Vmware 2V0-41.20 Professional VMware NSX-T Data Center Online Training

The candidates have not enough time to prepare the exam, while Exam4Training Vmware 2V0-41.20 Professional VMware NSX-T Data Center Online Training are to develop to solve the problem. So, it can save much time for us. What’s more important, 100% guarantee to pass Vmware 2V0-41.20 exam at the first attempt. In addition, Exam4Training Vmware 2V0-41.20 Professional VMware NSX-T Data Center Online Training will be updated at any time. If exam outline and the content change, Exam4Training can provide you with the latest Professional VMware NSX-T Data Center information.

Page 1 of 7

1. Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

Service Insertion

Distributed Routing

Packet Forwarding

Gateway Firewall

Distributed Firewall

Virtual Private Network

2. What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

Segment Port

Group

Segment

DFW

Tier-1 Gateway

3. A user is assigned these two roles in NSX Manager:

✑ LB Admin

✑ Network Engineer

What privileges does this user have in the system?

read permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and read permissions on load balancing features

read permissions on all networking services and read permissions on load balancing features

4. Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

set service nsx-manager logging-level debug

set service nsx-manager log-level debug

set service manager log-level debug

set service manager logging-level debug

5. Refer to the exhibit.

Which NAT type must the NSX-T Data Center administrator create on the Tier-0 or Tier-1 Gateway to allow Web VM to initiate communication with public networks?

SNAT

Reverse NAT

DNAT

1:1 NAT

6. An NSX administrator would like to configure syslog for a KVM transport node.

Which host log files could be exported to a remote syslog server?

/var/log/vmware/nsx-syslog

/var/log/cfgAgent.log

/var/log/nsx-audit.log

/var/log/cloudnet/nsx-ccp.log

7. Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)

5685

1235

5671

5678

1234

8. An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.

Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

esxcli network diag ping -H <destination IP address>

vmkping ++netstack=geneve -d -s 1572 <destination IP address>

vmkping ++netstack=vxlan-d -s 1572 <destination IP address>

esxcli network diag ping -I vmk0 -H <destination IP address>

9. An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time.

Which CLI command disables the nsxcli time out value on NSX Manager?

set cli-timeout 0

set cli-timeout enabled

set cli-timeout disabled

set cli-timeout 1

10. Which is correct when deploying a NSX Edge in a KVM only environment?

deploy NSX Edge VM with QCOW2 image

deploy NSX Edge VM with ISO image

deploy NSX Edge on a bare-metal server

deploy NSX Edge VM with OVF template

Page 2 of 7

11. How does Traceflow tool identify issues in a network?

Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

Injects synthetic traffic into the data plane and observes the results in the control plane.

Injects ICMP traffic into the data plane and observes the results in the control plane.

12. What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.)

stateful services leveraged

Failover of services

traffic predictability

traffic load balancing

increased north/south bandwidth

13. Which tool could be used to inspect the path of a packet in the data plane?

Port Connection

Port Mirroring Session

Netflow

Traceflow

14. Where are Distributed Firewall logs containing access decisions stored?

NSX API

NSX Edge

NSX Manager

Hypervisor transport node

15. An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node.

What are two possible causes for this issue? (Choose two.)

The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.

Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the KVM Transport Node.

The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.

The virtual machines running on the KVM Transport Node are not connected to the VD

The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.

16. A DevOps user has deployed a Kubernetes Pod in vSphere.

What does the term ClusterIP represent within NSX-T?

Deployment of T1 with NLB service.

Deployment of Distributed Router.

Deployment of Distributed Load Balancing service.

Deployment of T0 and T1

17. Which log is used to see a failed NSX-T installation of a VIB package on ESXi transport nodes?

/var/l og/hostd. log

/var/log/vmware/eam/eam.log

/var/log/esxupdate.log

/var/log/syslog.log

18. When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

SR and DR doesn’t need to be connected to provide any stateful services.

DR is instantiated and automatically connected with S

SR is instantiated and automatically connected with D

SR and DR is instantiated but requires manual connection.

19. A customer is preparing to deploy VMware Kubernetes on an NSX-T Data Center.

What is the minimum MTU size for the UPLINK profile?

1500

1650

1550

1600

20. Which three services are compatible with VRF Lite? (Choose three.)

VPN

Intrusion Detection

NAT

Load Balancer

DHCP

Page 3 of 7

21. Which statement describes the VMware Virtual Cloud Network Vision?

Virtual Cloud Network connects and protects virtual machines running in KVM environments.

