NEW QUESTION 1
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution. This information was gathered by the architect during the Discover Task of the Engagement Lifecycle:
There are applications which use IPv6 addressing.
Network administrators are not familiar with NSX-T Data Center solutions.
Hosts can only be configured with two physical NICs.
There is an existing management cluster to deploy the NSX-T components.
Dynamic routing should be configured between the physical and virtual network.
There is a storage array available to deploy NSX-T components.
Which risk was documented by the architect? (Choose the best answer.)

• A. Network administrators are not familiar with NSX-T Data Center solutions.
• B. Dynamic routing should be configured between the physical and virtual network.
• C. There are applications which use IPv6 addressing.
• D. There is a storage array available to deploy NSX-T components.

Answer: B

NEW QUESTION 2
Refer to the exhibit.

A financial company is adopting micro-services with the intent of simplifying network security. An NSX-T architect is proposing a NSX-T Data Center micro-segmentation logical design. The architect has created a diagram to share with the customer.
How many security levels will be implemented according to this Logical Design? (Choose the best answer.)

• A. 5 levels
• B. 3 levels
• C. 9 levels
• D. 4 levels

Answer: A

NEW QUESTION 3
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution. This information was gathered during a workshop:
There are six hosts and hardware has already been purchased.
Customer is planning a collapsed Management/Edge/Compute cluster.
Each host has two 10Gb NICs connected to a pair of switches.
There should be no single point of failure in any proposed design.
Which virtual switch design should the architect recommend to the organization? (Choose the best answer.)

• A. Create a vSphere Distributed Switch (vDS) for Management VMkernel traffic and assign one NI
• B. Also, create an NSX-T Virtual Distributed Switch (N-VDS) for overlay traffic and assign one NIC.
• C. Create an NSX-T Virtual Distributed Switch (N-VDS) for Management VMkernel traffic and assign one NI
• D. Also, create an NSX-T Virtual Distributed Switch (N-VDS) for overlay traffic and assign one NIC.
• E. Create an NSX-T Virtual Distributed Switch (N-VDS) for Management VMKernel and overlay traffic and assign both NICs.
• F. Create an NSX-T Virtual Distributed Switch (N-VDS) for Management VMkernel and overlay traffic and assign a new virtual NIC.

Answer: A

NEW QUESTION 4
A Solutions Architect is working with a customer which wants to extend their traditional Telco IP/MPLS core network to an NFV cloud.
Which NSX-T Data Center feature can be recommended by the architect? (Choose the best answer.)

• A. Distributed IDS
• B. EVPN
• C. Load Balancer
• D. BGP

Answer: D

NEW QUESTION 5
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution. This information was gathered during a workshop:
Migrating existing data center to KVM hosts.
Redundancy and high availability are required.
No component can be a single point of failure.
Which selection should the architect recommend? (Choose the best answer.)

• A. Linux Bridge redundancy with Active/Active Mode and multiple pNICs with necessary binding
• B. Linux Bridge redundancy with Active/Active Mode and single pNIC with static binding
• C. vSS/vDS in Active/Standby Mode with necessary binding
• D. vSS/vDS in Active/Active Mode with necessary pNICS and required binding modes

Answer: C

NEW QUESTION 6
Which two VMware recommendations should an architect follow when configuring top of rack (ToR) switches in an NSX-T Data Center environment? (Choose two.)

• A. Use only IPv4 addressing in all deployments.
• B. Configure redundant physical switches to enhance availability.
• C. Configure switch ports that connect to ESXi host manually as trunk ports.
• D. Configure switch ports with a Dynamic Trunking Protocol.
• E. Modify the Spanning Tree Protocol to increase the time to transition to the forwarding state.

Answer: DE

NEW QUESTION 7
An NSX-T Architect is working in a brownfield environment with 4 ESXi hosts. These constraints were documented:
new servers cannot be purchased
North/South bandwidth must be guaranteed
Top-of-Rack switches have additional uplinks
Which three recommendations should the architect implement? (Choose three.)

• A. Remove one of the ESXi hosts and install a bare-metal Edge.
• B. Use a resource pool for production workloads.
• C. Use a resource pool to deploy the Edge nodes on.
• D. Recommend obtaining 2 new physical NICs for the servers.
• E. Install Edge nodes on a separate cluster.

Answer: ACD

NEW QUESTION 8
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution. This information was gathered during a workshop:
Some workloads should be moved to a Cloud Provider.
Extend network??s VLAN or VNI across sites on the same broadcast domain.
Support 1500 byte MTU between sites.
Which selection should the architect include in their design? (Choose the best answer.)

• A. Load Balancer
• B. Reflexive NAT
• C. SSL VPN
• D. L2 VPN

Answer: D

NEW QUESTION 9
Which selection is associated with the Review Task of the Engagement Lifecycle? (Choose the best answer.)

• A. Gather and document requirements, assumptions, and constraints.
• B. Build, deploy, implement, and test the design.
• C. Measure performance against customer??s objective.
• D. Create and document the logical and physical design.

Answer: C

NEW QUESTION 10
An architect is helping an organization with the Logical Design of a Layer 2 bridging solution. This information was gathered during the Assessment Phase:
Workloads are running on ESXi hosts.
Workloads are running on KVM hosts.
Workloads on hypervisors should use bridging services.
VLAN 50 is used for Tier-0 uplink connectivity.
Which selection should the architect include in their design? (Choose the best answer.)

• A. Create an NSX Edge Bridge Cluster and configure the bridging profile with VLAN 60.
• B. Create an NSX Edge Bridge Cluster and configure the bridging profile with VLAN 50.
• C. Create an ESXi Bridge Cluster and configure the bridging profile with VLAN 50.
• D. Create an ESXi Bridge Cluster and configure the bridging profile with VLAN 60.

Answer: B

NEW QUESTION 11
Which NSX-T feature is used to allocate the network bandwidth to business-critical applications and to resolve situations where several types of traffic compete for common resources? (Choose the best answer.)

• A. Network I/O Control Profiles
• B. LLDP Profile
• C. LAG Uplink Profile
• D. Transport Node Profiles

Answer: A

NEW QUESTION 12
A customer deploying NSX-T Data Center requires role based access controls be enforced in NSX Manager with these requirements:
identity platform must be highly available
authentication must be performed by customer??s existing SAML identity provider
MFA must be performed by administrator to gain access to NSX Manager
Which identity deployments would meet the customer??s requirements? (Choose the best answer.)

• A. NSX Manager OAuth 2.0 registered to a 3-node Active Directory Federation Services cluster.
• B. NSX Manager OAuth 2.0 registered to a 2-node VMware Identity Manager cluster.
• C. NSX Manager OAuth 2.0 registered to a 2-node Active Directory Federation Services cluster
• D. NSX Manager OAuth 2.0 registered to a 3-node VMware Identity Manager cluster.

Answer: D

NEW QUESTION 13
An NSX-T architect is working with a customer who wants to improve performance and future-proof their workloads with a multi-site architecture.
A current-state analysis captured this information:
Latency between sites is 160ms.
Bandwidth is 2Gbps.
The MTU is 1600.
What two VMware design recommendations should the architect recommend to the organization to achieve future-proofing? (Choose two.)

• A. MTU is recommended to be 9000.
• B. MTU must be at least 1700.
• C. Bandwidth must be at least 10Gbps.
• D. Latency RTT is acceptable.
• E. Latency must be less than 150ms.

Answer: AE

NEW QUESTION 14
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution. This information was gathered during a workshop about ESXi Host networking:
A total of 50 ESXi hosts to be configured as Transport Nodes.
All ESXi hosts have a dedicated 2 ?? Intel 10Gbps Physical Network adapter for the Overlay Traffic. To achieve low latency, high throughput, redundancy, and performance, which two NIC teaming policies
should the architect recommend? (Choose two.)

• A. Load Balance Source MAC
• B. Load Balance Port ID
• C. Load Balance Source
• D. Load Balance Source Port ID
• E. Failover Order

Answer: DE

NEW QUESTION 15
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution. This information was gathered by the architect during the Discover Task of the Enagagement Lifecycle:
There are applications which use IPv6 addressing.
Network administrators are not familiar with NSX-T Data Center solutions.
Hosts can only be configured with two physical NICs.
There is an existing management cluster to deploy the NSX-T components.
Dynamic routing should be configured between the physical and virtual network.
There is a storage array available to deploy NSX-T components.
Which constraint was documented by the architect? (Choose the best answer.)

• A. Dynamic routing should be configured between the physical and virtual network.
• B. There are applications which use IPv6 addressing.
• C. Hosts can only be configured with two physical NICs.
• D. There are enough CPU and memory resources in the existing management cluster.

Answer: A

NEW QUESTION 16
According to the Discover Task of the Engagement Lifecycle, which statement would be classified as a risk? (Choose the best answer.)

• A. Enough power and cooling capacity is available in each rack in the data center.
• B. To retain certification to provide financial services to end customers, PCI-DSS audits need to be passed.
• C. A merger and acquisition process was recently completed and new company on-boarding is not completed.
• D. Due to existing contracts and purchase agreements, the existing server hardware needs to be reused.

Answer: B

NEW QUESTION 17
A customer wants to use ECMP to provide additional throughput and availability for their critical business applications. Some applications require load balancing for scale and availability.
Which two Edge design choices can an architect present to the customer? (Choose two.)

• A. Create a Tier-0 gateway in Active/Standby mode and a Tier-1 gateway in Active/Standby mode.
• B. Configure ECMP and Load Balancing on the Tier-0 gateway.
• C. Create a Tier-0 gateway in Active/Active mode and a Tier-1 gateway in Active/Standby mode.
• D. Create a Tier-0 gateway in Active/Standby mode.
• E. Configure ECMP on the Tier-0 gateway and Load Balancing on the Tier-1 gateway.

Answer: BD

NEW QUESTION 18
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
During discussions about centralized services NAT running on Tier-1 or Tier-0 Gateway, the customer made these requests:
Services contain stateful services.
Services should be in high availability mode.
Which two selections should the architect include in their design? (Choose two.)

• A. An active/active model should be used.
• B. Use Reflexive NAT on the uplink interface.
• C. DNAT should be applied on the uplink interface.
• D. Mix stateful and stateless NAT rules on the same gateway.
• E. The high availability mode supported is only Active-Standby.

Answer: DE

NEW QUESTION 19
A customer has a requirement to implement a next generation firewall (NGFW) to improve security network introspection. The customer wants to apply the NGFW to all workloads exposed both internally and externally. The customer wants the NGFW to work seamlessly with NSX-T Data Center and vSphere.
Which solution should be recommended to the customer? (Choose the best answer.)

• A. Use network introspection only on the external workloads and use NSX DFW for internal workloads.
• B. Apply the NGFW on bare metal hosts which will offer better performance of inline network introspection.
• C. Apply the NGFW to internal and external workloads for increased protection and use NSX-T Data Center with Federation to set network policies.
• D. Use NSX-T Data Center leveraged with NSX Intelligence to protect all workloads at the network inspection level.

Answer: D

NEW QUESTION 20
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:
Maximum performance and availability is required between the physical and virtual network.
Load Balancing service is required for back-end web servers.
NAT is required.
Which selection should the architect include in their design? (Choose the best answer.)

• A. Deploy a Tier-1 gateway and connect it to an Active/Active Tier-0 gateway with ECMP configured.
• B. Deploy an Active/Active Tier-0 gateway and configure ECMP.
• C. Deploy an Active/Standby Tier-0 gateway and configure ECMP.
• D. Create two separate VLANs to connect the Tier-0 gateway upstream traffic and configure ECMP.

Answer: C

NEW QUESTION 21
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution. Which three selections are requirements documented by an architect? (Choose three.)

• A. Aggregate N-S throughput at any given time should be at least 10G.
• B. All traffic should recover in the event of Host/Rack/ToR failure.
• C. Hardware is 5 years old and new hardware is already purchased.
• D. SAN storage has enough capacity to build the new infrastructure.
• E. Business critical applications should have an SLA of 99.99%.
• F. The Development Team are heavy on API usage.

Answer: ACF

NEW QUESTION 22
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:
Customer currently has a single 10 host vSphere cluster.
Customer wants to improve network security and automation.
Current cluster utilization and business policies prevent changing the existing vSphere deployment.
High-availability is important to the customer.
Which three selections should the architect include in their design? (Choose three.)

• A. Apply vSphere DRS VM-Host anti-affinity rules to the virtual machines of the NSX-T Edge cluster.
• B. Deploy at least two NSX-T Edge virtual machines in the vSphere cluster.
• C. Deploy the NSX Controllers in the management cluster.
• D. Apply vSphere Distributed Resource Scheduler (vSphere DRS) VM-Host anti-affinity rules to NSX Managers.
• E. Remove 2 hosts from the cluster and create a new edge cluster.
• F. Remove vSphere DRS VM-Host affinity rules to the NSX-T Controller VMs.

Answer: ACE

NEW QUESTION 23
Which is a family of solutions for data center designs that span compute, storage, networking, and management, serving as a blueprint for a customer??s Software Defined Data Center (SDDC) implementations? (Choose the best answer.)

• A. VMware SDDC Design
• B. VMware Validated Design
• C. VMware POC Design
• D. VMware Cloud Foundation

Answer: B

NEW QUESTION 24
Which three IPv6 features are supported in an NSX-T Data Center design? (Choose three.)

• A. IPv6 OSPF
• B. IPv6 static routing
• C. IPv6 switch security
• D. IPv6 DNS
• E. IPv6 Distributed Firewall
• F. IPv6 VXLAN

Answer: BCE

NEW QUESTION 25
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution. This information was gathered during a workshop:
Any proposed solution must provide low latency.
Any proposed solution must provide high throughput.
Customer is running stock trading applications.
Which two selections should the architect recommend to meet high-performance workload requirements?
(Choose two.)

• A. Leverage ESXi as the compute host.
• B. Use LACP for all uplink profiles.
• C. Leverage KVM as the compute host.
• D. Enable enhanced data path mode on the N-VDS.
• E. Enable latency sensitivity mode on the N-VDS.

Answer: AD

NEW QUESTION 26
......