EMT Practice Test

1. Question Content...

---

Question1: Which CLI command shows syslog on NSX Manager?

Question2: When collecting support bundles through NSX Manager, which files should be excluded for potentially containing sensitive information?

Question3: Which two statements are true for IPSec VPN? (Choose two.)

Question4: Which of the following exist only on Tier-1 Gateway firewall configurations and not on Tier-0?

Question5: When deploying an NSX Edge Transport Node, what two valid IP address assignment options should be specified for the TEP IP addresses? (Choose two.)

Question6: Drag and Drop Question
Sort the rule processing steps of the Distributed Firewall. Order responses from left to right.

Question7: Which VMware GUI tool is used to identify problems in a physical network?

Question8: Which of the two following characteristics about NAT64 are true? (Choose two.)

Question9: What are two supported host switch modes? (Choose two.)

Question10: Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

Question11: What should an NSX administrator check to verify that VMware Identity Manager integration is successful?

Question12: An administrator has a requirement to have consistent policy configuration and enforcement across NSX instances.
What feature of NSX fulfills this requirement?

Question13: An architect receives a request to apply distributed firewall in a customer environment without making changes to the network and vSphere environment. The architect decides to use Distributed Firewall on VDS.
Which two of the following requirements must be met in the environment? (Choose two.)

Question14: Which command is used to test management connectivity from a transport node to NSX Manager?

Question15: Which two statements describe the characteristics of an Edge Cluster in NSX? (Choose two.)

Question16: An administrator has been tasked with implementing the SSL certificates for the NSX Manager Cluster VIP.
Which is the correct way to implement this change?

Question17: Which field in a Tier-1 Gateway Firewall would be used to allow access for a collection of trustworthy web sites?

Question18: An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

Question19: Hotspot Question
Refer to the exhibit. Which two items must be configured to enable OSPF for the Tier-0 Gateway in the image? Mark your answers by clicking twice on the image.

Question20: How does the Traceflow tool identify issues in a network?

Question21: What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Question22: Which is an advantages of a L2 VPN in an NSX 4.x environment?

Question23: In an NSX environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

Question24: Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

Question25: What are two functions of the Service Engines in NSX Advanced Load Balancer? (Choose two.)

Question26: Which two logical router components span across all transport nodes? (Choose two.)

Question27: What is the VMware recommended way to deploy a virtual NSX Edge Node?

Question28: As part of an organization's IT security compliance requirement, NSX Manager must be configured for 2FA (two-factor authentication).
What should an NSX administrator have ready before the integration can be configured?

Question29: Which of the following settings must be configured in an NSX environment before enabling stateful active-active SNAT?

Question30: The security administrator turns on logging for a firewall rule.
Where is the log stored on an ESXi transport node?

Question31: Which choice is a valid insertion point for North-South network introspection?

Question32: An administrator wants to validate the BGP connection status between the Tier-0 Gateway and the upstream physical router.
What sequence of commands could be used to check this status on NSX Edge node?

Question33: Which two built-in VMware tools will help identify the cause of packet loss on VLAN Segments?
(Choose two.)

Question34: An administrator has a requirement to have consistent policy configuration and enforcement across NSXT instances. What feature of NSX-T Data Center fulfills this requirement?

Question35: Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

Question36: Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?

Question37: Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

Question38: Refer to the exhibit. An administrator would like to change the private IP address of the NAT VM
172.16.101.11 to a public address of 80.80.80.1 as the packets leave the NAT-Segment network.
Which type of NAT solution should be implemented to achieve this?

Question39: Which two are supported by L2 VPN clients? (Choose two.)

Question40: Which command on ESXi is used to verify the Local Control Plane connectivity with Central Control Plane?

Question41: Drag and Drop Question
Match the NSX Intelligence recommendations with their correct purpose.

Question42: Which three selections are capabilities of Network Topology? (Choose three.)

Question43: Which CLI command is used for packet capture on the ESXi Node?