Question 1

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Options :

A : Use agentless antivirus with Guest Introspection.

B : Quarantine workloads based on vulnerabilities.

C : Identify risk and reputation of accessed websites.

D : Gain Insight about micro-segmentation traffic flows.

E : Identify security vulnerabilities in the workloads.

Answer: B,E

Question 2

Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?

Options :

A : The option to set time-based rule is a clock Icon in the rule.

B : The option to set time based rule is a field in the rule Itself.

C : There Is no option in the NSX UI. It must be done via command line interface.

D : The option to set time-based rule is a clock Icon in the policy.

Answer: A

Question 3

A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers. The naming convention will be: • WKS-WEB-SRV-XXX • WKY-APP-SRR-XXX • WKI-DB-SRR-XXX What is the optimal way to group them to enforce security policies from NSX?

Options :

A : Use Edge as a firewall between tiers.

B : Do a service insertion to accomplish the task.

C : Group all by means of tags membership.

D : Create an Ethernet based security policy.

Answer: C

Question 4

An NSX administrator is creating a Tier-1 Gateway configured In Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original tailed node to become the Active node upon recovery. Which failover policy meets this requirement?

Options :

A : Non-Preemptive

B : Preemptive

C : Enable Preemptive

D : Disable Preemptive

Answer: A

Question 5

Which two built-in VMware tools will help Identify the cause of packet loss on VLAN Segments? (Choose two.)

Options :

A : Flow Monitoring

B : Packet Capture

C : Live Flow

D : Activity Monitoring

E : Traceflow

Answer: B,E