An organization has a vSphere environment configured with two adapters on each ESXi host. The physical network is configured to use Etherchannel. Based on the available options, what is the best option for load balancing traffic on the ESXi hosts?

An organization has a vSphere environment configured with two adapters on each ESXi host. The physical network is configured to use Etherchannel.
Based on the available options, what is the best option for load balancing traffic on the ESXi hosts? 

A. Configure a vSS using the Route based on originating virtual port load balancing setting.
B. Configure a vDS using the Route based on physical NIC load load balancing setting.
C. Configure a vDS using the Route based on source MAC hash load balancing setting.
D. Configure a vSS using the Route based on IP hash.









Answer: D

You are managing three ESXi 5.1 hosts attached to a vSphere Distributed Switch (vDS) using the default settings. You need to provide LACP Active Mode connectivity for the two 10Gb uplinks of each host attached to the Uplink Port Group of the vDS. Using VMware best practices, which option shows the steps required to configure use of LACP?

You are managing three ESXi 5.1 hosts attached to a vSphere Distributed Switch (vDS) using the default settings. You need to provide LACP Active Mode connectivity for the two 10Gb uplinks of each host attached to the Uplink Port Group of the vDS.
Using VMware best practices, which option shows the steps required to configure use of LACP? 

A. Upgrade all ESXi hosts to ESXi version 5.5. Create a new version 5.5 vDS. Use the Add and Manage Hosts option to migrate the hosts to the new vDS. Configure the appropriate LACP settings.
B. Upgrade all ESXi hosts to ESXi version 5.5. Create a new version 5.5 vDS and use the Add and Manage Hosts option to migrate the hosts to the new vDS. Upgrade all virtual machines to hardware version 10. Configure the appropriate LACP settings.
C. Upgrade all ESXi hosts to ESXi version 5.5. Upgrade the existing vDS and use the Add and Manage Hosts option to migrate the hosts to the new vDS. Upgrade all virtual machines to hardware version 10. Configure the appropriate LACP settings.
D. Configure the appropriate LACP settings.








Answer: D

A vSphere cluster consists of three ESXi 5.5 hosts. Each host has five powered-on virtual machines. Which option will successfully configure the hosts to use a newly-created vSphere Distributed Switch (vDS) with a single port group?

A vSphere cluster consists of three ESXi 5.5 hosts. Each host has five powered-on virtual machines. Which option will successfully configure the hosts to use a newly-created vSphere Distributed Switch (vDS) with a single port group? 

A. Using the vSphere Web Client, for each host, select a host, click Manage, click Networking, and click the icon to Add host networking.
B. Using the vSphere Web Client, for each host, select a host, right-click the host, select All vCenter Actions, and then select Add Networking.
C. Using the vSphere Web Client, select each of the running virtual machines and edit the settings of the network adapters.
D. Using the vSphere Web Client, select the newly created VDS and click Add and Manage Hosts.










Answer: D

You have a vSphere deployment consisting of ESXi 5.1 hosts and a vCenter Server 5.5. You are deploying NSX and begin by creating a vSphere Distributed Switch (vDS) on the vCenter Server using default settings. What is the next step in preparing the deployment for NSX?

You have a vSphere deployment consisting of ESXi 5.1 hosts and a vCenter Server 5.5. You are deploying NSX and begin by creating a vSphere Distributed Switch (vDS) on the vCenter Server using default settings. What is the next step in preparing the deployment for NSX? 

A. Use the option Add host networking.
B. Use the option Add and Manage Hosts.
C. Deploy NSX on each host.
D. Upgrade the ESXi hosts.








Answer: D

Which two configurations are valid on a vSphere Standard Switch using the vSphere Web Client?

Which two configurations are valid on a vSphere Standard Switch using the vSphere Web Client? 

A. Enable the use of SR-IOV for a physical adapter.
B. Set the MTU frame size on the vSwitch.
C. Configure Route Based on Physical NIC Load on a nic team.
D. Configure Port Mirroring on a portgroup.






Answer: A,B

Which statement is true regarding the configuration of vSphere Standard Switches on ESXi 5.5 hosts?

Which statement is true regarding the configuration of vSphere Standard Switches on ESXi 5.5 hosts? 

A. Additional ports must be manually added to a vSwitch when the configured number of ports has been exhausted. The host requires a reboot when this configuration change is made.
B. Additional ports must be manually added to a vSwitch when the configured number of ports has been exhausted. The host does not require a reboot when this configuration change is made.
C. Additional ports are automatically added to a vSwitch when the configured number of ports has been exhausted. The host does not require a reboot when this configuration change is made.
D. Additional ports are automatically added to a vSwitch as needed, and a set number of ports is not configured. The host does not require a reboot when this configuration change is made.








Answer: D

Which statement best describes scaling a fault tolerant spine-leaf multipathing fabric architected for an NSX deployment?

Which statement best describes scaling a fault tolerant spine-leaf multipathing fabric architected for an NSX deployment? 

A. Scaling should be performed by replacing 1Gbps links in the architecture with 10Gbps links.
B. Scaling should be performed by increasing the number of links from each leaf switch to the associated spine switches in the architecture.
C. Scaling should be performed by increasing the number of spine switches while maintaining point-to-point connectivity between leafs and spines.
D. Scaling should be performed by using layer 2 switching between the leaf and spine switches.






Answer: C

Which two statements correctly describe Spine-Leaf switch topologies?

Which two statements correctly describe Spine-Leaf switch topologies?  

A. Spine-leaf topologies must utilize layer 3 switching for inter-connectivity.
B. Spine-leaf topologies can utilize layer 2 or layer 3 switching for inter-connectivity.
C. Oversubscription, if it occurs, is more likely to be found in the spine switches.
D. Oversubscription, if it occurs, is more likely to be found in the leaf switches.







Answer: B,D

Which characteristic or feature is required for VXLAN traffic to successfully travel across virtual and physical networks?

Which characteristic or feature is required for VXLAN traffic to successfully travel across virtual and physical networks? 

A. Deployment of a three rack design for the compute and network infrastructure support.
B. A repeatable rack design for scalability.
C. Network device support for jumbo frames.
D. Physical VXLAN gateway support in the access layer switches.







Answer: C

Which NSX component provides the ability to provide East-West distributed routing for virtual machines in different subnets without having to traverse the physical network?

Which NSX component provides the ability to provide East-West distributed routing for virtual machines in different subnets without having to traverse the physical network? 

A. NSX vSwitch
B. NSX Edge
C. NSX Controller
D. NSX Distributed Firewall








Answer: B

Which NSX component decreases layer 2 broadcast domains and improves network efficiency and scale?

Which NSX component decreases layer 2 broadcast domains and improves network efficiency and scale? 

A. Logical Switches
B. Logical Routers
C. Logical Firewalls
D. Logical Virtual Private Networks







Answer: B

Which option shows an advantage of implementing logical firewalls in NSX?

Which option shows an advantage of implementing logical firewalls in NSX? 

A. NSX allows segmentation of virtual machines based upon VM names or user identity.
B. NSX provides traffic forwarding between layer 2 broadcast domains.
C. NSX allows virtual machine traffic to follow multiple paths to a specific destination.
D. NSX provides the ability to provide IPv4 and IPv6 dual stack configuration.










Answer: A

NSX provides easy integration with many third-party cloud management platforms (CMPs) through the implementation of which protocol?

NSX provides easy integration with many third-party cloud management platforms (CMPs) through the implementation of which protocol? 

A. SOAP
B. REST API
C. SSL
D. XML







Answer: B

An administrator wants to implement NSX within the vSphere virtual environment. Which two statements correctly describe changes that will occur as a result of an NSX deployment?

An administrator wants to implement NSX within the vSphere virtual environment.
Which two statements correctly describe changes that will occur as a result of an NSX deployment? 

A. Use of ARP will increase in the physical environment.
B. Use of ARP will decrease in the physical environment.
C. MAC address table usage will increase in the physical environment.
D. MAC address table usage will decrease in the physical environment.








Answer: B,D

In a 3-Tier Data Center design without virtualization, which statement most closely defines the architecture of network services?

In a 3-Tier Data Center design without virtualization, which statement most closely defines the architecture of network services? 

A. Network services such as NAT and firewalls are typically distributed throughout the access layer.
B. Network services such as routing and firewalls are typically deployed at the L2/L3 boundary.
C. Network services such as NAT and firewalls are typically deployed in-line with the applications.
D. Network QoS services such as classification and marking are performed by software in the compute nodes.









Answer: B

Which statement correctly defines third-party gateway support in NSX for vSphere and NSX for Multiple Hypervisors (NSX-MH. for application workloads that span virtual and physical spaces?

Which statement correctly defines third-party gateway support in NSX for vSphere and NSX for Multiple Hypervisors (NSX-MH. for application workloads that span virtual and physical spaces? 

A. Only NSX-MH provides support for hardware based gateways.
B. Only NSX for vSphere provides support for hardware based gateways.
C. Both versions of NSX provide support for hardware based gateways.
D. Neither version of NSX provides support for hardware based gateways at this time.










