VMware VCPN610 Online Practice Questions and Exam Preparation

VMware VCPN610 Online Questions & Answers

• Question 111:

  A company wants to deploy VMware NSX for vSphere with no PIM and no IGMP configured in the underlying physical network. This company also must ensure that non-ESXi hosts do not receive broadcast, unknown unicast or multicast (BUM) traffic.

  Which replication mode should the logical switches be deployed with?

  A. Unicast Replication Mode
  B. Multicast Replication Mode
  C. Hybrid Replication Mode
  D. Transport Zone Mode
  A. Unicast Replication Mode

• Question 112:

  A new ESXi 5.5 host is deployed in a vSphere environment with VMware NSX for vSphere. How can the host be prepared for VMware NSX for vSphere?

  A. By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution.
  B. By leveraging VMware Update Manager to install the new NSX for vSphere VIBs into each of the hosts.
  C. By creating a new VMkernel port in the host from the Host and Clusters inventory view in vSphere Web Client.
  D. By entering the ESXi 5.5 management IP address in the NSX Controllers so the VIBs can be installed.
  A. By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution.

• Question 113:

  Which tool is used to detect rogue services?

  A. NSX Logical Firewall
  B. NSX Logical Router
  C. Activity Monitoring
  D. Flow Monitoring
  D. Flow Monitoring

• Question 114:

  You have deployed a two-tiered application using four virtual machines:

  What feature can you configure to provide the most accurate account for only the traffic between the web servers and the clustered database?

  A. On the vSphere Distributed Switch, configure the use of a port mirroring session using the Encapsulated Remote Mirroring (L3) Source session type.
  B. On the vSphere Distributed Switch, configure the use of a port mirroring session using the Remote Mirroring Destination session type.
  C. On the vSphere Distributed Switch, configure the use of an Isolated Private VLAN for the ports of the four virtual machines.
  D. On the vSphere Distributed Switch, configure Netflow for the distributed virtual port group and enable Process internal flows only for the distributed switch.
  D. On the vSphere Distributed Switch, configure Netflow for the distributed virtual port group and enable Process internal flows only for the distributed switch.

• Question 115:

  Which Virtual Machine cannot be protected by the Distributed Firewall?

  A. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.1 host.
  B. A Virtual Machine connected to a vSS Portgroup running on an ESXi 5.5 host.
  C. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.5 host.
  D. A Virtual Machine connected to a logical switch running on an ESXi 5.1 host.
  D. A Virtual Machine connected to a logical switch running on an ESXi 5.1 host.

• Question 116:

  An administrator has deployed and powered on a new virtual machine configured to get its networking information via DHCP. The virtual machine is connected to an NSX network and connectivity has been verified. After reconfiguring the virtual machine with a static IP address, network connectivity is lost.

  Which statement explains what happened?

  A. SpoofGuard is disabled
  B. SpoofGuard is enabled and the operation mode is set to automatic
  C. SpoofGuard is enabled and the operation mode is set to manual
  D. SpoofGuard is enabled but not configured
  B. SpoofGuard is enabled and the operation mode is set to automatic

• Question 117:

  What is the maximum time span for viewing Flow Monitoring data?

  A. 2 hours
  B. 1 week
  C. 2 weeks
  D. 1 month
  C. 2 weeks

• Question 118:

  Which Endpoint service cannot be leveraged using Service Composer?

  A. Antivirus
  B. Data Security
  C. Layer 2 Bridging
  D. Network Introspection
  C. Layer 2 Bridging

• Question 119:

  An administrator manages a TFTP server virtual machine that is connected to a Logical Switch with a VNI of 7321. The TFTP server has been configured to use port 1069. An NSX Edge Service Gateway is connected to VNI 7321 and has an uplink interface with access to the physical network. Assume external users can reach the Service Gateway.

  What should the administrator configure to ensure external connections to the TFTP server are successful?

  A. Create a DNAT rule with the original port of 69 and translated port of 1069.
  B. Create a SNAT rule with the original port of 1069 and translated port of 69.
  C. Create a SNAT rule with the original port of 69 and translated port of 1069.
  D. Create a DNAT rule with the original port of 1069 and translated port of 69.
  A. Create a DNAT rule with the original port of 69 and translated port of 1069.

• Question 120:

  A network security administrator wants to monitor traffic on several VLANs configured on a vSphere Distributed Switch. The traffic will be sent to another distributed port. What type of port mirroring session must be configured to meet these requirements?

  A. Select the session type Distributed Port Mirroring when configuring the Port Mirroring session.
  B. Select the session type Remote Mirroring Source when configuring the Port Mirroring session.
  C. Select the session type Remote Mirroring Destination when configuring the Port Mirroring session.
  D. Select the session type Distributed Port Mirroring (legacy) when configuring the Port Mirroring session.
  C. Select the session type Remote Mirroring Destination when configuring the Port Mirroring session.