Tested 2V0-642 Dumps 2021

NEW QUESTION 1
Which two are accurate statements with regards to Guest Introspection installation? (Chose two )

• A. The service virtual machine performs data security and activity monitoring.
• B. The installation deploys a virtual machine to hosts prepared for VMware NSX.
• C. A security policy weight of 4300 is assigned to hosts prepared to Guest Introspection.
• D. Guest Introspection is deployed with NSX Data Security by default.

Answer: AB

Explanation: Installing Guest Introspection automatically installs a new VIB and a service virtual machine on each host in the cluster. Guest Introspection is required for NSX Data Security, Activity Monitoring, and several third-party security solutions.
From <https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.2/com.vmware.nsx.install.doc/GUID-62B22E0C-ABAC-42D8-93AA- BDFCD0A43FEA.html>

NEW QUESTION 2
When designing a multi-site NSX deployment, which capably requires Enhanced Linked Mode to function?

• A. Creating Universal Transport Zones
• B. Creating Universal Logical Switches
• C. Cross-vCenter vMotion
• D. Registering a Secondary NSX Manager

Answer: A

Explanation: Referencehttps://pubs.vmware.com/NSX- 62/topic/com.vmware.ICbase/PDF/nsx_62_cross_vc_install.pdf

NEW QUESTION 3
Two virtual machines are unable to communicate with one another. The virtual machines are in the same distributed port group, but reside on different ESXi hosts.
What are two possible causes for the communications issue? (Choose two )

• A. Basic multicast filtering mode has been disabled on the ESXi hosts.
• B. No physical NICs are assigned as active or standby uplinks in a NIC team.
• C. The standby links are configured on different VLANs, preventing heartbeats from reaching each VM.
• D. The physical NICs assigned as active or standby uplinks reside on different VLANs on the physical switch.

Answer: BD

Explanation: ✑ uk.co.certification.simulator.questionpool.PList@170647b0
From <https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.troubleshooting.doc/GUID-5324A0E4-AA7B-40CC- A975-D45328B5C434.html>

NEW QUESTION 4
An administrator needs to verify which port the switch manager is using. Which command should be used?

• A. show controller-cluster status
• B. show controller-cluster core stats
• C. show controller-cluster connections
• D. show controller-cluster logical-switches

Answer: C

NEW QUESTION 5
Which two statements are true about NSX Data Security support? (Choose two )

• A. It supports HIPAA and PCI-DSS compliance policies as well as U.
• B. Driver License and Social Security numbers.
• C. It supports both Windows and Linux-based virtual machines.
• D. It only supports HIPAA and PCI-DSS compliance policies.
• E. It only supports Windows-based virtual machines.

Answer: BC

Explanation: Referencehttps://www.vmware.com/products/nsx.html

NEW QUESTION 6
A customer has Cisco Nexus 1000V switches in their environment and is looking at deploying NSX
Which statement is correct?

• A. The environment must be migrated from the Nexus 1000V to vSphere Distributed Switches.
• B. The environment must be configured for VXLAN over the Nexus 1000V.
• C. The environment can use the Nexus 1000V switches for the NSX deployment.
• D. The environment must be migrated from the Nexus 1000V to vSphere Standard Switches.

Answer: A

NEW QUESTION 7
With which Application Profile types would the Insert X-Forwarded-for HTTP header option be used?

• A. TC
• B. UDP
• C. HTTP, UDP
• D. HTTP, HTTPS
• E. HTTP, TCP

Answer: C

NEW QUESTION 8
Which two methods does VMware NSX offer to integrate with third-party partners? (Choose two )

• A. Integration Manager
• B. Service Chaining
• C. VMwareNSXAPIs
• D. Universal Synchronization Service

Answer: AC

Explanation: https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.3/com.vmware.nsx.admin.doc/GUID-EA477D96-E2D3-488B-90AA- 2F19B4AE327D.html#GUID-EA477D96-E2D3-488B-90AA-2F19B4AE327D

NEW QUESTION 9
A user needs to be given the ability to make configuration changes on a specific NSX Edge device. What role and scope could be used to meet this requirement?

• A. NSX Administrator role and Limit Access scope
• B. Security Administrator role and Limit Access scope
• C. NSX Administrator role and No restriction scope
• D. Security Administrator role and No restriction scope

Answer: B

NEW QUESTION 10
Which two NSX Data Security roles could be assigned to view configured policies and violation reports? (Choose two.)

