EMT Practice Test

1. Question Content...

---

Question1: An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.
Which failover detection protocol must be used to meet this requirement?

Question2: Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Question3: Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

Question4: What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)

Question5: Which statement Is true regarding the audit user account? (Choose two.)

Question6: An NSX administrator has configured a KVM hypervisor as a transport node. Which kernel module on KVM implements a N-VDS?

Question7: The NSX Control Plane is responsible for which two functions? (Choose two.)

Question8: Which CLI command is used to disable SSH timeout on NSX Manger and NSX Edge nodes?

Question9: What are two supported N-VDS modes? (Choose two.)

Question10: An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy.
Which profile allows the administrator to configure the NIC Teaming policy as Failover Order?

Question11: What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN- backed logical switch?

Question12: When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hair pinning?

Question13: An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

Question14: Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

Question15: An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged. What could cause this issue?

Question16: An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

Question17: Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

Question18: Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

Question19: An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.
In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

Question20: An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?

Question21: An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time.
Which CLI command disables the nsxcli time out value on NSX Manager?

Question22: A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to secure a simple application composed of web, app, and database tiers.
The naming convention will be:
* WKS-WEB-SRV-XXX
* WKY-APP-SRR-XXX
* WKI-DB-SRR-XXX
What is the optimal way to group them in order to enforce security policies from NSX-T Data Center?

Question23: What are three characteristics of a transport zone? (Choose three.)

Question24: Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?

Question25: Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

Question26: Which Network and Security virtualization solution provides network hybridity and mobility?

Question27: A security administrator needs to configure a firewall rule based on the domain name of a specific application. Which field in a distributed firewall rule does the administrator configure?

Question28: Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)

Question29: Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

Question30: Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

Question31: Which CLI command shows syslog on NSX Manager?