2V0-642 | Free 2V0-642 Dumps 2021

NEW QUESTION 1
Two virtual machines are unable to communicate with one another. The virtual machines are in the same distributed port group, but reside on different ESXi hosts.
What are two possible causes for the communications issue? (Choose two )

• A. Basic multicast filtering mode has been disabled on the ESXi hosts.
• B. No physical NICs are assigned as active or standby uplinks in a NIC team.
• C. The standby links are configured on different VLANs, preventing heartbeats from reaching each VM.
• D. The physical NICs assigned as active or standby uplinks reside on different VLANs on the physical switch.

Answer: BD

Explanation: ✑ uk.co.certification.simulator.questionpool.PList@170647b0
From <https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.troubleshooting.doc/GUID-5324A0E4-AA7B-40CC- A975-D45328B5C434.html>

NEW QUESTION 2
Which two NSX Data Security roles could be used to create security policies? (Choose two)

• A. Auditor
• B. NSX Administrator
• C. Enterprise Administrator
• D. Security Administrator

Answer: BD

Explanation: https://pubs.vmware.com/NSX-6/index.jsp#com.vmware.nsx.admin.doc/GUID-66DA0370-C241-40BD-A987- 98597564EEDF.html

NEW QUESTION 3
How many vCenter Server environments can a single NSX Manager serve at one time?

• A. 2000 vCenter Servers
• B. 10 vCenier Servers
• C. 1 vCenler Server
• D. 2 vCenter Servers

Answer: C

Explanation: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.install.doc%2FGUID-CFB0DC96-C329-490E- B2A9-D92C5704E853.html

NEW QUESTION 4
An NSX administrator notices an error during the initial configuration of the SSO lookup service, as shown:

The administrator pulls up the lookup service status, which displays Disconnected.

What step should be performed to resolve this issue?

• A. Change the Port number from 7444 to 443
• B. Change theSSO Administrator User Name
• C. Regenerate the SSL Certificate and reboot the NSX Manager
• D. Use IP address versus the DNS name in theLookup Service

Answer: C

NEW QUESTION 5
From the NSX Edge CLI, which command would show VIP statistics?

• A. show service loadbalancer pool
• B. show service loadbalancer virtual
• C. show service loadbalancer monitor
• D. show service loadbalancer

Answer: B

Explanation: https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2122708

NEW QUESTION 6
A user has configured a specific distributed firewall rule preventing VM-A (172.16.10.11) on the Web-Logical Switch to communicate to VM-B (172.16.20.11), running on the same switch. After the changes, the user is still able to communicated to VM-A from VM-B.
To debug this anomaly, the user will need to obtain logs from which component?

• A. The Distributed Logical Router
• B. The Edge Services Gateway
• C. The appropriate ESXi Hosts(s)
• D. The appropriate NSX Controller(s)

Answer: C

NEW QUESTION 7
Where can firewall rules be applied on the NSX Edge Services Gateway?

• A. Rules can be applied on the uplink interface only.
• B. Rules can be applied on either the uplink interface or internal interface.
• C. Rules can be on either the uplink, internal, or management interfaces.
• D. Rules can be applied on the management and uplink interfaces only.

Answer: B

NEW QUESTION 8
Which is required to support unicast mode in NSX?

• A. Hardware VTEP
• B. Distributed Logical Router
• C. NSX Controller
• D. NSX Edge

Answer: C

Explanation: Referencehttp://www.virtually-limitless.com/vcix-nv-study-guide/create-transport-zones-in- nsx/

NEW QUESTION 9
An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and register with it,. Which additional step is required before the distributed firewall is functional?

• A. Configure VTEPs on each host
• B. Perform host preparation on the cluster
• C. Deploy the NSX Controller cluster D Enable Guest Introspection

Answer: C

NEW QUESTION 10
The user at 192.168.150.10 can reach the physical router but CANNOT reach edge-2 or any virtual machines.

What routing change would resolve the issue?

• A. EnableDefault Originateon edge-2 for OSPF.
• B. Configure static routes on the physical router.
• C. Enable route redistribution on edge-2 between both routing protocols.
• D. EnableDefault Originateon edge-2 for BGP

Answer: D

NEW QUESTION 11
CORRECT TEXT
Winch virtual machine does VMware recommend be manually excluded from the Distributed Firewall? A. NSX Manager

• A. vCenter Server
• B. Microsoft SQL Server
• C. vRealize Automation Appliance

Answer: B

Explanation: Referencehttps://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-C3DDFBCE-A51A-40B2- BFE1-E549F2B770F7.html

NEW QUESTION 12
In a Cross-vCenter NSX deployment, what are two requirements that must be met in order for an administrator to deploy both universal logical switches and local logical switches within the same vCenter instance? (Choose two )

• A. A universal distributed logical router must be created
• B. A logical distributed router must be created
• C. A universal transport zone must be created.
• D. A local transport zone must be created

Answer: CD

Explanation: https://docs.vmware.com/en/VMware-NSX-for-vSphere/6.3/com.vmware.nsx.cross-vcenter-install.doc/GUID-7F76BB1E-7E36-4E9D- B8C2-798100E62192.html

NEW QUESTION 13
What is a requirement of NSX Data Security?

• A. NSX manager must be configured for Active Directory integration
• B. The Global Flow Collection Status must be set to Enabled
• C. Guest Introspection must be installed on the cluster
• D. AN IP Pool must be created.

Answer: C

Explanation: Referencehttp://pubs.vmware.com/NSX-61/index.jsp?topic=%2Fcom.vmware.nsx.install.doc%2FGUID-62B22E0C-ABAC-42D8-93AA-BDFCD0A43FEA.html

NEW QUESTION 14
If the Applied To scope is set to Distributed Firewall, which virtual machines with have the firewall rule applied?

• A. Only the virtual machines defined in the Source field.
• B. Only virtual machines defined in the Destination field.
• C. All virtual machines in a Datacenter.
• D. All virtual machines on prepared hosts.

Answer: C

Explanation: Referencehttp://www.routetocloud.com/2015/04/nsx-distributed-firewall-deep-dive/

NEW QUESTION 15
Which type of VPN should be configured to ensure application mobility data centers?

• A. Application VPN
• B. L2VPN
• C. IPSec VPN
• D. SSL VPN-Plus

Answer: B

Explanation: Referencehttps://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/nsx/vmw-nsx-network-virtualization-design-guide.pdf(page 23)

NEW QUESTION 16
An NSX environment requires physical NIC redundancy for all dvPortGroups when connecting hosts to the physical network. There are two 10Gb NIC's per host.
Which two teaming methods should be used to ensure both links are utilized simultaneously? (Choose two )

• A. Virtual Port Channel
• B. LACP Port-Channel
• C. Static Port-Channel
• D. Explicit Failover Order

Answer: AB

NEW QUESTION 17
A workload was attached to a logical switch port group in Compute Cluster 1. Users are complaining that I hey can communicate with other workloads on that port group in the cluster, but not with other workloads on different networks.

What is the most probable cause?

• A. The distributed firewall has a default rule set to deny all
• B. The Distributed Logical Router was not configured on Compute Cluster 1
• C. Compute Cluster 1 is NOT a member of the Transport Zone
• D. An NSX Edge has NOT been deployed into Compute Cluster 1

Answer: A

NEW QUESTION 18
Which two statements are true about NSX Data Security support? (Choose two )

• A. It supports HIPAA and PCI-DSS compliance policies as well as U.
• B. Driver License and Social Security numbers.
• C. It supports both Windows and Linux-based virtual machines.
• D. It only supports HIPAA and PCI-DSS compliance policies.
• E. It only supports Windows-based virtual machines.

Answer: BC

Explanation: Referencehttps://www.vmware.com/products/nsx.html

NEW QUESTION 19
A virtualized application needs access to a physical database. Both servers are on the 172.168.3.0/24 subnet. NSX has been deployed across the entire virtual environment.
What method can be used to allow access between the servers?

• A. Configure a DLR with an L2 bridge instance for 172.168.3.0/24 VXLAN to VLAN traffic.
• B. Route 172.168.3.0/24 to the NSX Edge where the logical switch of the applicationexists.
• C. Configure a NAT rule for 172.177.13/024 for the database physical router.
• D. Configure the logical switch to bridge 172.168.3.0/24 to the physical router of the database.

Answer: D