All About 100% Correct 2V0-41.20 Study Guides

NEW QUESTION 1
An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs.
Which routing component must be deployed?

• A. Tier-1 Gateway
• B. Edge Services Gateway
• C. Tier-0 Gateway
• D. Layer 2 Gateway

Answer: C

NEW QUESTION 2
How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?

• A. 5
• B. 6
• C. 3
• D. 4

Answer: D

NEW QUESTION 3
What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)

• A. policy-based IPSec VPN
• B. Layer-7 based IPSec VPN
• C. route-based IPSec VPN
• D. Open source based IPSec VPN
• E. SSL based IPSec VPN

Answer: AC

NEW QUESTION 4
Which Network and Security virtualization solution provides network hybridity and mobility?

• A. VMware HCX
• B. VMware Tanzu Service Mesh
• C. NSX Advanced Load Balancer
• D. NSX Intelligence

Answer: A

NEW QUESTION 5
Which is correct when deploying a NSX Edge in a KVM only environment?

• A. deploy NSX Edge VM with QCOW2 image
• B. deploy NSX Edge VM with ISO image
• C. deploy NSX Edge on a bare-metal server
• D. deploy NSX Edge VM with OVF template

Answer: C

NEW QUESTION 6
A user is assigned these two roles in NSX Manager:
LB Admin
Network Engineer
What privileges does this user have in the system?

• A. read permissions on all networking services and full access permissions on load balancing features
• B. full access permissions on all networking services and full access permissions on load balancing features
• C. full access permissions on all networking services and read permissions on load balancing features
• D. read permissions on all networking services and read permissions on load balancing features

Answer: B

NEW QUESTION 7
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?

• A. Beacon Probing (BP)
• B. Host Standby Router Protocol (HSRP)
• C. Bidirectional Forwarding Detection (BFD)
• D. Virtual Router Redundancy Protocol (VRRP)

Answer: C

NEW QUESTION 8
An NSX administrator would like to configure syslog for a KVM transport node. Which host log files could be exported to a remote syslog server?

• A. /var/log/vmware/nsx-syslog
• B. /var/log/cfgAgent.log
• C. /var/log/nsx-audit.log
• D. /var/log/cloudnet/nsx-ccp.log

Answer: A

NEW QUESTION 9
A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway. A NSX-T Data Center administrator used the get logical-routers command to retrieve this information:

Which two commands must be executed to check BGP neighbor status? (Choose two.)

• A. vrf 3
• B. vrf 1
• C. vrf 4
• D. sa-nsxedge-01(tier1_sr)> get bgp neighbor
• E. sa-nsxedge-01(tier0_sr)> get bgp neighbor
• F. sa-nsxedge-01(tier0_dr)> get bgp neighbor

Answer: AE

NEW QUESTION 10
How does Traceflow tool identify issues in a network?

• A. Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.
• B. Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.
• C. Injects synthetic traffic into the data plane and observes the results in the control plane.
• D. Injects ICMP traffic into the data plane and observes the results in the control plane.

Answer: C

NEW QUESTION 11
Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)

• A. 5685
• B. 1235
• C. 5671
• D. 5678
• E. 1234

Answer: BE

Explanation:
The NSX Manager management plane communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1234. CCP communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1235. Taken from NSX-T ICM 3.0 Lecture manual

NEW QUESTION 12
How is the intra-tier transit link connection created between SR and DR for a Tier-0 Gateway?

• A. Manually create a gateway interface and mark it as transit.
• B. Automatically created when DR is created.
• C. Automatically created when SR is initialized.
• D. Manually create external uplink interface and mark it as transit.

Answer: C

NEW QUESTION 13
An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)

• A. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.
• B. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the KVM Transport Node.
• C. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.
• D. The virtual machines running on the KVM Transport Node are not connected to the VDS.
• E. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.

Answer: BE

NEW QUESTION 14
What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.)

• A. stateful services leveraged
• B. Failover of services
• C. traffic predictability
• D. traffic load balancing
• E. increased north/south bandwidth

Answer: DE

Explanation:
From ICM manual:
Equal-cost multipath (ECMP) routing has several features and functions:
• ECMP routing increases the north-south communication bandwidth by combining multiple uplinks.
• ECMP routing performs traffic load balancing.
• ECMP routing provides fault tolerance for failed paths.
• A maximum of eight ECMP paths are supported.
• Hashing is based on 2-tuple IP source and destination addresses.
• ECMP routing is only available on Tier-0 gateways.

NEW QUESTION 15
Which statement is true about an alarm in a Suppressed state?

• A. An alarm can be suppressed for a specific duration in days.
• B. An alarm can be suppressed for a specific duration in minutes.
• C. An alarm can be suppressed for a specific duration in seconds.
• D. An alarm can be suppressed for a specific duration in hours.

Answer: D

Explanation:
https://docs.vmware.com/en/VMware-NSX-Intelligence/1.1/user-guide/GUID-EBD3C5A8-F9AB-4A22-BA40- "If you move an alarm into a Suppressed state, you are prompted to specify the duration in hours. After the specified duration passes, the alarm state reverts to Open. However, if the system determines the condition has been corrected, the alarm state changes to Resolved."
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EB1BB1D3-8892-4890-B

NEW QUESTION 16
Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

• A. virsh dumpxml <VM Name> | grep interfaceid
• B. virsh get-interface <VM Name>
• C. virsh show <VM Name> | grep interfaceid
• D. virsh list-interface <VM Name>

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf

NEW QUESTION 17
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

• A. Deploy Large size Edge node/s.
• B. Configure ECMP on the Tier-0 gateway.
• C. Configure NAT on the Tier-0 gateway.
• D. Add an additional vNIC to the NSX Edge node.
• E. Configure a Tier-1 gateway and connect it directly to the physical routers.

Answer: AB

NEW QUESTION 18
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

• A. SR and DR doesn’t need to be connected to provide any stateful services.
• B. DR is instantiated and automatically connected with SR.
• C. SR is instantiated and automatically connected with DR.
• D. SR and DR is instantiated but requires manual connection.

Answer: C

NEW QUESTION 19
An NSX administrator has deployed an NSX Edge on a bare-metal server. Which command registers the NSX Edge with the NSX Manager?

• A. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint <nsx-manager-thumbprint>
• B. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint<nsx-manager—thumbprint>
• C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint<nsx-manager-thumbprint>
• D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint<nsx-manager-thumbprint>

Answer: D

NEW QUESTION 20
An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

• A. esxcli network diag ping -H <destination IP address>
• B. vmkping ++netstack=geneve -d -s 1572 <destination IP address>
• C. vmkping ++netstack=vxlan-d -s 1572 <destination IP address>
• D. esxcli network diag ping -I vmk0 -H <destination IP address>

Answer: C

Explanation:
https://kb.vmware.com/s/article/1003728

NEW QUESTION 21
Which statement describes the VMware Virtual Cloud Network Vision?

• A. Virtual Cloud Network connects and protects virtual machines running in KVM environments.
• B. Virtual Cloud Network connects and protects virtual machines running in vSphere environments.
• C. Virtual Cloud Network connects and protects applications, regardless of their physical locations.
• D. Virtual Cloud Network connects and protects applications and data, regardless of their physical locations.

Answer: D

NEW QUESTION 22
A customer is preparing to deploy VMware Kubernetes on an NSX-T Data Center. What is the minimum MTU size for the UPLINK profile?

• A. 1500
• B. 1650
• C. 1550
• D. 1600

Answer: D

NEW QUESTION 23
......