2V0-41.20 Exam - Professional VMware NSX-T Data Center

NEW QUESTION 1
Which CLI command is used to disable SSH timeout on NSX Manger and NSX Edge nodes?

• A. set cli ssh timeout 0
• B. set esxcli ssh session off
• C. set cli-timeout 0
• D. nsxcli ssh session on

Answer: C

NEW QUESTION 2
Which CLI command shows syslog on NSX Manager?

• A. show log manager follow
• B. get log-file auth.log
• C. get log-file syslog
• D. /var/log/sysloq/syslog.log

Answer: C

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-406AF9C3-E8F7-447A-8E

NEW QUESTION 3
A security administrator needs to configure a firewall rule based on the domain name of a specific application. Which field in a distributed firewall rule does the administrator configure?

• A. Profile
• B. Source
• C. Service
• D. Policy

Answer: A

NEW QUESTION 4
The NSX Control Plane is responsible for which two functions? (Choose two.)

• A. receive and validate configuration from NSX Policy
• B. host API services
• C. propagate topology information
• D. push stateless configurations to forwarding engines
• E. maintain packet-level statistics

Answer: CD

NEW QUESTION 5
Which network tool cloud an administrator use on an ESXi 7 host to capture packets when troubleshooting connectivity issues?

• A. Wireshark
• B. pktcap-uw
• C. net-stats
• D. tcpdump

Answer: B

Explanation:
If you do when troubleshooting connectivity issues on your Virtualization environment. This post will help you to capture Network traffic on ESXi host using pktcap-uw tool.

NEW QUESTION 6
An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node. Which feature in the NSX UI shows the mapping between the virtual NIC and the host's physical adapter?

• A. Switch Visualization
• B. Port Mirroring
• C. Activity Monitoring
• D. IPFIX

Answer: A

NEW QUESTION 7
Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)

• A. can have a maximum of 8 edge nodes
• B. must have only active-active edge nodes
• C. can have a maximum of 10 edge nodes
• D. can contain multiple types of edge nodes (VM or bare metal)
• E. must contain only one type of edge nodes (VM or bare metal)

Answer: CD

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-14183A62-8E8D-43CC-92E0

NEW QUESTION 8
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

• A. Deploy Large size Edge node/s.
• B. Configure ECMP on the Tier-0 gateway.
• C. Configure NAT on the Tier-0 gateway.
• D. Add an additional vNIC to the NSX Edge node.
• E. Configure a Tier-1 gateway and connect it directly to the physical routers.

Answer: AB

NEW QUESTION 9
Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

• A. Create an IPsec service.
• B. Add a local endpoint.
• C. Configure an IPsec session.
• D. Configure a distributed firewall policy.
• E. Add a logical switch.

Answer: ABC

NEW QUESTION 10
Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

• A. set time-server
• B. get timezone
• C. set ntp-server
• D. set timezone

Answer: C

NEW QUESTION 11
An NSX administrator has deployed an NSX Edge on a bare-metal server. Which command registers the NSX Edge with the NSX Manager?

• A. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint <nsx-manager-thumbprint>
• B. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint<nsx-manager—thumbprint>
• C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint<nsx-manager-thumbprint>
• D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint<nsx-manager-thumbprint>

Answer: D

NEW QUESTION 12
Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

• A. Route Aggregation
• B. Route Distribution
• C. Graceful Restart
• D. BGP Neighbors
• E. Local AS

Answer: AD

Explanation:
The following parameters are inherited from the default Tier-0 gateway and cannot be modified at the VRF level:
• Local AS
• Graceful restart
• Graceful restart timer
• Graceful restart stale timer
• Multipath relax
Inter-SR iBGP is not supported in VRF gateways. BGP can be enabled or disabled per VRF gateway.
Route aggregation and BGP neighbors are local configurations per VRF.

NEW QUESTION 13
An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

• A. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.
• B. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the KVM Transport Node.
• C. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.
• D. The virtual machines running on the KVM Transport Node are not connected to the VDS.
• E. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.

Answer: BE

NEW QUESTION 14
Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)

• A. 5685
• B. 1235
• C. 5671
• D. 5678
• E. 1234

Answer: BE

Explanation:
The NSX Manager management plane communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1234. CCP communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1235. Taken from NSX-T ICM 3.0 Lecture manual

NEW QUESTION 15
A DevOps user has deployed a Kubernetes Pod in vSphere. What does the term ClusterIP represent within NSX-T?

• A. Deployment of T1 with NLB service.
• B. Deployment of Distributed Router.
• C. Deployment of Distributed Load Balancing service.
• D. Deployment of T0 and T1

Answer: C

NEW QUESTION 16
Which statement describes the VMware Virtual Cloud Network Vision?

• A. Virtual Cloud Network connects and protects virtual machines running in KVM environments.
• B. Virtual Cloud Network connects and protects virtual machines running in vSphere environments.
• C. Virtual Cloud Network connects and protects applications, regardless of their physical locations.
• D. Virtual Cloud Network connects and protects applications and data, regardless of their physical locations.

Answer: D

NEW QUESTION 17
Where are Distributed Firewall logs containing access decisions stored?

• A. NSX API
• B. NSX Edge
• C. NSX Manager
• D. Hypervisor transport node

Answer: D

Explanation:
https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.logging.doc/GUID-6 https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-D57429A1-A0A9-42BE-A

NEW QUESTION 18
An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

• A. Tier-1 Gateway
• B. Edge Services Gateway
• C. Tier-0 Gateway
• D. Layer 2 Gateway

Answer: C

NEW QUESTION 19
An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image. Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

• A. e1000
• B. VMXNET2
• C. VMXNET3
• D. Flexible

Answer: C

NEW QUESTION 20
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?

• A. Beacon Probing (BP)
• B. Host Standby Router Protocol (HSRP)
• C. Bidirectional Forwarding Detection (BFD)
• D. Virtual Router Redundancy Protocol (VRRP)

Answer: C

NEW QUESTION 21
Refer to the exhibit.

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

• A. SNAT
• B. Reverse NAT
• C. DNAT
• D. 1:1 NAT

Answer: A

NEW QUESTION 22
Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

• A. virsh dumpxml <VM Name> | grep interfaceid
• B. virsh get-interface <VM Name>
• C. virsh show <VM Name> | grep interfaceid
• D. virsh list-interface <VM Name>

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf

NEW QUESTION 23
......