Q1. Which condition could prevent an ESXi host from receiving VXLAN Tunnel End Point (VTEP) tables?
A. The ESXi host is disconnected from vCenter Server.
B. The netcpa agent is not running on the ESXi host.
C. The vsfwd agent is not running on the ESXi host.
D. The NSX controller on the ESXi host is down.
Answer: B
Q2. An administrator manages a TFTP server virtual machine that is connected to a Logical Switch with a VNI of 7321. The TFTP server has been configured to use port 1069. An NSX Edge Service Gateway is connected to VNI 7321 and has an uplink interface with access to the physical network. Assume external users can reach the Service Gateway. What should the administrator configure to ensure external connections to the TFTP server are successful?
A. Create a DNAT rule with the original port of 69 and translated port of 1069.
B. Create a SNAT rule with the original port of 1069 and translated port of 69.
C. Create a SNAT rule with the original port of 69 and translated port of 1069.
D. Create a DNAT rule with the original port of 1069 and translated port of 69.
Answer: A
Q3. Where does the Distributed Logical Firewall enforce firewall rules?
A. At the Virtual Machine's virtual Network Interface Card (vNIC).
B. At the Logical Switch virtual port that the Virtual Machine connects to.
C. At the NSX Controller's firewall kernel module.
D. At the ESXi host vmnic used by the vSphere Distributed Switch.
Answer: A
Q4. An administrator has deployed NSX in an environment containing a mix of vSphere 5 hosts. The implementation includes the Distributed Firewall Service, but the administrator finds that rules are not being applied to all affected virtual machines. What two conditions would cause this behavior? (Choose two.)
A. Some hosts have not been prepared for NSX.
B. Only ESXi 5.5 and later hosts can push the rules to the virtual machines.
C. Only ESXi 5.1 and later hosts can push the rules to the virtual machines.
D. Some hosts are blocking the port used for rule distribution.
Answer: A, C
Q5. When preparing a vSphere host cluster to work with VMware NSX, which two options show VIBs that are installed and registered with all hosts within the prepared cluster? (Choose two.)
A. NSX VXLAN
B. NSX Distributed Firewall
C. NSX Edge
D. NSX Data Security
Answer: A, B
Q6. Which component automates the consumption of third-party services and provides mapping to virtual machines using a logical policy?
A. NSX Manager
B. Cloud Management Platform (CMP)
C. Service Composer
D. NSX Data Security
Answer: C
Q7. High Availability (HA) was not initially configured when an administrator deployed an NSX Edge Service Gateway. What should the administrator do to configure the NSX Edge with HA?
A. Select the NSX Edge instance from the NSX Edges view in Networking & Security. Go to Manage> Settings> Configuration and add a NSX Edge appliance.
B. Delete the NSX Edge instance and redeploy it with HA. The existing NSX Edge configuration data will be lost.
C. Delete the NSX Edge instance and redeploy it with HA. The configuration data is retained by NSX Manager and pushed to the new NSX Edge instance.
D. Select the NSX Edge appliance from the Virtual Machines and Templates view. Go to Actions> All vCenter Actions> Enable HA to configure High Availability.
Answer: A
Q8. Which tool is used to display VXLAN connection information?
A. pktcap-uw
B. NSX Controller CLI
C. esxtop
D. VDS Health Check
Answer: B
Q9. An administrator wishes to upgrade to NSX from the following infrastructurE.
. vCenter Server 4.1
. vShield 5.0
. ESXi hosts 4.1
What is a valid, minimum set of steps to properly upgrade this environment to NSX?
A. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.5
2. Upgrade vShield 5.0 to vShield 5.5
3. Upgrade ESXi hosts to ESXi 5.1 or greater
4. Install the NSX upgrade bundle
B. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.1
2. Upgrade vCenter Server 5.1 to vCenter Server 5.5
3. Upgrade ESXi hosts to ESXi 5.1 or greater
4. Install the NSX upgrade bundle
C. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.5
2. Upgrade ESXi hosts to ESXi 5.1 or greater
3. Install the NSX upgrade bundle
D. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.5
2. Upgrade vShield 5.0 to vShield 5.5
3. Install the NSX upgrade bundle
Answer: A
Q10. Which two actions take place when an active NSX Edge instance fails? (Choose two.)
A. Once the original NSX Edge instance is recovered, it preempts the other NSX Edge instance and takes over the active role.
B. The standby NSX Edge instance becomes the active instance and requests routing updates from the routing neighbors.
C. Once the original NSX Edge instance is recovered, the NSX Manager attempts to place it on a different host from the other NSX Edge instance.
D. The standby NSX Edge instance becomes the active instance and retains any routing neighbor adjacencies.
Answer: C, D