EMT Practice Test

1. Question Content...

---

Question1: What is the VMware recommended way to deploy a virtual NSX Edge Node?

Question2: Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

Question3: Sort the rule processing steps of the Distributed Firewall. Order responses from left to right.

Question4: When collecting support bundles through NSX Manager, which files should be excluded for potentially containing sensitive information?

Question5: What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

Question6: A company security policy requires all users to log Into applications using a centralized authentication system.
Which two authentication, authorization, and accounting (AAA) systems are available when Integrating NSX with VMware Identity Manager? (Choose two.)

Question7: Which of the two following characteristics about NAT64 are true? (Choose two.)

Question8: A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers.
The naming convention will be:
* WKS-WEB-SRV-XXX
* WKY-APP-SRR-XXX
* WKI-DB-SRR-XXX
What is the optimal way to group them to enforce security policies from NSX?

Question9: Which NSX CLI command is used to change the authentication policy for local users?

Question10: Which two of the following will be used for Ingress traffic on the Edge node supporting a Single Tier topology? (Choose two.)

Question11: Which two statements are true for IPSec VPN? (Choose two.)

Question12: Which NSX feature can be leveraged to achieve consistent policy configuration and simplicity across sites?

Question13: Which two statements are true about IDS Signatures? (Choose two.)

Question14: Refer to the exhibit.
An administrator configured NSX Advanced Load Balancer to redistribute the traffic between the web servers. However, requests are sent to only one server Which of the following pool configuration settings needs to be adjusted to resolve the problem? Mark the correct answer by clicking on the image.

Question15: Which statement is true about an alarm in a Suppressed state?

Question16: An administrator needs to download the support bundle for NSX Manager. Where does the administrator download the log bundle from?

Question17: An NSX administrator Is treating a NAT rule on a Tler-0 Gateway configured In active-standby high availability mode. Which two NAT rule types are supported for this configuration? (Choose two.)

Question18: Refer to the exhibit.
An administrator configured NSX Advanced Load Balancer to load balance the production web server traffic, but the end users are unable to access the production website by using the VIP address.
Which of the following Tier-1 gateway route advertisement settings needs to be enabled to resolve the problem? Mark the correct answer by clicking on the image.

Question19: Which VMware GUI tool is used to identify problems in a physical network?

Question20: Which is an advantages of a L2 VPN In an NSX 4.x environment?

Question21: What can the administrator use to identify overlay segments in an NSX environment if troubleshooting is required?

Question22: Refer to the exhibits.
Drag and drop the NSX graphic element icons on the left found in an NSX Intelligence visualization graph to Its correct description on the right.

Question23: Which two are requirements for FQDN Analysis? (Choose two.)

Question24: Which of the following exist only on Tler-1 Gateway firewall configurations and not on Tier-0?

Question25: An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events. Which message ID (msgld) should be used in the syslog export configuration command as a filler?

Question26: Which three of the following describe the Border Gateway Routing Protocol (BGP) configuration on a Tier-0 Gateway? (Choose three.)

Question27: Which CLI command shows syslog on NSX Manager?

Question28: Refer to the exhibit.
An administrator would like to change the private IP address of the NAT VM I72.l6.101.il to a public address of 80.80.80.1 as the packets leave the NAT-Segment network.
Which type of NAT solution should be implemented to achieve this?

Question29: What should an NSX administrator check to verify that VMware Identity Manager Integration Is successful?

Question30: Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?

Question31: What needs to be configured on a Tler-0 Gateway lo make NSX Edge Services available to a VM on a VLAN-backed logical switch?