EMT Practice Test

1. Question Content...

---

Question1: An administrator has been tasked with implementing the SSL certificates for the NSX Manager Cluster VIP.
Which is the correct way to implement this change?

Question2: Which two statements describe the characteristics of an Edge Cluster in NSX? (Choose two.)

Question3: When running nsxcli on an ESXi host, which command will show the Replication mode?

Question4: Refer to the exhibit.
Which two items must be configured to enable OSPF for the Tler-0 Gateway in the Image? Mark your answers by clicking twice on the image.

Question5: Where is the insertion point for East-West network introspection?

Question6: Where does an administrator configure the VLANs used In VRF Lite? (Choose two.)

Question7: Which two statements are true for IPSec VPN? (Choose two.)

Question8: A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

Question9: Which command Is used to test management connectivity from a transport node to NSX Manager?

Question10: When a stateful service is enabled for the first lime on a Tier-0 Gateway, what happens on the NSX Edge node'

Question11: Sort the rule processing steps of the Distributed Firewall. Order responses from left to right.

Question12: Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

Question13: When a stateful service is enabled for the first lime on a Tier-0 Gateway, what happens on the NSX Edge node'

Question14: What are two supported host switch modes? (Choose two.)

Question15: An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

Question16: An NSX administrator would like to create an L2 segment with the following requirements:
* L2 domain should not exist on the physical switches.
* East/West communication must be maximized as much as possible.
Which type of segment must the administrator choose?

Question17: What are two valid BGP Attributes that can be used to influence the route path traffic will take? (Choose two.)

Question18: An NSX administrator Is treating a NAT rule on a Tler-0 Gateway configured In active-standby high availability mode. Which two NAT rule types are supported for this configuration? (Choose two.)

Question19: Which CLI command is used for packet capture on the ESXi Node?

Question20: Which three DHCP Services are supported by NSX? (Choose three.)

Question21: How does the Traceflow tool identify issues in a network?

Question22: What must be configured on Transport Nodes for encapsulation and decapsulation of Geneve protocol?

Question23: Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

Question24: A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers.
The naming convention will be:
* WKS-WEB-SRV-XXX
* WKY-APP-SRR-XXX
* WKI-DB-SRR-XXX
What is the optimal way to group them to enforce security policies from NSX?

Question25: Which is an advantages of a L2 VPN In an NSX 4.x environment?

Question26: Which two built-in VMware tools will help Identify the cause of packet loss on VLAN Segments? (Choose two.)

Question27: An administrator has a requirement to have consistent policy configuration and enforcement across NSX instances.
What feature of NSX fulfills this requirement?

Question28: Which two of the following are used to configure Distributed Firewall on VDS? (Choose two.)

Question29: Refer to the exhibit.
An administrator configured NSX Advanced Load Balancer to load balance the production web server traffic, but the end users are unable to access the production website by using the VIP address.
Which of the following Tier-1 gateway route advertisement settings needs to be enabled to resolve the problem? Mark the correct answer by clicking on the image.

Question30: An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an FSXi transport node. Which feature in the NSX Ul shows the mapping between the virtual NIC and the host's physical adapter?

Question31: Which TraceFlow traffic type should an NSX administrator use tor validating connectivity between App and DB virtual machines that reside on different segments?

Question32: Match the NSX Intelligence recommendations with their correct purpose.

Question33: What is the VMware recommended way to deploy a virtual NSX Edge Node?

Question34: When collecting support bundles through NSX Manager, which files should be excluded for potentially containing sensitive information?

Question35: An NSX administrator is creating a Tier-1 Gateway configured In Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original tailed node to become the Active node upon recovery.
Which failover policy meets this requirement?

Question36: Which troubleshooting step will resolve an error with code 1001 during the configuration of a time-based firewall rule?

Question37: Which choice is a valid insertion point for North-South network introspection?

Question38: Which three selections are capabilities of Network Topology? (Choose three.)

Question39: Which two statements are correct about East-West Malware Prevention? (Choose two.)

Question40: Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

Question41: An administrator needs to download the support bundle for NSX Manager. Where does the administrator download the log bundle from?

Question42: Which VPN type must be configured before enabling a L2VPN?

Question43: Which field in a Tier-1 Gateway Firewall would be used to allow access for a collection of trustworthy web sites?

Question44: Which VMware GUI tool is used to identify problems in a physical network?

Question45: A company security policy requires all users to log Into applications using a centralized authentication system.
Which two authentication, authorization, and accounting (AAA) systems are available when Integrating NSX with VMware Identity Manager? (Choose two.)

Question46: What should an NSX administrator check to verify that VMware Identity Manager Integration Is successful?

Question47: What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

Question48: Refer to the exhibit.
An administrator would like to change the private IP address of the NAT VM I72.l6.101.il to a public address of 80.80.80.1 as the packets leave the NAT-Segment network.
Which type of NAT solution should be implemented to achieve this?