VMware 2V0-641 Professional Network Virtualization Exam Set 1

A vSphere administrator wants to setup an NSX Edge Service Gateway to provide traveling employees secure access to company servers located in specific network segments within the corporate Data Centers. The solution has to be as scalable as possible. Which Virtual Private Network solution will satisfy the administrator's requirements?


Options are :

  • Layer 2 VPN
  • MPLS VPN
  • SSL VPN
  • IPSec VPN

Answer :SSL VPN

2V0-621D VMware Certified Professional 6 Data Center Exam Set 4

How is the Bridge Instance chosen?


Options are :

  • It is chosen based on the ESXi host where the Logical Router Control VM is running.
  • During an election process among all ESXi hosts. The host with the highest MAC address is selected.
  • The VTEP configured with the highest VXLAN Network Identifier (VNI) is selected.
  • It is manually assigned by the vSphere administrator when the distributed portgroup is configured.

Answer :It is chosen based on the ESXi host where the Logical Router Control VM is running.

When preparing a vSphere host cluster to work with VMware NSX, which two options show VIBs that are installed and registered with all hosts within the prepared cluster? (Choose two.)


Options are :

  • NSX Data Security
  • NSX VXLAN
  • NSX Edge
  • NSX Distributed Firewall

Answer :NSX VXLAN NSX Distributed Firewall

Your data center is made up of two VMware vCenter Server instances. Each vCenter Server manages three clusters with 16 hosts per cluster. In preparing for your VMware NSX deployment, how many vShield Endpoint instances will you have?


Options are :

  • 48
  • 96
  • 2
  • 6

Answer :96

VMware 2V0-641 Professional Network Virtualization Exam Set 2

Where is the layer 2 bridge instance deployed when configuring a bridge connection between a logical switch and a VLAN?


Options are :

  • On the ESXi host running the logical router
  • On both ESXi hosts that make up the layer 2 bridge
  • On the ESXi host running the logical switch
  • On each virtual machine that will utilize the layer 2 bridge

Answer :On the ESXi host running the logical router

A vSphere administrator deployed an NSX Edge Load Balancer in High Availability (HA) mode. What happens in the event the Load Balancer has a failure?


Options are :

  • The secondary NSX Edge Load Balancer assumes the role of primary. Existing Flows will need to have their connections reestablished.
  • HA will start the NSX Edge Load Balancer on another ESXi host in the cluster. All existing flows will need to have their connections reestablished.
  • The secondary NSX Edge Load Balancer assumes the role of primary. The NSX Controller caches existing flows and hands them to the Load Balancer when it is back up.
  • HA will start the NSX Edge Load Balancer on another ESXi host in the cluster. The NSX Controller caches existing flows and hands them to the Load Balancer when it is back up.

Answer :The secondary NSX Edge Load Balancer assumes the role of primary. Existing Flows will need to have their connections reestablished.

A company wants to deploy VMware NSX for vSphere with no PIM and no IGMP configured in the underlying physical network. This company also must ensure that non-ESXi hosts do not receive broadcast, unknown unicast or multicast (BUM) traffic. Which replication mode should the logical switches be deployed with?


Options are :

  • Unicast Replication Mode
  • Transport Zone Mode
  • Hybrid Replication Mode
  • Multicast Replication Mode

Answer :Unicast Replication Mode

VCPC510 VMware Certified Professional on VCloud Exam Set 7

A vSphere administrator wants to setup an NSX Edge Service Gateway to provide traveling employees secure access to company servers located in specific network segments within the corporate Data Center. The remote access solution must provide a method to authenticate the users. Which two methods can be used with the NSX Edge Service Gateway? (Choose two.)


Options are :

  • Active Directory
  • MS-CHAP
  • RSA Secure ID
  • TACACS+

Answer :Active Directory RSA Secure ID

What is the minimum number of vSphere Distributed Switches (vDS) that must be configured before deploying VMware NSX for vSphere?


Options are :

  • 1
  • 4
  • 0
  • 2

Answer :1

Which option is VMware's best practice for the deployment of NSX Manager and NSX Controller components?


Options are :

  • Deploy the NSX Manager component to a management cluster and the NSX Controller components to a resource cluster.
  • Deploy the NSX Manager and NSX Controller components to a resource cluster.
  • Deploy the NSX Manager and NSX Controller components to a management cluster.
  • Deploy the NSX Controller components to a management cluster and the NSX Manager component to a resource cluster.

Answer :Deploy the NSX Manager and NSX Controller components to a management cluster.

2V0-641 VMware Certified Professional 6 Network Exam Set 5

What is the earliest version of vCloud Network and Security (vCNS) that can be upgraded to VMware NSX for vSphere 6.0?


Options are :

  • vCNS 5.1
  • vCNS 5.5
  • vCNS 5.0
  • vCNS 6.0

Answer :vCNS 5.5

What is a prerequisite to deploying a Logical Switch?


Options are :

  • Create a port group on the vSphere Distributed Switch.
  • Configure the VXLAN Tunnel Endpoint's (VTEP) VLAN on the trunk in the physical switches.
  • Prepare and configure VTEPs on the ESXi hosts using the vSphere Web Client.
  • Add the ESXi hosts to the same vSphere Distributed Switch.

Answer :Configure the VXLAN Tunnel Endpoint's (VTEP) VLAN on the trunk in the physical switches.

Which is not a prerequisite to upgrade vCloud Network and Security Virtual Wires to Logical Switches?


Options are :

  • The NSX Manager has been configured with the same IP as the vCloud Network and Security Manager.
  • vCloud Network and Security Manager has been upgraded to NSX Manager.
  • NSX Controllers have been deployed.
  • vShield Data Security has been uninstalled

Answer :NSX Controllers have been deployed.

VCPVCD510 VMware Certified Professional 5 IaaS Exam Set 2

A company hosts an internal website on multiple virtual machines attached to a Logical Switch with VNI 7321. A Distributed Router serves as the virtual machines' default gateway. When a user resolves the URL for the website, the internal DNS server responds with the IP address of one of the virtual machine's IP addresses in a round robin fashion. This approach results in some virtual machines having a much higher number of user sessions than others. The company wants to deploy a NSX Edge Service Load Balancer to improve on this situation. Which distribution method can be configured on the NSX Edge Load Balancer to meet the company's needs?


Options are :

  • URI
  • IP_HASH
  • LEAST_LOAD
  • LEAST_CONN

Answer :LEAST_CONN

A vSphere administrator wants to add a VLAN LIF to a Distributed Router. What must the vSphere administrator do for the VLAN LIF to be added successfully?


Options are :

  • The vSphere administrator must assign a VLAN number to the Distributed Router that the Logical Switch connects to
  • The vSphere administrator must assign a VLAN number to the uplink on the distributed switch that the VLAN LIF connects to.
  • The vSphere administrator must assign a VLAN number to the Logical Switch that the Distributed Router connects to.
  • The vSphere administrator must assign a VLAN number to the distributed portgroup that the VLAN LIF connects to.

Answer :The vSphere administrator must assign a VLAN number to the distributed portgroup that the VLAN LIF connects to.

An organization has a vSphere environment that utilizes Etherchannel for the physical network adapters on deployed ESXi hosts. Which vSphere Distributed Switch feature will simplify PreExecution Environment (PXE) deployments of ESXi hosts in this environment?


Options are :

  • DSCP marking
  • LACP
  • Traffic filtering
  • LLDP

Answer :LACP

2V0-641 VMware Certified Professional 6 Network Virtual Exam Set 1

A vSphere administrator deploys the NSX Edge Load Balancer in Inline mode. Which is not a requirement for the Load Balancer to operate correctly?


Options are :

  • Point the virtual machines in the Server Pool to the Load Balancer as their default gateway.
  • Connect the Load Balancer directly to the same subnet as the VMs that are part of the Server Pool.
  • Perform Destination NAT on the traffic from the clients.
  • Perform Source NAT on the traffic from the clients

Answer :Perform Source NAT on the traffic from the clients

How many Logical Interfaces can be assigned to a single Distributed Router instance?


Options are :

  • 1200
  • 12
  • 1000
  • 1

Answer :1000

A vSphere administrator added a new interface to a Distributed Router with a subnet of 172.16.10.0/24 and wants to make this subnet reachable to the rest of the network. How can the vSphere administrator achieve this?


Options are :

  • Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and redistribute from OSPF the 172.16.10.0/24 subnet.
  • Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and redistribute into OSPF the 172.16.10.0/24 subnet.
  • Enable OSPF on the Distributed Router. Configure the uplink interface in the normal area and the new interface with the subnet 172.16.10.0/24 in a Backbone area.
  • Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and the new interface with the subnet 172.16.10.0/24 in a normal area.

Answer :Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and the new interface with the subnet 172.16.10.0/24 in a normal area.

2V0-641 VMware Certified Professional 6 Network Exam Set 3

Which two components are required to enable layer 2 bridging? (Choose two.)


Options are :

  • Deployed Logical Switch.
  • VLAN trunk configured on logical switch.
  • Deployed Logical Router
  • Distributed firewall rule to allow layer 2 traffic in the bridge

Answer :Deployed Logical Router Distributed firewall rule to allow layer 2 traffic in the bridge

A company has augmented its Data Center infrastructure by using vCloud Hybrid Service during peak hours. The company wants to extend their existing subnets into the cloud while workloads retain their existing IP addresses. The virtual machines in these subnets use an NSX Edge Gateway as their default gateway. Which solution should this company use?


