最新の2023年07月04日試験エンジン練習問題2V0-41.20最新の有効問題集を提供中です
試験解答は2V0-41.20最新版テストエンジンをタダで提供します
質問 # 11
The NSX Control Plane is responsible for which two functions? (Choose two.)
- A. propagate topology information
- B. host API services
- C. receive and validate configuration from NSX Policy
- D. push stateless configurations to forwarding engines
- E. maintain packet-level statistics
正解：A、D
質問 # 12
An NSX administrator is troubleshooting a connectivity issue with virtual machines running on an ESXi transport node. Which feature in the NSX UI shows the mapping between the virtual NIC and the host's physical adapter?
- A. Switch Visualization
- B. Activity Monitoring
- C. Port Mirroring
- D. IPFIX
正解：A
質問 # 13
Where do you configure the VLANs used in VRF Lite? (Choose two.)
- A. uplink interface of the VRF gateway
- B. uplink interface of the default Tier-0 gateway
- C. downlink interface of the default Tier-0 gateway
- D. uplink trunk segment
- E. segment connected to the Tier-1 gateway
正解：A、B
解説：
In VRF Lite configuration, VLANs are configured on the uplink interfaces of both the default Tier-0 gateway and the VRF gateway. The default Tier-0 gateway is responsible for routing between the different VRFs, while the VRF gateway is responsible for routing within a specific VRF. Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/nsxt_31_admin_guide/GUID-1F07C737-DA0A-46E9-9ED9-C7D8C6DA3F7B.html
質問 # 14
Where are Distributed Firewall logs containing access decisions stored?
- A. NSX Manager
- B. NSX Edge
- C. NSX API
- D. Hypervisor transport node
正解：D
解説：
Explanation
https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.logging.doc/GUID-6
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-D57429A1-A0A9-42BE-A
質問 # 15
What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN- backed logical switch?
- A. Downlink interface
- B. Service interface
- C. Loopback Router Port
- D. VLAN Uplink
正解：B
解説：
"The service interface is a special-purpose port to enable services for mainly VLAN-based networks. North-south service insertion is another use case that requires a service interface to connect a partner appliance and redirect north-south traffic for partner services. Service interfaces are supported on both active-standby Tier-0 logical routers and Tier-1 routers. Firewall, NAT, and VPNs are supported on this interface. The service interface is also a downlink"
質問 # 16
When a stateful service is enabled for the first time on a Tier-0 Gateway, what happens on the NSX Edge node?
- A. DR is instantiated and automatically connected with SR.
- B. SR and DR is instantiated but requires manual connection.
- C. SR and DR doesn't need to be connected to provide any stateful services.
- D. SR is instantiated and automatically connected with DR.
正解：D
質問 # 17
Which discovery protocol is supported for hypervisor transport nodes?
- A. Cisco Discovery Protocol
- B. Neighbor Discovery Protocol
- C. Adobe Real-time CDP
- D. Link Layer Discovery Protocol
正解：D
質問 # 18
Which command is used to display the network configuration of the Tunnel Endpoint (TEP) IP on a bare metal transport node?
- A. ipconfig
- B. debug
- C. ifconfig
- D. tcpdump
正解：C
解説：
Explanation
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-B7E7371E-A9F6-4880-B184-
質問 # 19
Which three services are compatible with VRF Lite? (Choose three.)
- A. NAT
- B. DHCP
- C. Intrusion Detection
- D. Load Balancer
- E. VPN
正解：A、B、C
解説：
Explanation
VRF Lite is not compatible with the following services:
-VPN
-Load Balancer
Taken from NSX-T ICM 3.0 Lecture Manual.
質問 # 20
Where are Distributed Firewall logs containing access decisions stored?
- A. NSX Manager
- B. NSX Edge
- C. NSX API
- D. Hypervisor transport node
正解：D
解説：
https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.logging.doc/GUID-6F9DC53E-222D-464B-8613-AB2D517CE5E3.html
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-D57429A1-A0A9-42BE-A299-0C3C3546ABF3.html
質問 # 21
When deploying east-west network introspection, which Service Virtual Machine (SVM) deployment method achieves the least amount of traffic hairpinning?
- A. Place a partner SVM on each compute cluster node.
- B. Create a secondary vNIC on each quest VM for SVM communication.
- C. Centralize partner SVMs in a service cluster.
- D. Add partner SVMs to an edge cluster.
正解：B
質問 # 22
What are three characteristics of a transport zone? (Choose three.)
- A. defines the potential reach of transport nodes
- B. defines the scope and reachability of a Segment
- C. configured with a Single N-VDS
- D. configured with multiple N-VDS
- E. optional for creating a segment
正解：A、B、C
解説：
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.3/com.vmware.nsxt.install.doc/GUID-F47989B2-2B9D-4214-B3BA-5DDF66A1B0E6.html
質問 # 23
Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)
- A. Use agentless antivirus with Guest Introspection.
- B. Quarantine workloads based on vulnerabilities.
- C. Identify risk and reputation of accessed websites.
- D. Gain insight about micro-segmentation traffic flows.
- E. Identify security vulnerabilities in the workloads.
正解：B、E
質問 # 24
An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.
In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement configuration has to be done on the Tier-1 Gateway? (Choose two.)
