100% found this document useful (1 vote)
116 views

NSXT Vmware

Uploaded by

Hoc Hanh
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
100% found this document useful (1 vote)
116 views

NSXT Vmware

Uploaded by

Hoc Hanh
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 49

 

Exam 2V0-41.20
Professional VMware NSX-T Data Center 
Version: 5.0

[ Total Questions: 91 ]
 

Certify For Sure with IT Exam Dumps


1. Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

 A. set time-server 

B. get timezone

C. set ntp-server 

D. set timezone

Answer:  C

2. An NSX administrator has deployed an NSX Edge on a bare-metal server. Which command registers the

NSX Edge with the NSX Manager?

 A. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint

<nsx-manager-thumbprint>

B. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint

<nsx-manager—thumbprint>

C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint

<nsx-manager-thumbprint>

D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint

<nsx-manager-thumbprint>

Answer:  D

3. An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode.

In the event of node failure, the failover policy should not allow the original failed node to become the Active

node upon recovery.

Which failover policy meets this requirement?

 A. Non-Preemptive

B. Preemptive

C. Enable Preemptive

D. Disable Preemptive

Answer:  A

4. What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)

The No.1 IT Certification Dumps

1
 

Certify For Sure with IT Exam Dumps


 A. policy-based IPSec VPN

B. Layer-7 based IPSec VPN

C. route-based IPSec VPN

D. Open source based IPSec VPN

E. SSL based IPSec VPN

Answer:  A C

5. What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

 A. Segment Port

B. Group

C. Segment

D. DFW

E. Tier-1 Gateway

Answer:  B D

6. Which step must be performed before deploying an additional NSX Manager from the NSX-T UI?

 A. Prepare the ESXi hosts as Transport Nodes.

B. Configure the Virtual IP of the cluster.

C. Register vCenter Server as a Compute Manager.

D. Create an Edge Cluster.

Answer:  C

7. An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.

In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement

configuration has to be done on the Tier-1 Gateway? (Choose two.)

 A. Advertise All LB SNAT IP Routes

B. All Static Routes

C. Information

D. Advertise All LB VIP Routes

E. Advertise All NAT Routes

The No.1 IT Certification Dumps

2
Zephyrhills® - Sponsored

You recycle, we donate water.


Take the MadeBetter Pledge with Zephyrhills®.

Take The...


 

Certify For Sure with IT Exam Dumps


Answer:  A D

Explanation:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EEBA627A-0860-477A

-9

8. An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment

is not realized on the KVM Transport node.

What are two possible causes for this issue? (Choose two.)

 A. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.

B. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the

KVM Transport Node.

C. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but

are in Powered Off state.

D. The virtual machines running on the KVM Transport Node are not connected to the VDS.

E. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.

Answer:  B E

9. Which two ports are used by a transport node to communicate with the management and control planes

in NSX-T Data Center 3.0? (Choose two.)

 A. 5685

B. 1235

C. 5671

D. 5678

E. 1234

Answer:  B E

Explanation:

The NSX Manager management plane communicates with the transport nodes by using APH Server over 

NSX-RPC/TCP through port 1234. CCP communicates with the transport nodes by using APH Server over 

NSX-RPC/TCP through port 1235. Taken from NSX-T ICM 3.0 Lecture manual

The No.1 IT Certification Dumps

3
 

Certify For Sure with IT Exam Dumps


10. Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

 A. MTU 1500

B. MTU 1400

C. vSphere Distributed Switch 6.5

D. vSphere Distributed Switch 7.0

E. MTU 1600

Answer:  D E

Explanation:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-BA34FB2A-6780-41C5-B8

95

11. A user is assigned these two roles in NSX Manager:

LB Admin

Network Engineer 

What privileges does this user have in the system?

 A. read permissions on all networking services and full access permissions on load balancing features

B. full access permissions on all networking services and full access permissions on load balancing

features

C. full access permissions on all networking services and read permissions on load balancing features

D. read permissions on all networking services and read permissions on load balancing features

Answer:  B

12. Which three services are compatible with VRF Lite? (Choose three.)

 A. VPN

B. Intrusion Detection

C. NAT

D. Load Balancer 

E. DHCP

Answer:  B C E

Explanation:

The No.1 IT Certification Dumps

4
 

Certify For Sure with IT Exam Dumps


VRF Lite is not compatible with the following services:

-VPN

-Load Balancer 

Taken from NSX-T ICM 3.0 Lecture Manual.

13. Refer to the exhibit.

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow

Web VM to initiate communication with public networks?

