Exam Questions Answers Braindumps 2V0-41.20 Exam Dumps PDF Questions
Download Free VMware 2V0-41.20 Real Exam Questions
NEW QUESTION 42
When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?
- A. Add partner SVMs to an edge cluster.
- B. Centralize partner SVMs in a service cluster.
- C. Create a secondary vNIC on each quest VM for SVM communication.
- D. Place a partner SVM on each compute cluster node.
Answer: C
NEW QUESTION 43
What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.)
- A. traffic predictability
- B. stateful services leveraged
- C. Failover of services
- D. increased north/south bandwidth
- E. traffic load balancing
Answer: D,E
Explanation:
Explanation
From ICM manual:
Equal-cost multipath (ECMP) routing has several features and functions: * ECMP routing increases the north-south communication bandwidth by combining multiple uplinks.
* ECMP routing performs traffic load balancing.
* ECMP routing provides fault tolerance for failed paths.
* A maximum of eight ECMP paths are supported.
* Hashing is based on 2-tuple IP source and destination addresses.
* ECMP routing is only available on Tier-0 gateways.
NEW QUESTION 44
Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)
- A. BGP Neighbors
- B. Graceful Restart
- C. Route Distribution
- D. Local AS
The following parameters are inherited from the default Tier-0 gateway and cannot be modified at the VRF level:
* Local AS
* Graceful restart
* Graceful restart timer
* Graceful restart stale timer
* Multipath relax
Inter-SR iBGP is not supported in VRF gateways.
BGP can be enabled or disabled per VRF gateway.
Route aggregation and BGP neighbors are local configurations per VRF. - E. Route Aggregation
Answer: A,E
NEW QUESTION 45
An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?
- A. SYSTEM
- B. GROUPING
- C. MONITORING
- D. FABRIC
Answer: D
Explanation:
Reference:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf
NEW QUESTION 46
An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?
- A. SYSTEM
- B. GROUPING
- C. MONITORING
- D. FABRIC
Answer: D
Explanation:
Explanation
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf
NEW QUESTION 47
An administrator has a requirement to have consistent policy configuration and enforcement across NSXT instances. What feature of NSX-T Data Center fulfills this requirement?
- A. Federation
- B. Load balancer
- C. Policy-driven configuration
- D. Multi-hypervisor support
Answer: C
NEW QUESTION 48
Which two logical router components span across all transport nodes? (Choose two.)
- A. SERVICE_ROUTER_TIER0
- B. SERVICE_ROUTER_TIER1
- C. TIER0_DISTRIBUTED_ROUTER
- D. DISTRIBUTED_ROUTER_TIER0
- E. DISTRIBUTED_ROUTER_TIER1
Answer: D,E
NEW QUESTION 49
Which component does the hyperbus interface (vmk50) provide network connectivity to?
- A. virtual machines and containers running across transport nodes
- B. containers running on ESXi/KVM transport nodes
- C. virtual machines running in the same segment
- D. virtual machines running on the same hypervisor
Answer: B
NEW QUESTION 50
A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to secure a simple application composed of web, app, and database tiers.
The naming convention will be:
* WKS-WEB-SRV-XXX
* WKY-APP-SRR-XXX
* WKI-DB-SRR-XXX
What is the optimal way to group them in order to enforce security policies from NSX-T Data Center?
- A. Create an Ethernet based security policy.
- B. Do a service insertion to accomplish the task.
- C. Use Edge as a firewall between tiers.
- D. Group all by means of tags membership.
Answer: D
NEW QUESTION 51
Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?
- A. tcpdump
- B. ipconfig
- C. ifconfig
- D. debug
Answer: C
NEW QUESTION 52
What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN- backed logical switch?
- A. Downlink interface
- B. VLAN Uplink
- C. Loopback Router Port
- D. Service interface
Answer: D
Explanation:
Explanation
"The service interface is a special-purpose port to enable services for mainly VLAN-based networks.
North-south service insertion is another use case that requires a service interface to connect a partner appliance and redirect north-south traffic for partner services. Service interfaces are supported on both active-standby Tier-0 logical routers and Tier-1 routers. Firewall, NAT, and VPNs are supported on this interface. The service interface is also a downlink"
NEW QUESTION 53
Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)
- A. Identify risk and reputation of accessed websites.
- B. Gain insight about micro-segmentation traffic flows.
- C. Identify security vulnerabilities in the workloads.
- D. Quarantine workloads based on vulnerabilities.
- E. Use agentless antivirus with Guest Introspection.
Answer: C,D
NEW QUESTION 54
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)
- A. Add an additional vNIC to the NSX Edge node.
- B. Configure a Tier-1 gateway and connect it directly to the physical routers.
- C. Configure ECMP on the Tier-0 gateway.
- D. Configure NAT on the Tier-0 gateway.
- E. Deploy Large size Edge node/s.
Answer: C,E
NEW QUESTION 55
An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original failed node to become the Active node upon recovery.
Which failover policy meets this requirement?
- A. Preemptive
- B. Non-Preemptive
- C. Disable Preemptive
- D. Enable Preemptive
Answer: B
NEW QUESTION 56
An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time.
Which CLI command disables the nsxcli time out value on NSX Manager?
- A. set cli-timeout disabled
- B. set cli-timeout 1
- C. set cli-timeout enabled
- D. set cli-timeout 0
Answer: D
Explanation:
Explanation
"
https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/82646
https://www.virten.net/2020/06/quick-tip-remove-nsx-t-ssh-and-http-session-timeout/
NEW QUESTION 57
The NSX Control Plane is responsible for which two functions? (Choose two.)
- A. push stateless configurations to forwarding engines
- B. propagate topology information
- C. host API services
- D. receive and validate configuration from NSX Policy
- E. maintain packet-level statistics
Answer: A,B
NEW QUESTION 58
An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?
- A. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint <nsx-manager-thumbprint>
- B. join management-cluster <nsx-cluster-IP> username admin password <admin-
password> thumbprint <nsx-manager-thumbprint> - C. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint <nsx-manager-thumbprint>
- D. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint
<nsx-manager-thumbprint>
Answer: C
NEW QUESTION 59
......
Latest VMware 2V0-41.20 Real Exam Dumps PDF: https://www.exam4pdf.com/2V0-41.20-dumps-torrent.html
2V0-41.20 Exam Dumps, 2V0-41.20 Practice Test Questions: https://drive.google.com/open?id=1d1SNLxAAWJbjcCwgN_dH5PhPCTe3Z_wv
