Question 1

Which of the following components can enforce Layer 7 Context Firewall Rules? (Select all that apply)

Options :

A : Distributed Firewall

B : Tier 1 Gateway

C : Tier 0 Gateway

D : VMK Interface

Answer: A,B,C

Question 2

Which of the following is NOT a feature of the VMware vDefend Gateway Firewall?

Options :

A : Implemented on Edge Node

B : Layer 7 APP-ID

C : Guest Introspection

D : TLS Decryption

Answer: C

Question 3

You are building a VMware vDefend Distributed Firewall policy to protect an application. You want to be sure that the policy cannot be modified by two different users simultaneously. What should you do?

Options :

A : Set the Locked option of the firewall policy to Yes

B : Move the policy so that it is the first policy in the list

C : Define the policy action as Block

D : Use role-based access control to make all other users read-only users

Answer: A

Question 4

Malware Detection/Prevention is enforced ONLY at Distributed level.

Options :

A : True

B : False

Answer: B

Question 5

Which of the following is true regarding the capabilities of Antrea?

Options :

A : To provide network connectivity between the Azure cloud and the On-Prem datacenter

B : To provide pod connectivity and network policy enforcement with Open vSwitch in Kubernetes

C : To provide pod connectivity and network policy enforcement with Nexus 1000v in AWS cloud

D : To provide network connectivity between the AWS cloud and the on-Prem datacenter

Answer: B