 A. SNAT

B. Reverse NAT

C. DNAT

D. 1:1 NAT

Answer:  A

14. Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

The No.1 IT Certification Dumps

5
 

Certify For Sure with IT Exam Dumps


 A. virsh dumpxml <VM Name> | grep interfaceid

B. virsh get-interface <VM Name>

C. virsh show <VM Name> | grep interfaceid

D. virsh list-interface <VM Name>

Answer:  A

Explanation:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf 

15. A security administrator needs to configure a firewall rule based on the domain name of a specific

application. Which field in a distributed firewall rule does the administrator configure?

 A. Profile

B. Source

C. Service

D. Policy

Answer:  A

16. Which CLI command is used to disable SSH timeout on NSX Manger and NSX Edge nodes?

 A. set cli ssh timeout 0

B. set esxcli ssh session off 

C. set cli-timeout 0

D. nsxcli ssh session on

Answer:  C

17. How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

 A. Automatically created when Tier-1 is created.

B. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.

C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.

D. Automatically created when Tier-1 is connected with Tier-0 from NSX UI.

Answer:  D

Explanation:

The No.1 IT Certification Dumps

6
 

Certify For Sure with IT Exam Dumps


https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-3F163DEE-1EE6-4D8

0-B

18. Which statement is true about an alarm in a Suppressed state?

 A. An alarm can be suppressed for a specific duration in days.

B. An alarm can be suppressed for a specific duration in minutes.

C. An alarm can be suppressed for a specific duration in seconds.

D. An alarm can be suppressed for a specific duration in hours.

Answer:  D

Explanation:

https://docs.vmware.com/en/VMware-NSX-Intelligence/1.1/user-guide/GUID-EBD3C5A8-F9AB-4A22-BA4

0- "If you move an alarm into a Suppressed state, you are prompted to specify the duration in hours. After 

the specified duration passes, the alarm state reverts to Open. However, if the system determines the

condition has been corrected, the alarm state changes to Resolved."

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EB1BB1D3-8892-4890

-B

19. Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

 A. set service nsx-manager logging-level debug

B. set service nsx-manager log-level debug

C. set service manager log-level debug

D. set service manager logging-level debug

Answer:  D

Explanation:

https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/

8264

20. Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App

and DB virtual machines that reside on different segments?

 A. Multicast

The No.1 IT Certification Dumps

7
 

Certify For Sure with IT Exam Dumps


B. Anycast

C. Unicast

D. Broadcast

Answer:  C

21. Which command is used to change the NSX CU administrator password?

 A. set user admin password <password> old-password <old-password>

B. set user admin password <old-password> <new-password>

C. set user administrator password <old-password> <new-password>

D. set user administrator password <password> old-password <old-password>

Answer:  A

Explanation:

To change the password of an account run:set user admin password my-new-pwd old-password

my-old-pwd

22. An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO

image. Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM

allow participation in overlay and VLAN transport zones?

 A. e1000

B. VMXNET2

C. VMXNET3

D. Flexible

Answer:  C

23. Which CLI command shows syslog on NSX Manager?

 A. show log manager follow

B. get log-file auth.log

C. get log-file syslog

D. /var/log/sysloq/syslog.log

Answer:  C

The No.1 IT Certification Dumps

ADVERTISING

- Sp

Seño
Ric…
Delicio
Differe
Ingre…
 

Certify For Sure with IT Exam Dumps


Explanation:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-406AF9C3-E8F7-447A

-8E

24. Which three protocols could an NSX administrator use to transfer log messages to a remote log server?

(Choose three.)

 A. SSL

B. HTTPS

C. TLS

D. UDP

E. SSH

F. TCP

Answer:  C D F

Explanation:

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/certification/vmware-2vo-41.20-exa

m-p

25. Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center?

(Choose two.)

 A. can have a maximum of 8 edge nodes

B. must have only active-active edge nodes

C. can have a maximum of 10 edge nodes

D. can contain multiple types of edge nodes (VM or bare metal)

E. must contain only one type of edge nodes (VM or bare metal)

Answer:  C D

Explanation:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-14183A62-8E8D-43CC-92

E0

26. Which network tool cloud an administrator use on an ESXi 7 host to capture packets when

The No.1 IT Certification Dumps

9
 

Certify For Sure with IT Exam Dumps


troubleshooting connectivity issues?

 A. Wireshark

B. pktcap-uw

C. net-stats

D. tcpdump

Answer:  B

Explanation:

If you do when troubleshooting connectivity issues on your Virtualization environment. This post will help

you to capture Network traffic on ESXi host using pktcap-uw tool.

27. Which two statements are true about the implementation of multicast in NSX-T Data Center? (Choose

two.)

 A. Multicast routing is implemented with PIM Sparse-Mode.

B. IGMP Snooping is used to populate multicast forwarding tables.

C. Tier-0 gateways can be the Rendezvous Point.

D. Multicast is supported in ESXi and KVM transport nodes.

E. An Edge can be the Rendezvous Point.

Answer:  A B

Explanation:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf 

28. Which network virtualization technologies can be used with an Ethernet VPN (EVPN) deployment in

NSX-T Data Center? (Choose two.)

