VMware 2v0-642 Exam Practice Test Instant Access

Question 1

An administrator has implemented VMware NSX on a leaf-spine underlay. They have deployed the following in the data center:

* Two racks for a management cluster that is not prepared for VMware NSX

* Six racks for compute clusters

* Two racks for an Edge cluster which holds a DLR control VM for bridging, and North/South Edge Service Gateways

Which three of the following are true regarding the physical and logical networking of the environment? (Choose three.)

AAt least one VXLAN segment spans across all the racks.

BVXLAN segments span the compute and Edge racks.

CAt least one VLAN spans the compute racks.

DAt least one VLAN spans across the two management racks.

EAt least 2 VLANs span across the two Edge racks.

Answer : B, C, D

Question 2

When defining membership for a security group, which three identifiers can be used for dynamic inclusion? (Choose three.)

AVM folder

BComputer OS Name

CESXi host

DVM Name

ESecurity Tag

Answer : B, D, E

Question 3

Which two NSX Data Security roles could be assigned to view configured policies and violation reports? (Choose two.)

ASecurity Administrator

BNSX Administrator

CAuditor

DEnterprise Administrator

Answer : A, C

Question 4

Which tool is used to detect rogue services?

ANSX Logical Firewall

BNSX Logical Router

CActivity Monitoring

DFlow Monitoring

Answer : D

Question 5

What are two requirements of the network infrastructure to the access layer? (Choose two)

AIPv4 connectivity among ESXi hosts provided by a spine-leaf network design.

BIPv4 connectivity among ESXi hosts.

CIncreased MTU if the virtual machines are using the default MTU size of 1500.

DA Redundant, Layer 3, Top-of-Rack network design to provide high availability to ESX hosts.

Answer : B, C

Question 6

What are two benefits of the NSX Distributed Firewall? (Choose two.)

AVMs are protected even as they are vMotioned.

BEach VM is individually protected by a L2-L4 stateful firewall.

CESXi hosts are automatically protected by a distributed firewall.

DVXLANs are automatically protected by the Transport Zone definition.

Answer : A, B

Question 7

Which NSX component can validate that security policies at your organization are being enforced correctly?

AActivity Monitoring

BFlow Monitoring

CERSPAN

DDistributed firewalls

Answer : A

VMware 2v0-642 VMware Certified Professional 6 - Network Virtualization (NSX v6.2) Exam Practice Test