NEW QUESTION 1
Which two logical router components span across all transport nodes? (Choose two.)

• A. SERVICE_ROUTER_TIER0
• B. DISTRIBUTED_ROUTER_TIER0
• C. SERVICE_ROUTER_TIER1
• D. DISTRIBUTED_ROUTER_TIER1
• E. TIER0_DISTRIBUTED_ROUTER

Answer: BD

NEW QUESTION 2
An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

• A. Port NAT
• B. Source NAT
• C. Destination NAT
• D. 1:1 NAT
• E. Reflexive NAT

Answer: BC

NEW QUESTION 3
An NSX administrator Is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

• A. Tier-0 Gateway
• B. Edge Node
• C. Tier-1 Gateway
• D. Edge Cluster

Answer: A

NEW QUESTION 4
An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.
Which message ID (msgid) should be used in the syslog export configuration command as a filter?

• A. SYSTEM
• B. FABRIC
• C. MONITORING
• D. GROUPING

Answer: B

NEW QUESTION 5
How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

• A. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.
• B. Automatically created when Tier-1 is created.
• C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.
• D. Automatically created when Tier-1 is connected with Tier-0 from Simplified UI.

Answer: D

NEW QUESTION 6
An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

• A. Syslog Is not configured on the NSX Manager
• B. Distributed Firewall Rule Logging is not enabled
• C. Zero Trust Security Is not enabled
• D. Syslog is not configured on the ESXI transport node

Answer: C

NEW QUESTION 7
Which port is used by a transport node to communicate with NSX Manager in NSX-T Data Center 2.4?

• A. 5671
• B. 1234
• C. 1235
• D. 5678

Answer: A

NEW QUESTION 8
Which three steps are required to create an IPSEC VPN tunnel? (Choose three.)

• A. Create an IPSec service.
• B. Configure a distributed firewall policy.
• C. Configure a Tier-1 Gateway.
• D. Add a local endpoint.
• E. Configure an IPSec session.
• F. Add a logical switch.

Answer: ADE

NEW QUESTION 9
An NSX administrator has observed connectivity issues between the NSX Manager and the KVM Transport Node.
Which two log files could be used to troubleshoot the issue on the KVM Transport Node? (Choose two.)

• A. /var/log/vmware/nsx-syslog
• B. /usr/vmware/log/syslog
• C. /var/log/nsx/syslog
• D. /usr/vmware/nsx-syslog
• E. /var/log/syslog

Answer: AE

NEW QUESTION 10
Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

• A. Destination MAC
• B. Failover Order
• C. Load Balanced Source
• D. Load Balanced Source IP
• E. Destination Port
• F. Load Balanced Source MAC

Answer: BCF

NEW QUESTION 11

A NSX-T Data Center administrator wants to ensure that any machine on a public network can communicate with a Web VM running in a NSX-T Data Center environment.
Which NAT type must be created on the Tier-0 or Tier-1 Gateway to achieve this?

• A. 1:1 NAT
• B. Reverse NAT
• C. DNAT
• D. SNAT

Answer: B

NEW QUESTION 12
What is VMware's recommendation for the minimum MTU requirements when planning a NSX-T Data Center deployment?

• A. MTU should be set to 1550 or less across the data center network including inter-data center connections.
• B. MTU should be set to 1500 or less only on inter-data center connections.
• C. Configure Path MTU Discovery and rely on fragmentation.
• D. MTU should be set to 1600 or greater across the data center network including inter-data center connections.

Answer: D

NEW QUESTION 13
How is the intra-tier transit link connection created between SR and DR for a Tier-0 Gateway?

• A. Manually create a gateway interface and mark it as transit.
• B. Automatically created when DR is created.
• C. Automatically created when SR is initialized.
• D. Manually create external uplink interface and mark it as transit.

Answer: C

NEW QUESTION 14
Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

• A. Distributed Firewall
• B. Service Insertion
• C. Gateway Firewall
• D. Virtual Private Network
• E. Distributed Routing
• F. Packet Forwarding

Answer: CEF

NEW QUESTION 15
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

• A. SR and DR doesn't need to be connected to provide any stateful services.
• B. SR is instantiated and automatically connected with DR.
• C. SR and DR is instantiated but requires manual connection.
• D. DR is instantiated and automatically connected with SR.

Answer: B

NEW QUESTION 16
A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to allow simple 3-tier app forms through web, app, and database.
The naming convention will be:
• WKS-WEB-SRV-XXX
• WKY-APP-SRR-XXX
• WKI-DB-SRR-XXX
What is the optimal way to group them in order to enforce security policies from NSX-T Data Center?

• A. Use Edge as a firewall between tiers.
• B. Create an Ethernet based security policy.
• C. Do a service Insertion to accomplish the task.
• D. Group all by means of tags membership.

Answer: D

NEW QUESTION 17
Which two IP Discovery mechanisms are supports in KVM-environments? (Choose two.)

• A. IGMP Snooping
• B. Packet Snooping
• C. DHCP Snooping
• D. ARP Snooping
• E. ND Snooping

Answer: CD

NEW QUESTION 18
An NSX administrator is migrating vSphere port groups configured in vSphere to N-VDS. What are two migration options? (Choose two.)

• A. Migrate vSphere port groups using the esxcli command line.
• B. Migrate vSphere port group through the NSX Manager API Calls.
• C. Migrate Networking from the vCenter Server.
• D. Migrate from the NSX Manager UI, go to Fabric -> Profile -> Uplink Profiles path.
• E. Migrate from the NSX Simplified UI> Click Transport Node > Configure NSX > PNIC Only Migration path.

Answer: AD

NEW QUESTION 19
A user is assigned these two roles in NSX Manager:
• Load Balancer Administrator
• Network Engineer
What privileges does this user have in the system?

• A. full access permissions on all networking services and full access permissions on load balancing features
• B. read permissions on all networking services and read permissions on load balancing features
• C. read permissions on all networking services and full access permissions on load balancing features
• D. full access permissions on all networking services and read permissions on load balancing features

Answer: A

NEW QUESTION 20
......