VMware 2V0-642 Braindumps 2021

NEW QUESTION 1
A Service Provider is using VMware vCloud Director with VMware vCloud Networking and Security (VCNS) on vSphere. Which two products will be impacted by the upgrade of VCNS to VMware NSX? (Choose two)

• A. ESXi hosts
• B. NSX Controller Cluster
• C. vShield Manager
• D. vCenter Server

Answer: BD

Explanation: https://docs.vmware.com/en/VMware-NSX-for- vSphere/6.2/nsx_62_upgrade.pdf

NEW QUESTION 2
An NSX Edge Service Gateway has two interfaces:
• Internal interface named Internal Access
-- IP address = 10.10.10.1
-- Network mask = 255.255.255.0
• Uplink interface named Physical Uplink
-- IP address = 20.20.20.1
-- Network mask = 255.255.255.0
A vSphere administrator wants to add a SNAT rule to allow traffic from the internal network segment to access external resources via the uplink interface.
Which three steps should the vSphere administrator do to add the SNAT rule? (Choose three.)

• A. Apply the SNAT rule to the Internal Access interface.
• B. Select 10.10.10.1 as the translated source IP.
• C. Apply the SNAT rule on the Physical Uplink interface.
• D. Select 10.10.10.0/24 as the original subnet.
• E. Choose 20.20.20.2 as the translated source IP address.

Answer: CDE

NEW QUESTION 3
Which two statements are true regarding L2 Bridges and Distributed Logical Routers? (Choose two )

• A. Each L2 bridge instance can only map to a single VLAN
• B. There can only be one instance of an L2 bridge on a DLR
• C. There can be multiple instances of an L2 bridge on a DLR
• D. Each L2 bridge instance can map to multiple VLANs.

Answer: AC

Explanation: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-ECE2893A-A1A6-4D43- 93DA-AE4A97ABBF44.html

NEW QUESTION 4
Which is a best practice to secure system traffic, ensure optimal performance and satisfy prerequisites for NSX?

• A. Configure a single VMkernel and a single distributed port group for all the system traffic.
• B. Configure a single distributed port group with a single VMkernel for Management and iSCSI traffic, a separate VMkernel for vMotion and VSAN traffic.
• C. Dedicate separate VMkernel adapters for each type of system traffi
• D. Dedicate separate distributed port groups for each VMkernel adapter and isolate the VLANs for each type of system traffic.
• E. Dedicate separate VMkernel adapters for each type ofsystem traffic and dedicate separate standard switches for each type of system traffic connected to a single physical network.

Answer: B

NEW QUESTION 5
Which two NSX rotes could be used to create security policies? (Choose two.)

• A. Enterprise Administrator
• B. Security Administrator
• C. NSX Administrator
• D. Auditor

Answer: AB

Explanation: Referencehttps://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-79F9067D-2F29-45DA- 85C7-09EFC31549EA.html

NEW QUESTION 6
If the Applied To scope is set to Distributed Firewall, which virtual machines with have the firewall rule applied?

• A. Only the virtual machines defined in the Source field.
• B. Only virtual machines defined in the Destination field.
• C. All virtual machines in a Datacenter.
• D. All virtual machines on prepared hosts.

Answer: C

Explanation: Referencehttp://www.routetocloud.com/2015/04/nsx-distributed-firewall-deep-dive/

NEW QUESTION 7
What are two roles of vmnics? (Choose two)

• A. ESXi hosts reach the physical network through vmnics.
• B. Virtual machines require vmnics to communicate with their host
• C. ESXi hosts are segmented using vmnics, also called virtual trunk ports
• D. Virtual machines require vmnics to communicate with physical networks

Answer: AC

NEW QUESTION 8
What is the minimum NSX role necessary for a user to edit the firewall on an Edge Services Gateway (ESG)?

• A. Auditor
• B. NSX Administrator
• C. Enterprise Administrator
• D. Security Administrator

Answer: D

NEW QUESTION 9
When defining membership for a security group, which three identifiers can be used for dynamic inclusion? (Choose Three)

• A. VM folder
• B. Computer OS Name
• C. ESXi host
• D. VM Name
• E. Security Tag

Answer: BDE

Explanation: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-B9FC0D05-BE96-4D83- 8C58-98B0F96DB342.html

NEW QUESTION 10
A virtualized application needs access to a physical database. Both servers are on the 172.168.3.0/24 subnet. NSX has been deployed across the entire virtual environment.
What method can be used to allow access between the servers?

