EMT Practice Test

1. Question Content...

---

Question1: Which of the following settings must be configured in an NSX environment before enabling stateful active-active SNAT?

Question2: Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX to support role-based access control? (Choose two.)

Question3: Which two statements are true about IDS Signatures? (Choose two.)

Question4: Refer to the exhibit.
An administrator configured NSX Advanced Load Balancer to redistribute the traffic between the web servers. However, requests are sent to only one server Which of the following pool configuration settings needs to be adjusted to resolve the problem? Mark the correct answer by clicking on the image.

Question5: When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

Question6: The security administrator turns on logging for a firewall rule.
Where is the log stored on an ESXi transport node?

Question7: Which two choices are solutions offered by the VMware NSX portfolio? (Choose two.)

Question8: Sort the rule processing steps of the Distributed Firewall. Order responses from left to right.

Question9: Where can an administrator see a visual overview of network connections between different VMs and different networks, within the NSX domain?

Question10: How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

Question11: Which command on ESXi is used to verify the Local Control Plane connectivity with Central Control Plane?

Question12: What are two functions of the Service Engines in NSX Advanced Load Balancer? (Choose two.)

Question13: Which of the following exist only on Tler-1 Gateway firewall configurations and not on Tier-0?

Question14: Refer to the exhibit.
An administrator configured NSX Advanced Load Balancer to load balance the production web server traffic, but the end users are unable to access the production website by using the VIP address.
Which of the following Tier-1 gateway route advertisement settings needs to be enabled to resolve the problem? Mark the correct answer by clicking on the image.

Question15: Which choice is a valid insertion point for North-South network introspection?

Question16: Which of the following statements is true regarding the use of a Dynamic Routing Protocol on a Tier-1 Gateway?

Question17: A company security policy requires all users to log into applications using a centralized authentication system.
Which two authentication, authorization, and accounting (AAA) systems are available when integrating NSX with VMware Identity Manager? (Choose two.)

Question18: Which two of the following parameters are required for deploying the NSX Application Platform? (Choose two.)

Question19: An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)

Question20: Which three data collection sources are used by NSX Network Detection and Response to create correlations/Intrusion campaigns? (Choose three.)

Question21: Which is an advantage of an L2 VPN in an NSX 4.x environment?

Question22: When configuring OSPF on Tier-0 Gateway, which three of the following must match in order to establish a neighbor relationship with an upstream router? (Choose three.)

Question23: Which two statements are correct about East-West Malware Prevention? (Choose two.)

Question24: An administrator wants to validate the BGP connection status between the Tier-0 Gateway and the upstream physical router.
What sequence of commands could be used to check this status on NSX Edge node?

Question25: Which two built-in VMware tools will help identify the cause of packet loss on VLAN Segments? (Choose two.) Which two built-in VMware tools will help identify the cause of packet loss on VLAN Segments? (Choose two.)

Question26: Which two statements describe the characteristics of an Edge Cluster in NSX? (Choose two.)

Question27: Which of the two following characteristics about NAT64 are true? (Choose two.)

Question28: An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.
What could cause this issue?

Question29: What are two supported host switch modes? (Choose two.)

Question30: Refer to the exhibit.
Which two items must be configured to enable OSPF for the Tler-0 Gateway in the Image? Mark your answers by clicking twice on the image.

Question31: What must be configured on Transport Nodes for encapsulation and decapsulation of Geneve protocol?

Question32: Which table on an ESXi host is used to determine the location of a particular workload for a frame- forwarding decision?

Question33: In an NSX environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

Question34: What is VMware's recommendation for the minimum MTU requirements when planning an NSX deployment?

Question35: Which VMware GUI tool is used to identify problems in a physical network?

Question36: Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Question37: What should an NSX administrator check to verify that VMware Identity Manager integration is successful?

Question38: What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Question39: An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time.
Which CLI command disables the nsxcli time out value on NSX Manager?

Question40: An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.
Which failover detection protocol must be used to meet this requirement?

Question41: Which NSX feature can be leveraged to achieve consistent policy configuration and simplicity across sites?

Question42: Which troubleshooting step will resolve an error with code 1001 during the configuration of a time- based firewall rule?

Question43: Which three of the following describe the Border Gateway Routing Protocol (BGP) configuration on a Tier-0 Gateway? (Choose three.)

Question44: Which two are supported by L2 VPN clients? (Choose two.)

Question45: Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?

Question46: Which two statements are true for IPSec VPN? (Choose two.)

Question47: Refer to the exhibit.
An administrator would like to change the private IP address of the NAT VM 172.16.101.11 to a public address of 80.80.80.1 as the packets leave the NAT-Segment network.
Which type of NAT solution should be implemented to achieve this?