Q1. -- Exhibit ---- Exhibit --An administrator configures an NSX network as shown in the Exhibit. Both VM-A and VM- B use the same Distributed Router for their default gateway. VM-B receives an IP message from VM-A. Based on the exhibit, what is the source MAC address of the IP message received by VM- B?
A. VM-B's default gateway's MAC address.
B. VM-A's MAC address.
C. VM-A's default gateway's MAC address.
D. Logical Switch 7321's MAC address
Answer: A
Q2. Which NSX feature provides the ability to audit network traffic, define and refine firewall polices, and identify threats to the network?
A. ERSPAN
B. Flow Monitoring
C. Logical Routers
D. Service Composer
Answer: B
Q3. An administrator has recently deployed NSX, but is still using a pair of physical network security devices. The administrator wants to use the physical security devices to filter virtual machine traffic hosted in the overlay network. Which NSX component will provide the connectivity between the overlay and the physical network?
A. Distributed Firewall
B. NSX Controller
C. Edge Services Gateway
D. Logical Router
Answer: D
Q4. -- Exhibit --
-- Exhibit --An administrator has created the NSX network shown in the exhibit. Both VMs use the same
Distributed Router for their default gateway. VM-B receives an IP message from VM-A.
What is the source MAC address of the IP message received by VM-B?
A. VM-A's MAC address.
B. VM-B's default gateway's MAC Address.
C. VM-A's default gateway's MAC address.
D. Logical Switch 7321's MAC address
Answer: A
Q5. An administrator needs to perform a configuration backup of NSX. From which two locations can this task be performed? (Choose two.)
A. Directly on the NSX Manager
B. From the vSphere Web Client
C. Using the NSX API
D. Directly on each NSX Controller
Answer: A, C
Q6. A vSphere administrator wants to setup an NSX Edge Service Gateway to provide traveling employees secure access to company servers located in specific network segments within the corporate Data Centers. The solution has to be as scalable as possible. Which Virtual Private Network solution will satisfy the administrator's requirements?
A. SSL VPN
B. MPLS VPN
C. Layer 2 VPN
D. IPSec VPN
Answer: A
Q7. What is required before running an Activity Monitoring report?
A. Enable data collection on the NSX Controller.
B. Enable data collection on the vCenter Server.
C. Enable data collection on the NSX Manager.
D. Enable data collection on the virtual machine.
Answer: D
Q8. After consulting with the network team, it is decided that Transport Zones will be configured with Unicast Replication Mode for a new NSX for vSphere deployment. Which statement is true regarding the function of the VXLAN Tunnel End Points (VTEPs)?
A. The VTEPs will send unicast frames to the NSX Controllers when the VTEPs do not have a MAC address in the MAC table.
B. The VTEPs will switch to Multicast Replication Mode for those VTEPs to which multicast path discovery is successful.
C. The VTEPs will send multicast frames to all other VTEPs in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.
D. The VTEPs will send unicast frames to all local VTEPs and remote proxies in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.
Answer: D
Q9. A company wants to deploy VMware NSX for vSphere with no PIM and no IGMP configured in the underlying physical network. This company also must ensure that non- ESXi hosts do not receive broadcast, unknown unicast or multicast (BUM) traffic. Which replication mode should the logical switches be deployed with?
A. Unicast Replication Mode B. Multicast Replication Mode C. Hybrid Replication Mode
D. Transport Zone Mode
Answer: A
Q10. Which two statements are valid regarding vCloud Networking and Security (vCNS) and NSX? (Choose two.)
A. Both vCNS and NSX support multiple hypervisor environments.
B. NSX provides support for multiple hypervisor environments, vCNS does not.
C. Both vCNS and NSX support dynamic routing protocols.
D. NSX supports dynamic routing protocols, vCNS does not.
Answer: B, D