2V0-642 | VMware 2V0-642 Free Practice Questions 2021

NEW QUESTION 1
An NSX administrator is creating a filter as shown below.

What would be the purpose of creating a filter?

• A. To quickly add a new rule.
• B. To temporarily filter traffic.
• C. To quickly remove a rule.
• D. To quickly identify rules.

Answer: D

NEW QUESTION 2
A network administrator has been tasked with deploying a 3-tier application across two data centers. Tier-1 and tier-2 will be located in Datacenter-A and tier-3 will be located in Datacenter-B.
Which NSX components are needed to make this deployment functional?

• A. A universal transport zone deployed with a universal distributedlogical router (UDLR), a universal logical switch and two local logical switches connected to the UDLR.
• B. A universal transport zone deployed with a universal distributed logical router (UDLR), two universal logical switches and a single logical switch connected to the UDLR.
• C. A universal transport zone deployed with a universal distributed logical router (UDLR) and three universal logical switches connected to the UDLR.
• D. A universal transport zone, a universal distributed logical router (UDLR) and three local switches in each data center connected to the UDLR

Answer: A

NEW QUESTION 3
How is high availability of the NSX Edge Gateway accomplished?

• A. HA Application Monitoring on the Edge Gateway sends a heartbeat to the ESXi host.
• B. VMware Tools on the Edge Gateway sends a heartbeat to the ESXi host.
• C. The Edge appliance sends a heartbeat through an uplink interface.
• D. The Edge appliance sends a heartbeat through an internal interface.

Answer: D

Explanation: Referencehttps://www.zettagrid.com/faqs/nsx-charging/

NEW QUESTION 4
With which Application Profile types would the Insert X-Forwarded-for HTTP header option be used?

• A. TC
• B. UDP
• C. HTTP, UDP
• D. HTTP, HTTPS
• E. HTTP, TCP

Answer: C

NEW QUESTION 5
Which NSX routing protocols offers the most flexible policy control when peering with the physical environment?

• A. BGP
• B. OSPF
• C. ISIS
• D. EIGRP

Answer: A

Explanation: Both the NSX DLR and the NSX ESG support OSPF and BGP. The primary difference between these routing protocols is the level of control on routes propagation and attribute manipulations they allow, with BGP being the more flexible of the two. The concept of an Autonomous System (AS), defined as a group of routers under the same administrative domain, comes also into play. Routing inside an AS is usually done via an IGP (e.g., OSPF) while routing between Autonomous Systems is done via an EGP (e.g., BGP).

NEW QUESTION 6
When creating a new security policy how is the default weight determined?

• A. The default weight is equal to the highest defined weight plus 1000.
• B. The default weight is incremented by 100, starting at 0.
• C. The default weight is equal to the highest defined weight minus 1000
• D. The default weight is equal to the highest defined weight

Answer: A

Explanation: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-607C399F-0D11-4B95- 90DA-A6E17E8C906E.html

NEW QUESTION 7
Which three NSX services are available for synchronization in a Cross-vCenter implementation? (Choose three.)

• A. Spoofguard
• B. Distributed Firewall
• C. Edge Firewall
• D. Logical Switch
• E. Transport Zone

Answer: BDE

Explanation: Referencehttps://pubs.vmware.com/NSX- 62/topic/com.vmware.ICbase/PDF/nsx_62_cross_vc_install.pdf

NEW QUESTION 8
What is one of the benefits of using logical switches in an NSX environment?

• A. IP subnet definitions can be migrated into logical switches using the NSX Manager.
• B. Quality of Service parameters are automatically configured in a logical switch
• C. The physical infrastructure is responsible for maintaining the logical switch broadcast tables
• D. The physical infrastructure is not constrained by MAC/FIB table limits.

Answer: D

Explanation: From <https://pubs.vmware.com/NSX-6/topic/com.vmware.nsx.admin.doc/GUID-DF57C441-CE9A-4138-9639-1658DBE65D48.html>

NEW QUESTION 9
An administrator has been asked to provide single failure redundancy. What is the minimum supported number of NSX Controllers needed to meet this requirement?

• A. 2
• B. 3
• C. 1
• D. 5

Answer: B

Explanation: Referencehttp://www.vmwarearena.com/vmware-nsx-installation-part-4-deploying-nsx- controller/

NEW QUESTION 10
When specifying a source for a security rule, what is the purpose of the Negates Source check box?

