VCPN610 VMware Certified Professional Network Virtual Test Set 1

How many DHCP pools can be created on the NSX Edge?


Options are :

  • 5,000
  • 2,000
  • 20,000 (Correct)
  • 10,000

Answer : 20,000

How many Logical Interfaces can be assigned to a single Distributed Router instance?


Options are :

  • 1
  • 1000 (Correct)
  • 12
  • 1200

Answer : 1000

A company hosts an internal website on multiple virtual machines on a Logical Switch with VNI

7321. A Distributed Router serves as the virtual machines' default gateway.

When an user resolves the URL for the website, the internal DNS server responds with the IP

address of one of the virtual machine's IP addresses in a round robin fashion. The company wants

to deploy an NSX Edge Service Load Balancer and maintain the use of the Distributed Router for

the virtual machines' default gateway.

Which mode can the NSX Edge Load Balancer can be deployed to meet the Company's needs?


Options are :

  • Local
  • One-Arm (Correct)
  • Transparent
  • Global

Answer : One-Arm

What is a VXLAN LIF?


Options are :

  • The Distributed Router interface that connects to the distributed portgroup.
  • The Logical Switch interface that connects to the Distributed Router.
  • The Distributed Router interface that connects to a Logical Switch. (Correct)
  • The distributed portgroup that the Distributed Router connects to.

Answer : The Distributed Router interface that connects to a Logical Switch.

What is the default delay when the active NSX Edge instance fails before the standby instance

takes the active role?


Options are :

  • 3 seconds.
  • 3 seconds.
  • 15 seconds (Correct)
  • 45 seconds.

Answer : 15 seconds

Where does an administrator configure logging for the NSX Manager?


Options are :

  • In the NSX Manager command line interface (CLI)
  • In the vSphere Syslog Collector
  • In the NSX Manager GUI (Correct)
  • In the vSphere Web Client

Answer : In the NSX Manager GUI

Which NSX component can validate that security policies at your organization are being enforced

correctly?


Options are :

  • Activity Monitoring (Correct)
  • Distributed firewalls
  • ERSPAN
  • Flow Monitoring

Answer : Activity Monitoring

Which two IPv6 connections are supported by the NSX Edge Load Balancer in Transparent

mode? (Choose two.)

A. IPv4 to IPv6

B. IPv6 to IPv6

C. IPv6 to IPv4

D. IPv4 to IPv4


Options are :

  • A,D (Correct)
  • A,C
  • A,B
  • B,D

Answer : A,D

What is the frequency of the heartbeat between the active and standby NSX Edge instances when

configured for HA?


Options are :

  • Every 15 seconds
  • Every 2 seconds.
  • Every 1 second. (Correct)
  • Every 5 seconds

Answer : Every 1 second.

Where is the layer 2 bridge instance deployed when configuring a bridge connection between a

logical switch and a VLAN?


Options are :

  • On both ESXi hosts that make up the layer 2 bridge
  • On the ESXi host running the logical switch
  • On the ESXi host running the logical router (Correct)
  • On each virtual machine that will utilize the layer 2 bridge

Answer : On the ESXi host running the logical router

What is the maximum number of Distributed Router Logical Interfaces that can be connected to a

Logical Switch?


Options are :

  • 1200
  • 2000
  • 2
  • 1 (Correct)

Answer : 1

A vSphere administrator deploys the NSX Edge Load Balancer in Inline mode. Which is not a

requirement for the Load Balancer to operate correctly?


Options are :

  • Connect the Load Balancer directly to the same subnet as the VMs that are part of the Server Pool.
  • Perform Destination NAT on the traffic from the clients.
  • Perform Source NAT on the traffic from the clients. (Correct)
  • Point the virtual machines in the Server Pool to the Load Balancer as their default gateway.

Answer : Perform Source NAT on the traffic from the clients.

A user needs to be given the ability to make configuration changes on a specific NSX Edge

device. What role and scope could be used to meet this requirement?


Options are :

  • Security Administrator role and Limit Access scope (Correct)
  • NSX Administrator role and Limit Access scope
  • NSX Administrator role and No restriction scope
  • Security Administrator role and No restriction scope

Answer : Security Administrator role and Limit Access scope

Which routing protocol cannot be configured on an NSX edge device?


Options are :

  • EIGRP (Correct)
  • IS-IS
  • OSPF
  • BGP

Answer : EIGRP

Which two are pieces of information required to perform an NSX backup? (Choose two.)

A. Transfer protocol

B. Default Port

C. Number of backups retained

D. Filename prefix


Options are :

  • A,D (Correct)
  • C,D
  • A,C
  • A,B

Answer : A,D

Which two web browsers are supported for programming the NSX REST API? (Choose two.)

A. Internet Explorer

B. Chrome

C. Firefox

D. Safari


Options are :

  • B,A
  • B,D
  • B,C (Correct)
  • A,C

Answer : B,C

Which tool is used to detect rogue services?


Options are :

  • Activity Monitoring
  • Flow Monitoring (Correct)
  • NSX Logical Firewall
  • NSX Logical Router

Answer : Flow Monitoring

Which two Virtual Private Networks are supported by the NSX Edge Service Gateway? (Choose

two.)

A. Layer 2 VPN

B. GRE VPN

C. IPSec VPN

D. Layer 3 VPN


Options are :

  • A,D
  • A,B
  • B,C
  • A,C (Correct)

Answer : A,C

Which component could be used to automate the deployment of an NSX environment?


Options are :

  • The vSphere Distributed Switch wizard.
  • A Cloud Management Platform (CMP). (Correct)
  • The NSX Controller.
  • The NSX Manager.

Answer : A Cloud Management Platform (CMP).

What is the maximum time span for viewing Flow Monitoring data?


Options are :

  • 1 week
  • 1 month
  • 2 weeks (Correct)
  • 2 hours

Answer : 2 weeks

What is a requirement of the physical network for VXLAN to operate correctly when deploying

NSX for vSphere?


Options are :

  • Configure PIM in Sparse or Dense mode.
  • Multichassis Link Aggregation (MLAG) on the Top of Rack switches.
  • IPv4 enabled in the local segment where the VTEPs are connected.
  • Configure Jumbo Frames. (Correct)

Answer : Configure Jumbo Frames.

An organization requires a high performance firewall as part of an NSX deployment. What is the

minimum NSX Edge Services Gateway configuration that would be suitable for the organization's

requirements?


Options are :

  • Large
  • Quad-Large (Correct)
  • Compact
  • X-Large

Answer : Quad-Large

How many Virtual IPs does the NSX Edge Load Balancer support?


Options are :

  • 32
  • 64 (Correct)
  • 1
  • 128

Answer : 64

You have deployed a vShield Endpoint for antivirus and malware detection on an NSX network

and need to monitor audit messages for the endpoint.

Which log file are the audit messages recorded in?


Options are :

  • vmkwarning.log on the ESXi host
  • vmware.log on the virtual machin (Correct)
  • messages.log on the NSX Manager
  • cloudnet_cpp.log on the NSX Controller

Answer : vmware.log on the virtual machin

How many syslog servers can be configured for an NSX Edge device?


Options are :

  • 3
  • 1
  • 2 (Correct)
  • 4

Answer : 2

A Distributed Router and an NSX Edge Gateway are connected to a Logical Switch with a VNI of

7321. Both also have connections to the external network.The Distributed Router serves as the

default gateway for the virtual machines in VNI 7321.

A vSphere administrator does not want to advertise the subnet in VNI 7321 to the rest of the

network, but still wants to allow virtual machines in the segment to access external resources.

What two steps should the vSphere administrator take to achieve this? (Choose two)

A. Make the NSX Edge Gateway the default gateway for VNI 7321.

B. Configure a SNAT rule for VNI 7321 on the NSX Edge Gateway.

C. Configure a static route to the NSX Edge Gateway in the upstream router.

D. Create an inbound Access Control List on the Distributed Router.


Options are :

  • A,B (Correct)
  • D,B
  • A,C
  • A,D

Answer : A,B

Which two protocols are used to perform NSX backups? (Choose two.)

A. FTP

B. HTTP

C. SFTP

D. HTTPS


Options are :

  • A,B
  • A,D
  • B,C
  • A,C (Correct)

Answer : A,C

Which NSX Data Security role has the permission to start and stop data security scans?


Options are :

  • Enterprise Administrator
  • Security Administrator
  • Auditor
  • NSX Administrator (Correct)

Answer : NSX Administrator

Which service cannot be included in a Security Policy using Service Composer?


Options are :

  • Network Introspection Services
  • Virtual Private Network Services (Correct)
  • Endpoint Services
  • Firewall Rules

Answer : Virtual Private Network Services

Which is the transport protocol and port number used in VMware's implementation of VXLAN in

NSX for vSphere?


Options are :

  • UDP, port number 4789
  • TCP, port number 8472
  • UDP, port number 8472 (Correct)
  • TCP, port number 4789

Answer : UDP, port number 8472

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions