A company needs to secure east-west traffic. What should they implement?
ANSX-T Distributed Firewall
BVMware NSX Edge
CvSphere Standard Switch
DvCenter Resource Pool
Explanation
NSX-T Distributed Firewall secures east-west traffic effectively, while other options lack advanced segmentation features.
Q132
You are configuring VCF backup. What is the primary service to protect VM data?
AVMware Cloud Director
BvSAN File Services
CvRealize Suite
DvSphere Replication
Explanation
vSphere Replication specifically protects VM data, while others serve different purposes in the ecosystem.
Q133
Which service is primarily responsible for managing security policies in VCF 5.x?
AVMware Security Services
BVMware NSX-T
CVMware vSAN
DVMware Cloud Foundation
Explanation
VMware NSX-T manages security policies and micro-segmentation, while the others focus on different aspects of the VMware ecosystem.
Q134
You are configuring an SDDC with strict compliance requirements. Which feature should you enable?
AVMware vRealize Operations
BVMware Cloud Health
CEncrypted vMotion
DNSX Distributed Firewall
Explanation
Encrypted vMotion ensures data remains secure during migration, unlike the other options which address different monitoring or management needs.
Q135
What happens when you adjust the DRS settings to 'Fully Automated'?
ANo VM migrations occur
BVMs are relocated manually
CvCenter manages VM placements automatically
DResource pools are disabled
Explanation
Fully Automated allows vCenter to manage VM placement and migrations, whereas the other options describe incorrect settings or effects.
Q136
Which service is responsible for identity management in VMware Cloud Foundation?
AVMware vSphere
BVMware Identity Manager
CVMware vCenter
DVMware NSX
Explanation
VMware Identity Manager manages user identities, while others serve different functionalities.
Q137
A company needs to ensure that all VM traffic is encrypted. What feature should they enable?
ANSX Distributed Firewall
BVMware vSAN Encryption
CVMware ESXi Firewall
DNSX-T Data Center Intrusion Detection
Explanation
VMware vSAN Encryption encrypts VM traffic at rest, while others serve different purposes.
Q138
You are configuring segment policies in NSX. What happens when a policy is applied to multiple segments?
AIt duplicates the policy.
BIt applies the policy to all.
CPolicy becomes inactive.
DOnly one segment will respond.
Explanation
Applying a policy to multiple segments means it is enforced across them, while others do not reflect this behavior.
Q139
Which service provides advanced threat detection in VMware environments?
AVMware vSphere
BVMware NSX
CVMware Carbon Black
DVMware vCenter
Explanation
VMware Carbon Black specializes in advanced threat detection, while the others focus on infrastructure management.
Q140
A company needs to ensure continuous compliance with security policies. Which VMware product should they use?
AVMware vRealize Automation
BVMware vRealize Operations
CVMware CloudHealth
DVMware Aria Operations
Explanation
VMware vRealize Operations provides monitoring for compliance; the others focus on automation or cloud management.