VMware VCPN610 Online Practice Questions and Exam Preparation

VMware VCPN610 Online Questions & Answers

• Question 171:

  An administrator configures the IPSec VPN service on an NSX Edge instance, but the negotiation fails. Examining the log file, the administrator notices the following message:

  INVALID_ID_INFORMATION

  Which misconfiguration caused the error?

  A. Pre-shared key (PSK) does not match
  B. Diffie-Hellman (DH) Group does not match
  C. Perfect Forward Secrecy (PFS) does not match
  D. VPN tunnel address incorrect
  A. Pre-shared key (PSK) does not match

• Question 172:

  What is the minimum MTU size recommended by VMware for the physical network when deploying NSX for vSphere?

  A. 1550
  B. 1600
  C. 2148
  D. 9000
  B. 1600

• Question 173:

  How many syslog servers can be configured for an NSX Edge device?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 174:

  Which two options are valid distribution methods used by the NSX Edge Load Balancer? (Choose two.)

  A. Destination IP Hash
  B. Least Load
  C. URI
  D. Round Robin
  C. URI
  D. Round Robin

• Question 175:

  A user needs to be given the ability to make configuration changes on a specific NSX Edge device. What role and scope could be used to meet this requirement?

  A. NSX Administrator role and Limit Access scope
  B. Security Administrator role and Limit Access scope
  C. NSX Administrator role and No restriction scope
  D. Security Administrator role and No restriction scope
  B. Security Administrator role and Limit Access scope

• Question 176:

  -- Exhibit

  

  -- Exhibit -The diagram displays various points where QoS configuration may be used.

  Based on the diagram, which two statements correctly identify the appropriate QoS usage? (Choose two.)

  A. Location A should provide Trust DSCP.
  B. Location A should provide either Trust DHCP or Set DSCP.
  C. Location B should provide Trust DSCP and Trust COS.
  D. Location B should provide Set DSCP and Set COS.
  B. Location A should provide either Trust DHCP or Set DSCP.
  C. Location B should provide Trust DSCP and Trust COS.

• Question 177:

  Where are the Logical Firewall logs saved?

  A. On the vNIC-FW module
  B. On the ESXi host
  C. On the NSX Controllers
  D. On the NSX Manager
  B. On the ESXi host

• Question 178:

  An administrator wishes to control traffic flow between two virtual machines. The virtual machines are in the same subnet, but are located on separate ESXi hosts. The administrator deploys an Edge Firewall to one of the hosts and verifies the default firewall rule is set to deny, but the two virtual machines can still communicate with each other.

  What task will correct this issue?

  A. Configure both ESXi host firewalls to deny traffic from the virtual machine on the other host.
  B. Deploy another Edge Firewall on the host running the second virtual machine.
  C. Remove any other firewall appliances that may exist on either of the ESXi hosts.
  D. Deploy a Distributed Firewall with firewall rules to prevent traffic between the virtual machines.
  D. Deploy a Distributed Firewall with firewall rules to prevent traffic between the virtual machines.