NEW QUESTION 1
What is required to configure a load balancer in inline mode?

• A. DNAT
• B. SNAT
• C. Client and server connected to different Tier-1 Gateways
• D. Client and server running on different transport nodes

Answer: C

NEW QUESTION 2
What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

• A. Group
• B. Tier-1 Gateway
• C. Segment Port
• D. Segment
• E. DFW

Answer: AE

NEW QUESTION 3
A customer is preparing to deploy VMware Kubernetes on an NSX-T Data Center. What is the minimum MTU size for the UPLINK profile?

• A. 1600
• B. 1650
• C. 1550
• D. 1500

Answer: A

NEW QUESTION 4
What is the correct prioritization for gateway policy categories?

• A. Shared Pre-rules > Emergency > System > Local Gateway > Auto Service > Default
• B. Shared Pre-rules > Emergency > Local Gateway > System > Auto Service > Default
• C. Emergency > System > Shared Pre-rules > Auto Service > Local Gateway > Default
• D. Emergency > System > Shared Pre-rules > Local Gateway > Auto Service > Default

Answer: D

NEW QUESTION 5
Which two logical router components span across all transport nodes? (Choose two.)

• A. SERVICE_ROUTER_TIER0
• B. DISTRIBUTED_ROUTER_TIER0
• C. SERVICE_ROUTER_TIER1
• D. DISTRIBUTED_ROUTER_TIER1
• E. TIER0_DISTRIBUTED_ROUTER

Answer: BD

NEW QUESTION 6
An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.
Which feature in the NSX Manager Simplified UI shows the mapping between the virtual NIC and the host's physical adapter?

• A. N-VDS Visualization
• B. Activity Monitoring
• C. IPFIX
• D. Port Mirroring

Answer: A

NEW QUESTION 7
Which two IP Discovery mechanisms are supports in KVM-environments? (Choose two.)

• A. IGMP Snooping
• B. Packet Snooping
• C. DHCP Snooping
• D. ARP Snooping
• E. ND Snooping

Answer: CD

NEW QUESTION 8
How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

• A. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.
• B. Automatically created when Tier-1 is created.
• C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.
• D. Automatically created when Tier-1 is connected with Tier-0 from Simplified UI.

Answer: D

NEW QUESTION 9
Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

• A. esxcli network vswitch dvs vmware list
• B. esxcfg-nics -1
• C. esxcfg-vmsvc/get.networks
• D. esxcfg-vmknic -1
• E. esxcli network nic list

Answer: AE

NEW QUESTION 10
Which three steps are required to create an IPSEC VPN tunnel? (Choose three.)

• A. Create an IPSec service.
• B. Configure a distributed firewall policy.
• C. Configure a Tier-1 Gateway.
• D. Add a local endpoint.
• E. Configure an IPSec session.
• F. Add a logical switch.

Answer: ADE

NEW QUESTION 11
What are three NSX Manager roles? (Choose three.)

• A. zookeeper
• B. manager
• C. policy
• D. controller
• E. cloud
• F. master

Answer: BCD

NEW QUESTION 12
Which two commands could be used on an ESXI transport node to validate connectivity to the NSX Manager? (Choose two.)

• A. nsxcli --cmd get manager status
• B. esxcli network ip connection list I grep rabbitmq
• C. nsxcli --cmd get managers
• D. nsxcli --cmd get manager connectivity status
• E. esxcli network ip connection list I grep 5671

Answer: BE

NEW QUESTION 13
What are the supported N-VDS modes?

• A. DPDK Datapath
• B. Enhanced Datapath
• C. Overlay Datapath
• D. Standard Datapath
• E. Secure Datapath

Answer: BD

NEW QUESTION 14
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

• A. Configure a Tier-1 gateway and connect it directly to the physical routers.
• B. Configure ECMP on the Tier-0 gateway.
• C. Configure NAT on the Tier-0 gateway.
• D. Deploy Large size Edge node/s.
• E. Add an additional vNIC to the NSX Edge node.

Answer: BD

NEW QUESTION 15
An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

• A. Port NAT
• B. Source NAT
• C. Destination NAT
• D. 1:1 NAT
• E. Reflexive NAT

Answer: BC

NEW QUESTION 16
An NSX administrator created a Segment from the Simplified UI and wants to find the Replication Mode configured on the Segment. Which NSX CLI command lists the Replication mode?

• A. get logical-switches
• B. get logical-switch <Logical-switch-UUID>
• C. get logical-switch <Local-Switch-UUID> status
• D. get logical-switch status

Answer: B

NEW QUESTION 17
Which three hardware-based offloads provide maximum performance for physical network interface cards? (Choose three.)

• A. Netfilter Flow Offload (NFO)
• B. Priority Flow Control (PFC)
• C. Receive Side Scaling (RSS)
• D. TCP Segmentation Offload (TSO)
• E. Source Route Bridging (SRB)
• F. Large Receive Offload (LRO)

Answer: BDF

NEW QUESTION 18
Which statement Is true regarding the audit user account? (Choose two.)

• A. The admin user must set the password for the audit account to log in to NSX Manager.
• B. The administrator must run the set audit user password <password> command.
• C. The audit user has read-write access to the NSX Manager.
• D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.
• E. The administrator must run the set user audit password <password> command.

Answer: AC

NEW QUESTION 19
Which is correct when deploying a NSX Edge in a KVM only environment?

• A. deploy NSX Edge VM with QCOW2 image
• B. deploy NSX Edge VM with ISO image
• C. deploy NSX Edge on a bare-metal server
• D. deploy NSX Edge VM with OVF template

Answer: C

NEW QUESTION 20
An NSX administrator would like to configure syslog for a KVM transport node. Which host log files could be exported to a remote syslog server?

• A. /var/log/vmware/nsx-syslog
• B. /var/log/cfgAgent.log
• C. /var/log/nsx-audit.log
• D. /var/log/cloudnet/nsx-ccp.log

Answer: A

NEW QUESTION 21
An NSX administrator has configured a KVM hypervisor as a transport node. Which kemel module on KVM implements a N VDS?

• A. dvswitch
• B. nsx-vswitch
• C. openvswitch
• D. etherswitch

Answer: C

NEW QUESTION 22
An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

• A. Syslog Is not configured on the NSX Manager
• B. Distributed Firewall Rule Logging is not enabled
• C. Zero Trust Security Is not enabled
• D. Syslog is not configured on the ESXI transport node

Answer: C

NEW QUESTION 23
Refer to the exhibit.

An administrator Is trying to configure a medium load balancer in a production environment, but is getting the error message shown in the exhibit.
Which step must the administrator perform to remediate the problem?

• A. Reduce the size of the virtual pool.
• B. Restart the NSX Manager.
• C. Power-off the existing load balancer and change its size.
• D. Place the Tier-1 Gateway in a large edge cluster and redeploy the load balancer.

Answer: D

NEW QUESTION 24
......