VMware Certified Professional – Network Virtualization 試験
Question No : 1
Which action is not an option for adding Virtual Machines to a Security Group?
Question No : 2
An administrator wants to perform Activity Monitoring on a large group of virtual machines in an NSX environment. How would this task be accomplished with minimal administrative effort?
Question No : 3
An administrator has deployed NSX in an environment containing a mix of vSphere 5 hosts. The implementation includes the Distributed Firewall Service, but the administrator finds that rules are not being applied to all affected virtual machines.
What two conditions would cause this behavior? (Choose two.)
Question No : 4
An administrator wishes to control traffic flow between two virtual machines. The virtual machines are in the same subnet, but are located on separate ESXi hosts. The administrator deploys an Edge Firewall to one of the hosts and verifies the default firewall rule is set to deny, but the two virtual machines can still communicate with each other.
What task will correct this issue?
Question No : 5
How are Logical Firewall rules applied to affected virtual machines?
Question No : 6
Where does the Distributed Logical Firewall enforce firewall rules?
Question No : 7
Which two statements are true regarding NSX High Availability? (Choose two.)
Question No : 8
Which two actions take place when an active NSX Edge instance fails? (Choose two.)
Question No : 9
An administrator manages a TFTP server virtual machine that is connected to a Logical Switch with a VNI of 7321. The TFTP server has been configured to use port 1069. An NSX Edge Service Gateway is connected to VNI 7321 and has an uplink interface with access to the physical network. Assume external users can reach the Service Gateway.
What should the administrator configure to ensure external connections to the TFTP server are successful?
Question No : 10
An NSX Edge Service Gateway has two interfaces:
Internal interface named Internal Access -- IP address = 10.10.10.1 -- Network mask = 255.255.255.0
Uplink interface named Physical Uplink -- IP address = 220.127.116.11 -- Network mask = 255.255.255.0
A vSphere administrator wants to add a SNAT rule to allow traffic from the internal network segment to access external resources via the uplink interface.
Which three steps should the vSphere administrator do to add the SNAT rule? (Choose three)
Question No : 11
Which statement is true regarding an NSX Edge gateway device configured with a DNS Server?
Question No : 12
A vSphere administrator wants to setup an NSX Edge Service Gateway to provide traveling employees secure access to company servers located in specific network segments within the corporate Data Centers. The solution has to be as scalable as possible.
Which Virtual Private Network solution will satisfy the administrator's requirements?
Question No : 13
A company has augmented its Data Center infrastructure by using vCloud Hybrid Service during peak hours. The company wants to extend their existing subnets into the cloud while workloads retain their existing IP addresses. The virtual machines in these subnets use an NSX Edge Gateway as their default gateway.
Which solution should this company use?
Question No : 14
A vSphere administrator wants to setup an NSX Edge Service Gateway to provide traveling employees secure access to company servers located in specific network segments within the corporate Data Center. The remote access solution must provide a method to authenticate the users.
Which two methods can be used with the NSX Edge Service Gateway? (Choose two.)
Question No : 15
Which two statements are true regarding Layer 2 VPNs? (Choose two.)