EMT Practice Test

1. Question Content...

---

Question1: What needs to be deployed before configuring the identity Firewall?

Question2: When designing a multi-site NSX deployment, which capability requires Enhanced Linked Mode to function?

Question3: An NSX administrator notices that when configuring Flow Monitoring, the graphs do not include the IPFix flows. Where are these flows displayed?

Question4: An administrator has been asked to provide single failure redundancy. What is the minimum supported number of NSX Controllers needed to meet this requirements?

Question5: Which is required to support unicast mode in NSX?

Question6: Which details can an administrator verify from the Summary tab of the VMware NSX Manager? (Choose three.)

Question7: Which port is used for NSX REST API Requests?

Question8: A security administrator needs to create a Security Group based on an Active Directory group. However, AD Groups are not available as an option. What must the administrator configure before AD Groups are available?

Question9: An NSX administrator notices an error during the initial configuration of the SSO lookup service, as shown:

The administrator pulls up the lookup service status, which displays Disconnected.

What step should be performed to resolve this issue?

Question10: What are the correct steps for connecting a virtual machine to a logical switch?

Question11: In a Cross-vCenter NSX deployment, what are two requirements that must be met in order for an administrator to deploy both universal logical switches and local logical switches within the same vCenter instance? (Choose two.)

Question12: Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

Question13: When running the NSX Control Plane in Hybrid Mode what are the minimum physical network requirements? (Choose three.)

Question14: Which virtual machine does VMware recommend be manually excluded from the Distributed Firewall?

Question15: What resource must a partner security service be registered with before the service is available to a security policy?

Question16: An administrator is deploying NSX in a Cross-vCenter configuration across three data centers located 100 miles apart Datacenter-1 and Datacenter-3 already have NSX deployed locally and Datacenter-2 does not have NSX deployed yet. What is the correct order of steps to configure all three data centers for this solution?

Question17: The user at 192.168.150.10 can reach the physical router but CANNOT reach edge-2 or any virtual machines.

What routing change would resolve the issue?

Question18: What is true when configuring vSphere Distributed Switches (vDS)?

Question19: In a Cross-vCenter implementation, where is the Universal Control Cluster deployed and configured?

Question20: Which is a prerequisite for deploying an Edge Service Gateway?

Question21: An organization is planning to use NSX as part of a disaster recovery project to provide consistent networking between two sites. Each site has one vCenter server. The organization requires universal objects and requires components to function during a site outage.
What is the minimum total instances of NSX Manager(s) and NSX Controller(s) that must be deployed across both sites to support the required functionality?

Question22: Which highly available Edge design would provide high bandwidth and isolation to four application networks?

Question23: What is one of the benefits of a spine-leaf network topology?

Question24: A virtualized application needs access to a physical database. Both servers are on the 172.168.3.0/24 subnet. NSX has been deployed across the entire virtual environment.
What method can be used to allow access between the servers?

Question25: An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and registered with the vCenter server.
Which additional step is required before the distributed firewall is functional?

Question26: Which term describes a situation where a bottleneck is created when traffic is sent to a single device for security enforcement?

Question27: When creating a new security policy how is the default weight determined?

Question28: What is the purpose of a DHCP Relay Agent in an NSX Edge configuration?

Question29: An administrator is attempting to troubleshoot a routing issue between the Edge Services Gateway (ESG) and the Distributed Logical Router (DLR).

Based on the exhibit, which method CANNOT be used to troubleshoot the issue?

Question30: An NSX administrator is validating the setup for a new NSX implementation and inputs this command:

Question31: An application requires load balancing with minimal impact to network performance. An NSX administrator is deploying a load balancer to meet the stated requirements.
Which load balancing engine should be deployed?

Question32: An administrator creates a SpoofGuard policy for specific networks.
Which two modes are associated with this type of policy? (Choose two.)

Question33: When deploying a standalone NSX Edge as a Layer 2 VPN client, which port needs to be configured on the client vSphere Distributed Switch?

Question34: What is required before running an Activity Monitoring report?

Question35: An NSX Administrator is examining a broken set of firewall rules and discovers that the Block Telnet rule was created in the wrong section.

Based on the exhibit, which option would correct the issue with the least amount of effort?

Question36: You are creating a Universal Segment ID Pool for a three site Cross-vCenter environment.
The three sites are designated as Site A, Site B and Site C,
* Site A has a local Segment ID pool of 5000-5999
* Site B has a local Segment ID pool of 6000-6999
* Site C has a local Segment ID pool of 7000-7999
Which of the following ranges would be valid for the Universal Segment ID pool?

Question37: What is the minimum NSX role necessary for a user to edit the firewall on an Edge Services Gateway (ESG)?

Question38: In a vSphere Distributed Switch architecture, which plane handles packet switching?

Question39: Which three options are true about NSX logical bridges? (Choose three.)

Question40: If the Applied To scope is set to Distributed Firewall, which virtual machines will have the firewall rule applied?

Question41: A network administrator is troubleshooting an issue and needs to observe an injected packet as it passes through the physical and logical network.
Which tool will accomplish this?

Question42: Which two NSX roles could be used to create security policies? (Choose two.)

Question43: Where can firewall rules be applied on the NSX Edge Services Gateway?

Question44: Which three ways can membership be defined in a dynamic security group? (Choose three.)

Question45: With which Application Profile types would the Insert X-Forwarded-For HTTP header option be used?

Question46: How is high availability of the NSX Edge Gateway accomplished?

Question47: Which NSX component can validate that security policies at your organization are being enforced correctly?

Question48: What is the effect on NSX Edge virtual machines when NSX Edge high availability is configured but vSphere HA is NOT configured?

Question49: Where does an administrator configure logging for the NSX Manager?

Question50: Which three changes to a distributed switch configuration could trigger a rollback? (Choose three.)

Question51: In a Cross-vCenter environment, where is information about local logical switches and local logical routers maintained?

Question52: What are two benefits of the NSX Distributed Firewall? (Choose two.)

Question53: A customer has Cisco Nexus 1000V switches in their environment and is looking at deploying NSX.
Which statement is correct?

Question54: Which two networking and security components are contained in the backup configuration data of an NSX Manager backup file? (Choose two.)

Question55: An NSX Administrator is examining traffic on the network shown below.

What is the packet flow when VM1 communicates to VM5?

Question56: An NSX administrator is creating a filter as shown below.

What would be the purpose of creating a filter?

Question57: Which three NSX services are available for synchronization in a Cross-vCenter implementation? (Choose three.)

Question58: The fact that NSX Data Security has visibility into sensitive data provides which two benefits? (Choose two)

Question59: Two virtual machines are unable to communicate with one another. The virtual machines are in the same distributed portgroup, but reside on different ESXi hosts.
What are two possible causes for the communications issue? (Choose two.)

Question60: An administrator needs to perform a configuration backup of NSX. From which two locations can this task be performed? (Choose two.)

Question61: Which are two uses of the NSX DLR protocol address? (Choose two.)

Question62: VMware NSX is a key component in enabling enterprises to realize the full potential of their investment in which technology?

Question63: In which VMware NSX use case would VXLAN NOT be required?

Question64: When configuring BGP routing in NSX, what is the purpose of the Graceful Restart check box?

Question65: Activity Monitoring has been enabled for a host with several virtual machines. However, only one virtual machine appears in the list.

Which two additional configuration steps are required to allow the other virtual machines on the host to be selected? (Choose two.)

Question66: Which two statements are true about NSX Data Security support? (Choose two.)

Question67: What is a requirement of NSX Data Security?

Question68: A user has configured a specific distributed firewall rule preventing VM-A (172.16.10.11) on the Web- Logical Switch to communicate to VM-B (172.16.20.11), running on the same switch. After the changes, the user is still able to communicated to VM-A from VM-B.
To debug this anomaly, the user will need to obtain logs from which component?

Question69: Which three services could be provided by an NSX Edge Service Gateway? (Choose three.)

Question70: What is the most restrictive NSX role that can be used to create and publish security policies and install virtual appliances?

Question71: Internet access is required from virtual machines located on any logical switch. Direct access from the internet to these virtual machines is NOT permitted.

Which Perimeter NSX Edge feature would achieve this with the least configuration?

Question72: An NSX environment requires physical NIC redundancy for all dvPortGroups when connecting hosts to the physical network. There are two 10Gb NIC's per host. Which two teaming methods should be used to ensure both links are utilized simultaneously? (Choose two.)

Question73: What vSphere Distributed Switch security policy allows virtual machines to send frames with a MAC Address that is different from the one specified in the vmx file?

Question74: Which two functions are provided by VMkernel ports? (Choose two.)