VMware

VMware NSX 4.x Advanced Design

3V0-42.23
Popular

Prepare for the 3V0-42.23 exam to validate your skills in advanced design for VMware NSX 4.x.

189 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 101–110 of 189

Q101

A company needs to segment its development environment without adding hardware. Which NSX feature should be used?

  • A Virtual Routing
  • B Micro-Segmentation
  • C Load Balancer
  • D VPN Service
Explanation Micro-segmentation provides internal security without hardware.
Q102

You are configuring the NSX Edge. What happens when you incorrectly set the HA mode to 'disabled'?

  • A High Availability is active
  • B Redundant Edge instances deploy
  • C Failover will not occur
  • D Performance will improve
Explanation Disabling HA prevents automatic failover to redundancy.
Q103

Which service in NSX provides load balancing?

  • A NSX Load Balancer
  • B NSX Edge Services
  • C NSX Firewall
  • D NSX Route Reflector
Explanation NSX Load Balancer is specifically designed for load balancing, while the others serve different functions.
Q104

A company needs to ensure that traffic between virtual machines on different segments has strict security policies. What feature should they use?

  • A NSX Distributed Firewall
  • B NSX Edge Firewall
  • C NSX Security Groups
  • D NSX VPN
Explanation The NSX Distributed Firewall enforces security policies at the VM level across segments, while the others do not provide that granularity.
Q105

You are configuring a multi-site NSX environment. What happens when a site goes offline?

  • A All traffic is rerouted instantly
  • B Traffic is stalled until restored
  • C Active/Active load balancing fails
  • D Traffic can still reach local resources
Explanation Local resources remain accessible due to local forwarding, while other options misrepresent the expected behavior.
Q106

Which service provides Layer 2 VPN capabilities in NSX?

  • A NSX-T Edge
  • B NSX Cloud
  • C NSX Load Balancer
  • D NSX Firewall
Explanation NSX-T Edge provides Layer 2 VPN, while others serve different purposes.
Q107

A company needs to isolate different tenant networks on the same physical infrastructure. What technology should they implement?

  • A VLANs
  • B VRFs
  • C NSX Segments
  • D Static Routing
Explanation NSX Segments allow for logical isolation, unlike traditional methods listed.
Q108

What happens when an NSX-D logical switch receives an ARP packet for an IP not in its subnet?

  • A It drops the packet.
  • B It replies with an ARP response.
  • C It forwards to the default gateway.
  • D It floods within the logical switch.
Explanation The logical switch drops packets for unknown IP addresses.
Q109

Which NSX service handles east-west traffic segmentation?

  • A NSX Distributed Firewall
  • B NSX Edge Services Gateway
  • C NSX Load Balancer
  • D NSX VPN Service
Explanation The NSX Distributed Firewall is specifically designed to segment and control east-west traffic within the data center, while the other options serve different functions.
Q110

A company needs to connect its on-premises data center with a cloud provider securely. What is the best solution?

  • A NSX VPN
  • B NSX Load Balancing
  • C NSX Data Security
  • D NSX Distributed Router
Explanation NSX VPN provides secure connections for hybrid deployments, while the other options do not offer a direct method for secure connectivity.