Question 1

How does the Traceflow tool identify issues in a network?

Options :

A :

Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

B :

Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

C : Injects ICMP traffic into the data plane and observes the results in the control plane.

D : Injects synthetic traffic into the data plane and observes the results in the control plane.

Answer: D

Question 2

An NSX administrator is creating a Tier-1 Gateway configured In Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the original tailed node to become the Active node upon recovery. Which failover policy meets this requirement?

Options :

A : Non-Preemptive

B : Preemptive

C : Enable Preemptive

D : Disable Preemptive

Answer: A

Question 3

A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers. The naming convention will be: • WKS-WEB-SRV-XXX • WKY-APP-SRR-XXX • WKI-DB-SRR-XXX What is the optimal way to group them to enforce security policies from NSX?

Options :

A : Use Edge as a firewall between tiers.

B : Do a service insertion to accomplish the task.

C : Group all by means of tags membership.

D : Create an Ethernet based security policy.

Answer: C

Question 4

An administrator has connected two virtual machines on the same overlay segment. Ping between both virtual machines is successful. What type of network boundary does this represent?

Options :

A : Layer 2 VPN

B : Layer 2 bridge

C : Layer 2 broadcast domain

D : Layer 3 route

Answer: C

Question 5

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Options :

A : Use agentless antivirus with Guest Introspection.

B : Quarantine workloads based on vulnerabilities.

C : Identify risk and reputation of accessed websites.

D : Gain Insight about micro-segmentation traffic flows.

E : Identify security vulnerabilities in the workloads.

Answer: B,E

Higher Test Marks with Free Online 2V0-41.23 Exam Practice

Buying Options: