[2023年更新]5V0-41.21リアルな試験問題集で5V0-41.21練習テスト
5V0-41.21問題集でVMware NSX-T Data Center Security Skills 2023高確率練習問題集
VMware 5V0-41.21 認定試験は、ネットワークセキュリティ、セキュリティポリシー、セキュリティサービスなど、VMware NSX-T Data Center 3.1 のセキュリティに関連するトピックをカバーしています。受験者は、セキュリティポリシーとサービスの設定能力、セグメンテーションやマイクロセグメンテーションなどのネットワークセキュリティコンセプトに関する知識などがテストされます。
VMware 5V0-41.21試験は、60問の多肢選択および複数選択問題から構成され、120分以内に完了する必要があります。試験は英語および日本語で利用可能であり、Pearson VUEテストセンターまたはOnVUEプラットフォームを通じてオンラインで受験することができます。試験料は250ドルであり、候補者は100〜500のスケールで300以上の合格点を獲得する必要があります。VMware NSX-T Data Center 3.1 Security認定を取得するためには、成功した候補者はNSX-Tプラットフォームを使用して仮想化環境を安全にする能力を示すことができ、VMware NSX-T Data Center 3.1環境のセキュリティの専門家として認められます。
質問 # 23
To which network operations does a user with the Security Engineer role have full access permission?
- A. Networking Load Balancing, Networking DNS, Networking Forwarding Policies
- B. Networking Forwarding Policies, Networking NAT, Networking VPN
- C. Networking DHCP, Networking NAT, Networking Segments
- D. Networking IP Address Pools, Networking NAT, Networking DHCP
正解：C
質問 # 24
An administrator needs to send FW connections logs to a remote server.
Which sequence of commands does the administrator need to apply on their ESXi Host?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option A
- D. Option B
正解：B
質問 # 25
Which two are requirements for URL Analysis? (Choose two.)
- A. A layer 7 gateway firewall rule must be configured on the tier-0 gateway uplink to capture DNS traffic.
- B. The NSX Edge nodes require access to the Internet to download category and reputation definitions.
- C. The NSX Manager requires access to the Internet to download category and reputation definitions.
- D. A layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic,
- E. The ESXi hosts require access to the Internet to download category and reputation definitions.
正解：B、D
解説：
The NSX Edge nodes require access to the Internet to download category and reputation definitions, and a layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic. This will allow the URL Analysis service to analyze incoming DNS traffic and block malicious requests. For more information, please see this VMware Documentation article[1], which explains how to configure URL Analysis on NSX.
[1] https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/nsxt_31_url_analysis/GUID-46BC65F3-7A45-4A9F-B444-E4A1A7E0AC4A.html
質問 # 26
A security administrator recently enabled Guest Introspection on NSX-T Data Center.
Which would be a reason none of the Microsoft Windows based VMs are reporting any information?
- A. NSX Manager needs to be reconfigured.
- B. Windows VMs require a reboot.
- C. VMware Tools need to be reconfigured.
- D. NSX Manager require a reboot.
正解：A
解説：
NSX Manager needs to be reconfigured. Guest Introspection requires additional configuration of the NSX Manager in order to collect information from the Windows based VMs. This configuration includes setting up the Guest Introspection service with the appropriate credentials and configuring the rules to allow the traffic through the firewall. Once this is done, the Windows VMs will start reporting information to the NSX Manager.
For more information on setting up Guest Introspection, please refer to the NSX-T Data Center documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsx-t-3.0-installing/GUID-3B7F12AD-D8F7-44B9-A56B-E71F64C2F6A0.html
質問 # 27
Refer to the exhibit.
An administrator is reviewing NSX Intelligence information as shown in the exhibit.
What does the red dashed line for the UDP:137 flow represent?
- A. Blocked communication
- B. Discovered communication
- C. Unprotected communication
- D. Allowed communication
正解：A
質問 # 28
Which dot color indicates an on-going attack of medium severity in the IDS/IPS events tab of NSX-T Data Center'
- A. solid red dot
- B. blinking yellow dot
- C. blinking orange dot
- D. solid orange dot
正解：A
質問 # 29
What is one of the main use-cases of NSX-T Endpoint Protection?
- A. East-West Firewalling
- B. Agentless Antivirus
- C. North-South Firewalling
- D. Use Network Security Services of a third party vendor
正解：A
質問 # 30
At which two intervals are NSX-T IDS/IPS updates through VMware's cloud based internet service provided for threat signature files? (Choose two.)
- A. monthly periodic updates
- B. off-schedule for 0-day updates
- C. weekly periodic updates
- D. daily periodic updates
- E. bi-weekly periodic updates
正解：A、B
質問 # 31
Which two statements are true about NSX Intelligence? (Choose two.)
- A. NSX Intelligence assists to build service insertion with Partner SVM.
- B. NSX Intelligence can help to visualize network physical infrastructure.
- C. NSX Intelligence supports planning of NSX-T Edge Firewall rules and policy.
- D. NSX Intelligence can be used in conjunction with vRealize Network Insight.
- E. NSX Intelligence supports planning of distributed firewall rules and policy.
正解：D、E
質問 # 32
An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.
Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?
- A. VMXNET2
- B. e1000
- C. VMXNET3
- D. Flexible
正解：C
解説：
When deploying an NSX Edge Virtual Machine through an ISO image, the virtual network interface card (vNIC) type that must be selected is VMXNET3 in order to allow participation in overlay and VLAN transport zones. VMXNET3 is a high-performance and feature-rich paravirtualized NIC that provides a significant performance boost over other vNIC types, as well as support for both overlay and VLAN transport zones.