Answer: C

A data center environment contains the following: - VMware vCenter 5.1 - ESXi hosts 4.1 and higher - VMware Horizon View 5.2 - Network devices with merchant silicon ASICs Which two steps must be taken to ensure a successful NSX deployment?

A data center environment contains the following:
- VMware vCenter 5.1
- ESXi hosts 4.1 and higher
- VMware Horizon View 5.2
- Network devices with merchant silicon ASICs
Which two steps must be taken to ensure a successful NSX deployment?  

A. Upgrade the vCenter Server installation to vCenter Server 5.5.
B. Upgrade the network devices to support layer 2 multi-pathing.
C. Upgrade all compute nodes to ESXi 5.1 or later.
D. Upgrade the VMware Horizon View installation to Horizon View 5.3.








Answer: A,C

An administrator has deployed NSX within the vSphere environment, but is unable to deploy an NSX Controller. What step must be taken to resolve the issue?

An administrator has deployed NSX within the vSphere environment, but is unable to deploy an NSX Controller. What step must be taken to resolve the issue? 

A. Register the third-party security service device or virtual appliance with NSX Manager
B. Deploy a distributed router and enable the High Availability option.
C. On the NSX Manager, select Enable multicast addressing and complete the configuration.
D. Define a data security group for all deployed virtual machine groups.








Answer: C

To provide high availability and resilience for your NSX Manager deployment, you should utilize which high availability feature?

To provide high availability and resilience for your NSX Manager deployment, you should utilize which high availability feature? 

A. Configure the NSX Manager virtual machine(s) for Fault Tolerance
B. Install multiple NSX Managers per vCenter Server installation.
C. Configure the use of vSphere
H. and DRS.
D. Configure NSX High Availability.








Answer: C

An administrator will deploy NSX within an existing vSphere environment containing two vCenter Server instances. Each vCenter Server manages three clusters with 16 ESXi hosts per cluster. How many NSX Manager instances would be required for this deployment?

An administrator will deploy NSX within an existing vSphere environment containing two vCenter Server instances. Each vCenter Server manages three clusters with 16 ESXi hosts per cluster.
How many NSX Manager instances would be required for this deployment? 

A. 1
B. 2
C. 3
D. 6







Answer: B

Which statement describes proper packet processing of layer 3 traffic in an NSX for vSphere topology?

Which statement describes proper packet processing of layer 3 traffic in an NSX for vSphere topology? 

A. All packets are processed by the distributed router. No packets are processed by the Logical Router Control VM.
B. Only packets requiring routing to another VM on the same host are processed by the distributed router. Other packets are processed by the Logical Router Control VM.
C. Only packets requiring routing to another VM on a different host are processed by the distributed router. Other packets are processed by the Logical Router Control VM.
D. All packets requiring routing are processed by performing a lookup in the Logical Router Control VM and then forwarded.






Answer: A

When compared to the Software Defined Data Center architecture, what are two network limitations of a physical network architecture?

When compared to the Software Defined Data Center architecture, what are two network limitations of a physical network architecture?  

A. Configuring firewall policies
B. Multi-Tenancy
C. Configuring layer 3 switch networks
D. Traffic hair-pinning






Answer: B,D

What NSX feature allows for integration with any third-party Cloud Management Platforms?

What NSX feature allows for integration with any third-party Cloud Management Platforms? 

A. NSX Extensibility
B. NSX REST API
C. NSX Edge
D. NSX Controller








Answer: B

Which Layer 2 bridge is supported by the Distributed Router?

Which Layer 2 bridge is supported by the Distributed Router? 

A. VCD-NI to VLAN bridge
B. VXLAN to PVLAN bridge
C. VCD-NI to PVLAN bridge
D. VXLAN to VLAN bridge







Answer: D

What is the packet size of the VXLAN standard test packet when using the Ping test on the logical switches?

What is the packet size of the VXLAN standard test packet when using the Ping test on the logical switches? 

A. 1500
B. 1550
C. 1575
D. 1600








Answer: B

Which Endpoint service cannot be leveraged using Service Composer?

Which Endpoint service cannot be leveraged using Service Composer? 

A. Antivirus
B. Data Security
C. Layer 2 Bridging
D. Network Introspection







Answer: C

Which Virtual Machine cannot be protected by the Distributed Firewall?

Which Virtual Machine cannot be protected by the Distributed Firewall? 

A. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.1 host.
B. A Virtual Machine connected to a vSS Portgroup running on an ESXi 5.5 host.
C. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.5 host.
D. A Virtual Machine connected to a logical switch running on an ESXi 5.1 host.








Answer: D

What is the default logging action for rules created on an NSX distributed firewall?

