape technology. A public cloud class of service should be party of any new solution.

  7.

  Scripts are used for repeatable tasks in combination with many open source tools.

  8.

  Delays are Incurred with new marketing campaigns because an external IT services company must be hired. Campaigns must be accelerated with any new solution.

  9.

  All application servers have hardcoded IP addresses.

  10.

  Different vendors are used for our storage solution.

  11.

  The time line before an upcoming freeze period is soon.

  Which two statements should the architect consider as non technical requirements? (Choose two.)

  A. statement 4

  B. statement 1

  C. statement 11

  D. statement 6

  E. statement 9

  Correct Answer: AB

  -Non-functional/Non-Technical requirements describe how the system is supposed to behave. These are also known as Business Requirements. I have bolded every B.Req and highlighted the correct answers that were available to be chosen.

• Question 3:

  A telecom company has purchased NSX-T as part of a software defined data center (SDDC) initiative. The company wants to ensure the highest performance for network traffic leaving the virtual environment. Which two selections would an architect recommend to achieve the customer's goal? (Choose two.)

  A. Configure SR-IOV for the virtual NSX Edges.

  B. Use physical NSX Edges with DPDK supported hardware.

  C. Select Network cards that support VXLAN Offload.

  D. Configure Equal-Cost Multi-Pathing on the NSX Edges.

  E. Set "Latency Sensitive" option to High when deploying the virtual NSX Edges.

  Correct Answer: BD

  This is tricky but (C) is wrong because NSX-T doesn't do VXLAN, its doing GENEVE. Virtual edge's are not the highest perf when leaving the virtual to physical (AandE) https://cms.vmworldonline.com/event_data/5/ session_notes/NET1343BU.pdf

• Question 4:

  Which type of design includes vendor models, host names, IP Addresses, port connections, logical unit number sizes, and number of CPUs?

  A. High-Level Design

  B. Physical Design

  C. Logical Design

  D. Conceptual Design

  Correct Answer: B

  https://www.jeffreykusters.nl/2018/06/25/breaking-down-the-conceptual-design-rcars-and- amprs-vcdxstyle/

• Question 5:

  An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:

  1.

  Data between two networks connected over a public network needs to be encrypted.

  2.

  Certificate authentication is required.

  3.

  Dynamic route learning is preferred.

  Which should the architect include in their design?

  A. Deploy a Tler-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA256withRSA as the hash algorithm.

  B. Deploy a Tler-0 gateway In Active/Active mode. Configure route-based IPSec VPN with SHA512wlthRSA as the hash algorithm.

  C. Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512withRSA as the hash algorithm.

  D. Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA256withRSA as the hash algorithm.

  Correct Answer: C

  F- For IP-Sec, Tier 0 Gateways must be in Active/Standby. Route-based IPSec VPN is required for dynamic route learning https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/administration/GUID-C0E5AF10- 576D493A-A079-C4C95D8F5373.html https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/administration/GUID-DF689847- 252E451E-84B5-DB507CC010AC.html

• Question 6:

  An architect is designing a solution for containerization. The solution will include high availability and

  security using NSX-T Data Center. The architect plans to provide a basic required components list In the

  Logical Design.

  Which solution should the architect recommend?

  A. 2 NSX Managers, 2 virtual NSX Edges, one Tier-0 gateway, BGP configuration and a static route

  B. 3 NSX Managers, 1 virtual NSX Edge, one Tier-0 gateway and a static route and OSPF

  C. 1 NSX Manager, 2 virtual NSX Edges, two Tier-0 gateways In Active/Active, BGP configuration

  D. 3 NSX Managers, 2 virtual NSX Edges, two Tier-0 gateways in Active/Passive, BGP configuration

  Correct Answer: D

  HA should include 3 NSX Managers and redundant Tier-0 Gateways. OSPF isn't supported https:// docs.vmware.com/en/VMware-Enterprise-PKS/1.5/vmware-enterprise-pks-15/GUID-nsxt- install-nsxmgmt-cluster.html

• Question 7:

  Refer to Exhibit.

