NSX Set 1 Flashcards by Talib Hasan

What are two challenges faced when providing network services to virtual workloads using a physical network infrastructure? (Choose two.)

a. Inability to provide router redundancy
b. Restrictions when migrating virtual workloads to ESXi hosts
c. Managing the amount of access switches required for large-scale vSphere environments
d. Inability for access switches to provide isolation of uplink failures to virtual workloads
e. Managing the size of routing tables

b. Restrictions when migrating virtual workloads to ESXi hosts
d. Inability for access switches to provide isolation of uplink failures to virtual workloads

How well did you know this?

Not at all

Perfectly

At least how many bytes does the VXLAN encapsulation add to the encapsulated frame?

a. 50
b. 100
c. 1500
d. 9000

a. 50

How well did you know this?

Not at all

Perfectly

An application developer has a network requirement for a feature not currently supported by the physical IP network.
Which option could not be used to meet the application requirements?

a. Upgrade the code of the network devices.
b. Turn the network feature on.
c. Install a new network just for the application.
d. Do a network refresh.

b. Turn the network feature on.

How well did you know this?

Not at all

Perfectly

Which NSX routing protocol offers the most flexible policy control when peering with the physical environment?

a. BGP
b. OSPF
c. ISIS
d. EIGRP

a. BGP

How well did you know this?

Not at all

Perfectly

________________________ does not require VXLAN.

NSX Micro-Segmentation

How well did you know this?

Not at all

Perfectly

How many NSX Controllers are recommended for any vSphere network environment?

a. 1
b. 2
c. 3
d. 4

c. 3

How well did you know this?

Not at all

Perfectly

The _________________________ is required before the Distributed Firewall is functional.

NSX Controller Cluster

How well did you know this?

Not at all

Perfectly

One Distributed Route (in HA mode) with 2 Edge Service Gateways in EMCP mode would provide high bandwidth and isolation to how many application networks?

a. 2
b. 4
c. 8
d. 10

b. 4

How well did you know this?

Not at all

Perfectly

In a Cross-vCenter implementation, the Universal Control Cluster is deployed and configured in the vCenter instance associated with the ___________________________ .

Primary NSX Manager

How well did you know this?

Not at all

Perfectly

___________________ , a vSphere Distributed Switch security policy, allows virtual machines to send frames with a MAC address that is different from the one specified in the vmx file.

Forged Transmits

How well did you know this?

Not at all

Perfectly

What is the minimum NSX role necessary for a user to edit the firewall on an Edge Services Gateway (ESG)?

a. Auditor
b. Security Administrator
c. NSX Administrator
d. Enterprise Administrator

b. Security Administrator

How well did you know this?

Not at all

Perfectly

_________________ would be used by the “insert X-Forwarded-For HTTP” option.

HTTP & HTTPS

How well did you know this?

Not at all

Perfectly

When deploying a standalone NSX Edge as a Layer 2 VPN Client, a _________________ needs to be configured on the client vSphere Distributed Switch.

Trunk Port

How well did you know this?

Not at all

Perfectly

If the “Applied To” scope is set to Distributed Firewall, _____________________________ will have the firewall rule.

all VMs on prepared hosts

How well did you know this?

Not at all

Perfectly

A customer has Cisco Nexus 1000V switches in their environment
and is looking at deploying NSX. _____________________________________________ .

The environment must be migrated from the Nexus 1000V to vSphere Distributed Switches

How well did you know this?

Not at all

Perfectly

An NSX admin notices an error during the initial configuration of the SSO lookup service. It displays “Disconnected” when the admin pulls up the lookup. __________________________________________ to resolve the issue.

Change the Port # from 7444 to 443

Activity Monitoring has been enabled for a host with several machines. If only one VM shows up, you must install the Guest Introspection driver and the ________________________ must be enabled on the other VMs.

VM Data Collection

The _____________ , in a vSphere Distributed Switch architecture, handles packet switching.

Data Plane

Which two NSX roles can create security policies?

a. Auditor
b. Security Administrator
c. NSX Administrator
d. Enterprise Administrator

b. Security Administrator

d. Enterprise Administrator

A logical bridge configured for HA uses 15 second heartbeats by default to detect failures.

a. True
b. False

a. True

A logical bridge on the DLR supports VXLAN to VLAN bridging.

a. True
b. false

a. True

A logical bridge forwards traffic through the hypervisor.

a. True
b. False

a. True

When running the NSX Control Plane in Hybrid Mode, the minimum physical network requirements are?

a. NSX Controller connectivity
b. IGMP Snooping
c. Unicast L3 Routing
d. All of the above

d. All of the above

____________________________________ so a virtualized application can have access to a physical database.

Configure a Distributed Logical Router with an L2 Bridge instance for VXLAN to VLAN traffic

VMware NSX is a key component in enabling enterprises to realize the full potential of their investment in ___________________________________ .

Software-Defined Data Center

________________ is a term that describes a situation where a bottleneck is created when traffic is sent to a single device for security enforcement.

Hairpinning

The correct steps for connecting a VM to a logical switch is to _____________________________________________________ .

Select the logical switch, click the "Add VM" icon, and select the logical switch

What is one challenge of implementing networks ecurity on a physical network? a. Firewalls require additional network resources to operate. b. Firewall rules sprawl. c. Firewalls are expensive. d. Firewalls provide only 98% security.

b. Firewall rules sprawl.

Which of the following is not a characteristic of a physical network? a. A workload can be moved anywhere at any time. b. A Layer 3 segment can be separated by other Layer 3 segments. c. A Layer 2 domain must be contiguous. d. Systems in the same broadcast domain must be within 100 meters.

a. A workload can be moved anywhere at any time.

Which constraint is not encountered when deploying services with network dependencies? a. The variable time to prepare the network for the service(s) b. The manual involvement of a network engineer to configure the network c. Potential procurement of new network equipment d. The ability of a service owner to have IP connectivity between different tiers of the service

d. The ability of a service owner to have IP connectivity between different tiers of the service

What is the maximum number of usable VLANs that can be deployed in the same Ethernet switch? a. 4094 b. 4095 c. 4096 d. 4097

a. 4094