NEW QUESTION 1
What are three NSX Manager roles? (Choose three.)

• A. cloud
• B. manager
• C. zookeeper
• D. policy
• E. master
• F. controller

Answer: BDF

NEW QUESTION 2
An NSX administrator has deployed an NSX Edge on a bare-metal server. Which command registers the NSX Edge with the NSX Manager?

• A. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint <nsx-manager-thumbprint>
• B. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint<nsx-manager—thumbprint>
• C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint<nsx-manager-thumbprint>
• D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint<nsx-manager-thumbprint>

Answer: D

NEW QUESTION 3
Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

• A. Destination MAC
• B. Load Balanced Source IP
• C. Failover Order
• D. Destination Port
• E. Load Balanced Source MAC
• F. Load Balanced Source

Answer: CEF

NEW QUESTION 4
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

• A. SR and DR doesn’t need to be connected to provide any stateful services.
• B. DR is instantiated and automatically connected with SR.
• C. SR is instantiated and automatically connected with DR.
• D. SR and DR is instantiated but requires manual connection.

Answer: C

NEW QUESTION 5
Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?

• A. ifconfig
• B. tcpdump
• C. debug
• D. ipconfig

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-B7E7371E-A9F6-4880-B184

NEW QUESTION 6
Which step must be performed before deploying an additional NSX Manager from the NSX-T UI?

• A. Prepare the ESXi hosts as Transport Nodes.
• B. Configure the Virtual IP of the cluster.
• C. Register vCenter Server as a Compute Manager.
• D. Create an Edge Cluster.

Answer: C

NEW QUESTION 7
Which two logical router components span across all transport nodes? (Choose two.)

• A. DISTRIBUTED_ROUTER_TIER0
• B. SERVICE_ROUTER_TIER0
• C. TIER0_DISTRIBUTED_ROUTER
• D. DISTRIBUTED_ROUTER_TIER1
• E. SERVICE_ROUTER_TIER1

Answer: AD

NEW QUESTION 8
How does Traceflow tool identify issues in a network?

• A. Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.
• B. Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.
• C. Injects synthetic traffic into the data plane and observes the results in the control plane.
• D. Injects ICMP traffic into the data plane and observes the results in the control plane.

Answer: C

NEW QUESTION 9
Which component does the hyperbus interface (vmk50) provide network connectivity to?

• A. containers running on ESXi/KVM transport nodes
• B. virtual machines and containers running across transport nodes
• C. virtual machines running on the same hypervisor
• D. virtual machines running in the same segment

Answer: A

NEW QUESTION 10
Which discovery protocol is supported for hypervisor transport nodes?

• A. Adobe Real-time CDP
• B. Neighbor Discovery Protocol
• C. Cisco Discovery Protocol
• D. Link Layer Discovery Protocol

Answer: D

NEW QUESTION 11
Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

• A. Multicast
• B. Anycast
• C. Unicast
• D. Broadcast

Answer: C

NEW QUESTION 12
Which Network and Security virtualization solution provides network hybridity and mobility?

• A. VMware HCX
• B. VMware Tanzu Service Mesh
• C. NSX Advanced Load Balancer
• D. NSX Intelligence

Answer: A

NEW QUESTION 13
Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

• A. Identify security vulnerabilities in the workloads.
• B. Use agentless antivirus with Guest Introspection.
• C. Quarantine workloads based on vulnerabilities.
• D. Identify risk and reputation of accessed websites.
• E. Gain insight about micro-segmentation traffic flows.

Answer: AC

NEW QUESTION 14
Which three steps must be carried out to configure North-South / East-West Network Inspection? (Choose three.)

• A. Service Deployment
• B. Service Insertion
• C. Service Consumption
• D. Service Registration
• E. Service Introspection

Answer: ABE

NEW QUESTION 15
How is the intra-tier transit link connection created between SR and DR for a Tier-0 Gateway?

• A. Manually create a gateway interface and mark it as transit.
• B. Automatically created when DR is created.
• C. Automatically created when SR is initialized.
• D. Manually create external uplink interface and mark it as transit.

Answer: C

NEW QUESTION 16
Which three services are compatible with VRF Lite? (Choose three.)

• A. VPN
• B. Intrusion Detection
• C. NAT
• D. Load Balancer
• E. DHCP

Answer: BCE

Explanation:
VRF Lite is not compatible with the following services:
-VPN
-Load Balancer
Taken from NSX-T ICM 3.0 Lecture Manual.

NEW QUESTION 17
An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.
In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)

• A. Advertise All LB SNAT IP Routes
• B. All Static Routes
• C. Information
• D. Advertise All LB VIP Routes
• E. Advertise All NAT Routes

Answer: AD

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EEBA627A-0860-477A-9

NEW QUESTION 18
Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?

• A. get host-switch <Host-Switch-Name> tunnels
• B. get transport-node tunnel status
• C. get host-switch <Host-Switch-Name> tunnel status
• D. get transport-node tunnel state

Answer: A

Explanation:
https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/8264

NEW QUESTION 19
An administrator has a requirement to have consistent policy configuration and enforcement across NSXT instances. What feature of NSX-T Data Center fulfills this requirement?

• A. Load balancer
• B. Policy-driven configuration
• C. Multi-hypervisor support
• D. Federation

Answer: B

NEW QUESTION 20
When running nsxcli on an ESXi host, which command will show the Replication mode?

• A. get logical-switch <Local-Switch-UUID> status
• B. get logical-switch <Logical-Switch-UUID>
• C. get logical-switches
• D. get logical-switch status

Answer: B

Explanation:
https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/8264

NEW QUESTION 21
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

• A. Deploy Large size Edge node/s.
• B. Configure ECMP on the Tier-0 gateway.
• C. Configure NAT on the Tier-0 gateway.
• D. Add an additional vNIC to the NSX Edge node.
• E. Configure a Tier-1 gateway and connect it directly to the physical routers.

Answer: AB

NEW QUESTION 22
......