EMT Practice Test

1. Question Content...

---

Question1: When a stateful service is enabled for the first lime on a Tier-0 Gateway, what happens on the NSX Edge node'

Question2: Which CLI command is used for packet capture on the ESXi Node?

Question3: Refer to the exhibit.
An administrator configured NSX Advanced Load Balancer to redistribute the traffic between the web servers.
However, requests are sent to only one server
Which of the following pool configuration settings needs to be adjusted to resolve the problem? Mark the correct answer by clicking on the image.

Question4: What are two supported host switch modes? (Choose two.)

Question5: An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

Question6: An administrator is configuring service insertion for Network Introspection.
Which two places can the Network Introspection be configured? (Choose two.)

Question7: Which VPN type must be configured before enabling a L2VPN?

Question8: Which two of the following are used to configure Distributed Firewall on VDS? (Choose two.)

Question9: An NSX administrator is creating a Tier-1 Gateway configured In Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original tailed node to become the Active node upon recovery.
Which failover policy meets this requirement?

Question10: Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the Geneve protocol on the ESXi transport node? (Choose two.)

Question11: An administrator has connected two virtual machines on the same overlay segment. Ping between both virtual machines is successful. What type of network boundary does this represent?

Question12: A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

Question13: A company security policy requires all users to log Into applications using a centralized authentication system.
Which two authentication, authorization, and accounting (AAA) systems are available when Integrating NSX with VMware Identity Manager? (Choose two.)

Question14: An administrator needs to download the support bundle for NSX Manager. Where does the administrator download the log bundle from?

Question15: Which three of the following describe the Border Gateway Routing Protocol (BGP) configuration on a Tier-0 Gateway? (Choose three.)

Question16: An NSX administrator wants to create a Tler-0 Gateway to support equal cost multi-path (ECMP) routing.
Which failover detection protocol must be used to meet this requirement?

Question17: Which of the two following characteristics about NAT64 are true? (Choose two.)

Question18: Which two are requirements for FQDN Analysis? (Choose two.)

Question19: What needs to be configured on a Tler-0 Gateway lo make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Question20: An NSX administrator Is treating a NAT rule on a Tler-0 Gateway configured In active-standby high availability mode. Which two NAT rule types are supported for this configuration? (Choose two.)

Question21: Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

Question22: Which three data collection sources are used by NSX Network Detection and Response to create correlations/Intrusion campaigns? (Choose three.)

Question23: Where is the insertion point for East-West network introspection?

Question24: Which is an advantages of a L2 VPN In an NSX 4.x environment?

Question25: What can the administrator use to identify overlay segments in an NSX environment if troubleshooting is required?

Question26: Which two statements are true for IPSec VPN? (Choose two.)

Question27: Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI Is inaccessible?

Question28: What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

Question29: When running nsxcli on an ESXi host, which command will show the Replication mode?

Question30:

Question31: Refer to the exhibit.
Which two items must be configured to enable OSPF for the Tler-0 Gateway in the Image? Mark your answers by clicking twice on the image.

Question32: Which troubleshooting step will resolve an error with code 1001 during the configuration of a time-based firewall rule?

Question33: Which two are supported by L2 VPN clients? (Choose two.)

Question34: In which VPN type are the Virtual Tunnel interfaces (VTI) used?

Question35: An administrator has been tasked with implementing the SSL certificates for the NSX Manager Cluster VIP.
Which is the correct way to implement this change?

Question36: What needs to be configured on a Tler-0 Gateway lo make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Question37: When collecting support bundles through NSX Manager, which files should be excluded for potentially containing sensitive information?

Question38: Which two statements are true about IDS Signatures? (Choose two.)

Question39: Which two statements are correct about East-West Malware Prevention? (Choose two.)

Question40: Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

Question41: Which steps are required to activate Malware Prevention on the NSX Application Platform?

Question42: Which table on an ESXi host is used to determine the location of a particular workload for a frame-forwarding decision?

Question43: An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

Question44: Which two of the following features are supported for the Standard NSX Application Platform Deployment?
(Choose two.)

Question45: An NSX administrator has deployed a single NSX Manager node and will be adding two additional nodes to form a 3-node NSX Management Cluster for a production environment. The administrator will deploy these two additional nodes and Cluster VIP using the NSX UI.
What two are the prerequisites for this configuration? (Choose two.)

Question46: The security administrator turns on logging for a firewall rule.
Where is the log stored on an ESXi transport node?

Question47: Which Is the only supported mode In NSX Global Manager when using Federation?

Question48: Which of the following settings must be configured in an NSX environment before enabling stateful active-active SNAT?

Question49: Which three DHCP Services are supported by NSX? (Choose three.)