View All 2V0-41.20 Actual Exam Questions Answers and Explanations for Free May-2024
The Most In-Demand VMware 2V0-41.20 Pass Guaranteed Quiz
NEW QUESTION # 10
Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?
- A. Transport Node Profile
- B. Switching Profile
- C. Uplink Profile
- D. Host Profile
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 11
What are three characteristics of a transport zone? (Choose three.)
- A. configured with multiple N-VDS
- B. defines the potential reach of transport nodes
- C. configured with a Single N-VDS
- D. optional for creating a segment
- E. defines the scope and reachability of a Segment
Answer: B,C,E
Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.3/com.vmware.nsxt.install.doc/GUID-F47989B2-2B9D-4214-B3BA-5DDF66A1B0E6.html
NEW QUESTION # 12
When running nsxclion an ESXi host, which command will show the Replication mode?
- A. get logical-switch status
- B. get logical-switch <Local-Switch-UUID> status
- C. get logical-switches
- D. get logical-switch <Logical-Switch-UUID>
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 13
How does the Traceflow tool identify issues in a network?
- A. Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.
- B. Injects ICMP traffic into the data plane and observes the results in the control plane.
- C. Injects synthetic traffic into the data plane and observes the results in the control plane.
- D. Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.
Answer: C
NEW QUESTION # 14
What are two supported N-VDS modes? (Choose two.)
- A. DPDK Datapath
- B. Enhanced Datapath
- C. Standard Datapath
- D. Overlay Datapath
- E. Secure Datapath
Answer: B,C
Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-37BC3CEF-DCC1-4C6F-960D-CFBB31908D1C.html
NEW QUESTION # 15
What are two supported N-VDS modes? (Choose two.)
- A. DPDK Datapath
- B. Enhanced Datapath
- C. Standard Datapath
- D. Overlay Datapath
- E. Secure Datapath
Answer: B,C
NEW QUESTION # 16
What are two supported N-VDS modes? (Choose two.)
- A. DPDK Datapath
- B. Enhanced Datapath
- C. Standard Datapath
- D. Overlay Datapath
- E. Secure Datapath
Answer: B,C
Explanation:
Explanation
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-37BC3CEF-DCC1-4C6F-960D
NEW QUESTION # 17
What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN- backed logical switch?
- A. Service interface
- B. Loopback Router Port
- C. VLAN Uplink
"The service interface is a special-purpose port to enable services for mainly VLAN-based networks. North-south service insertion is another use case that requires a service interface to connect a partner appliance and redirect north-south traffic for partner services. Service interfaces are supported on both active-standby Tier-0 logical routers and Tier-1 routers. Firewall, NAT, and VPNs are supported on this interface. The service interface is also a downlink" - D. Downlink interface
Answer: A
NEW QUESTION # 18
How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?
- A. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.
- B. Automatically created when Tier-1 is created.
- C. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.
- D. Automatically created when Tier-1 is connected with Tier-0 from NSX UI.
Answer: D
NEW QUESTION # 19
Where are Distributed Firewall logs containing access decisions stored?
- A. Hypervisor transport node
- B. NSX API
- C. NSX Edge
- D. NSX Manager
Answer: A
Explanation:
https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.logging.doc/GUID-6F9DC53E-222D-464B-8613-AB2D517CE5E3.html
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-D57429A1-A0A9-42BE-A299-0C3C3546ABF3.html
NEW QUESTION # 20
A security administrator needs to configure a firewall rule based on the domain name of a specific application. Which field in a distributed firewall rule does the administrator configure?
- A. Service
- B. Source
- C. Policy
- D. Profile
Answer: D
NEW QUESTION # 21
Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)
- A. must have only active-active edge nodes
- B. can contain multiple types of edge nodes (VM or bare metal)
- C. can have a maximum of 8 edge nodes
- D. must contain only one type of edge nodes (VM or bare metal)
- E. can have a maximum of 10 edge nodes
Answer: B,E
Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-14183A62-8E8D-43CC-92E0-E8D72E198D5A.html
NEW QUESTION # 22
An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?
- A. esxcli network diag ping -I vmk0 -H <destination IP address>
- B. vmkping ++netstack=vxlan-d -s 1572 <destination IP address>
- C. vmkping ++netstack=geneve -d -s 1572 <destination IP address>
- D. esxcli network diag ping -H <destination IP address>
Answer: B
Explanation:
https://kb.vmware.com/s/article/1003728
NEW QUESTION # 23
Which three steps are required to create an IPsec VPN tunnel? (Choose three.)
- A. Create an IPsec service.
- B. Configure a distributed firewall policy.
- C. Add a local endpoint.
- D. Add a logical switch.
- E. Configure an IPsec session.
Answer: A,C,E
Explanation:
To create an IPsec VPN tunnel in VMware NSX-T, these are the three steps that need to be performed:
Create an IPsec service: An IPsec service is a container for one or more IPsec sessions. It contains the IPsec configuration such as algorithms, encryption keys, and security protocols.
Add a local endpoint: The local endpoint represents the IP address of the local VPN gateway.
Configure an IPsec session: The IPsec session defines the specific parameters for a VPN connection, such as the remote endpoint, encryption and authentication algorithms, and the key exchange method.
NEW QUESTION # 24
Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?
- A. get support-bundle file vcpnv.tgz
- B. set support-bundle file vcpnv.tgz
- C. vm-support
- D. esxcli system syslog config logger set --id=nsxmanager
Answer: C
NEW QUESTION # 25
An administrator has a requirement to have consistent policy configuration and enforcement across NSXT instances. What feature of NSX-T Data Center fulfills this requirement?
- A. Policy-driven configuration
- B. Federation
- C. Multi-hypervisor support
- D. Load balancer
Answer: A
NEW QUESTION # 26
An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.
Which two NAT rule types are supported for this configuration? (Choose two.)
- A. Port NAT
- B. 1:1 NAT
- C. Destination NAT
- D. Source NAT
- E. Reflexive NAT
Answer: C,D
NEW QUESTION # 27
Which is correct when deploying a NSX Edge in a KVM only environment?
- A. deploy NSX Edge VM with OVF template
- B. deploy NSX Edge on a bare-metal server
- C. deploy NSX Edge VM with ISO image
- D. deploy NSX Edge VM with QCOW2 image
Answer: B
NEW QUESTION # 28
An NSX administrator has deployed an NSX Edge on a bare-metal server.
Which command registers the NSX Edge with the NSX Manager?
- A. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint
<nsx-manager-thumbprint> - B. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint <nsx-manager-thumbprint>
- C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint <nsx-manager-thumbprint>
- D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint <nsx-manager-thumbprint>
Answer: D
NEW QUESTION # 29
Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)
- A. Route Aggregation
- B. Graceful Restart
- C. BGP Neighbors
- D. Route Distribution
- E. Local AS
Answer: A,C
Explanation:
The following parameters are inherited from the default Tier-0 gateway and cannot be modified at the VRF level:
* Local AS
* Graceful restart
* Graceful restart timer
* Graceful restart stale timer
* Multipath relax
Inter-SR iBGP is not supported in VRF gateways.
BGP can be enabled or disabled per VRF gateway.
Route aggregation and BGP neighbors are local configurations per VRF.
NEW QUESTION # 30
......
2V0-41.20 Free Certification Exam Material with 95 Q&As : https://passleader.realexamfree.com/2V0-41.20-real-exam-dumps.html
