Latest Nov-2023 VMware 2V0-41.20 Dumps Updated 95 Questions [Q39-Q57]

ExamBoosts November 26, 2023 2V0-41.20 > VMware 0

Rate this post

Latest Nov-2023 VMware 2V0-41.20 Dumps Updated 95 Questions

PDF Download Free of 2V0-41.20 Valid Practice Test Questions

QUESTION 39
Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Identify security vulnerabilities in the workloads.

Use agentless antivirus with Guest Introspection.

Quarantine workloads based on vulnerabilities.

Identify risk and reputation of accessed websites.

Gain insight about micro-segmentation traffic flows.

QUESTION 40
An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.

Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the KVM Transport Node.

The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.

The virtual machines running on the KVM Transport Node are not connected to the VDS.

The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.

QUESTION 41
Which statement Is true regarding the audit user account? (Choose two.)

The admin user must set the password for the audit account to log in to NSX Manager.

The administrator must run the set audit user password <password> command.

The audit user has read-write access to the NSX Manager.

The audit user is disabled by default and must be enabled to log in to the NSX Manager.

The administrator must run the set user audit password <password> command.

QUESTION 42
Which two logical router components span across all transport nodes? (Choose two.)

DISTRIBUTED_ROUTER_TIER0

SERVICE_ROUTER_TIER0

TIER0_DISTRIBUTED_ROUTER

DISTRIBUTED_ROUTER_TIER1

SERVICE_ROUTER_TIER1

QUESTION 43
Which tool injects packets and provides various observation points along the packet’s path between two NSX-T managed objects?

SPAN mirrors

Port Mirroring

Traceflow

IPFIX

Reference:
2Fnsxt_21_admin.pdf&usg=AOvVaw2DqQfqPkhzWQfiJP2SgNbO (213)

QUESTION 44
Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal
transport node?

ifconfig

tcpdump

debug

ipconfig

QUESTION 45
Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.

Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

Create an OAuth 2.0 client in VMware Identity Manager.

Enter the Identity Provider (IdP) metadata URL in NSX Manager.

Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

QUESTION 46
Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

Route Aggregation

Route Distribution

Graceful Restart

BGP Neighbors

Local AS

Explanation
The following parameters are inherited from the default Tier-0 gateway and cannot be modified at the VRF level:
* Local AS
* Graceful restart
* Graceful restart timer
* Graceful restart stale timer
* Multipath relax
Inter-SR iBGP is not supported in VRF gateways.
BGP can be enabled or disabled per VRF gateway.
Route aggregation and BGP neighbors are local configurations per VRF.

QUESTION 47
Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)

5685

1235

5671

5678

1234
The NSX Manager management plane communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1234. CCP communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1235. Taken from NSX-T ICM 3.0 Lecture manual

QUESTION 48
When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?

Create a secondary vNIC on each quest VM for SVM communication.

Place a partner SVM on each compute cluster node.

Centralize partner SVMs in a service cluster.

Add partner SVMs to an edge cluster.

QUESTION 49
When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hair pinning?

Create a secondary vNIC on each quest VM for SVM communication.

Place a partner SVM on each compute cluster node.

Centralize partner SVMs in a service cluster.

Add partner SVMs to an edge cluster.
“For SVMs deployed on compute hosts, an SVM does not need to be installed on every host. Some customers prefer to deploy the partner SVM on each host to achieve the least amount of traffic hairpinning. When the partner SVM is deployed in a service cluster, traffic is sent from the compute hosts across the overlay to the hosts in the service cluster.”

QUESTION 50
Which command is used to change the NSX CU administrator password?

set user admin password <password> old-password <old-password>

set user admin password <old-password> <new-password>

set user administrator password <old-password> <new-password>

set user administrator password <password> old-password <old-password> To change the password of an account run: set user admin password my-new-pwd old-password my-old-pwd

QUESTION 51
Which three steps must be carried out to configure North-South / East-West Network Inspection? (Choose three.)

Service Deployment

Service Insertion

Service Consumption

Service Registration

Service Introspection

QUESTION 52
A NSX-T Data Center administrator wants to ensure that any machine on a public network can communicate with a Web VM running in a NSX-T Data Center environment.
Which NAT type must be created on the Tier-0 or Tier-1 Gateway to achieve this?

1:1 NAT

Reverse NAT

DNAT

SNAT

QUESTION 53
Which statement is true about an alarm in a Suppressed state?

An alarm can be suppressed for a specific duration in days.

An alarm can be suppressed for a specific duration in minutes.

An alarm can be suppressed for a specific duration in seconds.

An alarm can be suppressed for a specific duration in hours.

QUESTION 54
How does the Traceflow tool identify issues in a network?

Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

Injects synthetic traffic into the data plane and observes the results in the control plane.

Injects ICMP traffic into the data plane and observes the results in the control plane.

QUESTION 55
Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

ifconfig

tcpdump

debug

ipconfig

Explanation
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-B7E7371E-A9F6-4880-B184-

QUESTION 56
An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node. Which feature in the NSX UI shows the mapping between the virtual NIC and the host’s physical adapter?

Switch Visualization

Port Mirroring

Activity Monitoring

IPFIX

QUESTION 57
What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

Cloud Service Administrator

Network Engineer

Network Operator

NSX Administrator

Loading …