Certified VMware 2V0-41.20 Training Tools Online

NEW QUESTION 1
Which two statements are true about the implementation of multicast in NSX-T Data Center? (Choose two.)

• A. Multicast routing is implemented with PIM Sparse-Mode.
• B. IGMP Snooping is used to populate multicast forwarding tables.
• C. Tier-0 gateways can be the Rendezvous Point.
• D. Multicast is supported in ESXi and KVM transport nodes.
• E. An Edge can be the Rendezvous Point.

Answer: AB

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf

NEW QUESTION 2
Which statement Is true regarding the audit user account? (Choose two.)

• A. The admin user must set the password for the audit account to log in to NSX Manager.
• B. The administrator must run the set audit user password <password> command.
• C. The audit user has read-write access to the NSX Manager.
• D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.
• E. The administrator must run the set user audit password <password> command.

Answer: AE

NEW QUESTION 3
What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

• A. Cloud Service Administrator
• B. Network Engineer
• C. Network Operator
• D. NSX Administrator

Answer: B

NEW QUESTION 4
Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?

• A. Transport Node Profile
• B. Uplink Profile
• C. Switching Profile
• D. Host Profile

Answer: A

NEW QUESTION 5
How is the intra-tier transit link connection created between SR and DR for a Tier-0 Gateway?

• A. Manually create a gateway interface and mark it as transit.
• B. Automatically created when DR is created.
• C. Automatically created when SR is initialized.
• D. Manually create external uplink interface and mark it as transit.

Answer: C

NEW QUESTION 6
What are three NSX Manager roles? (Choose three.)

• A. cloud
• B. manager
• C. zookeeper
• D. policy
• E. master
• F. controller

Answer: BDF

NEW QUESTION 7
Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

• A. Multicast
• B. Anycast
• C. Unicast
• D. Broadcast

Answer: C

NEW QUESTION 8
An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original failed node to become the Active node upon recovery.
Which failover policy meets this requirement?

• A. Non-Preemptive
• B. Preemptive
• C. Enable Preemptive
• D. Disable Preemptive

Answer: A

NEW QUESTION 9
Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

• A. MTU 1500
• B. MTU 1400
• C. vSphere Distributed Switch 6.5
• D. vSphere Distributed Switch 7.0
• E. MTU 1600

Answer: DE

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-BA34FB2A-6780-41C5-B895

NEW QUESTION 10
Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

• A. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.
• B. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.
• C. Create an OAuth 2.0 client in VMware Identity Manager.
• D. Enter the Identity Provider (IdP) metadata URL in NSX Manager.
• E. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

Answer: CE

NEW QUESTION 11
Which two commands are used to query the arp-table of a logical switch? (Choose two.)

• A. get logical-switch arp-table <logical-switch-uuid>
• B. get logical-switch arp-table <vni>
• C. get logical-switch arp-table
• D. get logical-switch <logical-switch-uuid> arp-table
• E. get logical-switch <vni> arp-table

Answer: DE

NEW QUESTION 12
Which command is used to change the NSX CU administrator password?

• A. set user admin password <password> old-password <old-password>
• B. set user admin password <old-password> <new-password>
• C. set user administrator password <old-password> <new-password>
• D. set user administrator password <password> old-password <old-password>

Answer: A

Explanation:
To change the password of an account run:set user admin password my-new-pwd old-password my-old-pwd

NEW QUESTION 13
An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged. What could cause this issue?

• A. Syslog is not configured on the NSX Manager
• B. Distributed Firewall Rule logging is not enabled
• C. Zero Trust Security is not enabled
• D. Syslog is not configured on the ESXi transport node

Answer: B

NEW QUESTION 14
How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

• A. Automatically created when Tier-1 is created.
• B. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.
• C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.
• D. Automatically created when Tier-1 is connected with Tier-0 from NSX UI.

Answer: D

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-3F163DEE-1EE6-4D80-B

NEW QUESTION 15
Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

• A. Identify security vulnerabilities in the workloads.
• B. Use agentless antivirus with Guest Introspection.
• C. Quarantine workloads based on vulnerabilities.
• D. Identify risk and reputation of accessed websites.
• E. Gain insight about micro-segmentation traffic flows.

Answer: AC

NEW QUESTION 16
How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?

• A. 5
• B. 6
• C. 3
• D. 4

Answer: D

NEW QUESTION 17
......