VMware Advanced Design VMware NSX-T Data Center 3V0-42.20 Exam Practice Test

Page: 1 / 14
Total 57 questions
Question 1

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.

This information was gathered during the Assessment Phase:

Data between two networks connected over a public network needs to be encrypted.

Certificate authentication is required.

Dynamic route learning is preferred.

Which selection should the architect include in their design? (Choose the best answer.)



Answer : C

Route-based IPSec VPN provides tunneling on traffic based on the static routes or routes learned dynamically.

Tier-0 gateway in the active-standby state supports the following services:

NAT

Load balancing

Stateful firewall

VPN

Reference Docs:

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-C0E5AF10-576D-493A-A079-C4C95D8F5373.html

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A.html#GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A

https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-DF689847-252E-451E-84B5-DB507CC010AC.html


Question 2

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:

There isn't much budget available for a new off shore site.

The new site is decentralized and no communication with the main data center is required.

The design will need to cater for availability, upgrades, and failure scenarios.

N+1 must be maintained at all times.

Which three selections should the architect recommend in their design? (Choose three.)



Answer : B, D, E


Question 3

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:

Maximum performance and availability is required between the physical and virtual network.

Load Balancing service is required for back-end web servers.

NAT is required.

Which selection should the architect include in their design? (Choose the best answer.)



Answer : A

LB must be attached to Tier-1 gateway. In a typical deployment, the Tier-1 gateway is connected to a Tier-0 gateway in active-active mode, and as we know just in Tier-0 is supported ECMP.


Question 4

Refer to the exhibits.

Design Option1:

Design Option 2:

Design Option 3:

Design Option 4:

An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.

The conceptual design includes these requirements, assumptions, constraints, and risks:

Critical applications must run across sites without changing IP address.

Business continuity and disaster recovery (BCDR) plans will leverage a second site running vSphere.

RTO/RPO must be reduced for recovery of applications on secondary site.

IT Teams require automation tools for configuration.

Which Conceptual Design would the architect recommend to the customer? (Choose the best answer.)



Answer : B


Question 5

Which two benefits can be achieved using in-band management of an NSX Bare Metal Edge Node? (Choose two.)



Question 6

Refer to the exhibit.

A financial company is adopting micro-services with the intent of simplifying network security. An NSX-T architect is proposing a NSX-T Data Center micro-segmentation logical design. The architect has created a diagram to share with the customer.

How many security levels will be implemented according to this Logical Design? (Choose the best answer.)



Answer : D

Each circle in this design is a 'level' starting at the most granular level which is the sub-component of the app (web, db., or app), then risk level (high, med, low) then deployment zone (prod, dev, test), and then finally infrastructure services level.


Question 7

Which three choices are non-functional requirements? (Choose three.)



Page:    1 / 14   
Total 57 questions