EMT Practice Test

1. Question Content...

---

Question1: An NSX administrator determines that routing adjacency a NSX Edge device and a Top Of Rack L3 switch CANNOT be established. Which two logs would be the most useful in resolving this issue? (choose two)

Question2: What is required before running an Activity Monitoring report?

Question3: A group of users needs secured access to a set of web-based applications in a SDDC.
Which VPN option is best suited for this?

Question4: A security administrator needs to create a Security Group based on an Active Directory group. However, AD Groups are not available as an option. What must the administrator configure before AD Groups are available?

Question5: An NSX administrator is validating the setup for a new NSX implementation and inputs this command:

Question6: An administrator needs to verify which port the switch manager is using. Which command should be used?

Question7: A user needs to be given the ability to make configuration changes on a specific NSX Edge device. What role and scope could be used to meet this requirement?

Question8: What is true when configuring vSphere Distributed Switches (vDS)?

Question9: Which three options are true about NSX logical bridges? (Chose three.)

Question10: Where can firewall rules be applied on the NSX Edge Services Gateway?

Question11: VMware NSX is a key component in enabling enterprises to realize the full potential of their investment in which technology?

Question12: An organization has a PCI compliant application deployed as part of a larger NSX environment. Every year a team of contractors evaluates the security of the environment and recommends changes.
What NSX Role and Scope should the contractors be given to minimize access but still allow them to fulfill the stated requirement?

Question13: What is the function of NSX Data Security?

Question14: If the Applied To scope is set to Distributed Firewall, which virtual machines will have the firewall rule applied?

Question15: What are two requirements of the network infrastructure to the access layer? (Choose two )

Question16: An administrator is deploying NSX in a Cross-vCenter configuration across three data centers located 100 miles apart Datacenter-1 and Datacenter-3 already have NSX deployed locally and Datacenter-2 does not have NSX deployed yet. What is the correct order of steps to configure all three data centers for this solution?

Question17: In which VMware NSX use case would VXLAN NOT be required?

Question18: When designing a multi-site NSX deployment, which capability requires Enhanced Linked Mode to function?

Question19: Which virtual machine does VMware recommended be manually excluded from the Distributed Firewall?

Question20: An NSX Administrator is examining a broken set of firewall rules and discovers that the Block Telnet rule was created in the wrong section.

Based on the exhibit, which option would correct the issue with the least amount of effort?

Question21: Which two networking and security components are contained in the backup configuration data of an NSX Manager backup file? (Choose two.)

Question22: Which is required to support unicast mode in NSX?

Question23: What is a requirement of NSX Data Security?

Question24: When running the NSX Control Plane in Hybrid Mode what are the minimum physical network requirements? (Choose three.)

Question25: Which port is used for NSX REST API Requests?

Question26: A customer has Cisco Nexus 1000V switches in their environment and is looking at deploying NSX.
Which statement is correct?

Question27: Which type of VPN should be configured to ensure application mobility between data centers?

Question28: You have deployed an Edge Services Gateway with the following interface configuration:

Your customer has requested that you provide the ability to use Remote Desktop Protocol to log into a virtual machine that has a tenant IP address of 192.168.7.21 using the provider IP address 192.168.100.4.
You have performed the following configuration however, you cannot RDP into the virtual machine.

What configuration change do you need to make to allow this connection?

Question29: An administrator is attempting to troubleshoot a routing issue between the Edge Services Gateway (ESG) and the Distributed Logical Router (DLR).

Based on the exhibit, which method CANNOT be used to troubleshoot the issue?

Question30: A network administrator has been tasked with deploying a 3-tier application across two data centers. Tier-1 and tier-2 will be located in Datacenter-A and tier-3 will be located in Datacenter-B.
Which NSX components are needed to make this deployment functional?

Question31: An organization is planning to use NSX as part of a disaster recovery project to provide consistent networking between two sites. Each site has one vCenter server. The organization requires universal objects and requires components to function during a site outage.
What is the minimum total instances of NSX Manager(s) and NSX Controller(s) that must be deployed across both sites to support the required functionality?

Question32:
Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

Question33: What is one of the benefits of using logical switches in an NSX environment?

Question34: An NSX Edge Service Gateway has two interfaces:
* Internal interface named Internal Access
-- IP address = 10.10.10.1
-- Network mask = 255.255.255.0
* Uplink interface named Physical Uplink
-- IP address = 20.20.20.1
-- Network mask = 255.255.255.0
A vSphere administrator wants to add a SNAT rule to allow traffic from the internal network segment to access external resources via the uplink interface.
Which three steps should the vSphere administrator do to add the SNAT rule? (Choose three.)