- A. Information
- B. Advertise All LB SNAT IP Routes
- C. Advertise All LB VIP Routes
- D. Advertise All NAT Routes
- E. All Static Routes
正解：B、C
解説：
Explanation
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EEBA627A-0860-477A-95
質問 # 25
What needs to be configured on a Tier-0 Gateway to make NSX Edge Services available to a VM on a VLAN- backed logical switch?
- A. Downlink interface
- B. Service interface
- C. Loopback Router Port
- D. VLAN Uplink
正解：B
解説：
Explanation
"The service interface is a special-purpose port to enable services for mainly VLAN-based networks.
North-south service insertion is another use case that requires a service interface to connect a partner appliance and redirect north-south traffic for partner services. Service interfaces are supported on both active-standby Tier-0 logical routers and Tier-1 routers. Firewall, NAT, and VPNs are supported on this interface. The service interface is also a downlink"
質問 # 26
Which NSX CLI command is used to check the GENEVE tunnel status on ESXi transport node?
- A. get transport-node tunnel state
- B. get host-switch <Host-Switch-Name> tunnels
- C. get transport-node tunnel status
- D. get host-switch <Host-Switch-Name> tunnel status
正解：B
解説：
Explanation
https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/82646
質問 # 27
Which is correct when deploying a NSX Edge in a KVM only environment?
- A. deploy NSX Edge VM with ISO image
- B. deploy NSX Edge VM with QCOW2 image
- C. deploy NSX Edge on a bare-metal server
- D. deploy NSX Edge VM with OVF template
正解：C
質問 # 28
Which command is used to change the NSX CU administrator password?
- A. set user admin password <password> old-password <old-password>
- B. set user administrator password <old-password> <new-password>
- C. set user admin password <old-password> <new-password>
- D. set user administrator password <password> old-password <old-password>
正解：A
解説：
To change the password of an account run: set user admin password my-new-pwd old-password my-old-pwd
質問 # 29
Which CLI command does an NSX administrator run on the NSX Manager to generate support bundle logs if the NSX UI is inaccessible?
- A. vm-support
- B. get support-bundle file vcpnv.tgz
- C. esxcli system syslog config logger set --id=nsxmanager
- D. set support-bundle file vcpnv.tgz
正解：B
解説：
https://vdc-download.vmware.com/vmwb-repository/dcr-public/cc42e3c1-eb34-4567-a916-147e79798957/8264605c-a5e1-49a8-b603-cc78621eeeab/cli.html
質問 # 30
An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)
- A. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.
- B. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but are in Powered Off state.
- C. The virtual machines running on the KVM Transport Node are not connected to the VDS.
- D. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the KVM Transport Node.
- E. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.
正解：A、D
質問 # 31
Which two statements describe the characteristics of an Edge Cluster in NSX-T 3.0 Data Center? (Choose two.)
- A. can have a maximum of 8 edge nodes
- B. must contain only one type of edge nodes (VM or bare metal)
- C. can have a maximum of 10 edge nodes
- D. must have only active-active edge nodes
- E. can contain multiple types of edge nodes (VM or bare metal)
正解：C、E
解説：
Reference:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-14183A62-8E8D-43CC-92E0-E8D72E198D5A.html
質問 # 32
A user is assigned these two roles in NSX Manager:
LB Admin
Network Engineer
What privileges does this user have in the system?
- A. full access permissions on all networking services and read permissions on load balancing features
- B. read permissions on all networking services and full access permissions on load balancing features
- C. full access permissions on all networking services and full access permissions on load balancing features
- D. read permissions on all networking services and read permissions on load balancing features
正解：C
質問 # 33
Which tool injects packets and provides various observation points along the packet's path between two NSX-T managed objects?
- A. Port Mirroring
- B. IPFIX
Reference: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=7&ved=2ahUKEwjw0duct_nmAhUJ1BoKHVrgACcQFjAGegQIBxAC&url=ftp%3A%2F%2Fftp.inwinstack.com%2FOther%2FAI-NSX-T%2FVMware% 2FVMWare%2520NSX-T%2FDocuments% 2Fnsxt_21_admin.pdf&usg=AOvVaw2DqQfqPkhzWQfiJP2SgNbO (213) Reference: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=7&ved=2ahUKEwjw0duct_nmAhUJ1BoKHVrgACcQFjAGegQIBxAC&url=ftp%3A%2F%2Fftp.inwinstack.com%2FOther%2FAI-NSX-T%2FVMware% 2FVMWare%2520NSX-T%2FDocuments% 2Fnsxt_21_admin.pdf&usg=AOvVaw2DqQfqPkhzWQfiJP2SgNbO (213) - C. Traceflow
- D. SPAN mirrors
正解：C
質問 # 34
Which three services are compatible with VRF Lite? (Choose three.)
- A. NAT
- B. DHCP
- C. Intrusion Detection
- D. Load Balancer
- E. VPN
正解：A、B、C
解説：
VRF Lite is not compatible with the following services:
-VPN
-Load Balancer
Taken from NSX-T ICM 3.0 Lecture Manual.
質問 # 35
......
VMware 2V0-41.20試験は、VMware NSX-T Data Centerに関する候補者のスキルと知識を評価する認定テストです。これは、VMware NSX-T Data Centerの経験を持つプロフェッショナルが、そのスキルや知識を検証するために設計されています。この試験は、候補者がVMware NSX-T Data Centerソリューションを構成、実装、および管理する能力をテストすることを意図しています。
2V0-41.20試験問題集で無料サンプルは365日更新されます：https://www.jpntest.com/shiken/2V0-41.20-mondaishu