Question 1

Which of the following is NOT a feature of the VMware vDefend Gateway Firewall?

Options :

A : Implemented on Edge Node

B : Layer 7 APP-ID

C : Guest Introspection

D : TLS Decryption

Answer: C

Question 2

Which statements are true for DFW and Rule processing order based on the information shown in the image? (Select all that apply) [root@vesxi-nsxt-10:~] vsipioctl getconfig -f nic-2292571-ethO-vmware-sfw.2 ruleset mains { # generation number: 0 # realization time : 2020-05-21T13:01:48 # FILTER rules rule 1596 at 1 inout protocol tcp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset be665396-14d9-4ee4-98b9- 9c21ebfl27a port 464 accept; rule 1596 at 2 inout protocol udp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset be665396-14d9-4ee4-98b9- 9c21ebfl27a port 464 accept; rule 1595 at 3 inout protocol udp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset 9edl2e5f-36f4-42a9-a79b- 87efc243alef port 53 accept; rule 1594 at 4 inout protocol udp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset 59e6aa90-e360-4341-9fb3- b312772b79fb port 123 accept; rule 2 at 5 inout protocol any from any to any accept; }

Options :

A : Rule 1595 will be processed before rule 1596

B : Rule 1594 will be processed after 1595 and 1596

C : Rule 1596 will be the first one to be processed

D : Rule 2 will only be processed if the conditions for the above rules are not met

Answer: B,C,D

Question 3

Which of the following components can enforce Layer 7 Context Firewall Rules? (Select all that apply)

Options :

A : Distributed Firewall

B : Tier 1 Gateway

C : Tier 0 Gateway

D : VMK Interface

Answer: A,B,C

Question 4

Which of the following is true regarding the capabilities of Antrea?

Options :

A : To provide network connectivity between the Azure cloud and the On-Prem datacenter

B : To provide pod connectivity and network policy enforcement with Open vSwitch in Kubernetes

C : To provide pod connectivity and network policy enforcement with Nexus 1000v in AWS cloud

D : To provide network connectivity between the AWS cloud and the on-Prem datacenter

Answer: B

Question 5

Malware Detection/Prevention is enforced ONLY at Distributed level.

Options :

A : True

B : False

Answer: B

Confidently Practice Online with Free 6V0-21.25 Exam Cram

Buying Options: