Question 1

A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers. The naming convention will be: • WKS-WEB-SRV-XXX • WKY-APP-SRR-XXX • WKI-DB-SRR-XXX What is the optimal way to group them to enforce security policies from NSX?

Options :

A : Use Edge as a firewall between tiers.

B : Do a service insertion to accomplish the task.

C : Group all by means of tags membership.

D : Create an Ethernet based security policy.

Answer: C

Question 2

What needs to be configured on a Tler-0 Gateway lo make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Options :

A : Downlink Interface

B : VLAN Uplink

C : Loopback Router Port

D : Service Interface

Answer: B

Question 3

Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?

Options :

A : The option to set time-based rule is a clock Icon in the rule.

B : The option to set time based rule is a field in the rule Itself.

C : There Is no option in the NSX UI. It must be done via command line interface.

D : The option to set time-based rule is a clock Icon in the policy.

Answer: A

Question 4

Which two are supported by L2 VPN clients? (Choose two.)

Options :

A : NSX for vSphere Edge

B : 3rd party Hardware VPN Device

C : NSX Autonomous Edge

D : NSX Edge

Answer: A,D

Question 5

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Options :

A : Use agentless antivirus with Guest Introspection.

B : Quarantine workloads based on vulnerabilities.

C : Identify risk and reputation of accessed websites.

D : Gain Insight about micro-segmentation traffic flows.

E : Identify security vulnerabilities in the workloads.

Answer: B,E

Higher Test Marks with Free Online 2V0-41.23 Exam Practice

Buying Options: