Improve 2V0-41.19 Paper 2021

NEW QUESTION 1
An NSX administrator has observed connectivity issues between the NSX Manager and the KVM Transport Node.
Which two log files could be used to troubleshoot the issue on the KVM Transport Node? (Choose two.)

• A. /var/log/vmware/nsx-syslog
• B. /usr/vmware/log/syslog
• C. /var/log/nsx/syslog
• D. /usr/vmware/nsx-syslog
• E. /var/log/syslog

Answer: AE

NEW QUESTION 2
How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?

• A. 3
• B. 5
• C. 4
• D. 6

Answer: C

NEW QUESTION 3
Which visual tool within the NSX User Interface should an administrator use to monitor hop-by-hop connectivity between two virtual machines or logical ports?

• A. IPFIX
• B. Port Connection
• C. Port Mirroring
• D. Port Status

Answer: B

NEW QUESTION 4
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

• A. SR and DR doesn't need to be connected to provide any stateful services.
• B. SR is instantiated and automatically connected with DR.
• C. SR and DR is instantiated but requires manual connection.
• D. DR is instantiated and automatically connected with SR.

Answer: B

NEW QUESTION 5
Refer to the exhibit.

A vSphere administrator is trying to connect T1-Web-01 virtual machine to a NSX-T logical switch and is receiving an error.
Which service must be restarted to connect the virtual machine to a NSX-T logical switch?

• A. /etc/init.d/nsx-opsagent start
• B. /etc/init.d/nsx-proxy start
• C. /etc/init .d/nsxa start
• D. /etc/init.d/nsx-datapath start

Answer: A

NEW QUESTION 6
Which two components are involved in the logical switching and N-VDS configuration during ESXi transport node installation? (Choose two.)

• A. etherswitch
• B. Open vSwitch
• C. nsx-opsAgent
• D. vdl2
• E. nsx-vswitch

Answer: BD

NEW QUESTION 7
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

• A. Configure a Tier-1 gateway and connect it directly to the physical routers.
• B. Configure ECMP on the Tier-0 gateway.
• C. Configure NAT on the Tier-0 gateway.
• D. Deploy Large size Edge node/s.
• E. Add an additional vNIC to the NSX Edge node.

Answer: BD

NEW QUESTION 8
What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.) I

• A. stateful services leveraged
• B. increased north/south bandwidth
• C. traffic load balancing
• D. Failover of services
• E. traffic predictability

Answer: BC

NEW QUESTION 9

A NSX-T Data Center administrator wants to ensure that any machine on a public network can communicate with a Web VM running in a NSX-T Data Center environment.
Which NAT type must be created on the Tier-0 or Tier-1 Gateway to achieve this?

• A. 1:1 NAT
• B. Reverse NAT
• C. DNAT
• D. SNAT

Answer: B

NEW QUESTION 10
What are three NSX Manager roles? (Choose three.)

• A. zookeeper
• B. manager
• C. policy
• D. controller
• E. cloud
• F. master

Answer: BCD

NEW QUESTION 11
Which two commands are used to query the arp-table of a logical switch? (Choose two.)

• A. get logical-switch arp-table <logical-switch-uuid>
• B. get logical-switch <logical-switch-uuid> arp-table
• C. get logical-switch <vni> arp-table
• D. get logical-switch arp-table <vni>
• E. get logical-switch arp-table

Answer: BC

NEW QUESTION 12
An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

• A. Syslog Is not configured on the NSX Manager
• B. Distributed Firewall Rule Logging is not enabled
• C. Zero Trust Security Is not enabled
• D. Syslog is not configured on the ESXI transport node

Answer: C

NEW QUESTION 13
Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

• A. Destination MAC
• B. Failover Order
• C. Load Balanced Source
• D. Load Balanced Source IP
• E. Destination Port
• F. Load Balanced Source MAC

Answer: BCF

NEW QUESTION 14
A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to allow simple 3-tier app forms through web, app, and database.
The naming convention will be:
• WKS-WEB-SRV-XXX
• WKY-APP-SRR-XXX
• WKI-DB-SRR-XXX
What is the optimal way to group them in order to enforce security policies from NSX-T Data Center?

• A. Use Edge as a firewall between tiers.
• B. Create an Ethernet based security policy.
• C. Do a service Insertion to accomplish the task.
• D. Group all by means of tags membership.

Answer: D

NEW QUESTION 15
Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

• A. Distributed Firewall
• B. Service Insertion
• C. Gateway Firewall
• D. Virtual Private Network
• E. Distributed Routing
• F. Packet Forwarding

Answer: CEF

NEW QUESTION 16
Which two logical router components span across all transport nodes? (Choose two.)

• A. SERVICE_ROUTER_TIER0
• B. DISTRIBUTED_ROUTER_TIER0
• C. SERVICE_ROUTER_TIER1
• D. DISTRIBUTED_ROUTER_TIER1
• E. TIER0_DISTRIBUTED_ROUTER

Answer: BD

NEW QUESTION 17
Which statement Is true regarding the audit user account? (Choose two.)

• A. The admin user must set the password for the audit account to log in to NSX Manager.
• B. The administrator must run the set audit user password <password> command.
• C. The audit user has read-write access to the NSX Manager.
• D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.
• E. The administrator must run the set user audit password <password> command.

Answer: AC

NEW QUESTION 18
An NSX administrator Is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

• A. Tier-0 Gateway
• B. Edge Node
• C. Tier-1 Gateway
• D. Edge Cluster

Answer: A

NEW QUESTION 19
Which two commands could be used on an ESXI transport node to validate connectivity to the NSX Manager? (Choose two.)

• A. nsxcli --cmd get manager status
• B. esxcli network ip connection list I grep rabbitmq
• C. nsxcli --cmd get managers
• D. nsxcli --cmd get manager connectivity status
• E. esxcli network ip connection list I grep 5671

Answer: BE

NEW QUESTION 20
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?

• A. Host Standby Router Protocol (HSRP)
• B. Beacon Probing (BP)
• C. Virtual Router Redundancy Protocol (VRRP)
• D. Bidirectional Forwarding Detection (BFD)

Answer: D

NEW QUESTION 21
Which two IP Discovery mechanisms are supports in KVM-environments? (Choose two.)

• A. IGMP Snooping
• B. Packet Snooping
• C. DHCP Snooping
• D. ARP Snooping
• E. ND Snooping

Answer: CD

NEW QUESTION 22
Refer to the exhibit.

An NSX administrator is retrieving a log bundle at the request of VMware Global Support. It is taking a long time to get the log bundle. The administrator reviews the configuration.
Which two changes to the configuration must be made to speed up the creation of the bundle. (Choose two.)

• A. Disable upload bundle to remote file server
• B. Change transfer protocol
• C. Do not use ssh fingerprint
• D. Create the support bundle from vCenter
• E. Disable Include core files and audit logs

Answer: BC

NEW QUESTION 23
......