• A. Security Administrator
• B. NSX Administrator
• C. Auditor
• D. Enterprise Administrator

Answer: AC

NEW QUESTION 11
When creating a new security policy how is the default weight determined?

• A. The default weight is equal to the highest defined weight plus 1000.
• B. The default weight is incremented by 100, starting at 0.
• C. The default weight is equal to the highest defined weight minus 1000
• D. The default weight is equal to the highest defined weight

Answer: A

Explanation: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-607C399F-0D11-4B95- 90DA-A6E17E8C906E.html

NEW QUESTION 12
What is the function of NSX Data Security?

• A. Prevents sensitive data in your virtualized environment from being copied
• B. Prevents sensitive data in your virtualized environment from being modified
• C. Identifies sensitive data in your virtualized environment based upon regulation security policies
• D. Identifies sensitive data in your virtualized environment based upon regulation violation reports

Answer: D

NEW QUESTION 13
When specifying a source for a security rule, what is the purpose of the Negates Source check box?

• A. IfNegate Sourceis selected, the rule is sent to only the objects identified under object type.
• B. IfNegate Sourceis selected, the rule is applied to traffic coming from all sources except for the source identified under the object type.
• C. IfNegate Sourceis not selected, the rule is applied to traffic comingfrom all sources except for the source identified under the object type.
• D. ifNegate Sourceis not selected, the rule is sent to only the objects identified under the object type.

Answer: B

Explanation: Reference: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-C7A0093A-4AFA-47EC- 9187-778BDDAD1C65.html

NEW QUESTION 14
What vSphere Distributed Switch security policy allows virtual machines to send frames w*h a MAC Address that is different from the one specified in the vmx file?

• A. MAC Address Changes
• B. Failover detection
• C. Forged Transmits
• D. Promiscuous Mode

Answer: C

Explanation: Reference http://www.vmwarearena.com/vsphere-distributed-switch-part-16/

NEW QUESTION 15
Which two NSX Data Security roles could be used to create security policies? (Choose two)

• A. Auditor
• B. NSX Administrator
• C. Enterprise Administrator
• D. Security Administrator

Answer: BD

Explanation: https://pubs.vmware.com/NSX-6/index.jsp#com.vmware.nsx.admin.doc/GUID-66DA0370-C241-40BD-A987- 98597564EEDF.html

NEW QUESTION 16
An organization has PCI compliant application deployed as part of a larger NSX environment. Every year a team of contractors evaluates the security of the environment and recommends changes.
What NSX Role and Scope should the contractors be given to minimize access but still allow them to fulfill the staled requirement?

• A. Security Administrator, No restrictions
• B. Audito
• C. Limit access scope
• D. NSX Administrator, Limit access scope
• E. Enterprise Administrator, Limit access scope

Answer: B

Explanation: https://c368768.ssl.cf1.rackcdn.com/product_files/28022/original/VMware_SDDC_Validate d_Reference_Architecture_for_PCI_v3.0_June_2014b1844892b9e7e4c6aa280f5fd9df5a0f. pdf
Page 3
VMware NSX™ VMware NSX Edge™, VMware NSX Firewall, VMware NSX Router, VMware NSX Load
Balancer, and, VMware NSX Service Composer

NEW QUESTION 17
What are two requirements of the network infrastructure to the access layer? (Choose two )

• A. IPv4 connectivity among ESXi hosts provided by a spine-leaf network design.
• B. IPv4 connectivity among ESXi hosts.
• C. Increased MTU if the virtual machines are using the default MTU size of 1500.
• D. A Redundant, Layer 3, Top-of-Rack network design to provide high availability to ESX hosts.

Answer: AC

NEW QUESTION 18
In a Cross-vCenter implementation, where is the Universal Control Cluster deployed and configured?

• A. In each vCenter instance associated with the Cross-vCenter implementation.
• B. In each prepared NSX cluster associated with the Cross-vCenter implementation.
• C. In every vCenter instance associated with an NSX Manager.
• D. In the vCenter instance associated with the Primary NSX Manager.

Answer: D

Explanation: Referencehttps://pubs.vmware.com/NSX-62/topic/com.vmware.ICbase/PDF/nsx_62_cross_vc_install.pdf(page 16)