  

  To meet the technical requirements for NSX Edge VM, which two design choices are required to satisfy this architectural design. (Choose two.)

  A. NSX Edge TEP and ESXi TEP need to be in different VLANs.

  B. ESXi host should be prepared as a Transport Node and use VLAN backend segments to connect Edge Node Interfaces.

  C. ESXi host must have more than 2 pNICs available to create another N-VDS. D NSX Edge should run as a physical device.

  D. vmk ports need to be on VDS instead of N-VDS, with onepNIC for each virtual switch providing greater functionality.

  Correct Answer: AB

  I believe this was supposed to have 5 answers as (C) looks like it has two answers on the same line unless it is saying "ESXi host must have more than 2pNICs available to create another N-VDS or NSX Edge should run as a physical device". Either one of those statements is still incorrect based on that diagram though.

  (D)

  is wrong as 1 pNIC per vSwitch is a bad design.

  (C)

  is wrong because you can do a 2 pNIC design with NSX-T and an Edge VM running on a N-VDS

  https://vxplanet.com/2019/07/08/deploying-and-configuring-nsx-t-edges-on-n-vds-networking/

• Question 8:

  According to the Discover Task of the Engagement Lifecycle, which statement would be classified as a risk?

  A. To retain certification to provide financial services to end customers, PCI-DSS audits need to be passed.

  B. A merger and acquisition process was recently completed and new company on-boarding is not completed.

  C. Due to existing contracts and purchase agreements, the existing server hardware needs to be re- used.

  D. Enough power and cooling capacity is available in each rack in the data center.

  Correct Answer: A

  In the RRCA conceptual phase, the biggest risks are those that have a high chance, high impact, or a combination of both. You can mitigate those risks, but they must still be called out. Technically every assumption in a design is a risk. (D) could be an assumption, but its after the discover phase so it could be an actual assessment. (C) is a constraint on the surface, though when combined with other things could then also become a risk (B) is a risk, but is lacking major impact.

• Question 9:

  Which two VMware recommendations should an architect follow when configuring top of rack (ToR) switches in an NSX-T Data Center environment? (Choose two.)

  A. Modify the Spanning Tree Protocol to increase the time to transition to the forwarding state.

  B. Configure redundant physical switches to enhance availability.

  C. Use only IPv4 addressing in all deployments.

  D. Configure switch ports that connect to ESXi host manually as trunk ports.

  E. Configure switch ports with a Dynamic Trunking Protocol.

  Correct Answer: BD

  https://docs.vmware.com/en/VMware-Validated-Design/5.1/sddc-architecture-and-design-for-vmware-nsxtworkload-domains/GUID-A7CF1DFE-9C2D-4483-8F68-49C76135E460.html--vetted

• Question 10:

  Refer to the exhibits.

  An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution. The

  conceptual design includes these requirements, assumptions, constraints, and risks:

  1.

  Critical applications must run across sites without changing IP address.

  2.

  Business continuity and disaster recovery (BCDR) plans will leverage a second site running vSphere.

  3.

  RTO/RPO must be reduced for recovery of applications on secondary site.

  4.

  IT Teams require automation tools for configuration.

  Which Conceptual Design would the architect recommend to the customer?

  

  

  

  A. Design Option 3

  B. Design Option 1

  C. Design Option 2

  D. Design Option 4

  Correct Answer: C

  Be careful of the letter answers not matching up to the design options.

  *

  (B) is wrong as d.option 1 is using an IP change script and that violates a req/const.

  *

  (D) is wrong as d.option 4 doesn't have a dual site bcdr plan but instead just shipping a backup to site B. This doesn't lend itself to reducing RTO/RPO

  *

  (A) is wrong as d.option 3 has network services based on physical gear but then using public cloud for part of its BCDR strategy. It also has no automation solution as part of the design overview.