• A. IfNegate Sourceis selected, the rule is sent to only the objects identified under object type.
• B. IfNegate Sourceis selected, the rule is applied to traffic coming from all sources except for the source identified under the object type.
• C. IfNegate Sourceis not selected, the rule is applied to traffic comingfrom all sources except for the source identified under the object type.
• D. ifNegate Sourceis not selected, the rule is sent to only the objects identified under the object type.

Answer: B

Explanation: Reference: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-C7A0093A-4AFA-47EC- 9187-778BDDAD1C65.html

NEW QUESTION 11
Which highly available Edge design would provide high bandwidth and isolation to four application networks?

• A. Four Distributed Routers (standalone mode) with one Edge Services Gateway in Active/Standby mode.
• B. One Edge Services Gateway in ECMP mode.
• C. One distributed Router (in HA mode) withtwo Edge Services Gateways in ECMP mode.
• D. Four Distributed Routers (in HA mode) with one Edge Services Gateway in Active/Standby mode.

Answer: C

NEW QUESTION 12
What is the effect on NSX Edge virtual machines when NSX Edge high availability is configured but vSphere HA is NOT configured?

• A. The active-standby NSX Edge pair will survive one failur
• B. However, the virtual machines must reside on the same host to prevent NSX Edge availability from being compromised.
• C. The active-standby NSX Edge HA pair will survive multiple failures.
• D. The active-standby NSX Edge HA pair will survive one failur
• E. However, if another failure happens before the second Edge appliance is restored, NSX Edge availability can be compromised.
• F. The active-standby NSX Edge HA pair will survive two failure
• G. However, the virtual machines must reside on two different hosts.

Answer: C

NEW QUESTION 13
A new ESXi host was added to an existing cluster, prepared for NSX and enabled for Distributed Firewall, logical switching and Logical Routing.
The Most Preparation page in the NSX Web Ul shows this new host is in Ready state and the Logical Network Preparation tab displays the VXLAN VTEPs are correctly configured.
Virtual machines on the new host can communicate with each other but CANNOT communicate with VMs running on other hosts and connected to the same Logical Switch.
Which condition below will result in the described behavior on the new host?

• A. NSX Edge is powered off
• B. Host Agent (vpxa) to vCenter is disconnected
• C. Rabbitmq message bus connection (vsfwd) to NSX Manager is down
• D. Network Control Plane Agent (netcpa) connection to the controller is down

Answer: B

NEW QUESTION 14
Which two functions are provided by VMkernel ports? (Choose two)

• A. VXLAN Port Configuration
• B. vSphere vMotion
• C. ESXi Host Management
• D. 802.1Q VLAN tagging

Answer: BC

Explanation: Referencehttp://www.pearsonitcertification.com/articles/article.aspx?p=2190191&seqNum= 10

NEW QUESTION 15
Which NSX component can validate that security policies at your organization are being enforced correctly?

• A. Activity Monitoring
• B. Flow Monitoring
• C. ERSPAN
• D. Distributed firewalls

Answer: A

NEW QUESTION 16
What configuration change do you need to make to allow this connection?

• A. Change Applied On to “Uplink”
• B. Change the Translated Port/Range to “rdp”
• C. Swap the Original IP/Range and Translated IP/Range IP Addresses
• D. Change the Protocol to “any”

Answer: C

NEW QUESTION 17
An application requires load balancing with minimal impact to network performance. An NSX administrator is deploying a load balancer to meet the stated requirements.
Which load balancing engine should be deployed?

• A. Layer 5
• B. Layer 6
• C. Layer 7
• D. Layer 4

Answer: D

Explanation: https://www.icc-usa.com/resources/vmw-nsx-network-virtualization-design-guide.pdf

NEW QUESTION 18
What is the function of NSX Data Security?

• A. Prevents sensitive data in your virtualized environment from being copied
• B. Prevents sensitive data in your virtualized environment from being modified
• C. Identifies sensitive data in your virtualized environment based upon regulation security policies
• D. Identifies sensitive data in your virtualized environment based upon regulation violation reports

Answer: D

NEW QUESTION 19
You have deployed an Edge Services Gateway with the following interface configuration:

Your customer has requested that you provide the ability to use Remote Desktop Protocol to log into a virtual machine that has a tenant IP address of 192.168.7.21 using the provider IP address 192.168.100.4. You have performed the following configuration however, you cannot RDP into the virtual machine.

What configuration change do you need to make to allow this connection?

• A. ChangeApplied Onto “Uplink”
• B. Change theProtocolto “any”.
• C. Change theTranslated Port/Rangeto “rdp”.
• D. Swap theOriginal IP/RangeandTranslated IP/RangeIP Addresses.

Answer: A