2V0-641 VMware Certified Professional 6 Network Exam Set 3

A vSphere administrator wants to setup an NSX Edge Service Gateway to provide travelingemployees secure access to company servers located in specific network segments within thecorporate Data Centers. The solution has to be as scalable as possible.Which Virtual Private Network solution will satisfy the administrator's requirements?


Options are :

  • Layer 2 VPN
  • MPLS VPN
  • SSL VPN (Correct)
  • IPSec VPN

Answer : SSL VPN

VMware VDCD510 Advanced Professional Data Center Design Exam Set 2

A company wants to deploy VMware NSX for vSphere with no PIM and no IGMP configured in theunderlying physical network. This company also must ensure that non-ESXi hosts do not receivebroadcast, unknown unicast or multicast (BUM) traffic.Which replication mode should the logical switches be deployed with?


Options are :

  • Unicast Replication Mode (Correct)
  • Transport Zone Mode
  • Multicast Replication Mode
  • Hybrid Replication Mode

Answer : Unicast Replication Mode

You want to use an existing NSX Manager to extend logical networks to the ESXi hosts of a newcluster.What should you do?


Options are :

  • On the Installation > Logical Network Preparation page of the Networking & Security section of the vSphere Web Client, create a new Transport Zone for the new cluster
  • On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for the new cluster. (Correct)
  • On the Installation > Management page of the Networking & Security section of the vSphere Web Client, click the green plus sign to deploy a new NSX controller node to the new cluster.
  • On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for each of the new hosts

Answer : On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for the new cluster.

Which is not a prerequisite to upgrade vCloud Network and Security Virtual Wires to LogicalSwitches?


Options are :

  • NSX Controllers have been deployed. (Correct)
  • vShield Data Security has been uninstalled.
  • The NSX Manager has been configured with the same IP as the vCloud Network and Security Manager
  • vCloud Network and Security Manager has been upgraded to NSX Manager.

Answer : NSX Controllers have been deployed.

VMware VDCD510 Advanced Professional Data Center Design Exam Set 8

Which two statements are true regarding Layer 2 VPNs? (Choose two.)A.Layer 2 VPNs are used to securely extend Ethernet segments over an untrusted medium.B.The NSX Edge Service Gateway can form a Layer 2 VPN with a standards-compliant physicalappliance.C.The Distributed Router can form a Layer 2 VPN to another Distributed Router or NSX EdgeService Gateway.D.Layer 2 VPNs require the two VPN endpoints be in the same Layer 2 segment.


Options are :

  • b,c
  • a,d
  • c,d
  • a,b (Correct)

Answer : a,b

A company hosts an internal website on multiple virtual machines attached to a Logical Switchwith VNI 7321. A Distributed Router serves as the virtual machines' default gateway.When a user resolves the URL for the website, the internal DNS server responds with the IPaddress of one of the virtual machine's IP addresses in a round robin fashion. This approachresults in some virtual machines having a much higher number of user sessions than others.The company wants to deploy a NSX Edge Service Load Balancer to improve on this situation.Which distribution method can be configured on the NSX Edge Load Balancer to meet thecompany's needs?


Options are :

  • LEAST_LOAD
  • IP_HASH
  • LEAST_CONN (Correct)
  • URI

Answer : LEAST_CONN

A vSphere administrator added a new interface to a Distributed Router with a subnet of172.16.10.0/24 and wants to make this subnet reachable to the rest of the network. How can thevSphere administrator achieve this?



Options are :

  • Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and the new interface with the subnet 172.16.10.0/24 in a normal area. (Correct)
  • Enable OSPF on the Distributed Router. Configure the uplink interface in the normal area and the new interface with the subnet 172.16.10.0/24 in a Backbone area.
  • Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and redistribute from OSPF the 172.16.10.0/24 subnet
  • Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and redistribute into OSPF the 172.16.10.0/24 subnet

Answer : Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and the new interface with the subnet 172.16.10.0/24 in a normal area.

VCP-510 VMware Certified Professional on vSphere 5 Exam Set 8

What is the minimum MTU size recommended by VMware for the physical network whendeploying NSX for vSphere?


Options are :

  • 1600 (Correct)
  • 2148
  • 9000
  • 1550

Answer : 1600

When preparing a vSphere host cluster to work with VMware NSX, which two options show VIBsthat are installed and registered with all hosts within the prepared cluster? (Choose two.)A.NSX VXLANB.NSX Distributed FirewallC.NSX EdgeD.NSX Data Security


Options are :

  • a,d
  • c,d
  • b,c
  • a,b (Correct)

Answer : a,b

A new ESXi 5.5 host is deployed in a vSphere environment with VMware NSX for vSphere.How can the host be prepared for VMware NSX for vSphere?


Options are :

  • By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution. (Correct)
  • By creating a new VMkernel port in the host from the Host and Clusters inventory view in vSphere Web Client
  • By entering the ESXi 5.5 management IP address in the NSX Controllers so the VIBs can be installed.
  • By leveraging VMware Update Manager to install the new NSX for vSphere VIBs into each of the hosts.

Answer : By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution.

2V0-631 VMWare Certified Professional6 Cloud Management Test Set 2

A company has augmented its Data Center infrastructure by using vCloud Hybrid Service duringpeak hours. The company wants to extend their existing subnets into the cloud while workloadsretain their existing IP addresses. The virtual machines in these subnets use an NSX EdgeGateway as their default gateway.Which solution should this company use?


Options are :

  • MPLS VPN
  • IPSec VPN
  • SSL VPN
  • Layer 2 VPN (Correct)

Answer : Layer 2 VPN

A vSphere administrator deployed an NSX Edge Load Balancer in High Availability (HA) mode.What happens in the event the Load Balancer has a failure?


Options are :

  • The secondary NSX Edge Load Balancer assumes the role of primary. Existing Flows will need to have their connections reestablished. (Correct)
  • HA will start the NSX Edge Load Balancer on another ESXi host in the cluster. All existing flows will need to have their connections reestablished.
  • HA will start the NSX Edge Load Balancer on another ESXi host in the cluster. The NSX Controller caches existing flows and hands them to the Load Balancer when it is back up.
  • The secondary NSX Edge Load Balancer assumes the role of primary. The NSX Controller caches existing flows and hands them to the Load Balancer when it is back up.

Answer : The secondary NSX Edge Load Balancer assumes the role of primary. Existing Flows will need to have their connections reestablished.

Which statement is true regarding an NSX Edge gateway device configured with a DNS Server?


Options are :

  • The NSX Edge registers the DNS Server with the NSX Controller.
  • The NSX Edge configuration will override the DNS Server configured by the NSX Manager.
  • The NSX Edge will forward all DNS requests from virtual machines sent to it to the DNS Server. (Correct)
  • The NSX Edge periodically synchronizes its DNS tables with the primary DNS Server.

Answer : The NSX Edge will forward all DNS requests from virtual machines sent to it to the DNS Server.

VCP550D VMware Certified Professional 5 Data Center Exam Set 8

A vSphere administrator wants to add a VLAN LIF to a Distributed Router. What must the vSphereadministrator do for the VLAN LIF to be added successfully?


Options are :

  • The vSphere administrator must assign a VLAN number to the Logical Switch that the Distributed Router connects to.
  • The vSphere administrator must assign a VLAN number to the Distributed Router that the Logical Switch connects to.
  • The vSphere administrator must assign a VLAN number to the distributed portgroup that the VLAN LIF connects to (Correct)
  • The vSphere administrator must assign a VLAN number to the uplink on the distributed switch that the VLAN LIF connects to

Answer : The vSphere administrator must assign a VLAN number to the distributed portgroup that the VLAN LIF connects to

An NSX Edge Service Gateway has two interfaces: Internal interface named Internal Access-- IP address = 10.10.10.1-- Network mask = 255.255.255.0 Uplink interface named Physical Uplink-- IP address = 20.20.20.1-- Network mask = 255.255.255.0A vSphere administrator wants to add a SNAT rule to allow traffic from the internal networksegment to access external resources via the uplink interface.Which three steps should the vSphere administrator do to add the SNAT rule? (Choose three.)A.Apply the SNAT rule to the Internal Access interface.B.Select 10.10.10.1 as the translated source IP.C.Apply the SNAT rule on the Physical Uplink interface.D.Select 10.10.10.0/24 as the original subnet.E.Choose 20.20.20.2 as the translated source IP address


Options are :

  • c,d,e (Correct)
  • a,c,d
  • a,b,c
  • b,c,d

Answer : c,d,e

How is the Bridge Instance chosen?


Options are :

  • It is chosen based on the ESXi host where the Logical Router Control VM is running. (Correct)
  • The VTEP configured with the highest VXLAN Network Identifier (VNI) is selected.
  • During an election process among all ESXi hosts. The host with the highest MAC address is selected
  • It is manually assigned by the vSphere administrator when the distributed portgroup is configured.

Answer : It is chosen based on the ESXi host where the Logical Router Control VM is running.

VCP-510 VMware Certified Professional on vSphere 5 Exam Set 3

After consulting with the network team, it is decided that Transport Zones will be configured withUnicast Replication Mode for a new NSX for vSphere deployment.Which statement is true regarding the function of the VXLAN Tunnel End Points (VTEPs)?


Options are :

  • The VTEPs will switch to Multicast Replication Mode for those VTEPs to which multicast path discovery is successful.
  • The VTEPs will send unicast frames to the NSX Controllers when the VTEPs do not have a MAC address in the MAC table
  • The VTEPs will send unicast frames to all local VTEPs and remote proxies in the Transport Zone when the VTEPs do not have a MAC address in the MAC table. (Correct)
  • The VTEPs will switch to Multicast Replication Mode for those VTEPs to which multicast path discovery is successful.

Answer : The VTEPs will send unicast frames to all local VTEPs and remote proxies in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.

Where is the layer 2 bridge instance deployed when configuring a bridge connection between alogical switch and a VLAN?