Virtual Cloud Network connects and protects virtual machines running in vSphere environments.

Virtual Cloud Network connects and protects applications, regardless of their physical locations.

Virtual Cloud Network connects and protects applications and data, regardless of their physical locations.

22. Which CLI command is used to start the NSX Manager virtual machine in the KVM environment?

virsh start <NSX-Manager-ID>

virsh poweron <nsx-manager-ID>

virsh start <NSX-Manager-Name>

virsh poweron <nsx-manager-name>

23. An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.

Which two NAT rule types are supported for this configuration? (Choose two.)

Port NAT

Source NAT

Destination NAT

1:1 NAT

Reflexive NAT

24. Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

Route Aggregation

Route Distribution

Graceful Restart

BGP Neighbors

Local AS

25. Which three can an administrator define in a transport node profile? (Choose three.)

Logical Router

Segment Profile

Segment

Uplink Profile

VDS switch configuration

N-VDS switch configuration

26. Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)

can have a maximum of 8 edge nodes

must have only active-active edge nodes

can have a maximum of 10 edge nodes

can contain multiple types of edge nodes (VM or bare metal)

must contain only one type of edge nodes (VM or bare metal)

27. A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway.

A NSX-T Data Center administrator used the get logical-routers command to retrieve this information:

Which two commands must be executed to check BGP neighbor status? (Choose two.)

vrf 3

vrf 1

vrf 4

sa-nsxedge-01(tier1_sr)> get bgp neighbor

sa-nsxedge-01(tier0_sr)> get bgp neighbor

sa-nsxedge-01(tier0_dr)> get bgp neighbor

28. Which tool injects packets and provides various observation points along the packet’s path between two NSX-T managed objects?

SPAN mirrors

Port Mirroring

Traceflow

IPFIX

29. Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

Destination MAC

Load Balanced Source IP

Failover Order

Destination Port

Load Balanced Source MAC

Load Balanced Source

30. Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

get support-bundle file vcpnv.tgz

set support-bundle file vcpnv.tgz

vm-support

esxcli system syslog config logger set --id=nsxmanager

Page 4 of 7

31. An NSX administrator noticed that the nsxclicommand times out after 600 secs of idle time.

Which CLI command disables the nsxcli time out value on NSX Manager?

set cli-timeout 0

set cli-timeout enabled

set cli-timeout disabled

set cli-timeout 1

32. An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.

Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

N-VDS/VDS Profile

Transport Node Profile

Host Switch Profile

Uplink Profile

33. Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

MTU 1500

MTU 1400

vSphere Distributed Switch 6.5

vSphere Distributed Switch 7.0

MTU 1600

34. Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

ifconfig

tcpdump

debug

ipconfig

35. Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

Create an IPsec service.

Add a local endpoint.

Configure an IPsec session.

Configure a distributed firewall policy.

Add a logical switch.

36. An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.

Which failover detection protocol must be used to meet this requirement?

Beacon Probing (BP)

Host Standby Router Protocol (HSRP)

Bidirectional Forwarding Detection (BFD)

Virtual Router Redundancy Protocol (VRRP)

37. What are two supported N-VDS modes? (Choose two.)

DPDK Datapath

Overlay Datapath

Secure Datapath

Enhanced Datapath

Standard Datapath

38. A user is assigned these two roles in NSX Manager:

- LB Admin

- Network Engineer

What privileges does this user have in the system?

read permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and read permissions on load balancing features

read permissions on all networking services and read permissions on load balancing features

39. An NSX administrator has configured a KVM hypervisor as a transport node.

Which kernel module on KVM implements a N-VDS?

openvswitch

etherswitch

nsx-vswitch

dyswitch

40. Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

virsh dumpxml <VM Name> | grep interfaceid

virsh get-interface <VM Name>

virsh show <VM Name> | grep interfaceid

virsh list-interface <VM Name>

Page 5 of 7

41. What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)

policy-based IPSec VPN

Layer-7 based IPSec VPN

route-based IPSec VPN

Open source based IPSec VPN

SSL based IPSec VPN

42. Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Identify security vulnerabilities in the workloads.

Use agentless antivirus with Guest Introspection.

Quarantine workloads based on vulnerabilities.

Identify risk and reputation of accessed websites.

Gain insight about micro-segmentation traffic flows.

43. An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.

Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

e1000

VMXNET2

VMXNET3

Flexible

44. What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Service interface

Loopback Router Port

Downlink interface

VLAN Uplink

45. Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

get support-bundle file vcpnv.tgz

set support-bundle file vcpnv.tgz

vm-support

esxcli system syslog config logger set --id=nsxmanager

46. An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.

Which message ID (msgid) should be used in the syslog export configuration command as a filter?

SYSTEM

FABRIC

GROUPING

MONITORING

47. Which CLI command shows syslog on NSX Manager?

show log manager follow

get log-file auth.log

get log-file syslog

/var/log/sysloq/syslog.log

48. Which three protocols could an NSX administrator use to transfer log messages to a remote log server? (Choose three.)

SSL

HTTPS

TLS

UDP

SSH

TCP

49. Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

set service nsx-manager logging-level debug

set service nsx-manager log-level debug

set service manager log-level debug

set service manager logging-level debug

50. The NSX Control Plane is responsible for which two functions? (Choose two.)

receive and validate configuration from NSX Policy

host API services

propagate topology information

push stateless configurations to forwarding engines

maintain packet-level statistics

Page 6 of 7

51. An NSX administrator noticed that the nsxclicommand times out after 600 secs of idle time.

Which CLI command disables the nsxcli time out value on NSX Manager?

set cli-timeout 0

set cli-timeout enabled

set cli-timeout disabled

set cli-timeout 1

52. An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.

Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

N-VDS/VDS Profile

Transport Node Profile

Host Switch Profile

Uplink Profile

53. Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)

MTU 1500

MTU 1400

vSphere Distributed Switch 6.5

vSphere Distributed Switch 7.0

MTU 1600

54. Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

ifconfig

tcpdump

debug

ipconfig

55. Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

Create an IPsec service.

Add a local endpoint.

Configure an IPsec session.

Configure a distributed firewall policy.

Add a logical switch.

56. An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.

Which failover detection protocol must be used to meet this requirement?

Beacon Probing (BP)

Host Standby Router Protocol (HSRP)

Bidirectional Forwarding Detection (BFD)

Virtual Router Redundancy Protocol (VRRP)

57. What are two supported N-VDS modes? (Choose two.)

DPDK Datapath

Overlay Datapath

Secure Datapath

Enhanced Datapath

Standard Datapath

58. A user is assigned these two roles in NSX Manager:

- LB Admin

- Network Engineer

What privileges does this user have in the system?

read permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and full access permissions on load balancing features

full access permissions on all networking services and read permissions on load balancing features

read permissions on all networking services and read permissions on load balancing features

59. An NSX administrator has configured a KVM hypervisor as a transport node.

Which kernel module on KVM implements a N-VDS?

openvswitch

etherswitch

nsx-vswitch

dyswitch

60. Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

virsh dumpxml <VM Name> | grep interfaceid

virsh get-interface <VM Name>

virsh show <VM Name> | grep interfaceid

virsh list-interface <VM Name>

Page 7 of 7

61. What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)

policy-based IPSec VPN

Layer-7 based IPSec VPN

route-based IPSec VPN

Open source based IPSec VPN

SSL based IPSec VPN

62. Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Identify security vulnerabilities in the workloads.

Use agentless antivirus with Guest Introspection.

Quarantine workloads based on vulnerabilities.

Identify risk and reputation of accessed websites.

Gain insight about micro-segmentation traffic flows.

63. An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.

Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

e1000

VMXNET2

VMXNET3

Flexible

64. What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Service interface

Loopback Router Port

Downlink interface

VLAN Uplink

65. Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

get support-bundle file vcpnv.tgz

set support-bundle file vcpnv.tgz

vm-support

esxcli system syslog config logger set --id=nsxmanager

66. An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.

Which message ID (msgid) should be used in the syslog export configuration command as a filter?

SYSTEM

FABRIC

GROUPING

MONITORING

67. Which CLI command shows syslog on NSX Manager?

show log manager follow

get log-file auth.log

get log-file syslog

/var/log/sysloq/syslog.log

68. Which three protocols could an NSX administrator use to transfer log messages to a remote log server? (Choose three.)

SSL

HTTPS

TLS

UDP

SSH

TCP

69. Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

set service nsx-manager logging-level debug

set service nsx-manager log-level debug

set service manager log-level debug

set service manager logging-level debug

70. The NSX Control Plane is responsible for which two functions? (Choose two.)

receive and validate configuration from NSX Policy

host API services

propagate topology information

push stateless configurations to forwarding engines

maintain packet-level statistics

Latest 2V0-41.20 Dumps Valid Version with 91 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Instant Download 2V0-41.20 PDF

Latest 2V0-41.20 Dumps Valid Version with 91 Q&As

Leave a Reply Cancel reply