Question35: An NSX administrator notices an error during the initial configuration of the SSO lookup service, as shown:

The administrator pulls up the lookup service status, which displays Disconnected.

What step should be performed to resolve this issue?

Question36: In a vSphere Distributed Switch architecture, which plane handles packet switching?

Question37: Which vSphere network object abstracts the physical network, provides access-level switching in the hypervisor and enables support for overlay networking?

Question38: A virtualized application needs access to a physical database. Both servers are on the 172.168.3.0/24 subnet. NSX has been deployed across the entire virtual environment.
What method can be used to allow access between the servers?

Question39: An NSX administrator is creating a filter as shown below.

What would be the purpose of creating a filter?

Question40: The fact that NSX Data Security has visibility into sensitive data provides which two benefits? (Choose two)

Question41: In a Cross-vCenter implementation, where is the Universal Control Cluster deployed and configured?

Question42: Which load balancing algorithm is only available on a vSphere Distributed Switch?

Question43: What are two things that should be done before upgrading from vCloud Networking and Security to NSX?
(Choose two.)

Question44: A network administrator is troubleshooting an issue and needs to observe an injected packet as it passes through the physical and logical network.
Which tool will accomplish this?

Question45: In a Cross-vCenter environment, where is information about local logical switches and local logical routers maintained?

Question46: Which action is not an option for adding Virtual Machines to a Security Group?

Question47: From the NSX Edge CLI, which command would show VIP statistics?

Question48: A workload was attached to a logical switch port group in Compute Cluster 1. Users are complaining that I hey can communicate with other workloads on that port group in the cluster, but not with other workloads on different networks.

What is the most probable cause?

Question49: A user has configured a specific distributed firewall rule preventing VM-A (172.16.10.11) on the Web- Logical Switch to communicate to VM-B (172.16.20.11), running on the same switch. After the changes, the user is still able to communicated to VM-A from VM-B.
To debug this anomaly, the user will need to obtain logs from which component?

Question50: How is high availability of the NSX Edge Gateway accomplished?

Question51: The user at 192.168.150.10 can reach the physical router but CANNOT reach edge-2 or any virtual machines.

What routing change would resolve the issue?

Question52: An NSX environment requires physical NIC redundancy for all dvPortGroups when connecting hosts to the physical network. There are two 10Gb NIC's per host. Which two teaming methods should be used to ensure both links are utilized simultaneously? (Choose two.)

Question53: Which two functions are provided by VMkernel ports? (Choose two.)

Question54: Which highly available Edge design would provide high bandwidth and isolation to four application networks?

Question55: Which three ways can membership be defined in a dynamic security group? (Choose three.)

Question56: You are creating a Universal Segment ID Pool for a three site Cross-vCenter environment.
The three sites are designated as Site A, Site B and Site C,
* Site A has a local Segment ID pool of 5000-5999
* Site B has a local Segment ID pool of 6000-6999
* Site C has a local Segment ID pool of 7000-7999
Which of the following ranges would be valid for the Universal Segment ID pool?

Question57: When defining membership for a security group, which three identifiers can be used for dynamic inclusion?
(Choose three)

Question58: When deploying a standalone NSX Edge as a Layer 2 VPN client, which port needs to be configured on the client vSphere Distributed Switch?

Question59: An application requires load balancing with minimal impact to network performance. An NSX administrator is deploying a load balancer to meet the stated requirements.
Which load balancing engine should be deployed?

Question60: An NSX Administrator is examining traffic on the network shown below.

What is the packet flow when VM1 communicates to VM5?

Question61: What are two requirements of the network infrastructure to virtualize the access layer? (Choose two.)

Question62: What needs to be deployed before configuring the identity Firewall?

Question63: A new ESXi host was added to an existing cluster, prepared for NSX and enabled for Distributed Firewall, logical switching and Logical Routing. The Most Preparation page in the NSX Web Ul shows this new host is in Ready state and the Logical Network Preparation tab displays the VXLAN VTEPs are correctly configured. Virtual machines on the new host can communicate with each other but CANNOT communicate with VMs running on other hosts and connected to the same Logical Switch. Which condition below will result in the described behavior on the new host?

Question64: Which two NSX Data Security roles could be assigned to view configured policies and violation reports?
(Choose two.)

Question65: When configuration BGP routing in NSX, what is the purpose of the Graceful Restart check box?

Question66: Which details can an administrator verify from the Summary tab of the VMware NSX Manager? (Choose three.)

