2V0-41.19.

52q

Number: 2V0-41.19
Passing Score: 800
Time Limit: 120 min

2V0-41.19

https://www.gratisexam.com/

VMware Professional NSX-T Data Center 2.4

https://www.gratisexam.com/
Exam A

QUESTION 1
Which CLI command is used to start the NSX Manager virtual machine in the KVM environment?

A. virsh start <NSX-Manager-Name>

https://www.gratisexam.com/

B. virsh poweron <nsx-manager-name>

C. virsh poweron <nsx-manager-ID>
D. virsh start <NSX-Manager-ID>

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.1/com.vmware.nsxt.install.doc/GUID-928BAF6E-4684-43A0-8766-8FE191FE1FA7.html

QUESTION 2
What are the supported N-VDS modes?

A. DPDK Datapath
B. Enhanced Datapath
C. Overlay Datapath
D. Standard Datapath
E. Secure Datapath

Correct Answer: BD
Section: (none)
Explanation

Explanation/Reference:
Explanation:

https://www.gratisexam.com/
N-VDS Mode: There are 2 modes for N-VDS: Standard or Enhanced Datapath.

Reference: http://www.vstellar.com/2018/08/03/learning-nsx-t-part-8configuring-transport-zone-and-transport-nodes/

QUESTION 3

https://www.gratisexam.com/
A NSX-T Data Center administrator wants to ensure that any machine on a public network can communicate with a Web VM running in a NSX-T Data Center
environment.

https://www.gratisexam.com/
Which NAT type must be created on the Tier-0 or Tier-1 Gateway to achieve this?

A. 1:1 NAT
B. Reverse NAT
C. DNAT
D. SNAT

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 4
An NSX administrator created a Segment from the Simplified UI and wants to find the Replication Mode configured on the Segment. Which NSX CLI command lists
the Replication mode?

A. get logical-switches
B. get logical-switch <Logical-switch-UUID>
C. get logical-switch <Local-Switch-UUID> status
D. get logical-switch status

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.3/nsx_63_cli.pdf

QUESTION 5
What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?

A. Network Operator
B. Network Engineer
C. Cloud Service Administrator
D. NSX Administrator

https://www.gratisexam.com/
Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/administration/GUID-26C44DE8-1854-4B06-B6DA-A2FD426CDF44.html

QUESTION 6
What is the maximum supported ECMP paths in NSX-T 2.4 Data Center?

A. 6
B. 8
C. 9
D. 7

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A maximum of eight ECMP paths are supported.

Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/administration/GUID-443B6B0D-F179-429E-83F3-E136038332E0.html

QUESTION 7
Refer to the exhibit.

https://www.gratisexam.com/
An administrator Is trying to configure a medium load balancer in a production environment, but is getting the error message shown in the exhibit.

Which step must the administrator perform to remediate the problem?

A. Reduce the size of the virtual pool.

B. Restart the NSX Manager.
C. Power-off the existing load balancer and change its size.
D. Place the Tier-1 Gateway in a large edge cluster and redeploy the load balancer.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 8

https://www.gratisexam.com/
An NSX administrator has deployed an NSX Edge on a bare-metal server.

Which command registers the NSX Edge with the NSX Manager?

A. join cluster <NSX-Cluster-IP> username root password <root-password> thumbprint <NSX Manager-thumbprint>
B. join management-plane <nsx-manager-ip> username admin password <admin-password> thumbprint <nsx-manager-thumbprint>
C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint <nsx-manager-thumbprint>
D. join management-cluster <NSX-Cluster-IP> username admin password <admin-password> thumbprint <NSX Manager-thumbprint>

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: http://virtualbrigade.com/register-nsx-t-edge/

QUESTION 9
An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events.

Which message ID (msgid) should be used in the syslog export configuration command as a filter?

A. SYSTEM
B. FABRIC
C. MONITORING
D. GROUPING

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 10
Which two commands could be used on an ESXI transport node to validate connectivity to the NSX Manager? (Choose two.)

A. nsxcli --cmd get manager status

B. esxcli network ip connection list I grep rabbitmq
C. nsxcli --cmd get managers

https://www.gratisexam.com/
D. nsxcli --cmd get manager connectivity status
E. esxcli network ip connection list I grep 5671

Correct Answer: BE
Section: (none)
Explanation

Explanation/Reference:

QUESTION 11
Which two statements describe the characteristics of the Services Router (SR) component of a Tier-0 Gateway? (Choose two.)

A. Edge cluster is mandatory for SR to be created.

B. SR can exist on both hypervisor transport nodes and Edge transport nodes.
C. SR is automatically created when stateful services are enabled.
D. Edge transport nodes are required for SR to be created.
E. SR can be created from the NSX Advanced Networking & Security tab in the UI.

Correct Answer: AE
Section: (none)
Explanation

Explanation/Reference:

QUESTION 12
Which statement Is true regarding the audit user account? (Choose two.)

A. The admin user must set the password for the audit account to log in to NSX Manager.
B. The administrator must run the set audit user password <password> command.
C. The audit user has read-write access to the NSX Manager.
D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.
E. The administrator must run the set user audit password <password> command.

Correct Answer: AD
Section: (none)
Explanation

https://www.gratisexam.com/
Explanation/Reference:

QUESTION 13
An NSX administrator is migrating vSphere port groups configured in vSphere to N-VDS.

What are two migration options? (Choose two.)

A. Migrate vSphere port groups using the esxcli command line.

B. Migrate vSphere port group through the NSX Manager API Calls.
C. Migrate Networking from the vCenter Server.
D. Migrate from the NSX Manager UI, go to Fabric -> Profile -> Uplink Profiles path.
E. Migrate from the NSX Simplified UI> Click Transport Node > Configure NSX > PNIC Only Migration path.

Correct Answer: AD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 14
What is the function of a domain in a NSX-T Data Center?

A. defines the scope of transport zones

B. defines the scope of security policies and groups
C. defines the scope of physical networks
D. defines the scope of transport nodes

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4.0/rn/VMware-NSX-T-Data-Center-240-Release-Notes.html

QUESTION 15
Which port is used by a transport node to communicate with NSX Manager in NSX-T Data Center 2.4?

https://www.gratisexam.com/
A. 5671
B. 1234
C. 1235
D. 5678

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/nsxt_24_install.pdf

QUESTION 16
Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)

A. Destination MAC
B. Failover Order

https://www.gratisexam.com/

C. Load Balanced Source

D. Load Balanced Source IP
E. Destination Port
F. Load Balanced Source MAC

Correct Answer: BCF

Section: (none)
Explanation

Explanation/Reference:

QUESTION 17
Which two logical router components span across all transport nodes? (Choose two.)

https://www.gratisexam.com/
A. SERVICE_ROUTER_TIER0
B. DISTRIBUTED_ROUTER_TIER0
C. SERVICE_ROUTER_TIER1
D. DISTRIBUTED_ROUTER_TIER1
E. TIER0_DISTRIBUTED_ROUTER

Correct Answer: BD
Section: (none)
Explanation

Explanation/Reference:
Reference: https://theoverlays.com/2018/12/19/nsx-t-logical-routers/

QUESTION 18
What is VMware's recommendation for the minimum MTU requirements when planning a NSX-T Data Center deployment?

A. MTU should be set to 1550 or less across the data center network including inter-data center connections.
B. MTU should be set to 1500 or less only on inter-data center connections.
C. Configure Path MTU Discovery and rely on fragmentation.
D. MTU should be set to 1600 or greater across the data center network including inter-data center connections.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 19
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing.

Which failover detection protocol must be used to meet this requirement?

A. Host Standby Router Protocol (HSRP)

B. Beacon Probing (BP)
C. Virtual Router Redundancy Protocol (VRRP)
D. Bidirectional Forwarding Detection (BFD)

https://www.gratisexam.com/
Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 20
An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged.

What could cause this issue?

A. Syslog Is not configured on the NSX Manager

B. Distributed Firewall Rule Logging is not enabled
C. Zero Trust Security Is not enabled
D. Syslog is not configured on the ESXI transport node

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 21
A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to allow simple 3-tier app forms through web, app, and database.

The naming convention will be:

• WKS-WEB-SRV-XXX
• WKY-APP-SRR-XXX
• WKI-DB-SRR-XXX

What is the optimal way to group them in order to enforce security policies from NSX-T Data Center?

A. Use Edge as a firewall between tiers.

B. Create an Ethernet based security policy.
C. Do a service Insertion to accomplish the task.
D. Group all by means of tags membership.

https://www.gratisexam.com/
Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 22
Which vmkernel module implements the N-VDS on an ESXi transport node?

A. openvswitch
B. enterswitch
C. nsx-vswitch
D. dvswitch

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Reference: http://www.vstellar.com/2018/08/03/learning-nsx-t-part-8configuring-transport-zone-and-transport-nodes/

QUESTION 23
Which two IP Discovery mechanisms are supported in KVM-environments? (Choose two.)

A. IGMP Snooping
B. Packet Snooping
C. DHCP Snooping
D. ARP Snooping
E. ND Snooping

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4.0/rn/VMware-NSX-T-Data-Center-240-Release-Notes.html

QUESTION 24

https://www.gratisexam.com/
An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode.

Which two NAT rule types are supported for this configuration? (Choose two.)

A. Port NAT
B. Source NAT
C. Destination NAT
D. 1:1 NAT
E. Reflexive NAT

Correct Answer: BC
Section: (none)
Explanation

Explanation/Reference:

QUESTION 25
Which command on ESXi Is used to verify the Local Control Plane connectivity with Central Control Plane?

A. esxcli network ip connection list | grep ccpd

B. esxcli network ip connection list | grep 1234
C. esxcli network ip connection list | grep netcpa
D. esxcli network ip connection list | grep 1235

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.3/nsxt_23_troubleshoot.pdf (25)

QUESTION 26
Which is correct when deploying a NSX Edge in a KVM only environment?

A. deploy NSX Edge VM with QCOW2 image

B. deploy NSX Edge VM with ISO image
C. deploy NSX Edge on a bare-metal server

https://www.gratisexam.com/
D. deploy NSX Edge VM with OVF template

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.1/nsxt_21_install.pdf (41)

QUESTION 27
Refer to the exhibit.

The Node Status for all hosts in the SA-Compute-01 cluster Is shown as Not Configured. There are no VM connectivity issues reported on any of the ESXI
transport nodes.

Which service must be restarted to fix the issue?

A. nsx-mpa service on the ESXi transport nodes

B. nsx-policy-manager service on NSX Manager

https://www.gratisexam.com/
C. nsx-mpa-api service on NSX Manager
D. cm-inventory service on NSX Manager

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 28
How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

A. Manually create a Segment and connect to both Tier-1 and Tier-0 Gateways.
B. Automatically created when Tier-1 is created.
C. Manually create a Logical Switch and connect to bother Tier-1 and Tier-0 Gateways.
D. Automatically created when Tier-1 is connected with Tier-0 from Simplified UI.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.4/administration/GUID-3F163DEE-1EE6-4D80-BEBF-8D109FDB577C.html

QUESTION 29
Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

A. virsh list-interface <VM Name>

B. virsh get-interface <VM Name>
C. virsh dumpxml <VM Name> | grep interfaceid
D. virsh show <VM Name> | grep interfaceid

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.1/nsxt_21_install.pdf

https://www.gratisexam.com/
QUESTION 30
Which two built-in VMware tools will help identify the cause of packet loss on VLAN Segments? (Choose two.)

A. Flow Monitoring
B. Traceflow
C. Activity Monitoring
D. Live Flow
E. Packet Capture

Correct Answer: BE
Section: (none)
Explanation

Explanation/Reference:

QUESTION 31
A customer is preparing to deploy VMware Kubernetes on an NSX-T Data Center.

What is the minimum MTU size for the UPLINK profile?

A. 1600
B. 1650
C. 1550
D. 1500

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 32
Which component does the hyperbus interface (vmk50) provide network connectivity to?

A. virtual machines and containers running across transport nodes

B. virtual machines running on the same hypervisor

https://www.gratisexam.com/
C. containers running on ESXi/KVM transport nodes
D. virtual machines running in the same segment

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference: https://blogs.vmware.com/networkvirtualization/2018/06/pks-nsx-t-lab.html/

QUESTION 33
An administrator wants to validate the BGP connection status between the Tier-0 Gateway and the upstream physical router.

What sequence of commands could be used to check this status on NSX Edge node?

A. - set vrf <ID>

- show logical-routers
- show <LR-D> bgp
B. - show logical-routers
- get vrf
- show ip route bgp
C. - enable <LR-D>
- get vrf <ID>
- show bgp neighbor
D. - get logical-routers
- vrf <number>
- get bgp neighbor

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.3/com.vmware.nsxt.admin.doc/GUID-9554C339-69DE-4C97-8392-DCCA67682B35.html

QUESTION 34
An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node.

Which feature in the NSX Manager Simplified UI shows the mapping between the virtual NIC and the host's physical adapter?

https://www.gratisexam.com/
A. N-VDS Visualization
B. Activity Monitoring
C. IPFIX
D. Port Mirroring

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 35
What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.) I

A. stateful services leveraged

B. increased north/south bandwidth
C. traffic load balancing
D. Failover of services
E. traffic predictability

Correct Answer: BC
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.3/com.vmware.nsxt.admin.doc/GUID-443B6B0D-F179-429E-83F3-E136038332E0.html

QUESTION 36
A user is assigned these two roles in NSX Manager:
• Load Balancer Administrator
• Network Engineer

What privileges does this user have in the system?

A. full access permissions on all networking services and full access permissions on load balancing features
B. read permissions on all networking services and read permissions on load balancing features
C. read permissions on all networking services and full access permissions on load balancing features

https://www.gratisexam.com/
D. full access permissions on all networking services and read permissions on load balancing features

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 37
What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

A. Group
B. Tier-1 Gateway
C. Segment Port
D. Segment
E. DFW

Correct Answer: AE
Section: (none)
Explanation

Explanation/Reference:

QUESTION 38
An NSX administrator has configured a KVM hypervisor as a transport node.

Which kemel module on KVM implements a N VDS?

A. dvswitch
B. nsx-vswitch
C. openvswitch
D. etherswitch

Correct Answer: C
Section: (none)
Explanation

https://www.gratisexam.com/
Explanation/Reference:
Reference: http://virtualbrigade.com/n-vds/

QUESTION 39
Which three CLI commands will list the TEP IPs configured on an ESXi transport node? (Choose three.)

A. esxcfg-vswitch -1
B. esxcfg-vmknic -1
C. esxcli network ip address list
D. esxcli network ip netstack list
E. esxcli network ip interface ipv4 get
F. esxcli network ip interface list

Correct Answer: BDE

Section: (none)
Explanation

Explanation/Reference:
Reference:
https://docs.pivotal.io/pks/1-3/nsxt-deploy.html
https://shuttletitan.com/nsx-t/nsx-t-installation-series/nsx-t-installation-series-step-9-configure-host-transport-node/

QUESTION 40
Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?

A. Multicast
B. Anycast
C. Broadcast
D. Unicast

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Reference: https://images.nsx.techzone.vmware.com/sites/default/files/NSX-T%20Reference%20Design%20Guide%20Version%202.0.pdf

QUESTION 41
Which two tools are used to configure centralized logging in NSX-T Data Center? (Choose two.)

https://www.gratisexam.com/
A. vRealize Network Insight
B. vRealize Automation
C. vRealize Log Insight
D. Syslog Server
E. vRealize Operations

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 42
Which protocol uses the 6081 UDP port?

A. Network Virtualization using Generic Routing Encapsulation (NVGRE)

B. Generic Network Virtualization Encapsulation (GENEVE)
C. Stateless Transport Tunneling (STT)
D. Virtual Extensible LAN (VXLAN)

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Reference: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&ved=2ahUKEwj-5oLKl_nmAhWMxYUKHV88BR0QFjACegQIAxAC&url=ftp%3A
%2F%2Fftp.inwinstack.com%2FOther%2FAI-NSX-T%2FVMware%2FVMWare%2520NSX-T%2FDocuments%
2Fnsxt_21_install.pdf&usg=AOvVaw02IjROHyt_g9_PzIwhFXxq (25)

QUESTION 43
Which path is used to view the NSX Controller log file?

A. /var/log/cloudnet/nsx-ccp.log
B. /var/log/controller.log
C. /var/log/cloud/nsx-Icp.log
D. /var/log/ccp.log

https://www.gratisexam.com/
Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 44
Which CLI command is used to restart the Syslog service on a KVM transport node?

A. service.sh stop | start syslog

B. systemctl restart syslog
C. systemctl restart rsyslog
D. yum restart syslog

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 45
Which three different transport nodes could be configured in the data plane? (Choose three.)

A. vShield Edge VM
B. ESXi and KVM
C. Linux-based Bare Metal server
D. NSX Edge VM on KVM
E. ESXi and Hyper-V
F. VM or Bare Metal NSX Edge

Correct Answer: BCD

Section: (none)
Explanation

Explanation/Reference:
Reference: https://letsv4real.com/2019/11/14/vmware-nsx-t-create-a-host-transport-node/

https://www.gratisexam.com/
QUESTION 46
Which CLI command is used for packet capture on the KVM Transport Node?

A. tcpdump
B. debug
C. set capture
D. tcpdump-uw

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Reference: https://vdc-download.vmware.com/vmwb-repository/dcr-public/46158b4f-e75f-49a6-8014-056750afa658/a944ad7a-6043-41d7-91a2-99f602996c77/
NSX-T%20Command-Line%20Interface%20Reference.html

QUESTION 47
Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?

A. SPAN mirrors
B. Port Mirroring
C. Traceflow
D. IPFIX

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Reference: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=7&ved=2ahUKEwjw0duct_nmAhUJ1BoKHVrgACcQFjAGegQIBxAC&url=ftp%3A
%2F%2Fftp.inwinstack.com%2FOther%2FAI-NSX-T%2FVMware%2FVMWare%2520NSX-T%2FDocuments%
2Fnsxt_21_admin.pdf&usg=AOvVaw2DqQfqPkhzWQfiJP2SgNbO (213)

QUESTION 48
Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

A. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.

B. Create an OAuth 2.0 client in VMware Identity Manager.

https://www.gratisexam.com/
C. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.
D. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.
E. Enter the Identity Provider (IdP) metadata URL in NSX Manager.

Correct Answer: BC
Section: (none)
Explanation

Explanation/Reference:
Reference: https://vsphere-cloud.com/nsx-t-integration-with-vmware-identity-manager-for-rbac/

QUESTION 49
Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node? (Choose
two.)

A. esxcfg-vmknic -1
B. esxcli network ip interface ipv4 get
C. esxcli network nic list
D. net-dvs
E. esxcfg-nics -1

Correct Answer: AD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 50
Which denies all network traffic unless exclusively specified?

A. Blacklist
B. Whitelist
C. Default List
D. Trusted List

Correct Answer: B
Section: (none)

https://www.gratisexam.com/
Explanation

Explanation/Reference:
Reference: https://ucsguru.com

QUESTION 51
Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

A. esxcli network firewall ruleset -e syslog

B. esxcli network firewall ruleset set -a -e false
C. esxcli network firewall ruleset set -r syslog -e true
D. esxcli network firewall ruleset set -r sysloq -e false

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.2/nsxt_22_troubleshoot.pdf

QUESTION 52
While planning a NSX-T Data Center deployment with a network administrator, you are told the physical network uses Open Shortest Path First (OSPF) for the
Interior Gateway Protocol (IGP). The OSPF design is flat with the data center containing one OSPF area, area 0. The network administrator would like to extend
area 0 into NSX-T so that dynamic routing updates will be learned bidirectionally.

Which meets the requirement?

A. Utilize static routes between the NSX-T topology and the physical network.
B. Recommend creating a new area for NSX-T to protect NSX-T's control plane from Link State Advertisement (LSA) floods from OSPF area 0.
C. Utilize the Border Gateway Protocol (BGP) on NSX-T and configure the physical network for route redistribution.
D. Utilize multi-protocol Border Gateway Protocol (BGP) in the NSX-T topology and configure the physical network for route redistribution.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

https://www.gratisexam.com/
https://www.gratisexam.com/

https://www.gratisexam.com/