5V0-41.21 · Question #39
5V0-41.21 Question #39: Real Exam Question with Answer & Explanation
The correct answer is C. A layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS D. The NSX Edge nodes require access to the Internet to download category and reputation. The NSX Edge nodes require access to the Internet to download category and reputation definitions, and a layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic. This will allow the URL Analysis service to analyze incoming DNS traffic
Question
Options
- AThe ESXi hosts require access to the Internet to download category and reputation definitions.
- BA layer 7 gateway firewall rule must be configured on the tier-0 gateway uplink to capture DNS
- CA layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS
- DThe NSX Edge nodes require access to the Internet to download category and reputation
- EThe NSX Manager requires access to the Internet to download category and reputation definitions.
Explanation
The NSX Edge nodes require access to the Internet to download category and reputation definitions, and a layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic. This will allow the URL Analysis service to analyze incoming DNS traffic and block malicious requests.
Community Discussion
No community discussion yet for this question.