Options are :

  • On each virtual machine that will utilize the layer 2 bridge
  • On the ESXi host running the logical router (Correct)
  • On both ESXi hosts that make up the layer 2 bridge
  • On the ESXi host running the logical switch

Answer : On the ESXi host running the logical router

A vSphere administrator wants to setup an NSX Edge Service Gateway to provide travelingemployees secure access to company servers located in specific network segments within thecorporate Data Center. The remote access solution must provide a method to authenticate theusers.Which two methods can be used with the NSX Edge Service Gateway? (Choose two.)A.TACACS+B.MS-CHAPC.RSA Secure IDD.Active Directory


Options are :

  • c,d (Correct)
  • a,d
  • b,c
  • a,b

Answer : c,d

VMware Certified Professional VCP6-DCV Practice Test Set 1

A company wants to deploy VMware NSX for vSphere and ensure the least amount of bandwidthconsumption in the underlying physical architecture.Which replication mode should the logical switches be deployed with?


Options are :

  • vSphere Replication Mode
  • Hybrid Replication Mode
  • Unicast Replication Mode
  • Multicast Replication Mode (Correct)

Answer : Multicast Replication Mode

What is a prerequisite to deploying a Logical Switch?


Options are :

  • Prepare and configure VTEPs on the ESXi hosts using the vSphere Web Client.
  • Configure the VXLAN Tunnel Endpoint's (VTEP) VLAN on the trunk in the physical switches. (Correct)
  • Add the ESXi hosts to the same vSphere Distributed Switch.
  • Create a port group on the vSphere Distributed Switch.

Answer : Configure the VXLAN Tunnel Endpoint's (VTEP) VLAN on the trunk in the physical switches.

Your data center is made up of two VMware vCenter Server instances. Each vCenter Servermanages three clusters with 16 hosts per cluster.In preparing for your VMware NSX deployment, how many vShield Endpoint instances will youhave?


Options are :

  • 2
  • 48
  • 96 (Correct)
  • 6

Answer : 96

VCPC550 VMware Certified Professional Cloud Practice Test Set 10

Which statement is correct when upgrading vShield Data Security to NSX Data Security?


Options are :

  • NSX Data Security does not support a direct upgrade. (Correct)
  • NSX Controller must be deployed before the upgrade.
  • The vCloud Network and Security Virtual Wires must have been upgraded.
  • vCould Network and Security must be at least version 5.1 before starting the upgrade.

Answer : NSX Data Security does not support a direct upgrade.

What is the minimum number of vSphere Distributed Switches (vDS) that must be configuredbefore deploying VMware NSX for vSphere?


Options are :

  • 4
  • 1 (Correct)
  • 0
  • 2

Answer : 1

A vSphere administrator deploys the NSX Edge Load Balancer in Inline mode. Which is not arequirement for the Load Balancer to operate correctly?


Options are :

  • Perform Source NAT on the traffic from the clients. (Correct)
  • Connect the Load Balancer directly to the same subnet as the VMs that are part of the Server
  • Perform Destination NAT on the traffic from the clients.
  • Point the virtual machines in the Server Pool to the Load Balancer as their default gateway.

Answer : Perform Source NAT on the traffic from the clients.

VMware Certified Professional VCP6-DCV Practice Test Set 2

How many Logical Interfaces can be assigned to a single Distributed Router instance?


Options are :

  • 1
  • 1000 (Correct)
  • 1200
  • 12

Answer : 1000

Which two components are required to enable layer 2 bridging? (Choose two.)A.Distributed firewall rule to allow layer 2 traffic in the bridge.B.Deployed Logical Switch.C.Deployed Logical Router.D.VLAN trunk configured on logical switch.


Options are :

  • c,d
  • a,b
  • a,c (Correct)
  • b,c

Answer : a,c

What is the earliest version of vCloud Network and Security (vCNS) that can be upgraded toVMware NSX for vSphere 6.0?


Options are :

  • vCNS 5.0
  • vCNS 5.5 (Correct)
  • vCNS 5.1
  • vCNS 6.0

Answer : vCNS 5.5

VMware Certified Professional VCP6-DCV Practice Test Set 2

Which two options are use cases of Layer 2 bridging in NSX for vSphere? (Choose two.)A.Extend the network security to physical devices in the physical network by use of the DistributedFirewall.B.Extend physical services to Virtual Machines in virtual network.C.Allow clustering of multiple NSX Managers in a single vCenter Server instanceD.Allow physical devices in the physical network to use the NSX Edge Gateway as a default router.


Options are :

  • b,c
  • b,d (Correct)
  • c,d
  • a,b

Answer : b,d

Which option is VMware's best practice for the deployment of NSX Manager and NSX Controllercomponents?


Options are :

  • Deploy the NSX Manager component to a management cluster and the NSX Controller components to a resource cluster
  • Deploy the NSX Manager and NSX Controller components to a management cluster. (Correct)
  • Deploy the NSX Controller components to a management cluster and the NSX Manager component to a resource cluster
  • Deploy the NSX Manager and NSX Controller components to a resource cluster.

Answer : Deploy the NSX Manager and NSX Controller components to a management cluster.

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions