Guaranteed 2V0-642 Dumps Questions 2021

NEW QUESTION 1
What is one of the benefits of using logical switches in an NSX environment?

• A. IP subnet definitions can be migrated into logical switches using the NSX Manager.
• B. Quality of Service parameters are automatically configured in a logical switch
• C. The physical infrastructure is responsible for maintaining the logical switch broadcast tables
• D. The physical infrastructure is not constrained by MAC/FIB table limits.

Answer: D

Explanation: From <https://pubs.vmware.com/NSX-6/topic/com.vmware.nsx.admin.doc/GUID-DF57C441-CE9A-4138-9639-1658DBE65D48.html>

NEW QUESTION 2
An NSX administrator notices an error during the initial configuration of the SSO lookup service, as shown:

The administrator pulls up the lookup service status, which displays Disconnected.

What step should be performed to resolve this issue?

• A. Change the Port number from 7444 to 443
• B. Change theSSO Administrator User Name
• C. Regenerate the SSL Certificate and reboot the NSX Manager
• D. Use IP address versus the DNS name in theLookup Service

Answer: C

NEW QUESTION 3
An administrator needs to perform a configuration backup of NSX. From which two locations can this task be performed? (Choose two.)

• A. Directly on the NSX Manager
• B. From the vSphere Web Client
• C. Using the NSX API
• D. Directly on each NSX Controller

Answer: AC

NEW QUESTION 4
Which two functions are provided by VMkernel ports? (Choose two)

• A. VXLAN Port Configuration
• B. vSphere vMotion
• C. ESXi Host Management
• D. 802.1Q VLAN tagging

Answer: BC

Explanation: Referencehttp://www.pearsonitcertification.com/articles/article.aspx?p=2190191&seqNum= 10

NEW QUESTION 5
A group of users’ needs secured access to a set of web-based applications in a SDDC Which VPN option is best suited for this?

• A. SSL VPN-Plus
• B. L2VPN
• C. IPSec VPN
• D. Application VPN

Answer: A

NEW QUESTION 6
An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and register with it,. Which additional step is required before the distributed firewall is functional?

• A. Configure VTEPs on each host
• B. Perform host preparation on the cluster
• C. Deploy the NSX Controller cluster D Enable Guest Introspection

Answer: C

NEW QUESTION 7
What is a requirement of NSX Data Security?

• A. NSX manager must be configured for Active Directory integration
• B. The Global Flow Collection Status must be set to Enabled
• C. Guest Introspection must be installed on the cluster
• D. AN IP Pool must be created.

Answer: C

Explanation: Referencehttp://pubs.vmware.com/NSX-61/index.jsp?topic=%2Fcom.vmware.nsx.install.doc%2FGUID-62B22E0C-ABAC-42D8-93AA-BDFCD0A43FEA.html

NEW QUESTION 8
You have deployed an Edge Services Gateway with the following interface configuration:

Your customer has requested that you provide the ability to use Remote Desktop Protocol to log into a virtual machine that has a tenant IP address of 192.168.7.21 using the provider IP address 192.168.100.4. You have performed the following configuration however, you cannot RDP into the virtual machine.

What configuration change do you need to make to allow this connection?

• A. ChangeApplied Onto “Uplink”
• B. Change theProtocolto “any”.
• C. Change theTranslated Port/Rangeto “rdp”.
• D. Swap theOriginal IP/RangeandTranslated IP/RangeIP Addresses.

Answer: A

NEW QUESTION 9
The user at 192.168.150.10 can reach the physical router but CANNOT reach edge-2 or any virtual machines.

What routing change would resolve the issue?

• A. EnableDefault Originateon edge-2 for OSPF.
• B. Configure static routes on the physical router.
• C. Enable route redistribution on edge-2 between both routing protocols.
• D. EnableDefault Originateon edge-2 for BGP

Answer: D

NEW QUESTION 10
Which two networking and security components are contained m the backup configuration data of an NSX Manager backup file? (Choose two )

• A. vSphere Distributed Switch
• B. Resource Pools
• C. Edge Services Gateway
• D. Grouping Objects

Answer: CD

NEW QUESTION 11
Which component automates the consumption of third-party services and provides mapping to virtual machines using a logical policy?

• A. NSX Manager
• B. Cloud Management Platform (CMP)
• C. Service Composer
• D. NSX Data Security

Answer: C

NEW QUESTION 12
Which two network services are abstracted from the underlying hardware by NSX? (Choose two.)

• A. Virtual Private Networks
• B. Multiprotocol Label Switching
• C. Load Balancing
• D. Overlay Transport Virtualizations

Answer: AC

Explanation: Referencehttp://www.altaro.com/vmware/vmware-nsx-abstracting-the-network-layer/

NEW QUESTION 13
Which highly available Edge design would provide high bandwidth and isolation to four application networks?

• A. Four Distributed Routers (standalone mode) with one Edge Services Gateway in Active/Standby mode.
• B. One Edge Services Gateway in ECMP mode.
• C. One distributed Router (in HA mode) withtwo Edge Services Gateways in ECMP mode.
• D. Four Distributed Routers (in HA mode) with one Edge Services Gateway in Active/Standby mode.

Answer: C

NEW QUESTION 14
Which tool is used to detect rogue services?

• A. NSX Logical Firewall
• B. NSX Logical Router
• C. Activity Monitoring
• D. Flow Monitoring

Answer: D

NEW QUESTION 15
An NSX Administrator is examining a broken set of firewall rules and discovers that the Block Telnet rule was created in the wrong section.

Based on the exhibit, which option would correct the issue with the least amount of effort?

• A. Use the Merge Section functionality to correct this.
• B. Use the Move rule Up icon to move rules between sections.
• C. Add a new rule called Block Telnet to the correct section and then remove the existing rule.
• D. Delete the rule and then re-add the rule to the correct section.

Answer: D

NEW QUESTION 16
Which three methods can be used by the NSX Distributed Firewall to discover IP addresses? (Choose three )

• A. DHCP Snooping
• B. IP Sets
• C. Spoofguard configured forTrust on First Use.
• D. VMware Tools installed on every guest virtual machine.
• E. ARP Spoofing

Answer: ACD

Explanation: Referencehttps://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2125437

NEW QUESTION 17
In a Cross-vCenter environment where is information about local logical switches and local logical routers maintained?

• A. Platform Services Controller
• B. Local transport /one
• C. Local Controller Cluster
• D. Universal Controller Cluster

Answer: D

NEW QUESTION 18
Which service cannot be included in a Security Policy using Service Composer?

• A. Endpoint Services
• B. Firewall Rules
• C. Virtual Private Network Services
• D. Network Introspection Services

Answer: C