What is the default logging action for rules created on an NSX distributed firewall? 

A. Do not log
B. Log
C. Log Critical
D. Log Information







Answer: A

Which statement best describes firewall packet processing in an NSX environment?

Which statement best describes firewall packet processing in an NSX environment? 

A. Packets that require firewall processing are redirected to the nearest ESXi host deployed with a virtual machine based firewall.
B. Packets that require firewall processing are forwarded to a physical firewall appliance.
C. Packets that require firewall processing are processed in-line on the local hypervisor.
D. Packets that require firewall processing are forwarded to the nearest ESXi host with an embedded firewall module.







Answer: C

If a Security Group is the Source for a General Logical Firewall Rule, which Virtual Machines will be affected by the rule?

If a Security Group is the Source for a General Logical Firewall Rule, which Virtual Machines will be affected by the rule? 

A. Each Virtual Machine defined in the Security Group.
B. Each Virtual Machine defined in the Source and Destination fields of the Logical Firewall Rule.
C. Each Virtual Machine identified in the Applied To field of the Logical Firewall Rule.
D. Each Virtual Machine identified in the Destination field of the Logical Firewall Rule.







Answer: C

Where are the Logical Firewall logs saved?

Where are the Logical Firewall logs saved? 

A. On the vNIC-FW module
B. On the ESXi host
C. On the NSX Controllers
D. On the NSX Manager






Answer: B

Which is not a valid Destination option for a General Logical Firewall rule?

Which is not a valid Destination option for a General Logical Firewall rule? 

A. Datacenter
B. Virtual App
C. MAC Set
D. Network






Answer: C

High Availability (HA) was not initially configured when an administrator deployed an NSX Edge Service Gateway. What should the administrator do to configure the NSX Edge with HA?

High Availability (HA) was not initially configured when an administrator deployed an NSX Edge Service Gateway. What should the administrator do to configure the NSX Edge with HA? 

A. Select the NSX Edge instance from the NSX Edges view in Networking & Security. Go to Manage> Settings> Configuration and add a NSX Edge appliance.
B. Delete the NSX Edge instance and redeploy it with HA. The existing NSX Edge configuration data will be lost.
C. Delete the NSX Edge instance and redeploy it with HA. The configuration data is retained by NSX Manager and pushed to the new NSX Edge instance.
D. Select the NSX Edge appliance from the Virtual Machines and Templates view. Go to Actions> All vCenter Actions> Enable HA to configure High Availability.








Answer: A

Which is not a prerequisite to upgrade vCloud Network and Security Virtual Wires to Logical Switches?

Which is not a prerequisite to upgrade vCloud Network and Security Virtual Wires to Logical Switches? 

A. vCloud Network and Security Manager has been upgraded to NSX Manager.
B. vShield Data Security has been uninstalled.
C. NSX Controllers have been deployed.
D. The NSX Manager has been configured with the same IP as the vCloud Network and Security Manager.








Answer: C

What is the earliest version of vCloud Network and Security (vCNS) that can be upgraded to VMware NSX for vSphere 6.0?

What is the earliest version of vCloud Network and Security (vCNS) that can be upgraded to VMware NSX for vSphere 6.0? 

A. vCNS 5.0
B. vCNS 5.1
C. vCNS 5.5
D. vCNS 6.0








Answer: C

You want to use an existing NSX Manager to extend logical networks to the ESXi hosts of a new cluster. What should you do?

You want to use an existing NSX Manager to extend logical networks to the ESXi hosts of a new cluster.
What should you do? 

A. On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for the new cluster.
B. On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for each of the new hosts.
C. On the Installation > Management page of the Networking & Security section of the vSphere Web Client, click the green plus sign to deploy a new NSX controller node to the new cluster.
D. On the Installation > Logical Network Preparation page of the Networking & Security section of the vSphere Web Client, create a new Transport Zone for the new cluster.







Answer: A

A company wants to deploy VMware NSX for vSphere and ensure the least amount of bandwidth consumption in the underlying physical architecture. Which replication mode should the logical switches be deployed with?

A company wants to deploy VMware NSX for vSphere and ensure the least amount of bandwidth consumption in the underlying physical architecture. Which replication mode should the logical switches be deployed with? 

A. Multicast Replication Mode
B. Unicast Replication Mode
C. Hybrid Replication Mode
D. vSphere Replication Mode







Answer: A

Choose the two statements correctly describing the way NSX provides integration with Cloud Management Platforms (CMP).

Choose the two statements correctly describing the way NSX provides integration with Cloud Management Platforms (CMP).  

