VMware Advanced Design VMware NSX-T Data Center 3V0-42.20 Exam Practice Test

Page: 1 / 14
Total 57 questions
Question 1

An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.

This information was gathered during a workshop:

Migrating existing data center to KVM hosts.

Redundancy and high availability are required.

No component can be a single point of failure.

Which selection should the architect recommend? (Choose the best answer.)



Answer : A


Question 2

Which three assessment findings are part of a Conceptual Design? (Choose three.)



Answer : A, D, E


Question 3

A customer has a requirement to implement a next generation firewall (NGFW) to improve security network introspection. The customer wants to apply the NGFW to all workloads exposed both internally and externally. The customer wants the NGFW to work seamlessly with NSX-T Data Center and vSphere.

Which solution should be recommended to the customer? (Choose the best answer.)



Answer : A


Question 4

A customer deploying NSX-T Data Center requires role based access controls be enforced in NSX Manager with these requirements:

identity platform must be highly available

authentication must be performed by customer's existing SAML identity provider

MFA must be performed by administrator to gain access to NSX Manager

Which identity deployments would meet the customer's requirements? (Choose the best answer.)



Question 5

A Solutions Architect is assisting a service provider with designing an NSX-T Data Center solution for these environments:

Virtual Data Center to Virtual Data Center connectivity

Tenant workload on-boarding to Virtual Data Centers.

These requirements must be met:

scalability across 5 data centers

all sites have a latency of 180ms

MTU between sites is 1800

bandwidth is 100Mbps between sites

multi-tenancy

Which two selections should the Solutions Architect propose to the service provider? (Choose two.)



Answer : D, E

As mentioned, using Federation for five sites is not possible yet. Therefore, we have to setup L2VPN. IPSec (needed by L2VPN) can be established from T0 as well as T1 (the same rule applies to L2VPN). However, L2VPN is limited (server or client) to one service per gateway, therefore it's not possible to utilize five L2VPN tunnels from the same T0 and we have to deploy five T1s.


Question 6

An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.

This information was gathered during a workshop:

Some workloads should be moved to a Cloud Provider.

Extend network's VLAN or VNI across sites on the same broadcast domain.

Enable VM mobility use cases such as migration and disaster recovery without IP address changes.

Support 1500 byte MTU between sites.

Which selection should the architect include in their design? (Choose the best answer.)



Answer : D


Question 7

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.

This information was gathered during the Assessment Phase:

Data between two networks connected over a public network needs to be encrypted.

Certificate authentication is required.

Dynamic route learning is preferred.

Which selection should the architect include in their design? (Choose the best answer.)



Answer : C

Route-based IPSec VPN provides tunneling on traffic based on the static routes or routes learned dynamically.

Tier-0 gateway in the active-standby state supports the following services:

NAT

Load balancing

Stateful firewall

VPN

Reference Docs:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-C0E5AF10-576D-493A-A079-C4C95D8F5373.html

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A.html#GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-DF689847-252E-451E-84B5-DB507CC010AC.html


Page:    1 / 14   
Total 57 questions