EMT Practice Test

1. Question Content...

---

Question1: VMware NSX is a key component in enabling enterprises to realize the full potential of their investment in which technology?

Question2: An NSX administrator is creating a filter as shown below.

What would be the purpose of creating a filter?

Question3: An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and registered with the vCenter server.
Which additional step is required before the distributed firewall is functional?

Question4: Which three ways can membership be defined in a dynamic security group? (Choose three.)

Question5: What vSphere Distributed Switch security policy allows virtual machines to send frames with a MAC Address that is different from the one specified in the vmx file?

Question6: Which NSX routing protocols offers the most flexible policy control when peering with the physical environment?

Question7: Which is a best practice to secure system traffic, ensure optimal performance and satisfy prerequisites for NSX?

Question8: An organization has a PCI compliant application deployed as part of a larger NSX environment. Every year a team of contractors evaluates the security of the environment and recommends changes.
What NSX Role and Scope should the contractors be given to minimize access but still allow them to fulfill the stated requirement?

Question9: When deploying a standalone NSX Edge as a Layer 2 VPN client, which port needs to be configured on the client vSphere Distributed Switch?

Question10: A group of users needs secured access to a set of web-based applications in a SDDC.
Which VPN option is best suited for this?

Question11: A virtualized application needs access to a physical database. Both servers are on the 172.168.3.0/24 subnet. NSX has been deployed across the entire virtual environment.
What method can be used to allow access between the servers?

Question12: A customer has Cisco Nexus 1000V switches in their environment and is looking at deploying NSX.
Which statement is correct?

Question13: An NSX administrator notices an error during the initial configuration of the SSO lookup service, as shown:

The administrator pulls up the lookup service status, which displays Disconnected.

What step should be performed to resolve this issue?

Question14: When running the NSX Control Plane in Hybrid Mode what are the minimum physical network requirements? (Choose three.)

Question15: Which details can an administrator verify from the Summary tab of the VMware NSX Manager? (Choose three.)

Question16: What can be enabled on the vSphere Distributed Switch to monitor IP packets that are passing through a distributed port group?

Question17: The user at 192.168.150.10 can reach the physical router but CANNOT reach edge-2 or any virtual machines.

What routing change would resolve the issue?

Question18: Activity Monitoring has been enabled for a host with several virtual machines. However, only one virtual machine appears in the list.

Which two additional configuration steps are required to allow the other virtual machines on the host to be selected? (Choose two.)

Question19: Which two are accurate statements with regards to Guest Introspection installation? (Choose two.)

Question20: An NSX administrator is validating the setup for a new NSX implementation and inputs this command:

Question21: Which two NSX roles could be used to create security policies? (Choose two.)

Question22: When creating a new security policy how is the default weight determined?

Question23:
Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

Question24: Where can firewall rules be applied on the NSX Edge Services Gateway?

Question25: What is the effect on NSX Edge virtual machines when NSX Edge high availability is configured but vSphere HA is NOT configured?

Question26: What are the correct steps for connecting a virtual machine to a logical switch?

Question27: Which two functions are provided by VMkernel ports? (Choose two.)

Question28: Which two network services are abstracted from the underlying hardware by NSX? (Choose two.)

Question29: Which two statements are true regarding L2 Bridges and Distributed Logical Routers? (Choose two.)

Question30: An administrator has been asked to provide single failure redundancy. What is the minimum supported number of NSX Controllers needed to meet this requirements?

Question31: Which three statements are valid methods of Link Aggregation Control Protocol negotiation? (Choose three.)

Question32: Which two statements are true about NSX Data Security support? (Choose two.)

Question33: Which three objects are supported for universal synchronization in a Cross-vCenter NSX deployment?
(Choose three.)

Question34: What are two things that should be done before upgrading from vCloud Networking and Security to NSX?
(Choose two.)

Question35: An NSX Administrator is examining a broken set of firewall rules and discovers that the Block Telnet rule was created in the wrong section.

Based on the exhibit, which option would correct the issue with the least amount of effort?

Question36: An application requires load balancing with minimal impact to network performance. An NSX administrator is deploying a load balancer to meet the stated requirements.
Which load balancing engine should be deployed?

Question37: What is one of the benefits of using logical switches in an NSX environment?

Question38: Which three options are true about NSX logical bridges? (Chose three.)

Question39: In a vSphere Distributed Switch architecture, which plane handles packet switching?

Question40: In a Cross-vCenter implementation, where is the Universal Control Cluster deployed and configured?

Question41: In which VMware NSX use case would VXLAN NOT be required?

Question42: Which are two uses of the NSX DLR protocol address? (Choose two.)

Question43: What is the minimum NSX role necessary for a user to edit the firewall on an Edge Services Gateway (ESG)?

Question44: What is the best practice workflow for a NSX installation to support logical switching?

Question45: What is a requirement of NSX Data Security?

Question46: If the Applied To scope is set to Distributed Firewall, which virtual machines will have the firewall rule applied?

Question47: What is the purpose of a DHCP Relay Agent in an NSX Edge configuration?

Question48: Which vSphere network object abstracts the physical network, provides access-level switching in the hypervisor and enables support for overlay networking?

Question49: A network administrator has been tasked with deploying a 3-tier application across two data centers. Tier-1 and tier-2 will be located in Datacenter-A and tier-3 will be located in Datacenter-B.
Which NSX components are needed to make this deployment functional?

Question50: When configuring BGP routing in NSX, what is the purpose of the Graceful Restart check box?

Question51: Which virtual machine does VMware recommended be manually excluded from the Distributed Firewall?

Question52: Which three changes to a distributed switch configuration could trigger a rollback? (Choose three.)

Question53: What needs to be deployed before configuring the identity Firewall?

Question54: In a Cross-vCenter environment, where is information about local logical switches and local logical routers maintained?

Question55: A network administrator is troubleshooting an issue and needs to observe an injected packet as it passes through the physical and logical network.
Which tool will accomplish this?

Question56: What is true when configuring vSphere Distributed Switches (vDS)?

Question57: Which is a prerequisite for deploying an Edge Service Gateway?

Question58: Which type of VPN should be configured to ensure application mobility between data centers?

Question59:
When specifying a source for a security rule, what is the purpose of the Negate Source check box?

Question60: Which three methods can be used by the NSX Distributed Firewall to discover IP addresses? (Choose three.)

Question61: Which two networking and security components are contained in the backup configuration data of an NSX Manager backup file? (Choose two.)

Question62: What are two requirements of the network infrastructure to virtualize the access layer? (Choose two.)

Question63: How is high availability of the NSX Edge Gateway accomplished?

Question64: An administrator is attempting to troubleshoot a routing issue between the Edge Services Gateway (ESG) and the Distributed Logical Router (DLR).

Based on the exhibit, which method CANNOT be used to troubleshoot the issue?

Question65: With which Application Profile types would the Insert X-Forwarded-For HTTP header option be used?

Question66: When designing a multi-site NSX deployment, which capability requires Enhanced Linked Mode to function?

Question67: Which is required to support unicast mode in NSX?

Question68: An administrator creates a SpoofGuard policy for specific networks.
Which two modes are associated with this type of policy? (Choose two.)

Question69: You have deployed an Edge Services Gateway with the following interface configuration:

Your customer has requested that you provide the ability to use Remote Desktop Protocol to log into a virtual machine that has a tenant IP address of 192.168.7.21 using the provider IP address 192.168.100.4.
You have performed the following configuration however, you cannot RDP into the virtual machine.

What configuration change do you need to make to allow this connection?

Question70: A user has configured a specific distributed firewall rule preventing VM-A (172.16.10.11) on the Web- Logical Switch to communicate to VM-B (172.16.20.11), running on the same switch. After the changes, the user is still able to communicated to VM-A from VM-B.
To debug this anomaly, the user will need to obtain logs from which component?