Options are :

  • IPSec VPN
  • MPLS VPN
  • Layer 2 VPN
  • SSL VPN

Answer :Layer 2 VPN

Which statement is true regarding an NSX Edge gateway device configured with a DNS Server?


Options are :

  • The NSX Edge configuration will override the DNS Server configured by the NSX Manager.
  • The NSX Edge registers the DNS Server with the NSX Controller.
  • The NSX Edge will forward all DNS requests from virtual machines sent to it to the DNS Serve
  • The NSX Edge periodically synchronizes its DNS tables with the primary DNS Server.

Answer :The NSX Edge will forward all DNS requests from virtual machines sent to it to the DNS Serve

VCAD510 VMware Certified Associate Data Center Virtual Test Set 3

Which statement is correct when upgrading vShield Data Security to NSX Data Security?


Options are :

  • The vCloud Network and Security Virtual Wires must have been upgraded
  • NSX Data Security does not support a direct upgrade
  • NSX Controller must be deployed before the upgrade.
  • vCould Network and Security must be at least version 5.1 before starting the upgrade.

Answer :NSX Data Security does not support a direct upgrade

A company wants to deploy VMware NSX for vSphere and ensure the least amount of bandwidth consumption in the underlying physical architecture. Which replication mode should the logical switches be deployed with?


Options are :

  • vSphere Replication Mode
  • Unicast Replication Mode
  • Multicast Replication Mode
  • Hybrid Replication Mode

Answer :Multicast Replication Mode

A new ESXi 5.5 host is deployed in a vSphere environment with VMware NSX for vSphere. How can the host be prepared for VMware NSX for vSphere?


Options are :

  • By creating a new VMkernel port in the host from the Host and Clusters inventory view in vSphere Web Client.
  • By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution.
  • By leveraging VMware Update Manager to install the new NSX for vSphere VIBs into each of the hosts.
  • By entering the ESXi 5.5 management IP address in the NSX Controllers so the VIBs can be installed.

Answer :By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution.

2V0-641 VMware Certified Professional 6 Network Exam Set 5

Which two statements are true regarding Layer 2 VPNs? (Choose two.)


Options are :

  • Layer 2 VPNs require the two VPN endpoints be in the same Layer 2 segment.
  • The Distributed Router can form a Layer 2 VPN to another Distributed Router or NSX Edge Service Gateway
  • The NSX Edge Service Gateway can form a Layer 2 VPN with a standards-compliant physical appliance.
  • Layer 2 VPNs are used to securely extend Ethernet segments over an untrusted medium.

Answer :The NSX Edge Service Gateway can form a Layer 2 VPN with a standards-compliant physical appliance. Layer 2 VPNs are used to securely extend Ethernet segments over an untrusted medium.

After consulting with the network team, it is decided that Transport Zones will be configured with Unicast Replication Mode for a new NSX for vSphere deployment. Which statement is true regarding the function of the VXLAN Tunnel End Points (VTEPs)?


Options are :

  • The VTEPs will switch to Multicast Replication Mode for those VTEPs to which multicast path discovery is successful.
  • The VTEPs will send unicast frames to all local VTEPs and remote proxies in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.
  • The VTEPs will send unicast frames to the NSX Controllers when the VTEPs do not have a MAC address in the MAC table.
  • The VTEPs will send multicast frames to all other VTEPs in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.

Answer :The VTEPs will send unicast frames to all local VTEPs and remote proxies in the Transport Zone when the VTEPs do not have a MAC address in the MAC table.

Which two options are use cases of Layer 2 bridging in NSX for vSphere? (Choose two.)


Options are :

  • Extend the network security to physical devices in the physical network by use of the Distributed Firewall.
  • Extend physical services to Virtual Machines in virtual network.
  • Allow clustering of multiple NSX Managers in a single vCenter Server instance
  • Allow physical devices in the physical network to use the NSX Edge Gateway as a default router.

Answer :Extend physical services to Virtual Machines in virtual network. Allow physical devices in the physical network to use the NSX Edge Gateway as a default router.

2V0-641 VMware Certified Professional 6 Network Exam Set 1

You want to use an existing NSX Manager to extend logical networks to the ESXi hosts of a new cluster. What should you do?


Options are :

  • On the Installation > Logical Network Preparation page of the Networking & Security section of the vSphere Web Client, create a new Transport Zone for the new cluster.
  • On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for the new cluster.
  • On the Installation > Management page of the Networking & Security section of the vSphere Web Client, click the green plus sign to deploy a new NSX controller node to the new cluster.
  • On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for each of the new hosts

Answer :On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for the new cluster.

What is the minimum MTU size recommended by VMware for the physical network when deploying NSX for vSphere?


Options are :

  • 2148
  • 1550
  • 1600
  • 9000

Answer :1600

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions