The Secret Of VMware 2V0-41.20 Free Exam Questions

NEW QUESTION 1
Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

• A. ifconfig
• B. tcpdump
• C. debug
• D. ipconfig

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-B7E7371E-A9F6-4880-B184

NEW QUESTION 2
Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

• A. set time-server
• B. get timezone
• C. set ntp-server
• D. set timezone

Answer: C

NEW QUESTION 3
Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

• A. Multicast
• B. Anycast
• C. Unicast
• D. Broadcast

Answer: C

NEW QUESTION 4
What are two supported N-VDS modes? (Choose two.)

• A. DPDK Datapath
• B. Overlay Datapath
• C. Secure Datapath
• D. Enhanced Datapath
• E. Standard Datapath

Answer: DE

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-37BC3CEF-DCC1-4C6F-960

NEW QUESTION 5
An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged. What could cause this issue?

• A. Syslog is not configured on the NSX Manager
• B. Distributed Firewall Rule logging is not enabled
• C. Zero Trust Security is not enabled
• D. Syslog is not configured on the ESXi transport node

Answer: B

NEW QUESTION 6
Which discovery protocol is supported for hypervisor transport nodes?

• A. Adobe Real-time CDP
• B. Neighbor Discovery Protocol
• C. Cisco Discovery Protocol
• D. Link Layer Discovery Protocol

Answer: D

NEW QUESTION 7
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?

• A. Beacon Probing (BP)
• B. Host Standby Router Protocol (HSRP)
• C. Bidirectional Forwarding Detection (BFD)
• D. Virtual Router Redundancy Protocol (VRRP)

Answer: C

NEW QUESTION 8
What are three characteristics of a transport zone? (Choose three.)

• A. defines the potential reach of transport nodes
• B. configured with a Single N-VDS
• C. defines the scope and reachability of a Segment
• D. configured with multiple N-VDS
• E. optional for creating a segment

Answer: ABC

NEW QUESTION 9
An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.
Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

• A. N-VDS/VDS Profile
• B. Transport Node Profile
• C. Host Switch Profile
• D. Uplink Profile

Answer: D

NEW QUESTION 10
Which CLI command shows syslog on NSX Manager?

• A. show log manager follow
• B. get log-file auth.log
• C. get log-file syslog
• D. /var/log/sysloq/syslog.log

Answer: C

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-406AF9C3-E8F7-447A-8E

NEW QUESTION 11
Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

• A. Route Aggregation
• B. Route Distribution
• C. Graceful Restart
• D. BGP Neighbors
• E. Local AS

Answer: AD

Explanation:
The following parameters are inherited from the default Tier-0 gateway and cannot be modified at the VRF level:
• Local AS
• Graceful restart
• Graceful restart timer
• Graceful restart stale timer
• Multipath relax
Inter-SR iBGP is not supported in VRF gateways. BGP can be enabled or disabled per VRF gateway.
Route aggregation and BGP neighbors are local configurations per VRF.

NEW QUESTION 12
What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.)

• A. stateful services leveraged
• B. Failover of services
• C. traffic predictability
• D. traffic load balancing
• E. increased north/south bandwidth

Answer: DE

Explanation:
From ICM manual:
Equal-cost multipath (ECMP) routing has several features and functions:
• ECMP routing increases the north-south communication bandwidth by combining multiple uplinks.
• ECMP routing performs traffic load balancing.
• ECMP routing provides fault tolerance for failed paths.
• A maximum of eight ECMP paths are supported.
• Hashing is based on 2-tuple IP source and destination addresses.
• ECMP routing is only available on Tier-0 gateways.

NEW QUESTION 13
Which network tool cloud an administrator use on an ESXi 7 host to capture packets when troubleshooting connectivity issues?

• A. Wireshark
• B. pktcap-uw
• C. net-stats
• D. tcpdump

Answer: B

Explanation:
If you do when troubleshooting connectivity issues on your Virtualization environment. This post will help you to capture Network traffic on ESXi host using pktcap-uw tool.

NEW QUESTION 14
What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN- backed logical switch?

• A. Service interface
• B. Loopback Router Port
• C. Downlink interface
• D. VLAN Uplink

Answer: A

Explanation:
"The service interface is a special-purpose port to enable services for mainly VLAN-based networks.
North-south service insertion is another use case that requires a service interface to connect a partner appliance and redirect north-south traffic for partner services. Service interfaces are supported on both active-standby Tier-0 logical routers and Tier-1 routers. Firewall, NAT, and VPNs are supported on this interface. The service interface is also a downlink"

NEW QUESTION 15
Which statement is true about an alarm in a Suppressed state?

• A. An alarm can be suppressed for a specific duration in days.
• B. An alarm can be suppressed for a specific duration in minutes.
• C. An alarm can be suppressed for a specific duration in seconds.
• D. An alarm can be suppressed for a specific duration in hours.

Answer: D

Explanation:
https://docs.vmware.com/en/VMware-NSX-Intelligence/1.1/user-guide/GUID-EBD3C5A8-F9AB-4A22-BA40- "If you move an alarm into a Suppressed state, you are prompted to specify the duration in hours. After the specified duration passes, the alarm state reverts to Open. However, if the system determines the condition has been corrected, the alarm state changes to Resolved."
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EB1BB1D3-8892-4890-B

NEW QUESTION 16
An NSX administrator has deployed an NSX Edge on a bare-metal server. Which command registers the NSX Edge with the NSX Manager?

• A. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint <nsx-manager-thumbprint>
• B. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint<nsx-manager—thumbprint>
• C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint<nsx-manager-thumbprint>
• D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint<nsx-manager-thumbprint>

Answer: D

NEW QUESTION 17
Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?

• A. Transport Node Profile
• B. Uplink Profile
• C. Switching Profile
• D. Host Profile

Answer: A

NEW QUESTION 18
Which tool injects packets and provides various observation points along the packet’s path between two NSX-T managed objects?

• A. SPAN mirrors
• B. Port Mirroring
• C. Traceflow
• D. IPFIX

Answer: C

NEW QUESTION 19
How does Traceflow tool identify issues in a network?

• A. Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.
• B. Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.
• C. Injects synthetic traffic into the data plane and observes the results in the control plane.
• D. Injects ICMP traffic into the data plane and observes the results in the control plane.

Answer: C

NEW QUESTION 20
Which tool could be used to inspect the path of a packet in the data plane?

• A. Port Connection
• B. Port Mirroring Session
• C. Netflow
• D. Traceflow

Answer: D

NEW QUESTION 21
Which two statements are true for a Tier-1 Gateway? (Choose two.)

• A. owned and configured by the Tenant
• B. connects to physical networks
• C. owned and configured by Service Provider
• D. always configured in active-standby mode
• E. supports ECMP

Answer: BD

NEW QUESTION 22
An administrator has a requirement to have consistent policy configuration and enforcement across NSXT instances. What feature of NSX-T Data Center fulfills this requirement?

• A. Load balancer
• B. Policy-driven configuration
• C. Multi-hypervisor support
• D. Federation

Answer: B

NEW QUESTION 23
Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

• A. Identify security vulnerabilities in the workloads.
• B. Use agentless antivirus with Guest Introspection.
• C. Quarantine workloads based on vulnerabilities.
• D. Identify risk and reputation of accessed websites.
• E. Gain insight about micro-segmentation traffic flows.

Answer: AC

NEW QUESTION 24
Which three different transport nodes could be configured in the data plane? (Choose three.)

• A. vShield Edge VM
• B. ESXi and KVM
• C. Bare Metal server
• D. NSX Edge VM on KVM
• E. ESXi and Hyper-V
• F. VM or Bare Metal NSX Edge

Answer: BCF

NEW QUESTION 25
......