2V0-641 Online Practice Questions and Answers

Which statement describes proper packet processing of layer 3 traffic in an NSX for vSphere topology?

A. All packets are processed by the distributed router. No packets are processed by the Logical Router Control VM.

B. Only packets requiring routing to another VM on the same host are processed by the distributed router. Other packets are processed by the Logical Router Control VM.

C. Only packets requiring routing to another VM on a different host are processed by the distributed router. Other packets are processed by the Logical Router Control VM.

D. All packets requiring routing are processed by performing a lookup in the Logical Router Control VM and then forwarded.

Based on VMware's best practices, what two statements define the best solution for scaling layer 2 services for the virtual network? (Choose two.)

A. Employ a layer 2 switched network.

B. Employ a layer 3 switched network.

C. Use GRE for an overlay network.

D. Use VXLAN for an overlay network.

An administrator has recently deployed NSX, but is still using a pair of physical network security devices. The administrator wants to use the physical security devices to filter virtual machine traffic hosted in the overlay network.

Which NSX component will provide the connectivity between the overlay and the physical network?

A. Distributed Firewall

B. NSX Controller

C. Edge Services Gateway

D. Logical Router

How does NSX simplify physical network design?

A. VLANs are moved into the virtual network for virtual machine traffic, eliminating the need to use Private VLANs on the physical network.

B. Network administrators only need to configure routing on the physical network for virtual machine traffic since all other network functions are moved to the virtual network.

C. Transport zones are created in the virtual network for virtual machine traffic, removing the need to make changes to the physical network.

D. Virtual network integration can make changes to the physical network programmatically using REST API calls which automates network changes and increases agility.

A company wants to deploy VMware NSX for vSphere and ensure the least amount of bandwidth consumption in the underlying physical architecture.

Which replication mode should the logical switches be deployed with?

A. Multicast Replication Mode

B. Unicast Replication Mode

C. Hybrid Replication Mode

D. vSphere Replication Mode

What is the minimum number of vSphere Distributed Switches (vDS) that must be configured before deploying VMware NSX for vSphere?

A. 0

B. 1

C. 2

D. 4

A new ESXi 5.5 host is deployed in a vSphere environment with VMware NSX for vSphere. How can the host be prepared for VMware NSX for vSphere?

A. By using Image Builder to pre-load the NSX for vSphere VIBs in the ESXi image in an Auto Deploy solution.

B. By leveraging VMware Update Manager to install the new NSX for vSphere VIBs into each of the hosts.

C. By creating a new VMkernel port in the host from the Host and Clusters inventory view in vSphere Web Client.

D. By entering the ESXi 5.5 management IP address in the NSX Controllers so the VIBs can be installed.

When preparing a vSphere host cluster to work with VMware NSX, which two options show VIBs that are installed and registered with all hosts within the prepared cluster? (Choose two.)

A. NSX VXLAN

B. NSX Distributed Firewall

C. NSX Edge

D. NSX Data Security

An administrator manages a TFTP server virtual machine that is connected to a Logical Switch with a VNI of 7321. The TFTP server has been configured to use port 1069. An NSX Edge Service Gateway is connected to VNI 7321 and has an uplink interface with access to the physical network. Assume external users can reach the Service Gateway.

What should the administrator configure to ensure external connections to the TFTP server are successful?

A. Create a DNAT rule with the original port of 69 and translated port of 1069.

B. Create a SNAT rule with the original port of 1069 and translated port of 69.

C. Create a SNAT rule with the original port of 69 and translated port of 1069.

D. Create a DNAT rule with the original port of 1069 and translated port of 69.

Where does the Distributed Logical Firewall enforce firewall rules?

A. At the Virtual Machine's virtual Network Interface Card (vNIC).

B. At the Logical Switch virtual port that the Virtual Machine connects to.

C. At the NSX Controller's firewall kernel module.

D. At the ESXi host vmnic used by the vSphere Distributed Switch.

If a Security Group is the Source for a General Logical Firewall Rule, which Virtual Machines will be affected by the rule?

A. Each Virtual Machine defined in the Security Group.

B. Each Virtual Machine defined in the Source and Destination fields of the Logical Firewall Rule.

C. Each Virtual Machine identified in the Applied To field of the Logical Firewall Rule.

D. Each Virtual Machine identified in the Destination field of the Logical Firewall Rule.

An administrator has deployed NSX in an environment containing a mix of vSphere 5 hosts. The implementation includes the Distributed Firewall Service, but the administrator finds that rules are not being applied to all affected virtual machines.

What two conditions would cause this behavior? (Choose two.)

A. Some hosts have not been prepared for NSX.

B. Only ESXi 5.5 and later hosts can push the rules to the virtual machines.

C. Only ESXi 5.1 and later hosts can push the rules to the virtual machines.

D. Some hosts are blocking the port used for rule distribution.

Which two options are pieces of information required to perform an NSX backup? (Choose two.)

A. Transfer protocol

B. Default Port

C. Number of backups retained

D. Filename prefix

An administrator configures the IPSec VPN service on an NSX Edge instance, but the negotiation fails.

Examining the log file, the administrator notices the following message.

INVALID_ID_INFORMATION

Which misconfiguration caused the error?

A. Pre-shared key (PSK) does not match.

B. Diffie-Hellman (DH) Group does not match.

C. Perfect Forward Secrecy (PFS) does not match.

D. VPN tunnel address is incorrect.

-- Exhibit -

-- Exhibit -

An administrator is testing connectivity between two ESXi hosts and uses the ping utility, as shown in the

Exhibit.

Based on the results shown in the exhibit, which statement is correct?

A. Communication between the hosts is working correctly.

B. The hosts are in separate subnets.

C. The MTU size is too small.

D. A logical router has not been deployed and configured.