Download VMware Certified Implementation Expert Network Virtualization Exam and more Exams Technology in PDF only on Docsity!
Virtualization Exam
Question 1. What is the primary function of the NSX Manager in the NSX-T architecture? A) Handles data plane forwarding B) Manages the control plane and provides a centralized management interface C) Acts as a hypervisor transport node D) Provides physical network connectivity Answer: B Explanation: NSX Manager is the centralized network management component responsible for managing the NSX-T environment, including configuration, policy management, and orchestration functions, primarily operating on the management plane. Question 2. Which NSX-T component is responsible for the control plane functions such as route exchange and overlay network management? A) NSX Manager B) NSX Controller (for older architectures) C) NSX Policy Manager D) Edge Node Answer: B Explanation: The NSX Controller, especially in older architectures, manages control plane functions like route exchange and overlay network management. In
Virtualization Exam
NSX-T, control plane functions are distributed among various components, but the Controller specifically handles these tasks. Question 3. In NSX-T architecture, what is the primary purpose of Transport Zones? A) To define the scope of logical network reachability across the fabric B) To configure physical network switches C) To manage security policies D) To handle user authentication and access control Answer: A Explanation: Transport Zones define the logical boundary within which overlay segments and transport nodes can communicate, thus controlling the reachability of logical networks across different parts of the data center or multi-site deployment. Question 4. Which of the following best describes the role of the NSX Virtual Switch (NVDS)? A) It acts as a physical switch in the data center B) It provides the virtual networking layer on hypervisors for logical switching and routing C) It manages storage virtualization D) It handles external network firewall policies
Virtualization Exam
C) Distributed Firewall (DFW) D) Edge Node Answer: C Explanation: The Distributed Firewall (DFW) operates at the hypervisor level, providing micro-segmentation and security policy enforcement directly on ESXi hosts, offering granular security controls. Question 7. In NSX-T, what is the function of a Tier-0 Gateway? A) Provides internal routing within a segment B) Handles North-South traffic between the data center and external networks C) Manages storage traffic D) Acts as a physical network switch Answer: B Explanation: The Tier-0 Gateway in NSX-T is responsible for North-South routing, connecting internal logical networks to external networks or the internet, often with high availability and dynamic routing capabilities. Question 8. Which protocol is commonly used for dynamic routing between NSX-T Tier-0 Gateways and physical routers? A) BGP B) ARP
Virtualization Exam
C) DHCP
D) STP
Answer: A Explanation: BGP (Border Gateway Protocol) is widely used for dynamic routing between NSX-T Tier-0 Gateways and physical routers, enabling scalable and flexible routing in multi-site environments. Question 9. When designing a multi-tenant NSX-T environment, which concept is crucial for isolating tenant traffic? A) Transport Zones B) Security Groups and Segments C) BGP Peering D) Physical Switch VLANs Answer: B Explanation: Security Groups and logical segments are essential for tenant isolation, allowing different tenants to have segregated network and security policies within the same physical infrastructure. Question 10. What physical network consideration is critical to support overlay networks in NSX-T? A) Low MTU (less than 1500 bytes) B) High MTU (e.g., 9000 bytes) for overlay traffic
Virtualization Exam
C) Only through third-party plugins D) vSphere is not involved in NSX-T deployment Answer: A Explanation: NSX-T integrates tightly with vSphere via vCenter Server, enabling centralized management of virtual networking, security, and policy enforcement on ESXi hosts. Question 13. Which physical network feature enhances NSX-T overlay performance and resilience? A) LACP (Link Aggregation Control Protocol) B) Static routing only C) VLAN tagging without LACP D) Single physical link connectivity Answer: A Explanation: LACP allows multiple physical links to be aggregated, providing increased bandwidth and redundancy, which is critical for overlay network performance and resilience. Question 14. In NSX-T, what is the purpose of the Transport Node? A) It acts as a physical switch only B) It is a hypervisor or Edge Node configured to participate in overlay and VLAN transport zones
Virtualization Exam
C) It manages storage traffic D) It only manages security policies Answer: B Explanation: Transport Nodes are hypervisors or Edge Nodes configured to carry overlay and VLAN traffic within a Transport Zone, enabling logical network connectivity. Question 15. What is the significance of the NSX Federation feature? A) It allows for centralized management of multiple NSX-T deployments across sites B) It replaces vCenter Server C) It only manages storage virtualization D) It is used to physically connect data centers Answer: A Explanation: NSX Federation enables multi-site deployment management, allowing consistent security policies, stretched networks, and high availability across geographically dispersed environments. Question 16. How does NSX-T support multi-cloud or hybrid cloud environments? A) By providing consistent network and security policies across on-premises and cloud platforms B) Only supports VMware cloud environments
Virtualization Exam
C) To manage storage connectivity only D) To only handle management traffic Answer: A Explanation: Edge Nodes are specialized VMs or physical appliances providing perimeter services like routing, load balancing, VPN, and security functions at the network edge. Question 19. Which component is used to deploy and manage logical segments in NSX-T? A) NSX Manager via the UI or API B) Physical switches only C) vCenter Server directly D) External DHCP servers only Answer: A Explanation: Logical segments (network segments) in NSX-T are created and managed through NSX Manager, either via the user interface or API, enabling flexible network topology. Question 20. During a logical routing design, what is a primary reason to implement Tier-1 Gateways? A) To handle North-South traffic directly to external networks B) To provide internal routing between segments within the data center
Virtualization Exam
C) To connect to storage networks only D) To replace physical routers Answer: B Explanation: Tier-1 Gateways handle internal East-West routing between segments within the data center, while Tier-0s typically manage North-South routing to external networks. Question 21. Which NSX-T component is essential for implementing micro- segmentation? A) Distributed Firewall (DFW) B) NSX Controller C) Edge Nodes D) Transport Zones Answer: A Explanation: The Distributed Firewall provides micro-segmentation by enabling granular security policies directly on hypervisors, controlling east-west traffic at the VM level. Question 22. What is a key consideration for deploying NSX-T in a multi-site environment? A) Proper placement of Global Manager and Local Managers for optimal control and redundancy
Virtualization Exam
B) Tier-1 Gateway C) Logical Switch D) Distributed Firewall Answer: A Explanation: The Tier-0 Gateway manages North-South routing, connecting internal logical networks to external networks, typically with higher capacity and routing protocols. Question 25. When planning for physical network support of NSX-T, what is an important MTU setting? A) 1500 bytes B) 9000 bytes for overlay traffic C) 512 bytes D) 10000 bytes only on physical switches Answer: B Explanation: Overlay networks like GENEVE require a high MTU (commonly 9000 bytes) to encapsulate overlay traffic efficiently without fragmentation. Question 26. Which NSX-T architecture component is responsible for policy- driven security and automation? A) NSX Policy Manager
Virtualization Exam
B) NSX Manager C) NSX Controller D) vCenter Server Answer: A Explanation: The NSX Policy Manager provides a centralized, declarative way to define and enforce security policies, ensuring automation and consistency in security posture. Question 27. How does NSX-T support disaster recovery in multi-site deployments? A) By enabling stretched segments and gateways with site-to-site connectivity and synchronization of policies B) Only through manual reconfiguration C) By disabling overlay networks during failure D) By requiring separate licensing for disaster recovery Answer: A Explanation: NSX-T supports disaster recovery by enabling stretched networks, cross-site tunnels, and synchronized policies, ensuring minimal downtime and seamless failover. Question 28. Which of the following is an operational best practice for NSX-T environment maintenance?
Virtualization Exam
A) To define network interface settings like MTU and teaming configurations for Transport Nodes B) To assign security policies to segments C) To manage storage protocols D) To configure physical port speeds only Answer: A Explanation: Transport Profiles specify network interface settings, such as MTU, teaming, and link aggregation, ensuring consistent configuration across Transport Nodes. Question 31. Which is a key consideration when designing NSX-T for container networking? A) Integration with container orchestrators like Kubernetes and configuring overlay segments for container workloads B) Disabling overlay networks for containers C) Using only VLANs for container traffic D) Ignoring security policies for containers Answer: A Explanation: Proper integration with orchestrators and overlay segments ensures container workloads are securely and efficiently connected within the NSX-T network fabric.
Virtualization Exam
Question 32. What is the main purpose of NSX-T's Load Balancer? A) To distribute application traffic across multiple backend servers for high availability B) To replace physical switches C) To provide storage replication D) To replace the Distributed Firewall Answer: A Explanation: The NSX-T Load Balancer distributes incoming application traffic to multiple backend servers, ensuring high availability and optimal resource utilization. Question 33. Which protocol is used for establishing secure site-to-site VPN connections in NSX-T? A) IPsec B) BGP C) OSPF D) SNMP Answer: A Explanation: IPsec (Internet Protocol Security) is used to establish secure, encrypted VPN tunnels for site-to-site or remote access in NSX-T.
Virtualization Exam
Question 36. In NSX-T, what is the role of Security Groups? A) To group virtual machines and network objects for applying security policies collectively B) To segment storage arrays C) To manage physical switch ports D) To configure VLAN IDs only Answer: A Explanation: Security Groups enable administrators to logically group VMs and network objects, simplifying the application of security policies and micro- segmentation. Question 37. Which NSX-T component is used to facilitate the management of cross-site policies and stretched networks? A) NSX Federation B) NSX Controller C) NSX Manager D) vCenter Server Answer: A Explanation: NSX Federation manages cross-site policies, stretched networks, and global security enforcement across multiple NSX-T deployments.
Virtualization Exam
Question 38. What is a typical reason for troubleshooting overlay tunnel status issues? A) MTU mismatches or physical network connectivity problems B) Incorrect DNS configuration only C) Hardware failure in storage devices D) Misconfigured user permissions Answer: A Explanation: Overlay tunnel issues often stem from MTU mismatches or physical connectivity problems that prevent encapsulated traffic from flowing properly. Question 39. Which tool is most effective for analyzing traffic flow and troubleshooting network issues in NSX-T? A) Traceflow B) vSphere Client only C) Storage vMotion D) vRealize Log Insight only Answer: A Explanation: Traceflow enables detailed analysis of network traffic paths, helping troubleshoot connectivity and flow issues within NSX-T environments.
