EMT Practice Test

1. Question Content...

---

Question1: A Service Provider is using VMware vCloud Director with VMware vCloud Networking and Security (VCNS) on vSphere. Which two products will be impacted by the upgrade of VCNS to VMware NSX? (Choose two.)

Question2: An administrator wants to perform Activity Monitoring on a large group of virtual machines in an NSX environment. How would this task be accomplished with minimal administrative effort?

Question3: What can be enabled on the vSphere Distributed Switch to monitor IP packets that are passing through a distributed port group?

Question4: An administrator creates a SpoofGuard policy for specific networks.
Which two modes are associated with this type of policy? (Choose two.)

Question5: What is true when configuring vSphere Distributed Switches (vDS)?

Question6: A virtualized application needs access to a physical database. Both servers are on the 172.168.3.0/24 subnet. NSX has been deployed across the entire virtual environment.
What method can be used to allow access between the servers?

Question7: Which component automates the consumption of third-party services and provides mapping to virtual machines using a logical policy?

Question8: When running the NSX Control Plane in Hybrid Mode what are the minimum physical network requirements? (Choose three.)

Question9: Which two NSX roles could be used to create security policies? (Choose two.)

Question10: What is the best practice workflow for a NSX installation to support logical switching?

Question11: Which tool is used to detect rogue services?

Question12: An NSX administrator determines that routing adjacency between a NSX Edge device and a Top Of Rack L3 switch CANNOT be established. Which two logs would be the most useful in resolving this issue?
(Choose two.)

Question13: An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and registered with the vCenter server.
Which additional step is required before the distributed firewall is functional?

Question14: Which three NSX services are available for synchronization in a Cross-vCenter implementation? (Choose three.)

Question15: In which VMware NSX use case would VXLAN NOT be required?

Question16: Which service cannot be included in a Security Policy using Service Composer?

Question17: An NSX administrator is creating a filter as shown below.

What would be the purpose of creating a filter?

Question18: Which three changes to a distributed switch configuration could trigger a rollback? (Choose three.)

Question19: Which three ways can membership be defined in a dynamic security group? (Choose three.)

Question20: Which highly available Edge design would provide high bandwidth and isolation to four application networks?

Question21: A user needs to be given the ability to make configuration changes on a specific NSX Edge device. What role and scope could be used to meet this requirement?

Question22: What is one of the benefits of a spine-leaf network topology?

Question23: Which three options are true about NSX logical bridges? (Choose three.)

Question24: When configuring BGP routing in NSX, what is the purpose of the Graceful Restart check box?

Question25: Where can firewall rules be applied on the NSX Edge Services Gateway?

Question26: VMware NSX is a key component in enabling enterprises to realize the full potential of their investment in which technology?

Question27: An administrator enables the NSX Ticket Logger to track infrastructure changes. The administrator logs out for lunch, returns and logs back in to complete the task. What is the status of ticket logger when the administrator logs back in?

Question28: Which two statements are true regarding L2 Bridges and Distributed Logical Routers? (Choose two.)

Question29: What is the minimum NSX role necessary for a user to edit the firewall on an Edge Services Gateway (ESG)?

Question30: How is high availability of the NSX Edge Gateway accomplished?

Question31: Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

Question32: Which type of VPN should be configured to ensure application mobility between data centers?

Question33: An NSX administrator notices that when configuring Flow Monitoring, the graphs do not include the IPFix flows. Where are these flows displayed?

Question34: Which details can an administrator verify from the Summary tab of the VMware NSX Manager? (Choose three.)

Question35: What needs to be deployed before configuring the identity Firewall?

Question36: A network administrator is troubleshooting an issue and needs to observe an injected packet as it passes through the physical and logical network.
Which tool will accomplish this?

Question37: Which two methods does VMware NSX offer to integrate with third-party partners? (Choose two.)

Question38: The user at 192.168.150.10 can reach the physical router but CANNOT reach edge-2 or any virtual machines.

What routing change would resolve the issue?

Question39: An administrator is deploying NSX in a Cross-vCenter configuration across three data centers located 100 miles apart Datacenter-1 and Datacenter-3 already have NSX deployed locally and Datacenter-2 does not have NSX deployed yet. What is the correct order of steps to configure all three data centers for this solution?

Question40: What are the correct steps for connecting a virtual machine to a logical switch?

Question41: Two virtual machines are unable to communicate with one another. The virtual machines are in the same distributed portgroup, but reside on different ESXi hosts.
What are two possible causes for the communications issue? (Choose two.)

Question42: An NSX Edge Service Gateway has two interfaces:
* Internal interface named Internal Access
-- IP address = 10.10.10.1
-- Network mask = 255.255.255.0
* Uplink interface named Physical Uplink
-- IP address = 20.20.20.1
-- Network mask = 255.255.255.0
A vSphere administrator wants to add a SNAT rule to allow traffic from the internal network segment to access external resources via the uplink interface.
Which three steps should the vSphere administrator do to add the SNAT rule? (Choose three.)

Question43: Which term describes a situation where a bottleneck is created when traffic is sent to a single device for security enforcement?

Question44: What is the purpose of a DHCP Relay Agent in an NSX Edge configuration?

Question45: An administrator needs to perform a configuration backup of NSX. From which two locations can this task be performed? (Choose two.)

Question46: Which two functions are provided by VMkernel ports? (Choose two.)

Question47: An administrator is attempting to troubleshoot a routing issue between the Edge Services Gateway (ESG) and the Distributed Logical Router (DLR).

Based on the exhibit, which method CANNOT be used to troubleshoot the issue?

Question48: An administrator needs to verify which port the switch manager is using. Which command should be used?

Question49: Which NSX routing protocols offers the most flexible policy control when peering with the physical environment?

Question50: When designing a multi-site NSX deployment, which capability requires Enhanced Linked Mode to function?

Question51: Which load balancing algorithm is only available on a vSphere Distributed Switch?

Question52: When defining membership for a security group, which three identifiers can be used for dynamic inclusion?
(Choose three.)

Question53: What is required before running an Activity Monitoring report?

Question54: What is the most restrictive NSX role that can be used to create and publish security policies and install virtual appliances?

Question55: Where does an administrator configure logging for the NSX Manager?

Question56: Which two statements are true about NSX Data Security support? (Choose two.)

Question57: An administrator has implemented VMware NSX on a leaf-spine underlay. They have deployed the following in the data center:
* Two racks for a management cluster that is not prepared for VMware NSX
* Six racks for compute clusters
* Two racks for an Edge cluster which holds a DLR control VM for bridging, and North/South Edge Service Gateways
Which three of the following are true regarding the physical and logical networking of the environment?
(Choose three.)

Question58: In a Cross-vCenter implementation, where is the Universal Control Cluster deployed and configured?

Question59: What are two roles of vmnics? (Choose two.)

Question60: An NSX Administrator is examining traffic on the network shown below.

What is the packet flow when VM1 communicates to VM5?

Question61: An application requires load balancing with minimal impact to network performance. An NSX administrator is deploying a load balancer to meet the stated requirements.
Which load balancing engine should be deployed?

Question62: There is intermittent connectivity reported between virtual machines on separate hosts over logical switching.
What command-line tool can be used to test the MTU between two hosts?

Question63: An administrator has been asked to provide single failure redundancy. What is the minimum supported number of NSX Controllers needed to meet this requirements?

Question64: Which action is not an option for adding Virtual Machines to a Security Group?

Question65: From the NSX Edge CLI, which command would show VIP statistics?

Question66: Which two NSX Data Security roles could be assigned to view configured policies and violation reports?
(Choose two.)

Question67: Which is required to support unicast mode in NSX?

Question68: With which Application Profile types would the Insert X-Forwarded-For HTTP header option be used?

Question69: In a Cross-vCenter NSX deployment, what are two requirements that must be met in order for an administrator to deploy both universal logical switches and local logical switches within the same vCenter instance? (Choose two.)

Question70: A security administrator needs to create a Security Group based on an Active Directory group. However, AD Groups are not available as an option. What must the administrator configure before AD Groups are available?

Question71: The fact that NSX Data Security has visibility into sensitive data provides which two benefits? (Choose two)

Question72: A workload was attached to a logical switch port group in Compute Cluster 1. Users are complaining that they can communicate with other workloads on that port group in the cluster, but not with other workloads on different networks.

What is the most probable cause?

Question73: Which is a best practice to secure system traffic, ensure optimal performance and satisfy prerequisites for NSX?

Question74: What vSphere Distributed Switch security policy allows virtual machines to send frames with a MAC Address that is different from the one specified in the vmx file?

Question75: What are two requirements of the network infrastructure to the access layer? (Choose two )

Question76: An organization is planning to use NSX as part of a disaster recovery project to provide consistent networking between two sites. Each site has one vCenter server. The organization requires universal objects and requires components to function during a site outage.
What is the minimum total instances of NSX Manager(s) and NSX Controller(s) that must be deployed across both sites to support the required functionality?

Question77: An NSX environment requires physical NIC redundancy for all dvPortGroups when connecting hosts to the physical network. There are two 10Gb NIC's per host. Which two teaming methods should be used to ensure both links are utilized simultaneously? (Choose two.)