A company needs to improve network traffic visibility. What should they implement?
AVMware NSX Distributed Firewall
BPacket Capture on Edge Nodes
CLoad Balancer in Front of Hosts
DStandard Switch Configuration
Explanation
Packet Capture on Edge Nodes provides deep visibility; other options don't specifically enhance traffic visibility.
Q42
You are configuring a VPN in an NSX environment. What happens if you set it to 'Split Tunnel'?
AAll traffic routed over VPN
BOnly remote users can connect
COnly specified traffic uses VPN
DNo external traffic allowed
Explanation
Split Tunnel allows only specified traffic to use the VPN, ensuring local traffic is unaffected.
Q43
Which service is used for managing IP address assignments in NSX?
ANSX IP Address Manager
BNSX Edge
CVMware vSphere
DVMware Aria Automation
Explanation
NSX IP Address Manager efficiently assigns and manages IP addresses, while the other options serve different purposes.
Q44
A company needs to enhance security between its application tiers in an NSX environment. What is the best practice?
AUse distributed firewall rules
BIncrease NAT rules
CDeploy additional NSX Managers
DImplement VLAN segmentation
Explanation
Distributed firewall rules provide micro-segmentation and security controls between application tiers.
Q45
You are configuring an NSX-T Data Center deployment. What happens when you forget to add a distributed logical router to an overlay segment?
ANo traffic can flow to the segment
BTraffic will route via BGP automatically
CAll VMs can still communicate
DThe segment becomes inactive automatically
Explanation
Without a distributed logical router, the overlay segment cannot route traffic externally, while the other options are not valid behaviors.
Q46
Which service helps optimize network traffic in NSX-T?
ANSX-T Load Balancer
BNSX-T VPN Service
CNSX-T Edge Service Gateway
DNSX-T Distributed Firewall
Explanation
The Edge Services Gateway optimizes traffic by providing services like NAT and load balancing, which are essential for scaling workloads, while the other options do not focus on traffic optimization.
Q47
A company needs to extend its Layer 2 network between two datacenters using NSX-T. What should they configure?
ALayer 2 VPN
BRouting protocols
CNSX-T Segments
DStatic IP addresses
Explanation
Layer 2 VPN enables the extension of Layer 2 connectivity across datacenters, while routing protocols and segments will not achieve the same goal directly, and static IP addresses are not relevant to this requirement.
Q48
What happens when a Distributed Firewall rule in NSX-T is set with a higher priority but configured incorrectly?
ARule is applied as expected
BRule is ignored completely
CTraffic flows unaffected
DConflicts with other rules
Explanation
An incorrectly configured rule may not apply the conditions effectively, but due to its higher priority, it does not conflict and allows traffic to flow as per prior matching rules, whereas the other options describe inaccurate behaviors.
Q49
Which service enables service chaining with NSX-T?
AService Graph
BLoad Balancer
CEdge Services Gateway
DTier-1 Gateway
Explanation
Service Graph allows defining service chains, while the others serve different functions.
Q50
A company needs to implement micro-segmentation. What should they primarily configure in NSX-T?
ALogical Switches
BDistributed Firewall
CEdge Firewall
DTransitional Router
Explanation
The Distributed Firewall provides micro-segmentation features, unlike the other options.