EMT Practice Test

1. Question Content...

---

Question1: DRAG DROP
Sort the rule processing steps of the Distributed Firewall. Order responses from left to right.

Question2: An NSX administrator would like to create an L2 segment with the following requirements:
* L2 domain should not exist on the physical switches.
* East/West communication must be maximized as much as possible.
Which type of segment must the administrator choose?

Question3: Which VMware GUI tool is used to identify problems in a physical network?

Question4: An administrator has a requirement to have consistent policy configuration and enforcement across NSX instances.
What feature of NSX fulfills this requirement?

Question5: Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)

Question6: The security administrator turns on logging for a firewall rule.
Where is the log stored on an ESXi transport node?

Question7: Which of the following settings must be configured in an NSX environment before enabling stateful active-active SNAT?

Question8: Which three data collection sources are used by NSX Network Detection and Response to create correlations/Intrusion campaigns? (Choose three.)

Question9: Which two of the following are used to configure Distributed Firewall on VDS? (Choose two.)

Question10: An architect receives a request to apply distributed firewall in a customer environment without making changes to the network and vSphere environment. The architect decides to use Distributed Firewall on VDS.
Which two of the following requirements must be met in the environment? (Choose two.)

Question11: In an NSX environment, an administrator is observing low throughput and congestion between the Tier-O Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

Question12: Which two statements are true for IPSec VPN? (Choose two.)

Question13: In which VPN type are the Virtual Tunnel interfaces (VTI) used?

Question14: Which is an advantages of a L2 VPN In an NSX 4.x environment?

Question15: HOTSPOT
Refer to the exhibit.
Which two items must be configured to enable OSPF for the Tler-0 Gateway in the Image? Mark your answers by clicking twice on the image.

Question16: Which two are supported by L2 VPN clients? (Choose two.)

Question17: Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

Question18: A company security policy requires all users to log Into applications using a centralized authentication system.
Which two authentication, authorization, and accounting (AAA) systems are available when Integrating NSX with VMware Identity Manager? (Choose two.)

Question19: Which two logical router components span across all transport nodes? (Choose two.)

Question20: What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

Question21: Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the Geneve protocol on the ESXi transport node? (Choose two.)

Question22: A customer is preparing to deploy a VMware Kubernetes solution in an NSX environment.
What is the minimum MTU size for the UPLINK profile?

Question23: How does the Traceflow tool identify issues in a network?

Question24: Which NSX CLI command is used to change the authentication policy for local users?

Question25: When deploying an NSX Edge Transport Node, what two valid IP address assignment options should be specified for the TEP IP addresses? (Choose two.)

Question26: Which steps are required to activate Malware Prevention on the NSX Application Platform?

Question27: Which two of the following will be used for Ingress traffic on the Edge node supporting a Single Tier topology? (Choose two.)

Question28: Which of the two following characteristics about NAT64 are true? (Choose two.)

Question29: An administrator wants to validate the BGP connection status between the Tier-O Gateway and the upstream physical router.
What sequence of commands could be used to check this status on NSX Edge node?

Question30: Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?

Question31: An NSX administrator wants to create a Tler-0 Gateway to support equal cost multi-path (ECMP) routing.
Which failover detection protocol must be used to meet this requirement?

Question32: Which two statements are correct about East-West Malware Prevention? (Choose two.)

Question33: What should an NSX administrator check to verify that VMware Identity Manager Integration Is successful?

Question34: What can the administrator use to identify overlay segments in an NSX environment if troubleshooting is required?

Question35: Which NSX feature can be leveraged to achieve consistent policy configuration and simplicity across sites?

Question36: Which command Is used to test management connectivity from a transport node to NSX Manager?

Question37: Which three selections are capabilities of Network Topology? (Choose three.)

Question38: Which statement is true about an alarm in a Suppressed state?

Question39: When a stateful service is enabled for the first lime on a Tier-0 Gateway, what happens on the NSX Edge node'

Question40: Where does an administrator configure the VLANs used In VRF Lite? (Choose two.)

Question41: Refer to the exhibit.

An administrator would like to change the private IP address of the NAT VM I72.l6.101.il to a public address of 80.80.80.1 as the packets leave the NAT-Segment network.
Which type of NAT solution should be implemented to achieve this?

Question42: What is the VMware recommended way to deploy a virtual NSX Edge Node?