Validated VMware 2V0-41.20 Exam Online

NEW QUESTION 1
Which command is used to change the NSX CU administrator password?

• A. set user admin password <password> old-password <old-password>
• B. set user admin password <old-password> <new-password>
• C. set user administrator password <old-password> <new-password>
• D. set user administrator password <password> old-password <old-password>

Answer: A

Explanation:
To change the password of an account run:set user admin password my-new-pwd old-password my-old-pwd

NEW QUESTION 2
Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)

• A. 5685
• B. 1235
• C. 5671
• D. 5678
• E. 1234

Answer: BE

Explanation:
The NSX Manager management plane communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1234. CCP communicates with the transport nodes by using APH Server over NSX-RPC/TCP through port 1235. Taken from NSX-T ICM 3.0 Lecture manual

NEW QUESTION 3
Which Network and Security virtualization solution provides network hybridity and mobility?

• A. VMware HCX
• B. VMware Tanzu Service Mesh
• C. NSX Advanced Load Balancer
• D. NSX Intelligence

Answer: A

NEW QUESTION 4
Which three functions require a Services Router (SR) component on an Edge node? (Choose three.)

• A. Service Insertion
• B. Distributed Routing
• C. Packet Forwarding
• D. Gateway Firewall
• E. Distributed Firewall
• F. Virtual Private Network

Answer: ADF

NEW QUESTION 5
Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)

• A. can have a maximum of 8 edge nodes
• B. must have only active-active edge nodes
• C. can have a maximum of 10 edge nodes
• D. can contain multiple types of edge nodes (VM or bare metal)
• E. must contain only one type of edge nodes (VM or bare metal)

Answer: CD

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-14183A62-8E8D-43CC-92E0

NEW QUESTION 6
What are two supported N-VDS modes? (Choose two.)

• A. DPDK Datapath
• B. Overlay Datapath
• C. Secure Datapath
• D. Enhanced Datapath
• E. Standard Datapath

Answer: DE

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-37BC3CEF-DCC1-4C6F-960

NEW QUESTION 7
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?

• A. Beacon Probing (BP)
• B. Host Standby Router Protocol (HSRP)
• C. Bidirectional Forwarding Detection (BFD)
• D. Virtual Router Redundancy Protocol (VRRP)

Answer: C

NEW QUESTION 8
Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?

• A. Transport Node Profile
• B. Uplink Profile
• C. Switching Profile
• D. Host Profile

Answer: A

NEW QUESTION 9
Which three different transport nodes could be configured in the data plane? (Choose three.)

• A. vShield Edge VM
• B. ESXi and KVM
• C. Bare Metal server
• D. NSX Edge VM on KVM
• E. ESXi and Hyper-V
• F. VM or Bare Metal NSX Edge

Answer: BCF

NEW QUESTION 10
An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image. Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?

• A. e1000
• B. VMXNET2
• C. VMXNET3
• D. Flexible

Answer: C

NEW QUESTION 11
A user is assigned these two roles in NSX Manager:
LB Admin
Network Engineer
What privileges does this user have in the system?

• A. read permissions on all networking services and full access permissions on load balancing features
• B. full access permissions on all networking services and full access permissions on load balancing features
• C. full access permissions on all networking services and read permissions on load balancing features
• D. read permissions on all networking services and read permissions on load balancing features

Answer: B

NEW QUESTION 12
An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time. Which CLI command disables the nsxcli time out value on NSX Manager?

• A. set cli-timeout 0
• B. set cli-timeout enabled
• C. set cli-timeout disabled
• D. set cli-timeout 1

Answer: A

Explanation:
"https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/8264
https://www.virten.net/2020/06/quick-tip-remove-nsx-t-ssh-and-http-session-timeout/

NEW QUESTION 13
Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)

• A. Create a SAML authentication in VMware Identity Manager using the NSX Manager FQDN.
• B. Add NSX Manager as a Service Provider (SP) in VMware Identity Manager.
• C. Create an OAuth 2.0 client in VMware Identity Manager.
• D. Enter the Identity Provider (IdP) metadata URL in NSX Manager.
• E. Enter the service URL, Client Secret, and SSL thumbprint in NSX Manager.

Answer: CE

NEW QUESTION 14
A security administrator needs to configure a firewall rule based on the domain name of a specific application. Which field in a distributed firewall rule does the administrator configure?

• A. Profile
• B. Source
• C. Service
• D. Policy

Answer: A

NEW QUESTION 15
Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?

• A. set service nsx-manager logging-level debug
• B. set service nsx-manager log-level debug
• C. set service manager log-level debug
• D. set service manager logging-level debug

Answer: D

Explanation:
https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/8264

NEW QUESTION 16
How is the intra-tier transit link connection created between SR and DR for a Tier-0 Gateway?

• A. Manually create a gateway interface and mark it as transit.
• B. Automatically created when DR is created.
• C. Automatically created when SR is initialized.
• D. Manually create external uplink interface and mark it as transit.

Answer: C

NEW QUESTION 17
Which three steps are required to create an IPsec VPN tunnel? (Choose three.)

• A. Create an IPsec service.
• B. Add a local endpoint.
• C. Configure an IPsec session.
• D. Configure a distributed firewall policy.
• E. Add a logical switch.

Answer: ABC

NEW QUESTION 18
Which statement Is true regarding the audit user account? (Choose two.)

• A. The admin user must set the password for the audit account to log in to NSX Manager.
• B. The administrator must run the set audit user password <password> command.
• C. The audit user has read-write access to the NSX Manager.
• D. The audit user is disabled by default and must be enabled to log in to the NSX Manager.
• E. The administrator must run the set user audit password <password> command.

Answer: AE

NEW QUESTION 19
Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?

• A. virsh dumpxml <VM Name> | grep interfaceid
• B. virsh get-interface <VM Name>
• C. virsh show <VM Name> | grep interfaceid
• D. virsh list-interface <VM Name>

Answer: A

Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsxt_30_admin.pdf

NEW QUESTION 20
An NSX administrator would like to configure syslog for a KVM transport node. Which host log files could be exported to a remote syslog server?

• A. /var/log/vmware/nsx-syslog
• B. /var/log/cfgAgent.log
• C. /var/log/nsx-audit.log
• D. /var/log/cloudnet/nsx-ccp.log

Answer: A

NEW QUESTION 21
Which statement describes the VMware Virtual Cloud Network Vision?

• A. Virtual Cloud Network connects and protects virtual machines running in KVM environments.
• B. Virtual Cloud Network connects and protects virtual machines running in vSphere environments.
• C. Virtual Cloud Network connects and protects applications, regardless of their physical locations.
• D. Virtual Cloud Network connects and protects applications and data, regardless of their physical locations.

Answer: D

NEW QUESTION 22
Which three services are compatible with VRF Lite? (Choose three.)

• A. VPN
• B. Intrusion Detection
• C. NAT
• D. Load Balancer
• E. DHCP

Answer: BCE

Explanation:
VRF Lite is not compatible with the following services:
-VPN
-Load Balancer
Taken from NSX-T ICM 3.0 Lecture Manual.

NEW QUESTION 23
Which two tools are used to configure centralized logging in NSX-T Data Center? (Choose two.)

• A. vRealize Network Insight
• B. vRealize Automation
• C. vRealize Log Insight
• D. Syslog Server
• E. vRealize Operations

Answer: CD

NEW QUESTION 24
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?

• A. SR and DR doesn’t need to be connected to provide any stateful services.
• B. DR is instantiated and automatically connected with SR.
• C. SR is instantiated and automatically connected with DR.
• D. SR and DR is instantiated but requires manual connection.

Answer: C

NEW QUESTION 25
Which statement is true about an alarm in a Suppressed state?

• A. An alarm can be suppressed for a specific duration in days.
• B. An alarm can be suppressed for a specific duration in minutes.
• C. An alarm can be suppressed for a specific duration in seconds.
• D. An alarm can be suppressed for a specific duration in hours.

Answer: D

Explanation:
https://docs.vmware.com/en/VMware-NSX-Intelligence/1.1/user-guide/GUID-EBD3C5A8-F9AB-4A22-BA40- "If you move an alarm into a Suppressed state, you are prompted to specify the duration in hours. After the specified duration passes, the alarm state reverts to Open. However, if the system determines the condition has been corrected, the alarm state changes to Resolved."
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EB1BB1D3-8892-4890-B

NEW QUESTION 26
......