VMware NSX-T Data Center 3.1 Security (5V0-41.21) Free Practice Test

Question 1

In a brownfield environment with NSX-T Data Center deployed and configured, a customer is interested in Endpoint Protection integrations. What recommendation should be provided to the customer when it comes to their existing virtual machines?

A. A minimum installation of VMware tools is required.

B. Virtual machine hardware should be version 10 or higher.

C. Virtual machine must be protected by vSphere HA.

D. A custom install of VMware tools is required to select the drivers.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

An administrator wants to configure NSX-T Security Groups inside a distributed firewall rule. Which menu item would the administrator select to configure the Security Groups?

A. Inventory

B. System

C. Security

D. Networking

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which two are true of the NSX Gateway Firewall? (Choose two.)

A. Firewall rules in System category cannot be edited.

B. Firewall rules in Pre Rule category are applied to all gateways.

C. Security Groups can be used in Applied-To column.

D. Applied-To can be configured at Firewall Policy level.

E. NAT service can be configured in NSX Gateway Firewall policy.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which two statements are true about NSX Intelligence? (Choose two.)

A. NSX Intelligence supports planning of NSX-T Edge Firewall rules and policy.

B. NSX Intelligence can help to visualize network physical infrastructure.

C. NSX Intelligence assists to build service insertion with Partner SVM.

D. NSX Intelligence can be used in conjunction with vRealize Network Insight.

E. NSX Intelligence supports planning of distributed firewall rules and policy.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

A customer has deployed NSX Intelligence appliance with an incorrect IP address.
What should the customer do to correct the IP address?

A. Redeploy the appliance with the correct parameters.

B. Add a new network interface to the appliance and replace the old one.

C. In the CU, update intelligence manager node host-ip-addr.

D. Shutdown the appliance and change the vApp IP properties.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

When using URL Analysis In NSX-T, which two services must be set in the URL rule to capture traffic over TCP and UDP? (Choose two.)

A. DNS

B. DHCP

C. DHCPv6

D. DNS-UDP

E. DNS-TSIG

Correct Answer: A,B

Question 7

Which three criteria help to determine the severity for a Distributed IDS/IPS? (Choose three.)

A. The severity specified in the signature itself

B. The load balancer deployment type.

C. The type-rating associated with the classification type.

D. The Distributed Intrusion Detection and Intrusion Prevention rules.

E. The Common Vulnerability Scoring System score specified in the signature.

Correct Answer: A,C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which are the four use cases for NSX Tags?

A. Manageability, Third-party sharing/context sharing. Security, and Logging

B. Manageability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability)

C. Accountability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability)

D. Accountability, Third-party sharing/context sharing. Security, and Logging

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

VMware NSX-T Data Center 3.1 Security (5V0-41.21) Free Practice Test