2V0-41.23 Exam Questions

Which VMware GUI tool is used to identify problems in a physical network?

What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)

Which command is used to test management connectivity from a transport node to NSX Manager?

What are three NSX Manager roles? (Choose three.)

A customer has a network where BGP has been enabled and the BGP neighbor is configured on the Tier-0 Gateway. An NSX administrator used the get gateways command to retrieve this in...

Which CLI command is used for packet capture on the ESXi Node?

Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

An administrator needs to download the support bundle for NSX Manager. Where does the administrator download the log bundle from?

Which two statements are true for IPSec VPN? (Choose two.)

Which three DHCP Services are supported by NSX? (Choose three.)

An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode. In the event of node failure, the failover policy should not allow the origin...

What are four NSX built-in role-based access control (RBAC) roles? (Choose four.)

Which two of the following are used to configure Distributed Firewall on VDS? (Choose two.)

Which two statements are true about IDS Signatures? (Choose two.)

A company security policy requires all users to log into applications using a centralized authentication system. Which two authentication, authorization, and accounting (AAA) syste...

Which log is used to see a failed NSX-T installation of a VIB package on ESXi transport nodes?

Which tool could be used to configure BGP on a Tier-0 Gateway?

Which Network and Security virtualization solution provides network hybridity and mobility?

An administrator has a requirement to have consistent policy configuration and enforcement across NSXT instances. What feature of NSX-T Data Center fulfills this requirement?

Which two statements are true for a Tier-1 Gateway? (Choose two.)

Which CLI command is used to disable SSH timeout on NSX Manger and NSX Edge nodes?

Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the Geneve protocol on the ESXi transport node? (Choose two.)

Where is the insertion point for East-West network introspection?

What are two functions of the Service Engines in NSX Advanced Load Balancer? (Choose two.)

Which field in a Tier-1 Gateway Firewall would be used to allow access for a collection of trustworthy web sites?

An administrator wants to validate the BGP connection status between the Tier-0 Gateway and the upstream physical router. What sequence of commands could be used to check this stat...

What are two supported host switch modes? (Choose two.)

Which two are supported by L2 VPN clients? (Choose two.)

Which of the following settings must be configured in an NSX environment before enabling stateful active-active SNAT?

Which two statements describe the characteristics of an Edge Cluster in NSX? (Choose two.)

An NSX administrator would like to create an L2 segment with the following requirements: - L2 domain should not exist on the physical switches. - East/West communication must be ma...

In which VPN type are the Virtual Tunnel interfaces (VTI) used?

Which three protocols could an NSX administrator use to transfer log messages to a remote log server? (Choose three.)

Which CLI command would an administrator use to allow syslog on an ESXi transport node when using the esxcli utility?

An administrator is configuring service insertion for Network Introspection. Which two places can the Network Introspection be configured? (Choose two.)

An NSX administrator is reviewing syslog and notices that Distributed Firewall Rules hit counts are not being logged. What could cause this issue?

As part of an organization's IT security compliance requirement, NSX Manager must be configured for 2FA (two-factor authentication). What should an NSX administrator have ready bef...

A security administrator needs to configure a firewall rule based on the domain name of a specific application. Which field in a distributed firewall rule does the administrator co...

Which two statements are correct about East-West Malware Prevention? (Choose two.)

Which table on an ESXi host is used to determine the location of a particular workload for a frame-forwarding decision?

Which two steps must an NSX administrator take to integrate VMware Identity Manager in NSX to support role-based access control? (Choose two.)

An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmissio...

Which steps are required to activate Malware Prevention on the NSX Application Platform?

The security administrator turns on logging for a firewall rule. Where is the log stored on an ESXi transport node?

What are the four types of role-based access control (RBAC) permissions? (Choose four.)

An architect receives a request to apply distributed firewall in a customer environment without making changes to the network and vSphere environment. The architect decides to use...

In an NSX environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers. Which two actions could address low...

A customer is preparing to deploy a VMware Kubernetes solution in an NSX environment. What is the minimum MTU size for the UPLINK profile?

How does the Traceflow tool identify issues in a network?

Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?