• A. Configure a DLR with an L2 bridge instance for 172.168.3.0/24 VXLAN to VLAN traffic.
• B. Route 172.168.3.0/24 to the NSX Edge where the logical switch of the applicationexists.
• C. Configure a NAT rule for 172.177.13/024 for the database physical router.
• D. Configure the logical switch to bridge 172.168.3.0/24 to the physical router of the database.

Answer: D

NEW QUESTION 11
An administrator is attempting to troubleshoot a routing issue between the Edge Services Gateway (ESG) and the Distributed Logical Router (DLR).

Based on the exhibit, which method CANNOT be used to troubleshoot the issue?

• A. SSH session into 192.168.100.3 on the ESG.
• B. Console session into the ESG.
• C. Console session into the DLR.
• D. SSH session into 192.168.10.5 on the DLR.

Answer: A

NEW QUESTION 12
What command-line tool can be used to test the MTU between two hosts?

• A. netstat -1
• B. esxcli network ip neighbor list
• C. vmkping
• D. traceroute

Answer: B

NEW QUESTION 13
When configuring BGP routing in NSX, what is the purpose of the Graceful Restart check box?

• A. Allow packet forwarding to be paused during restart of BGP services
• B. Allow packet forwarding to be uninterrupted during restart of BGP services
• C. Automatically restart the local router when BGP session is established
• D. Automatically restart the peer router when BGP session is established

Answer: A

Explanation: https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.3/com.vmware.nsx.admin.doc/GUID-EF251ED45BCA-43D5-9C01-975601EACF1E.html

NEW QUESTION 14
Which are two uses of the NSX DLR protocol address? (Choose two.)

• A. When configuring BGP the protocol address is used to forward traffic to peers.
• B. When configuringBGP the protocol address is used by the protocol to form adjacencies with peers.
• C. When configuring OSPF the protocol address is used to forward traffic to peers.
• D. When configuring OSPF the protocol address is used by the protocol to formadjacencies with peers.

Answer: BD

Explanation: For a logical router
a
Click Edit at the top right corner of the window.
b
Click Enable OSPF.
c
In Forwarding Address, type an IP address that is to be used by the router datapath module in the hosts to forward datapath packets.
d
In Protocol Address, type a unique IP address within the same subnet as the Forwarding Address. Protocol address is used by the protocol to form adjacencies with the peers
From <https://pubs.vmware.com/NSX-6/topic/com.vmware.nsx.admin.doc/GUID-6E985577-3629-42FE-AC22-C4B56EFA8C9B.html>

NEW QUESTION 15
An NSX environment requires physical NIC redundancy for all dvPortGroups when connecting hosts to the physical network. There are two 10Gb NIC's per host.
Which two teaming methods should be used to ensure both links are utilized simultaneously? (Choose two )

• A. Virtual Port Channel
• B. LACP Port-Channel
• C. Static Port-Channel
• D. Explicit Failover Order

Answer: AB

NEW QUESTION 16
Which tool is used to display VXLAN connection information?

• A. pktcap-uw
• B. NSX Controller CLI
• C. esxtop
• D. VDS Health Check

Answer: B

NEW QUESTION 17
An NSX administrator is creating a filter as shown below.

What would be the purpose of creating a filter?

• A. To quickly add a new rule.
• B. To temporarily filter traffic.
• C. To quickly remove a rule.
• D. To quickly identify rules.

Answer: D

NEW QUESTION 18
In a Cross-vCenter NSX deployment, what are two requirements that must be met in order for an administrator to deploy both universal logical switches and local logical switches within the same vCenter instance? (Choose two )

• A. A universal distributed logical router must be created
• B. A logical distributed router must be created
• C. A universal transport zone must be created.
• D. A local transport zone must be created

Answer: CD

Explanation: https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.3/com.vmware.nsx.cross-vcenter-install.doc/GUID-7F76BB1E-7E36-4E9D- B8C2-798100E62192.html