2V0-41.23 Exam Questions
106 real 2V0-41.23 exam questions with expert-verified answers and explanations. Page 1 of 3.
- Question #1
Which three of the following describe the Border Gateway Routing Protocol (BGP) configuration on a Tier-0 Gateway? (Choose three.)
- Question #2Section 4 – NSX-T Data Center Services
Which is an advantages of a L2 VPN in an NSX 4.x environment?
L2 VPNbroadcast domainnetwork extensionNSX VPN - Question #3Section 1 – Architecture and Technologies
Which NSX feature can be leveraged to achieve consistent policy configuration and simplicity across sites?
NSX Federationmulti-site policycross-site managementpolicy consistency - Question #4Section 4 – NSX-T Data Center Services
Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)
Distributed IDSintrusion detectionvulnerability managementworkload quarantine - Question #5Section 5 – Troubleshooting & Operations
Which command is used to set the NSX Manager's logging-level to debug mode for troubleshooting?
logging leveldebug modeNSX Manager CLItroubleshooting commands - Question #6Section 4 – NSX-T Data Center Services
What are two valid BGP Attributes that can be used to influence the route path traffic will take? (Choose two.)
BGP attributesAS-Path PrependMEDroute path selection - Question #7Section 3 – Installation, Configuration, & Setup
What must be configured on Transport Nodes for encapsulation and decapsulation of Geneve protocol?
TEPGeneve protocolTransport Nodesoverlay encapsulation - Question #8Section 5 – Troubleshooting & Operations
An NSX administrator would like to export syslog events that capture messages related to NSX host preparation events. Which message ID (msgid) should be used in the syslog export c...
syslogFABRIC msgidhost preparationlog filtering - Question #9Section 3 – Installation, Configuration, & Setup
An NSX administrator wants to create a Tier-0 Gateway to support equal cost multi-path (ECMP) routing. Which failover detection protocol must be used to meet this requirement?
ECMPBFDTier-0 Gatewayfailover detection - Question #10Section 2 – Planning and Design
A company is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web, app, and database tiers. The naming convention will be: W...
micro-segmentationsecurity groupstag-based membershipsecurity policy - Question #11Section 4 – NSX-T Data Center Services
An NSX administrator is creating a NAT rule on a Tier-0 Gateway configured in active-standby high availability mode. Which two NAT rule types are supported for this configuration?...
NAT rulesactive-standby HADNATSNAT - Question #12Section 4 – NSX-T Data Center Services
Which choice is a valid insertion point for North-South network introspection?
North-South introspectionTier-0 gatewayservice insertionnetwork security - Question #13Section 3 – Installation, Configuration, & Setup
Where in the NSX UI would an administrator set the time attribute for a time-based Gateway Firewall rule?
Gateway Firewalltime-based rulesNSX UIfirewall policy - Question #14Section 3 – Installation, Configuration, & Setup
When configuring OSPF on a Tier-0 Gateway, which three of the following must match in order to establish a neighbor relationship with an upstream router? (Choose three.)
OSPFneighbor adjacencyTier-0 Gatewayrouting protocol - Question #15Section 3 – Installation, Configuration, & Setup
Which two of the following features are supported for the Standard NSX Application Platform Deployment? (Choose two.)
NSX Application Platformstandard deploymentNDRmalware prevention metrics - Question #16Section 4 – NSX-T Data Center Services
Which three NSX Edge components are used for North-South Malware Prevention? (Choose three.)
North-South malware preventionIDS/IPSRAPIDSecurity Hub - Question #21Section 5 – NSX Troubleshooting and Operations
An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node. Which feature in the NSX UI shows the mapping between the virt...
Switch Visualizationtransport nodevNIC mappingESXi - Question #22Section 3 – NSX Installation, Configuration, and Setup
What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN-backed logical switch?
Tier-0 Gatewayservice interfaceVLAN-backed segmentEdge services - Question #23Section 1 – NSX Architecture and Technologies
Which two of the following will be used for ingress traffic on the Edge node supporting a Single Tier topology? (Choose two.)
Single Tier topologyEdge nodeingress trafficTier-0 gateway - Question #24Section 1 – NSX Architecture and Technologies
Which three security features are dependent on the NSX Application Platform? (Choose three.)
NSX Application PlatformNSX IntelligenceNSX NDRNSX Malware Prevention - Question #25Section 4 – NSX Services
Which of the following exist only on Tier-1 Gateway firewall configurations and not on Tier-0?
Tier-1 GatewayGateway Firewallfirewall profilessecurity policy - Question #26Section 5 – NSX Troubleshooting and Operations
When collecting support bundles through NSX Manager, which files should be excluded for potentially containing sensitive information?
support bundlescore filessensitive dataNSX Manager - Question #27Section 3 – NSX Installation, Configuration, and Setup
An administrator has deployed 10 Edge Transport Nodes in their NSX Environment, but has forgotten to specify an NTP server during the deployment. What is the efficient way to add a...
Node ProfileNTP configurationEdge Transport Nodebulk management - Question #28Section 4 – NSX Services
Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)
VRF LiteBGProute aggregationBGP neighbors - Question #29Section 1 – NSX Architecture and Technologies
Which two choices are solutions offered by the VMware NSX portfolio? (Choose two.)
NSX portfolioDistributed IDS/IPSNSX Advanced Load Balancerproduct catalog - Question #30Section 4 – NSX Services
NSX improves the security of today's modern workloads by preventing lateral movement, which feature of NSX can be used to achieve this?
lateral movementnetwork segmentationmicrosegmentationzero trust - Question #31Section 5 – NSX Troubleshooting and Operations
Which three selections are capabilities of Network Topology? (Choose three.)
Network TopologyNSX UIvisualizationcomponent interconnect - Question #32Section 5 – NSX Troubleshooting and Operations
Which TraceFlow traffic type should an NSX administrator use for validating connectivity between App and DB virtual machines that reside on different segments?
TraceFlowunicastconnectivity testinginter-segment - Question #33Section 1 – NSX Architecture and Technologies
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?
stateful servicesSRDRTier-0 Gateway - Question #34Section 1 – NSX Architecture and Technologies
How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?
RouterLink portTier-0Tier-1gateway connectivity - Question #35Section 3 – NSX Installation, Configuration, and Setup
Where does an administrator configure the VLANs used in VRF Lite? (Choose two.)
VRF LiteVLANuplink trunk segmentVRF gateway uplink - Question #36Section 1 – NSX Architecture and Technologies
Which is the only supported mode in NSX Global Manager when using Federation?
NSX FederationGlobal ManagerPolicy modemulti-site - Question #37Section 4 – NSX Services
Which VPN type must be configured before enabling a L2VPN?
L2VPNroute-based IPSec VPNVPN prerequisitesVPN configuration - Question #38Section 5 – NSX Troubleshooting and Operations
Which statement is true about an alarm in a Suppressed state?
alarm managementsuppressed statealarm durationNSX monitoring - Question #39Section 5 – NSX Troubleshooting and Operations
What can the administrator use to identify overlay segments in an NSX environment if troubleshooting is required?
VNI IDoverlay segmentsGENEVEsegment identification - Question #40Section 5 – NSX Troubleshooting and Operations
Which two built-in VMware tools will help identify the cause of packet loss on VLAN Segments? (Choose two.)
packet captureTraceFlowVLAN segmentspacket loss - Question #41Section 3 – NSX Installation, Configuration, and Setup
What should an NSX administrator check to verify that VMware Identity Manager integration is successful?
VMware Identity Manageridentity integrationNSX UIauthentication - Question #42Section 4 – NSX Services
Which two are requirements for FQDN Analysis? (Choose two.)
FQDN analysisLayer 7 firewallNSX Edgegateway firewall rule - Question #43Section 3 – NSX Installation, Configuration, and Setup
What is the VMware recommended way to deploy a virtual NSX Edge Node?
NSX Edge deploymentEdge NodeNSX UIvirtual appliance - Question #44Section 3 – NSX Installation, Configuration, and Setup
An NSX administrator has deployed a single NSX Manager node and will be adding two additional nodes to form a 3-node NSX Management Cluster for a production environment. The admini...
NSX Management Clustercluster VIPcompute managersubnet requirements - Question #45Section 5 – NSX Troubleshooting and Operations
Which CLI command shows syslog on NSX Manager?
NSX CLIsyslogNSX Manager logslog commands - Question #46Section 3 – NSX Installation, Configuration, and Setup
Which NSX CLI command is used to change the authentication policy for local users?
NSX CLIauthentication policylocal userspassword policy - Question #47Section 4 – NSX Services
Which of the two following characteristics about NAT64 are true? (Choose two.)
NAT64Tier-0 gatewayTier-1 gatewayactive-standby mode - Question #48
Refer to the exhibit. An administrator would like to change the private IP address of the NAT VM 172.16.101.11 to a public address of 80.80.80.1 as the packets leave the NAT-Segmen...
- Question #49Section 1 – NSX Architecture and Technologies
Which two logical router components span across all transport nodes? (Choose two.)
distributed routerlogical routertransport nodesrouting architecture - Question #50Section 5 – NSX Troubleshooting and Operations
Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?
support bundleNSX Manager CLIlog collectiontroubleshooting - Question #51Section 3 – NSX Installation, Configuration, and Setup
An administrator has been tasked with implementing the SSL certificates for the NSX Manager Cluster VIP. Which is the correct way to implement this change?
SSL certificatesNSX Managercluster VIPAPI - Question #52Section 4 – NSX Services
Which three data collection sources are used by NSX Network Detection and Response to create correlations/intrusion campaigns? (Choose three.)
Network Detection and ResponseIDS/IPSanti-malwareNSX Intelligence - Question #53Section 5 – NSX Troubleshooting and Operations
Which command on ESXi is used to verify the Local Control Plane connectivity with Central Control Plane?
Local Control PlaneCentral Control PlaneESXi connectivitycontrol plane port - Question #54Section 5 – NSX Troubleshooting and Operations
Which troubleshooting step will resolve an error with code 1001 during the configuration of a time- based firewall rule?
time-based firewallNTPerror 1001DFW troubleshooting