Question 1

An administrator has a requirement to have consistent policy configuration and enforcement across NSX instances. What feature of NSX fulfills this requirement?

Options :

A : Load balancer

B : Federation

C : Multi-hypervisor support

D : Policy-driven configuration

Answer: B

Question 2

Which two are supported by L2 VPN clients? (Choose two.)

Options :

A : NSX for vSphere Edge

B : 3rd party Hardware VPN Device

C : NSX Autonomous Edge

D : NSX Edge

Answer: A,D

Question 3

How does the Traceflow tool identify issues in a network?

Options :

A :

Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

B :

Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

C : Injects ICMP traffic into the data plane and observes the results in the control plane.

D : Injects synthetic traffic into the data plane and observes the results in the control plane.

Answer: D

Question 4

A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers. The naming convention will be: • WKS-WEB-SRV-XXX • WKY-APP-SRR-XXX • WKI-DB-SRR-XXX What is the optimal way to group them to enforce security policies from NSX?

Options :

A : Use Edge as a firewall between tiers.

B : Do a service insertion to accomplish the task.

C : Group all by means of tags membership.

D : Create an Ethernet based security policy.

Answer: C

Question 5

An NSX administrator is creating a Tier-1 Gateway configured In Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original tailed node to become the Active node upon recovery. Which failover policy meets this requirement?

Options :

A : Non-Preemptive

B : Preemptive

C : Enable Preemptive

D : Disable Preemptive

Answer: A