VMware 3V0-42.20 Exam Questions Instant Access

Question 1

A Solutions Architect is working with a customer which wants to extend their traditional Telco IP/MPLS core network to an NFV cloud.

Which NSX-T Data Center feature can be recommended by the architect? (Choose the best answer.)

ADistributed IDS

BEVPN

CLoad Balancer

DBGP

Answer : B

In NSX-T Data Center 3.0, EVPN is used to extend traditional Telco networks to NFV clouds:

- Telco virtual router use BPG to dynamically exchange tenant routing with NSX gateways.

- NSX gateways implement VRFs to provide isolation between tenants.

- NSX gateways support MP-BPG to interconnect Telco traditional networks with NSX virtual networks.

- VXLAN is the encaptulation supported to exchange traffic with the remote gateways.

Taken from NSX-T ICM 3.0 Lecture Manual - Telco NFV Solution

Question 2

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:

Customer currently has a single 10 host vSphere cluster.

Customer wants to improve network security and automation.

Current cluster utilization and business policies prevent changing the existing vSphere deployment.

High-availability is important to the customer.

Which three selections should the architect include in their design? (Choose three.)

AApply vSphere DRS VM-Host anti-affinity rules to the virtual machines of the NSX-T Edge cluster.

BDeploy at least two NSX-T Edge virtual machines in the vSphere cluster.

CDeploy the NSX Controllers in the management cluster.

DApply vSphere Distributed Resource Scheduler (vSphere DRS) VM-Host anti-affinity rules to NSX Managers.

ERemove 2 hosts from the cluster and create a new edge cluster.

FRemove vSphere DRS VM-Host affinity rules to the NSX-T Controller VMs.

Answer : A, B, D

Question 3

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:

Maximum performance and availability is required between the physical and virtual network.

Load Balancing service is required for back-end web servers.

NAT is required.

Which selection should the architect include in their design? (Choose the best answer.)

ADeploy a Tier-1 gateway and connect it to an Active/Active Tier-0 gateway with ECMP configured.

BDeploy an Active/Active Tier-0 gateway and configure ECMP.

CDeploy an Active/Standby Tier-0 gateway and configure ECMP.

DCreate two separate VLANs to connect the Tier-0 gateway upstream traffic and configure ECMP.

Answer : A

LB must be attached to Tier-1 gateway. In a typical deployment, the Tier-1 gateway is connected to a Tier-0 gateway in active-active mode, and as we know just in Tier-0 is supported ECMP.

Question 4

Which two protocols are typically used for multicast in a NSX-T Data Center environment? (Choose two.)

APIM Full Form

BPIM Dense Mode

CIGMPv2

DPIM Sparse mode

EIGMPv3

Answer : C, D

The following protocols are used to implement multicast in NSX-T Data Center 3.0>

Internet Group Management Protocol (IMGP)

- IGMPv2

- IGMP Snooping

Protocol-Independent Mutlicast (PIM)

- PIM Sparse Mode (PIM-SM)

- PIM Bootstrap.

Take from NSX-T ICM 3.0 Lecture Manual - Multicas Protocols section.

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-6AAC3360-4F79-4FBF-BCC1-0D8C220B0621.html

Question 5

A telecom company has purchased NSX-T as part of a Software Defined Data Center (SDDC) initiative. The company wants to ensure the highest performance for network traffic leaving the virtual environment.

AConfigure Equal-Cost Multi-Pathing on the NSX Edges.

BConfigure SR-IOV for the virtual NSX Edges.

CUse bare metal NSX Edges.

DSelect Network cards that support VXLAN Offload.

ESet ''Latency Sensitive'' option to High when deploying the virtual NSX Edges.

Answer : A, C

Question 6

Which is a family of solutions for data center designs that span compute, storage, networking, and management, serving as a blueprint for a customer's Software Defined Data Center (SDDC) implementations? (Choose the best answer.)

AVMware SDDC Design

BVMware Validated Design

CVMware POC Design

DVMware Cloud Foundation

Answer : B

Question 7

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.

This information was gathered during the Assessment Phase:

Data between two networks connected over a public network needs to be encrypted.

Certificate authentication is required.

Dynamic route learning is preferred.

Which selection should the architect include in their design? (Choose the best answer.)

ADeploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.

BDeploy a Tier-0 gateway in Active/Active mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.

CDeploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.

DDeploy a Tier-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.

Answer : C

Route-based IPSec VPN provides tunneling on traffic based on the static routes or routes learned dynamically.

Tier-0 gateway in the active-standby state supports the following services:

NAT

Load balancing

Stateful firewall

VPN

Reference Docs:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-C0E5AF10-576D-493A-A079-C4C95D8F5373.html

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A.html#GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-DF689847-252E-451E-84B5-DB507CC010AC.html

VMware Advanced Design VMware NSX-T Data Center 3V0-42.20 Exam Questions