For more information on deploying an NSX Edge Virtual Machine through an ISO image, please refer to the NSX-T Data Center documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsx-t-3.0-deploy-config/GUID-A782558B-A72B-4848-B6DB-7A8A9E71FFD6.html
質問 # 33
A security administrator has configured NSX Intelligence for discovery. They would like to get recommendations based on the changes in the scope of the input entities every hour.
What needs to be configured to achieve the requirement?
- A. Adjust the time range to 1 hour.
- B. Start a new recommendation.
- C. Publish the recommendations.
- D. Toggle the monitoring option on.
正解：A
解説：
NSX Intelligence uses machine learning algorithms to analyze network traffic and provide recommendations for security and compliance. The administrator can configure the time range of the input entities to be analyzed, so that the recommendations are based on changes in the scope of the input entities over that period of time.
To achieve the requirement of getting recommendations based on the changes in the scope of the input entities every hour, the administrator needs to adjust the time range to 1 hour. This will ensure that the analysis and recommendations are based on the most recent hour of network traffic.
Reference:
VMware NSX Intelligence documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.intelligence.doc/GUID-F2F1D7E8-F6B2-4870-9E38-7C8D3D3F9B1E.html VMware NSX Intelligence Configuration documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.intelligence.config.doc/GUID-7F44F3D3-3A3C-4EBE-A5D5-F1E3E3F59A8B.html
質問 # 34
Which two are used to define dynamic groups for an NSX Distributed Firewall? (Choose two.)
- A. physical servers
- B. segment
- C. machine name
- D. segment's port
- E. tags
正解：C、E
解説：
For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID-BEDA8D9F-ACBC-42B1-B7F5-FEEF0E0D899C.html) for more information on configuring dynamic groups.
質問 # 35
Reference the CLI output.
What is the source IP address in the distributed firewall rule to accept HTTP traffic?
- A. 172.16.10.12
- B. 172.16.30.11
- C. 172.16.20.11
- D. 172.16.10.11
正解：D
質問 # 36
What must an administrator deploy to provide Linux based VMs with antivirus protection?
- A. Guest Customization Agent
- B. Antivirus Agent in vCenter
- C. Guest Introspection Thin Agent
- D. Antivirus Agent in NSX
正解：C
解説：
NSX provides a feature called Guest Introspection that allows administrators to provide security services to virtual machines, including antivirus protection. One of the components of Guest Introspection is the Guest Introspection Thin Agent, which must be deployed to provide Linux-based VMs with antivirus protection. The Thin Agent is a lightweight agent that runs inside the guest operating system of virtual machines and communicates with the NSX Manager to provide security services.
Once the Guest Introspection Thin Agent is deployed, the administrator can configure the antivirus service to scan virtual machines for malware and take action on any threats that are detected.
Reference:
VMware NSX Guest Introspection documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.guest_introspection.doc/GUID-A86FBAF1-A8D9-4E12-8F3D-04B3D89B8F7E.html VMware NSX Guest Introspection Thin Agent documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.guest_introspection.doc/GUID-A86FBAF1-A8D9-4E12-8F3D-04B3D89B8F7E.html
質問 # 37
What is an unprotected traffic flow in NSX Intelligence?
- A. A traffic flow that matches a reject rule more granular than the default.
- B. A traffic flow that matches an allow rule more granular than the default.
- C. A traffic flow that matches the default distributed firewall rule.
- D. A traffic flow that matches a droprule more granular than the default.
正解：D
質問 # 38
How does N5X Distributed IDS/IPS keep up to date with signatures?
- A. NSX Edge uses manually uploaded signatures by the security administrator.
- B. NSX Manager has a local IDS/IPS signatures database that does not need to be updated.
- C. NSX-T Data Center is using a cloud based database to download the IDS/IPS signatures.
- D. NSX Distributed IDS/IPS signatures are retrieved from updates.vmware.com.
正解：D
質問 # 39
At which OSI Layer do Next Generation Firewalls capable of analyzing application traffic operate?
- A. Layer 2
- B. Layer 4
- C. Layer 3
- D. Layer 7
正解：D
質問 # 40
Refer to the exhibit.
An administrator is reviewing NSX Intelligence information as shown in the exhibit.
What does the red dashed line for the UDP:137 flow represent?
- A. Blocked communication
- B. Discovered communication
- C. Unprotected communication
- D. Allowed communication
正解：A
解説：
The red dashed line for the UDP:137 flow in the NSX Intelligence information represents blocked communication. This indicates that the NSX Distributed Firewall has blocked the communication between the source and destination IP addresses on port 137.
For more information on NSX Intelligence and how to use it, please refer to the NSX-T Data Center documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsx-t-3.0-intelligence/GUID-C2B2AF2E-A76A-46B8-A67A-42D7A9E924A9.html
質問 # 41
A security administrator is verifying why users are blocked from sports sites but are able to access gambling websites from the corporate network. What needs to be updated In nsx-T to block the gambling websites?
- A. Network Introspection Policy
- B. vSphere Firewall Policy
- C. Endpoint Protection Rules
- D. URL Analysis Attributes
正解：D
質問 # 42
......
VMware 5V0-41.21認定試験は、105分以内に完了する必要がある45の多肢選択問題で構成されています。この試験は、NSX-T Data Center 3.1アーキテクチャ、ネットワークセキュリティの概念と原則、分散ファイアウォールの構成、ネットワーク内視点の構成、およびマイクロセグメンテーションなど、さまざまなトピックをカバーしています。試験に合格するには、候補者は500点中少なくとも300点を獲得する必要があります。
5V0-41.21リアルな問題と知能問題集：https://www.jpntest.com/shiken/5V0-41.21-mondaishu