 A. Virtual Extensible Local Area Network (VXLAN)

B. Multiprotocol Border Gateway Protocol (MP-BGP)

C. Open Shortest Path First (OSPF)

D. Multiprotocol Label Switching (MPLS)

E. Virtual Routing and Forwarding (VRF)

Answer:  A E

The No.1 IT Certification Dumps

10

Trusted by over 1 million members

Try Scribd FREE for 30 days to access over 125 million titles without ads or
interruptions!

Start Free Trial

Cancel Anytime.
 

Certify For Sure with IT Exam Dumps


29. Which tool could be used to configure BGP on a Tier-0 Gateway?

 A. PowerShell

B. API

C. ESX CLI

D. NSX CLI

Answer:  D

30. What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a

VLAN- backed logical switch?

 A. Service interface

B. Loopback Router Port

C. Downlink interface

D. VLAN Uplink

Answer:  A

Explanation:

"The service interface is a special-purpose port to enable services for mainly VLAN-based networks.

North-south service insertion is another use case that requires a service interface to connect a partner 

appliance and redirect north-south traffic for partner services. Service interfaces are supported on both

active-standby Tier-0 logical routers and Tier-1 routers. Firewall, NAT, and VPNs are supported on this

interface. The service interface is also a downlink"

31. Which statement describes the VMware Virtual Cloud Network Vision?

 A. Virtual Cloud Network connects and protects virtual machines running in KVM environments.

B. Virtual Cloud Network connects and protects virtual machines running in vSphere environments.

C. Virtual Cloud Network connects and protects applications, regardless of their physical locations.

D. Virtual Cloud Network connects and protects applications and data, regardless of their physical

locations.

Answer:  D

32. Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare

The No.1 IT Certification Dumps

11
 

Certify For Sure with IT Exam Dumps


metal transport node?

 A. ifconfig

B. tcpdump

C. debug

D. ipconfig

Answer:  A

Explanation:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-B7E7371E-A9F6-4880-B1

84

33. Which three steps must be carried out to configure North-South / East-West Network Inspection?

(Choose three.)

 A. Service Deployment

B. Service Insertion

C. Service Consumption

D. Service Registration

E. Service Introspection

Answer:  A B E

34. An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time. Which CLI

command disables the nsxcli time out value on NSX Manager?

 A. set cli-timeout 0

B. set cli-timeout enabled

C. set cli-timeout disabled

D. set cli-timeout 1

Answer:  A

Explanation:

"https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957

/8264

https://www.virten.net/2020/06/quick-tip-remove-nsx-t-ssh-and-http-session-timeout/

The No.1 IT Certification Dumps

12
Trusted by over 1 million members

Try Scribd FREE for 30 days to access over 125 million titles without ads or
interruptions!

Start Free Trial

Cancel Anytime.
Share this document
    

You might also like


Document 28 pages

VMware 2V0-41.20 89Q ( )


updated-21.3.16
Andreas Sakou
No ratings yet

Document 23 pages

VMware.Pre_.2V0-
41.20.by_.VCEplus.70q-DEMO
CS
No ratings yet

Document 25 pages

2V0-41_PrepAway
Sebastian Burton
No ratings yet

Magazines Podcasts

Sheet music

Document 29 pages

642_dump
Sudhakar Subburam
No ratings yet
Document 28 pages

2V0-41 From PrepAway


Sebastian Burton
No ratings yet

Document 17 pages

2V0-41.20 NSX-T
Romeo
No ratings yet

Document 9 pages

NCP-5.15-2
adf
No ratings yet

Document 63 pages

NCP-MCI-5.15 EXAM DUMP FROM


JULIE
Dev Bose
No ratings yet
Document 35 pages

Gratisexam.com
VMware.braindumps.vcpn610.v…
ghfalcon7
No ratings yet

Document 57 pages

2v0-642
Jose Baltasar Couce Lopez
No ratings yet

Document 21 pages

VMware.PracticeTest.2V0-
41.19.v2019-10-…
Deepak Malhotra
No ratings yet

Document 51 pages

Untitled
Joon
No ratings yet

Show more

About Support Legal Social


About Scribd Help / FAQ Terms Instagram

Press Accessibility Privacy Twitter

Our blog Purchase help Copyright Facebook

Join our team! AdChoices Cookie Preferences Pinterest

Contact us Publishers Do not sell or share my


personal information
Invite friends

Gifts

Scribd for enterprise

Get our free apps

Audiobooks • Books • Documents • Magazines • Podcasts • Sheet music • Snapshots

Language: English

Copyright © 2023 Scribd Inc.

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy