Question 1

You are building a VMware vDefend Distributed Firewall policy to protect an application. You want to be sure that the policy cannot be modified by two different users simultaneously. What should you do?

Options :

A : Set the Locked option of the firewall policy to Yes

B : Move the policy so that it is the first policy in the list

C : Define the policy action as Block

D : Use role-based access control to make all other users read-only users

Answer: A

Question 2

Which of the following API actions are not valid?

Options :

A : GET

B : POST

C : UPDATE

D : DELETE

Answer: C

Question 3

Malware Detection/Prevention is enforced ONLY at Distributed level.

Options :

A : True

B : False

Answer: B

Question 4

Which statements are true for DFW and Rule processing order based on the information shown in the image? (Select all that apply) [root@vesxi-nsxt-10:~] vsipioctl getconfig -f nic-2292571-ethO-vmware-sfw.2 ruleset mains { # generation number: 0 # realization time : 2020-05-21T13:01:48 # FILTER rules rule 1596 at 1 inout protocol tcp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset be665396-14d9-4ee4-98b9- 9c21ebfl27a port 464 accept; rule 1596 at 2 inout protocol udp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset be665396-14d9-4ee4-98b9- 9c21ebfl27a port 464 accept; rule 1595 at 3 inout protocol udp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset 9edl2e5f-36f4-42a9-a79b- 87efc243alef port 53 accept; rule 1594 at 4 inout protocol udp from addrset e70a9a79-c346-48c4-8b9d- 402e97e38a7c to addrset 59e6aa90-e360-4341-9fb3- b312772b79fb port 123 accept; rule 2 at 5 inout protocol any from any to any accept; }

Options :

A : Rule 1595 will be processed before rule 1596

B : Rule 1594 will be processed after 1595 and 1596

C : Rule 1596 will be the first one to be processed

D : Rule 2 will only be processed if the conditions for the above rules are not met

Answer: B,C,D

Question 5

Which of the following is true regarding the capabilities of Antrea?

Options :

A : To provide network connectivity between the Azure cloud and the On-Prem datacenter

B : To provide pod connectivity and network policy enforcement with Open vSwitch in Kubernetes

C : To provide pod connectivity and network policy enforcement with Nexus 1000v in AWS cloud

D : To provide network connectivity between the AWS cloud and the on-Prem datacenter

Answer: B

Confidently Practice Online with Free 6V0-21.25 Exam Cram

Buying Options: