VMware Certified Associate - Network Virtualization

QUESTION NO: 1
Which NSX Data Security role has the permission to start and stop data security scans?

A. Auditor B. NSX Administrator C. Enterprise Administrator D. Security Administrator

Correct Answer: B

QUESTION NO: 2
An administrator consults with the network team and decides that Transport Zones will be configured with Hybrid Replication Mode for a new NSX for vSphere deployment.
Which statement is true?

A. The Ethernet segments where the VTEPs are connected have some level of multicast support. B. The physical network is configured to support multicast. C. The ESXi hosts in the Transport Zone are running on different server hardware. D. A multicast range has been configured in the NSX Manager as part of the Logical Network Preparation.

Correct Answer: A

QUESTION NO: 3
A company hosts an internal website on multiple virtual machines on a Logical Switch with VNI 7321. A Distributed Router serves as the virtual machines' default gateway.
When an user resolves the URL for the website, the internal DNS server responds with the IP address of one of the virtual machine's IP addresses in a round robin fashion. The company wants to deploy an NSX Edge Service Load Balancer and maintain the use of the Distributed Router for the virtual machines' default gateway.
Which mode can the NSX Edge Load Balancer can be deployed to meet the Company's needs?

A. Transparent B. Global C. One-Arm D. Local

Correct Answer: C

QUESTION NO: 4
After consulting with the network team, it is decided that Transport Zones will be configured with Unicast Replication Mode for a new NSX for vSphere deployment.
Which statement is true regarding the function of the VXLAN Tunnel End Points (VTEPs)?

A. The VTEPs will send multicast frames to all other VTEPs in the Transport Zone when the VTEPs do not have a MAC address in the MAC table. B. The VTEPs will switch to Multicast Replication Mode for those VTEPs to which multicast path discovery is successful. C. The VTEPs will send unicast frames to all local VTEPs and remote proxies in the Transport Zone when the VTEPs do not have a MAC address in the MAC table. D. The VTEPs will send unicast frames to the NSX Controllers when the VTEPs do not have a MAC address in the MAC table.

Correct Answer: C

QUESTION NO: 5
Which components are required to enable layer 2 bridging? (Choose two.)

A. Deployed Logical Switch. B. Distributed firewall rule to allow layer 2 traffic in the bridge. C. VLAN trunk configured on logical switch. D. Deployed Logical Router.

Correct Answer: B,D

QUESTION NO: 6
How is the Bridge Instance chosen?

A. It is chosen based on the ESXi host where the Logical Router Control VM is running. B. It is manually assigned by the vSphere administrator when the distributed portgroup is configured. C. The VTEP configured with the highest VXLAN Network Identifier (VNI) is selected. D. During an election process among all ESXi hosts. The host with the highest MAC address is selected.

Correct Answer: A

QUESTION NO: 7
After deploying NSX, an administrator does not see the Networking & Security tab when connecting to the vCenter Server using the vSphere Web Client.
What should the administrator do?

A. The NSX Controllers must be deployed before NSX Manager is available. B. Register the NSX Manager with the Inventory Service. C. The NSX Manager must be configured to use Single Sign-On before it will be available. D. Register the NSX Manager with the vCenter Server.

Correct Answer: D

QUESTION NO: 8
Which two web browsers are supported for programming the NSX REST API? (Choose two.)

A. Safari B. Firefox C. Internet Explorer D. Chrome

Correct Answer: B,D

VMware Certified Associate - Network Virtualization - VCAN610 Exam Questions