A. OpenStack provides integration with the Cinder plug-in.
B. OpenStack provides integration with the Neutron plug-in.
C. VMware provides open source API plug-ins for their own CMP products such as vCD and vCAC.
D. VMware provides out of the box integration with their own CMP products such as vCD and vCAC.







Answer: B,D

Which statement is true regarding multicast traffic when implementing NSX?

Which statement is true regarding multicast traffic when implementing NSX? 

A. A multicast address range is required when using vCenter Server 5.5
B. A multicast address range is required when using ESXi 5.1 hosts
C. A multicast address range is required when using ESXi 5.0 hosts
D. A multicast address range is required when using vCenter Server 5.1








Answer: B

Which two statements are valid regarding vCloud Networking and Security (vCNS) and NSX?

Which two statements are valid regarding vCloud Networking and Security (vCNS) and NSX?  

A. Both vCNS and NSX support multiple hypervisor environments.
B. NSX provides support for multiple hypervisor environments, vCNS does not.
C. Both vCNS and NSX support dynamic routing protocols.
D. NSX supports dynamic routing protocols, vCNS does not.








Answer: B,D

Which two statements describe the benefits provided by firewall services deployed by NSX?

Which two statements describe the benefits provided by firewall services deployed by NSX?  

A. Firewall services deployed using a software appliance will provide east-west traffic filtering and security.
B. Firewall services deployed using a distributed kernel module will provide east-west traffic filtering and security.
C. Firewall services providing edge security services uses a virtual appliance and is centrally managed.
D. Firewall services providing edge security services uses a distributed kernel module.







Answer: B,C

An administrator has created a logical switch, but when attempting to select a transport zone, the dropdown box is empty. Which option is causing this issue?

An administrator has created a logical switch, but when attempting to select a transport zone, the dropdown box is empty. Which option is causing this issue? 

A. The transport zone has not been enabled on the NSX Controller
B. A VXLAN has not been created
C. A VLAN has not been created
D. The transport zone has not been assigned an IP address pool






Answer: B

Which tool is used to display VXLAN connection information?

Which tool is used to display VXLAN connection information? 

A. pktcap-uw
B. NSX Controller CLI
C. esxtop
D. VDS Health Check







Answer: B

Which tool detects a VLAN misconfiguration between virtual and physical switches?

Which tool detects a VLAN misconfiguration between virtual and physical switches? 

A. esxtop
B. esxcfg-vswitch
C. VDS Health Check
D. NSX Controller command line interface (CLI)








Answer: C

An administrator needs to perform a configuration backup of NSX. From which two locations can this task be performed?

An administrator needs to perform a configuration backup of NSX. From which two locations can this task be performed?  

A. Directly on the NSX Manager
B. From the vSphere Web Client
C. Using the NSX API
D. Directly on each NSX Controller









Answer: A,C

Where are the distributed NSX firewall decisions logged?

Where are the distributed NSX firewall decisions logged? 

A. NSX Manager
B. vCenter Server
C. NSX Edge
D. ESXi host







Answer: D

What is the function of NSX Data Security?

What is the function of NSX Data Security? 

A. Prevents sensitive data in your virtualized environment from being copied
B. Prevents sensitive data in your virtualized environment from being modified
C. Identifies sensitive data in your virtualized environment based upon regulation security policies
D. Identifies sensitive data in your virtualized environment based upon regulation violation reports








Answer: D

What is required before running an Activity Monitoring report?

What is required before running an Activity Monitoring report? 

A. Enable data collection on the NSX Controller
B. Enable data collection on the vCenter Server
C. Enable data collection on the NSX Manager
D. Enable data collection on the virtual machine







Answer: D

An administrator enables the NSX Ticket Logger to track infrastructure changes. The administrator logs out for lunch, returns and logs back in to complete the task. What is the status of ticket logger when the administrator logs back in?

An administrator enables the NSX Ticket Logger to track infrastructure changes. The administrator logs out for lunch, returns and logs back in to complete the task. What is the status of ticket logger when the administrator logs back in? 

A. The ticket logger still tracks changes until it is turned off by the administrator.
B. The ticket logger is turned off.
C. The ticket logger will prompt the user if they still want to continue tracking changes.
D. The ticket logger will display an error.








Answer: B

Which component automates the consumption of third-party services and provides mapping to virtual machines using a logical policy?

Which component automates the consumption of third-party services and provides mapping to virtual machines using a logical policy? 

A. NSX Manager
B. Cloud Management Platform (CMP)
C. Service Composer
D. NSX Data Security






Answer: C

Which port is used for NSX REST API Requests?

Which port is used for NSX REST API Requests? 

A. 80
B. 443
C. 5480
D. 8443






Answer: B