Download 2V0-642 Dumps Questions 2021

NEW QUESTION 1
Activity Monitoring has been enabled for a host with several virtual machines. However, only one virtual machine appears in the list.

Which two additional configuration steps are required to allow the other virtual machines on the host to be selected? (Choose two.)

• A. Guest Introspection driver must be installed.
• B. Virtual Machine Data Collection must be enabled on the other VMs.
• C. NSX Manager must be linked to Active Directory
• D. Guest Introspection appliance must be deployed on the host.

Answer: AB

Explanation: As it shows one VM on the mentioned ESXi host, so C and D working correctly, it shout be A and B
To protect VMs using a Guest Introspection security solution, you must install Guest Introspection thin agent, also called Guest Introspection drivers,
From <https://docs.vmware.com/en/VMware-NSX-for- vSphere/6.3/com.vmware.nsx.admin.doc/GUID-D04D1521-8EBC-449F-AD57- EF829075A25D.html>
Guest Introspection supports File Introspection in Linux for anti-virus only. To protect Linux VMs using a Guest Introspection security solution, you must install the Guest Introspection thin agent.
From <https://docs.vmware.com/en/VMware-NSX-for- vSphere/6.3/com.vmware.nsx.admin.doc/GUID-636788A7-BB64-483A-A48D- 4E62B3AFC0C8.html>

NEW QUESTION 2
Which three statements ore valid methods of Link Aggregation Control Protocol negotiation? (Choose three.)

• A. Switches activate one of the blocked paths and negotiate the forwarding path upon failure.
• B. Every other switch on the LAN negotiates only one data path back to the root bridge.
• C. Switches wait until they receive an aggregation request,negotiate the status of the links, and proceed.
• D. One switch sends repeated requests to the other switch that is requesting the port aggregation statu
• E. The two switches negotiate the status of the links and proceed.
• F. Switches with links enabled for port aggregation do the port aggregation themselves and must be manually configured to be compatible at each end of that link

Answer: ABC

NEW QUESTION 3
Which is a prerequisite for deploying an Edge Service Gateway?

• A. Firewall Default Policy
• B. An interface
• C. Default Gateway
• D. High Availability

Answer: B

Explanation: Referencehttp://buildvirtual.net/vcp-nv-deploying-an-edge-services-gateway/

NEW QUESTION 4
Which three changes to a distributed switch configuration could trigger a rollback? (Choose three )

• A. Blocking all ports in the distributed port group containing the management VMkernel network adapter.
• B. Configure the virtual machine system traffic to enable bandwidth allocation using Network I/O Control.
• C. Adding a new host with a previousvDS configuration.
• D. Changing the MTU.
• E. Changing the VLAN settings in the distributed port group of the management VMkernel adapter.

Answer: ADE

Explanation: Referencehttps://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2032908

NEW QUESTION 5
Internet access is required from virtual machines located on any logical switch Direct access from the internet to these virtual machines is NOT permitted

Which perimeter NSX Edge feature would achieve this with the least configuration?

• A. LB
• B. VPN
• C. SNAT
• D. DNAT

Answer: D

NEW QUESTION 6
An administrator has implemented VMware NSX on a leaf-spine underlay. They have deployed the following in the data center:
• Two racks for a management cluster that is not prepared for VMware NSX
• Six racks for compute clusters
• Two racks for an Edge cluster which holds a DLR control VM for bridging, and North/South Edge Service Gateways
Which three of the following are true regarding the physical and logical networking of the environment? (Choose three )

• A. At least one VXLAN segment spans across all the racks
• B. VXLAN segments span the compute and Edge racks
• C. At least one VLAN spans the compute racks
• D. At least one VLAN spans across the two management racks
• E. At least 2 VLANs span across the two Edge racks.

Answer: BCD

NEW QUESTION 7
When deploying a standalone NSX Edge as a Layer 2 VPN client, which port needs to be configured on the client vSphere Distributed Switch?

• A. Trunk port
• B. Span port
• C. Sink port
• D. Mirror port

Answer: A

Explanation: Referencehttps://pubs.vmware.com/NSX-62/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-C9E2B0E4-F1C1-44A7- B142-F814F801FA42.html

NEW QUESTION 8
How many vCenter Server environments can a single NSX Manager serve at one time?

• A. 2000 vCenter Servers
• B. 10 vCenier Servers
• C. 1 vCenler Server
• D. 2 vCenter Servers

Answer: C

Explanation: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.install.doc%2FGUID-CFB0DC96-C329-490E- B2A9-D92C5704E853.html

NEW QUESTION 9
A new ESXi host was added to an existing cluster, prepared for NSX and enabled for Distributed Firewall, logical switching and Logical Routing.
The Most Preparation page in the NSX Web Ul shows this new host is in Ready state and the Logical Network Preparation tab displays the VXLAN VTEPs are correctly configured.
Virtual machines on the new host can communicate with each other but CANNOT communicate with VMs running on other hosts and connected to the same Logical Switch.
Which condition below will result in the described behavior on the new host?

• A. NSX Edge is powered off
• B. Host Agent (vpxa) to vCenter is disconnected
• C. Rabbitmq message bus connection (vsfwd) to NSX Manager is down
• D. Network Control Plane Agent (netcpa) connection to the controller is down

Answer: B

NEW QUESTION 10
Exhibit:

Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

• A. Within Compute Cluster 1, Layer 2 would function, but Layer 3 would fail.
• B. Within Compute Cluster 1, Layer 2 would fail, and Layer 3 would fail.
• C. Within ComputeCluster 1, Layer 2 would fail, but Layer 3 would function.
• D. Within Compute Cluster 1, Layer 2 would function, and Layer 3 would function.

Answer: A

Explanation: This has an interesting side effect: if you didn’t add all clusters of a given DVS to the TZ, those clusters you haven’t added will still have access to that Logical Switch. Let’s have a look at the following diagram:
From <https://telecomoccasionally.wordpress.com/2014/12/27/nsx-for-vsphere- understanding-transport-zone-scoping/>
his means that in out hypothetical case, if we were to create a DLR and connect to it that
LS we’ve created earlier, DLR instance would get created on hosts in clusters Comp B and
Mgmt / Edge, but not on hosts in clusteCr omp A:
From <https://telecomoccasionally.wordpress.com/2014/12/27/nsx-for-vsphere-understanding-transport-zone-scoping/

NEW QUESTION 11
Which load balancing algorithm is only available on a vSphere Distributed Switch?

• A. Route Based on Source MAC Hash
• B. Route Based on Originating Virtual Port
• C. Route Based on IP Hash
• D. Route Based on Physical NIC Load

Answer: D

Explanation: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.networking.doc/GUID-959E1CFE-2AE4-4A67-B4D4- 2D2E13765715.html

NEW QUESTION 12
You are creating a Unrversal Segment ID Pool for a three site Cross-vCenter environment. The three sites are designated as Site A, Site B and Site C,
• Site A has a local Segment ID pool of 5000-5999
• Site B has a local Segment ID pool of 6000-6999
• Site C has a local Segment ID pool of 7000-7999
Which of the following ranges would be valid for the Universal Segment ID pool?

• A. 5000-7999
• B. 7000-8999
• C. 4000-4999
• D. 2000000-2000999

Answer: D

Explanation: https://thewificable.com/2021/04/27/cross-vcenter-multi-site-nsx-guide/

NEW QUESTION 13
Which details can an administrator verify from the Summary tab of the VMware NSX Manager? (Choose three)

• A. Current time
• B. Average MTBF
• C. Version
• D. Storage utilization
• E. Health Score

Answer: ACE

NEW QUESTION 14
An administrator is deploying NSX in a Cross-vCenter configuration across three data centers located 100 miles apart Datacenter-1 and Datacenter-3 already have NSX deployed locally and Datacenter-2 does not have NSX deployed yet.
What is the correct order of steps to configure all three data centers for this solution?

• A. 1 Remove the NSX manager from Datacenter-1 and Datacenter-3 2 Reinstall all three NSX managers at the same time3 Deploy a universal transport zone4 Deploy a universal distributed logical router
• B. 1 Deploy an NSX manager at Dataeenter-22 Change the roles of the NSX managers in Datacentar-1 and Datacent«r-3 to Transit Mod*3 Deploy a universal transport zone4 Configure the Primary and Secondary roles on all three NSX managers
• C. 1 Deploy an NSX manager in Datacenter 22 Update the NSX manager role in Oatacenter-1 to Primary3 Update the roles in Dafacent«r-2 and Datacentar-3 to Secondary 4 Deploy a universal transport zone
• D. 1 Deploy the NSX manager at Datacenter-22 Update the NSX manager role in Datacenter-1 to Primary 3 Deploy a universal transport zone4 Deploy a universal distributed logical router

Answer: D

NEW QUESTION 15
An administrator wants to perform Activity Monitoring on a large group of virtual machines in an NSX environment.
How would this task be accomplished with minimal administrative effort?

• A. Create a PowerCLI script to enable virtual machine data collection on each virtual machine.
• B. Create a security group in Service Composer and add the virtual machines to the security group.
• C. Add the virtual machines to the pre-defined Activity Monitoring security group in ServiceComposer.
• D. Add the virtual machines to a VM folder in vCenter Server and enable data collection.

Answer: C

NEW QUESTION 16
What needs to be deployed before configuring the identify Firewall?

• A. Guest Introspection
• B. Data Security
• C. Network hit inspection
• D. LDAP Integration

Answer: A

Explanation: https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.2/rn/releasenotes_nsx_vsphere_624.html

NEW QUESTION 17
A network administrator is troubleshooting an issue and needs to observe an injected packet as it passes through the physical and logical network.
Which tool will accomplish this?

• A. Traceflow
• B. NetFlow
• C. Flow Monitoring
• D. Activity Monitoring

Answer: A

Explanation: Referencehttps://pubs.vmware.com/NSX-62/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-05647D5E-B669-40A8- 8B84-02C18781186F.html

NEW QUESTION 18
Which action is not an option for adding Virtual Machines to a Security Group?

• A. Adding Virtual Machines to a Security Group and nesting it within another Security Group.
• B. Defining Dynamic Membership in the Security Group.
• C. Adding Virtual Machines to a Security Policy and associating it with a Security Group.
• D. Selecting objects to include within a Security Group.

Answer: C