VMware 2V0-41.23 - VMware NSX 4.x Professional
Exam Questions and Answers
NSX architecture management
Logical switching and routing
Security (firewalls, IDS/IPS, segmentation)
Advanced services (VPN, NAT, DHCP, DNS, Load Balancer)
Integration with VMware tools
Federation
1. Where does an administrator configure the VLANs used In VRF Lite? (Choose two.)
A.segment connected to the Tler-1 gateway
B.uplink trunk segment
C.downlink interface of the default Tier-0 gateway
D.uplink Interface of the VRF gateway
E.uplink interface of the default Tier-0 gateway
2. Which command is used to set the NSX Manager's logging-level to debug mode for
troubleshooting?
A.Set service manager log-level debug
B.Set service manager logging-level debug
C.Set service nsx-manager log-level debug
D.Set service nsx-manager logging-level debug
3. Which three DHCP Services are supported by NSX? (Choose three.)
A.Gateway DHCP
B.Port DHCP per VNF
C.Segment DHCP
D.VRF DHCP Server
E.DHCP Relay
4. Which VMware GUI tool is used to identify problems in a physical network?
A.VMware Aria Automation
B.VMware Aria Orchestrator
C.VMware Site Recovery Manager
D.VMware Aria Operations Networks
5. What must be configured on Transport Nodes for encapsulation and decapsulation of
Geneve protocol?
A.VXIAN
B.UDP
C.STT
, D.TEP
6. An NSX administrator is troubleshooting a connectivity issue with virtual machines
running on an FSXi transport node. Which feature in the NSX Ul shows the mapping
between the virtual NIC and the host's physical adapter?
A.Port Mirroring
B.Switch Visualization
C.Activity Monitoring
D.IPFIX
7. An administrator has deployed 10 Edge Transport Nodes in their NSX Environment,
but has forgotten to specify an NTP server during the deployment.
What is the efficient way to add an NTP server to all 10 Edge Transport Nodes?
A.Use Transport Node Profile
B.Use the CU on each Edge Node
C.Use a Node Profile
D.Use a PowerCU script
8. Which three data collection sources are used by NSX Network Detection and
Response to create correlations/Intrusion campaigns? (Choose three.)
A.Files and anti-malware (lie events from the NSX Edge nodes and the Security
Analyzer
B.East-West anti-malware events from the ESXi hosts
C.Distributed Firewall flow data from the ESXi hosts
D.IDS/IPS events from the ESXi hosts and NSX Edge nodes
E.Suspicious Traffic Detection events from NSX Intelligence
9. Which two of the following are used to configure Distributed Firewall on VDS?
(Choose two.)
A.vSphere API
B.NSX API
C.NSX CU
D.vCenter API
E.NSX UI
10. Which two statements are true for IPSec VPN? (Choose two.)
A.VPNs can be configured on the command line Interface on the NSX manager.
B.IPSec VPN services can be configured at Tler-0 and Tler-1 gateways.
C.IPSec VPNs use the DPDK accelerated performance library.
D.Dynamic routing Is supported for any IPSec mode In NSX.
11. VRF Lite VLANs: Which two interfaces require VLAN configuration in VRF Lite?
A. Segment connected to Tier-1 gateway
B. Uplink trunk segment
C. Uplink interface of VRF gateway
Exam Questions and Answers
NSX architecture management
Logical switching and routing
Security (firewalls, IDS/IPS, segmentation)
Advanced services (VPN, NAT, DHCP, DNS, Load Balancer)
Integration with VMware tools
Federation
1. Where does an administrator configure the VLANs used In VRF Lite? (Choose two.)
A.segment connected to the Tler-1 gateway
B.uplink trunk segment
C.downlink interface of the default Tier-0 gateway
D.uplink Interface of the VRF gateway
E.uplink interface of the default Tier-0 gateway
2. Which command is used to set the NSX Manager's logging-level to debug mode for
troubleshooting?
A.Set service manager log-level debug
B.Set service manager logging-level debug
C.Set service nsx-manager log-level debug
D.Set service nsx-manager logging-level debug
3. Which three DHCP Services are supported by NSX? (Choose three.)
A.Gateway DHCP
B.Port DHCP per VNF
C.Segment DHCP
D.VRF DHCP Server
E.DHCP Relay
4. Which VMware GUI tool is used to identify problems in a physical network?
A.VMware Aria Automation
B.VMware Aria Orchestrator
C.VMware Site Recovery Manager
D.VMware Aria Operations Networks
5. What must be configured on Transport Nodes for encapsulation and decapsulation of
Geneve protocol?
A.VXIAN
B.UDP
C.STT
, D.TEP
6. An NSX administrator is troubleshooting a connectivity issue with virtual machines
running on an FSXi transport node. Which feature in the NSX Ul shows the mapping
between the virtual NIC and the host's physical adapter?
A.Port Mirroring
B.Switch Visualization
C.Activity Monitoring
D.IPFIX
7. An administrator has deployed 10 Edge Transport Nodes in their NSX Environment,
but has forgotten to specify an NTP server during the deployment.
What is the efficient way to add an NTP server to all 10 Edge Transport Nodes?
A.Use Transport Node Profile
B.Use the CU on each Edge Node
C.Use a Node Profile
D.Use a PowerCU script
8. Which three data collection sources are used by NSX Network Detection and
Response to create correlations/Intrusion campaigns? (Choose three.)
A.Files and anti-malware (lie events from the NSX Edge nodes and the Security
Analyzer
B.East-West anti-malware events from the ESXi hosts
C.Distributed Firewall flow data from the ESXi hosts
D.IDS/IPS events from the ESXi hosts and NSX Edge nodes
E.Suspicious Traffic Detection events from NSX Intelligence
9. Which two of the following are used to configure Distributed Firewall on VDS?
(Choose two.)
A.vSphere API
B.NSX API
C.NSX CU
D.vCenter API
E.NSX UI
10. Which two statements are true for IPSec VPN? (Choose two.)
A.VPNs can be configured on the command line Interface on the NSX manager.
B.IPSec VPN services can be configured at Tler-0 and Tler-1 gateways.
C.IPSec VPNs use the DPDK accelerated performance library.
D.Dynamic routing Is supported for any IPSec mode In NSX.
11. VRF Lite VLANs: Which two interfaces require VLAN configuration in VRF Lite?
A. Segment connected to Tier-1 gateway
B. Uplink trunk segment
C. Uplink interface of VRF gateway