Question67: A Service Provider is using VMware vCloud Director with VMware vCloud Networking and Security (VCNS) on vSphere. Which two products will be impacted by the upgrade of VCNS to VMware NSX? (Choose two)

Question68: An NSX administrator notices that when configuring Flow Monitoring, the graphs do not include the IPFix flows. Where are these flows displayed?

Question69: What is the most restrictive NSX role that can be used to create and publish security policies and install virtual appliances?

Question70: Which are two uses of the NSX DLR protocol address? (Choose two.)

Question71: When creating a new security policy how is the default weight determined?

Question72: What are two roles of vmnics? (Choose two)

Question73: Which component automates the consumption of third-party services and provides mapping to virtual machines using a logical policy?

Question74: Which NSX component can validate that security policies at your organization are being enforced correctly?

Question75: Your environment has two sites designated as Site A and Site B Each site has its own vCenler Server instance with NSX installed and configured in standalone mode. You are migrating the environment to Cross vCenter and have already promoted Site A to the Primary role. What action must be taken before the NSX Manager at Site B can be changed to Secondary?

Question76: Which three statements are valid methods of Link Aggregation Control Protocol negotiation? (Choose three.)

Question77: Which tool is used to detect rogue services?

Question78: An administrator enables the NSX Ticket Logger to track infrastructure changes. The administrator logs out for lunch, returns and logs back in to complete the task. What is the status of ticket logger when the administrator logs back in?

Question79: Which three changes to a distributed switch configuration could trigger a rollback? (Choose three.)

Question80: What is the minimum NSX role necessary for a user to edit the firewall on an Edge Services Gateway (ESG)?

Question81: An administrator creates a SpoofGuard policy for specific networks.
Which two modes are associated with this type of policy? (Choose two.)

Question82: What are two benefits of the NSX Distributed Firewall? (Choose two )

Question83: An administrator needs to perform a configuration backup of NSX. From which two locations can this task be performed? (Choose two.)

Question84: What can be enabled on the vSphere Distributed Switch to monitor IP packets that are passing through a distributed port group?

Question85: Which two statements are true about NSX Data Security support? (Choose two.)

Question86: What is one of the benefits of a spine-leaf network topology?

Question87: An administrator wants to perform Activity Monitoring on a large group of virtual machines in an NSX environment. How would this task be accomplished with minimal administrative effort?

Question88: Which NSX routing protocols offers the most flexible policy control when peering with the physical environment?

Question89: Two virtual machines are unable to communicate with one another. The virtual machines are in the same distributed portgroup, but reside on different ESXi hosts.
What are two possible causes for the communications issue? (Choose two.)

Question90: Where does an administrator configure logging for the NSX Manager?

Question91: Which service cannot be included in a Security Policy using Service Composer?

Question92: What is the purpose of a DHCP Relay Agent in an NSX Edge configuration?

Question93: What is the best practice workflow for a NSX installation to support logical switching?

Question94: Which two are accurate statements with regards to Guest Introspection installation? (Choose two.)

Question95: Which two network services are abstracted from the underlying hardware by NSX? (Choose two.)

Question96: Which is a prerequisite for deploying an Edge Service Gateway?

Question97: Which tool is used to display VXLAN connection information?

Question98: What vSphere Distributed Switch security policy allows virtual machines to send frames with a MAC Address that is different from the one specified in the vmx file?

Question99: Activity Monitoring has been enabled for a host with several virtual machines. However, only one virtual machine appears in the list.

Which two additional configuration steps are required to allow the other virtual machines on the host to be selected? (Choose two.)

Question100: An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and registered with the vCenter server.
Which additional step is required before the distributed firewall is functional?

Question101: With which Application Profile types would the Insert X-Forwarded-For HTTP header option be used?

Question102: How many vCenter Server environments can a single NSX Manager serve at one time?

Question103: Which two methods does VMware NSX offer to integrate with third-party partners? (Choose two)

Question104: Which two NSX roles could be used to create security policies? (Choose two.)

Question105: Which is a best practice to secure system traffic, ensure optimal performance and satisfy prerequisites for NSX?

Question106: Which two statements are true regarding L2 Bridges and Distributed Logical Routers? (Choose two.)

Question107: What are the correct steps for connecting a virtual machine to a logical switch?

Question108: Which term describes a situation where a bottleneck is created when traffic is sent to a single device for security enforcement?

Question109: Which three NSX services are available for synchronization in a Cross-vCenter implementation? (Choose three.)

Question110: Which two options are correct regarding vSphere Distributed Switches? (Choose two )