Question 1

Which two are supported by L2 VPN clients? (Choose two.)

Options :

A : NSX for vSphere Edge

B : 3rd party Hardware VPN Device

C : NSX Autonomous Edge

D : NSX Edge

Answer: A,D

Question 2

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Options :

A : Use agentless antivirus with Guest Introspection.

B : Quarantine workloads based on vulnerabilities.

C : Identify risk and reputation of accessed websites.

D : Gain Insight about micro-segmentation traffic flows.

E : Identify security vulnerabilities in the workloads.

Answer: B,E

Question 3

Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?

Options :

A : The option to set time-based rule is a clock Icon in the rule.

B : The option to set time based rule is a field in the rule Itself.

C : There Is no option in the NSX UI. It must be done via command line interface.

D : The option to set time-based rule is a clock Icon in the policy.

Answer: A

Question 4

How does the Traceflow tool identify issues in a network?

Options :

A :

Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

B :

Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

C : Injects ICMP traffic into the data plane and observes the results in the control plane.

D : Injects synthetic traffic into the data plane and observes the results in the control plane.

Answer: D

Question 5

An NSX administrator is creating a Tier-1 Gateway configured In Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original tailed node to become the Active node upon recovery. Which failover policy meets this requirement?

Options :

A : Non-Preemptive

B : Preemptive

C : Enable Preemptive

D : Disable Preemptive

Answer: A

Confidently Practice Online with Free 2V0-41.23 Exam Cram

Buying Options: