2V0-41.20 Exam Questions
111 real 2V0-41.20 exam questions with expert-verified answers and explanations. Page 1 of 3.
- Question #1Section 6 – NSX-T Administrative and Operational Tasks
What is the most restrictive NSX-T built-in role which will allow a user to apply configuration changes on a NSX Edge?
RBACbuilt-in rolesNSX EdgeNetwork Engineer role - Question #2Section 3 – NSX-T Installation, Configuration, and Setup
A customer is preparing to deploy VMware Kubernetes on an NSX-T Data Center. What is the minimum MTU size for the UPLINK profile?
MTU sizeuplink profileVMware Kubernetesoverlay network - Question #3Section 3 – NSX-T Installation, Configuration, and Setup
What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)
distributed firewallfirewall rule scopeGroupsDFW - Question #4Section 5 – NSX-T Troubleshooting and Repairing
Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the GENEVE protocol on the ESXi transport node? (Choose two.)
GENEVE protocolVMkernel portESXi transport nodeCLI commands - Question #5Section 1 – NSX-T Architecture and Technologies
Which three services are compatible with VRF Lite? (Choose three.)
VRF Litecompatible servicesNATDHCP - Question #6Section 3 – NSX-T Installation, Configuration, and Setup
Which CLI command is used to start the NSX Manager virtual machine in the KVM environment?
KVM environmentNSX Managervirsh commandVM management - Question #7Section 1 – NSX-T Architecture and Technologies
Which component does the hyperbus interface (vmk50) provide network connectivity to?
hyperbus interfacevmk50containersESXi transport nodes - Question #8Section 2 – NSX-T Planning and Design
When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?
east-west network introspectionService VMtraffic hairpinningSVM deployment - Question #9
In a NSX-T Data Center environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers. Which two actions coul...
- Question #10Section 3 – NSX-T Installation, Configuration, and Setup
Which three steps must be carried out to configure North-South / East-West Network Inspection? (Choose three.)
network introspectionservice insertionservice registrationservice deployment - Question #11Section 1 – NSX-T Architecture and Technologies
Which statement describes the VMware Virtual Cloud Network Vision?
Virtual Cloud NetworkVMware visionapplication connectivitynetwork security - Question #12Section 5 – NSX-T Troubleshooting and Repairing
Which two commands are used to query the arp-table of a logical switch? (Choose two.)
ARP tablelogical switchCLI commandsVNI - Question #13Section 1 – Architecture and Technologies
Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)
Edge ClusterEdge Nodecluster topologyNSX-T architecture - Question #14Section 4 – NSX-T Data Center Services
A security administrator needs to configure a firewall rule based on the domain name of a specific application. Which field in a distributed firewall rule does the administrator co...
Distributed FirewallFQDN filteringfirewall rulesecurity policy - Question #15Section 1 – Architecture and Technologies
What are the advantages of using a Tier-0 Gateway in ECMP mode? (Choose two.)
Tier-0 GatewayECMPload balancingnorth-south bandwidth - Question #16Section 4 – NSX-T Data Center Services
An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway. In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advert...
Tier-1 Gatewayload balancerVIP advertisementroute advertisement - Question #17Section 1 – Architecture and Technologies
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?
Service RouterDistributed Routerstateful servicesTier-0 Gateway - Question #18Section 2 – Planning and Design
An NSX administrator is planning to deploy a multi-tier routing topology in their NSX-T Data Center environment to provide north-south connectivity for the VMs. Which routing compo...
Tier-0 Gatewaynorth-south routingmulti-tier topologyrouting design - Question #19Section 3 – Installation, Configuration, & Setup
Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?
NTPCLINSX Managertime configuration - Question #20Section 1 – Architecture and Technologies
Which network virtualization technologies can be used with an Ethernet VPN (EVPN) deployment in NSX-T Data Center? (Choose two.)
EVPNVXLANMP-BGPnetwork virtualization - Question #21Section 1 – Architecture and Technologies
Which three teaming policy modes are supported by NSX-T Data Center? (Choose three.)
teaming policyuplink configurationN-VDSload balancing - Question #22Section 3 – Installation, Configuration, & Setup
An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the origin...
Tier-1 Gatewayhigh availabilityfailover policynon-preemptive - Question #23Section 1 – Architecture and Technologies
Which two choices are solutions of the NSX portfolio (Choose two.)?
NSX portfolioNSX IDS/IPSNSX Service Meshproduct knowledge - Question #24Section 5 – Troubleshooting & Operations
Where are Distributed Firewall logs containing access decisions stored?
Distributed Firewalllogginghypervisortransport node - Question #25Section 1 – Architecture and Technologies
What are three NSX Manager roles? (Choose three.)
NSX Managercluster rolesmanagement planecontroller - Question #26Section 3 – Installation, Configuration, & Setup
Which three can an administrator define in a transport node profile? (Choose three.)
transport node profileuplink profileN-VDSVDS - Question #27Section 3 – Installation, Configuration, & Setup
Which two ports are used by a transport node to communicate with the management and control planes in NSX-T Data Center 3.0? (Choose two.)
transport nodecommunication portsmanagement planecontrol plane - Question #28Section 4 – NSX-T Data Center Services
A DevOps user has deployed a Kubernetes Pod in vSphere. What does the term ClusterIP represent within NSX-T?
KubernetesClusterIPdistributed load balancingNCP - Question #29Section 3 – Installation, Configuration, & Setup
How many IPs are required when deploying a highly available NSX Management Cluster with VIP in a production environment?
NSX Manager clusterVIPHA deploymentIP planning - Question #30Section 2 – Planning and Design
A company is deploying a NSX-T Data Center micro-segmentation in their vSphere environment to secure a simple application composed of web, app, and database tiers. The naming conve...
micro-segmentationsecurity groupstagsgrouping policy - Question #31Section 3 – Installation, Configuration, & Setup
Which to steps must an NSX administrator take to integrate VMware Identity Manager in NSX-T to support role-based access control? (Choose two.)
VMware Identity ManagerRBACOAuth 2.0authentication - Question #32Section 5 – Troubleshooting & Operations
An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node. What are two possible causes for this iss...
segment realizationKVM transport nodetroubleshootingNSX-T - Question #33Section 5 – Troubleshooting & Operations
Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?
TraceFlowunicast trafficsegment connectivitytroubleshooting - Question #34Section 5 – Troubleshooting & Operations
When running nsxcli on an ESXi host, which command will show the Replication mode?
nsxclilogical switchreplication modeESXi - Question #35Section 3 – Installation, Configuration, & Setup
Which profile must be attached to the ESXi cluster to prepare the host for NSX-T Data Center?
Transport Node Profilehost preparationESXi clusterNSX-T setup - Question #36Section 5 – Troubleshooting & Operations
An administrator wants to validate the BGP connection status between the Tier-0 Gateway and the upstream physical router. What sequence of commands could be used to check this stat...
BGPTier-0 GatewayEdge node CLIrouting verification - Question #37
Which CLI command does a NSX administrator use to obtain information about the NSX Manager configuration when troubleshooting a production system?
- Question #38
Which three networking features could be configured using the NSX Manager Simplified UI? (Choose three.)
- Question #39Section 5 – Troubleshooting & Operations
An NSX administrator noticed that the nsxcli command times out after 600 secs of idle time. Which CLI command disables the nsxcli time out value on NSX Manager?
nsxcliCLI timeoutNSX Manageradministration - Question #40
An NSX administrator is configuring the KVM hypervisor host as a transport node and wants to apply the Failover Order as a NIC teaming policy. Which profile allows the administrato...
- Question #41Section 3 – Installation, Configuration, & Setup
Which two choices are prerequisites to configure NSX-T on VDS? (Choose two.)
VDS prerequisitesMTUvSphere Distributed Switch 7.0NSX-T setup - Question #42Section 5 – Troubleshooting & Operations
Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?
TEPbare metal transport nodeifconfignetwork configuration - Question #43Section 4 – NSX-T Data Center Services
Which three steps are required to create an IPsec VPN tunnel? (Choose three.)
IPsec VPNlocal endpointIPsec serviceVPN configuration - Question #44Section 1 – Architecture and Technologies
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?
ECMPBFDTier-0 Gatewayfailover detection - Question #45Section 1 – Architecture and Technologies
What are two supported N-VDS modes? (Choose two.)
N-VDSEnhanced DatapathStandard Datapathdatapath modes - Question #46Section 3 – Installation, Configuration, & Setup
A user is assigned these two roles in NSX Manager: - LB Admin - Network Engineer What privileges does this user have in the system?
RBACrole combinationLB AdminNetwork Engineer - Question #47Section 1 – Architecture and Technologies
An NSX administrator has configured a KVM hypervisor as a transport node. Which kernel module on KVM implements a N-VDS?
KVMN-VDSopenvswitchkernel module - Question #48Section 5 – Troubleshooting & Operations
Which CLI command should be executed on a KVM hypervisor to retrieve the VM interface UUID?
KVMvirshVM interface UUIDCLI command - Question #49Section 4 – NSX-T Data Center Services
What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)
IPSec VPNpolicy-based VPNroute-based VPNVPN types - Question #50
Refer to the exhibit. A security administrator has configured a gateway firewall rule to block traffic to all Web servers. What can the administrator infer about the rule publicati...