[2023年11月] 合格させるVMware 5V0-41.21テストエンジンPDFで完全版無料問題集
VMware NSX-T Data Center 3.1 Security練習テスト2023年最新の5V0-41.21ストレスなしで合格！
質問 # 26
Which two Guest OS drivers are required for the Identity Firewall to operate? (Choose two.)
- A. e1000e
- B. vmxnet3
- C. Guest Introspection
- D. NSX File Introspection
- E. NSX Network Introspection
正解：C、D
質問 # 27
What is the default action of the Default Layer 3 distributed firewall rule?
- A. Allow
- B. Forward
- C. Drop
- D. Reject
正解：B
質問 # 28
Which three security objects are provided as an output in a recommendation session in NSX Intelligence? (Choose three.)
- A. distributed firewall rules
- B. security service
- C. context profiles
- D. security groups
- E. gateway firewall rules
正解：A、B、E
解説：
NSX Intelligence uses machine learning algorithms to analyze network traffic and provide recommendations for security and compliance. These recommendations include the following security objects:
Distributed Firewall Rules: Distributed firewall rules are used to control traffic between virtual machines within a logical network. NSX Intelligence can recommend new distributed firewall rules based on traffic patterns it observes in the network.
Security Service: Security services are used to protect virtual machines and networks from threats. NSX Intelligence can recommend new security services to be deployed based on traffic patterns it observes in the network.
Security Groups: Security groups are used to group virtual machines and networks together for security and management purposes. NSX Intelligence can recommend new security groups to be created based on traffic patterns it observes in the network.
1. context profiles are not an output from a recommendation session in NSX Intelligence. It is used to define the context of the network traffic that is being analyzed, such as the type of device, the network location, or the user.
2. gateway firewall rules are not an output from a recommendation session in NSX Intelligence. Gateway firewall rules are used to control traffic between logical networks, such as between a VLAN and a VXLAN, or between a logical network and the physical network.
Reference:
VMware NSX Intelligence documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.intelligence.doc/GUID-F2F1D7E8-F6B2-4870-9E Top of Form Bottom of Form
質問 # 29
Which are the four use cases for NSX Tags?
- A. Accountability, Third-party sharing/context sharing. Security, and Logging
- B. Accountability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability)
- C. Manageability, Third-party sharing/context sharing. Security, and Logging
- D. Manageability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability)
正解：B
解説：
The four use cases for NSX Tags are Manageability, Third-party sharing/context sharing, Security, and Troubleshooting (Traceability). NSX Tags provide an easy way to organize, document, and manage virtual networks and can be used to track changes and enforce security policies. They can also be used to share context between third-party providers, such as cloud service providers, to ensure that security policies are adhered to. Additionally, NSX Tags can be used for logging and troubleshooting by providing traceability and making it easier to debug network issues. Reference: [1] https://docs.vmware.com/en/VMware-NSX-T/3.0/vmware-nsx-t-30-administration-guide/GUID-2F3E7A3F-3C85-48E1-8F7E-2A2F7C2F8FCC.html [2] https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/nsx/vmware-nsx-data-center-for-vsphere-tag-based-security-guide.pdf
質問 # 30
An administrator has configured a new firewall rule but needs to change the Applied-To parameter. Which two are valid options that the administrator can configure? (Choose two.)
- A. services
- B. DFW
- C. profiles
- D. groups
- E. rule
正解：A、C
質問 # 31
Which three arerequired to configure a firewall rule on a getawayto allowtraffic from the internal to web servers? (Choose three.)
- A. Add a firewall rule in Local Gateway category.
- B. Create a URL analysis profile for web hosting category.
- C. Createa firewall rule in System category.
- D. Disable the firewall rule in Default category.
- E. Create a firewall policy in Local Gateway category.
- F. Enable Firewall Service for gateway.
正解：A、C、D
質問 # 32
An NSX administrator is trying to find the dvfilter name of the sa-web-01 virtual machine to capture the sa-web-01 VM traffic. What could be a reason the sa-web-01 VM dvfilter name is missing from the command output?
- A. sa-web-01 is powered Off on ESXi host.
- B. ESXi host has the firewall turned off.
- C. sa-web-01 VM has the no firewall rules configured.
- D. ESXi host has 5SH disabled.
正解：A
解説：
The most likely reason the sa-web-01 VM dvfilter name is missing from the command output is that the sa-web-01 VM is powered off on the ESXi host. The dvfilter name is associated with the VM when it is powered on, and is removed when the VM is powered off. Therefore, if the VM is powered off, then the dvfilter name will not be visible in the command output. Other possible reasons could be that the ESXi host has the firewall turned off, the ESXi host has 5SH disabled, or that the sa-web-01 VM has no firewall rules configured. Reference: [1] https://kb.vmware.com/s/article/2143718 [2] https://docs.vmware.com/en/VMware-NSX-T/3.0/vmware-nsx-t-30-administration-guide/GUID-AC3CC8A3-B2DE-4A53-8F09-B8EEE3E3C7D1.html
質問 # 33
Which esxcli command lists the firewall configuration on ESXi hosts?
- A. vsipioct1 getrules -f <filter-name>
- B. esxcli network firewall rules
- C. esxcli network firewall ruleset list
- D. vsipioct1getrules -filter <filter-name>
正解：C
質問 # 34
Which two statements are true about NSX Intelligence? (Choose two.)
- A. NSX Intelligence assists to build service insertion with Partner SVM.
- B. NSX Intelligence supports planning of NSX-T Edge Firewall rules and policy.
- C. NSX Intelligence can help to visualize network physical infrastructure.
- D. NSX Intelligence supports planning of distributed firewall rules and policy.
- E. NSX Intelligence can be used in conjunction with vRealize Network Insight.
正解：D、E
質問 # 35
An N5X administrator has turned on logging for the distributed firewall rule. On an ESXi host, where will the logs be stored?
- A. /var/log/vmkerntl.log
- B. /var/log/esxupdate.log
- C. /var/log/dfwpktlogs.log
- D. /var/log/hostd.log
正解：C
質問 # 36
Which two are requirements for URL Analysis? (Choose two.)
- A. The NSX Edge nodes require access to the Internet to download category and reputation definitions.
- B. A layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic,
- C. A layer 7 gateway firewall rule must be configured on the tier-0 gateway uplink to capture DNS traffic.
- D. The NSX Manager requires access to the Internet to download category and reputation definitions.
- E. The ESXi hosts require access to the Internet to download category and reputation definitions.
正解：A、B
解説：
The NSX Edge nodes require access to the Internet to download category and reputation definitions, and a layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic. This will allow the URL Analysis service to analyze incoming DNS traffic and block malicious requests. For more information, please see this VMware Documentation article[1], which explains how to configure URL Analysis on NSX.
[1] https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/nsxt_31_url_analysis/GUID-46BC65F3-7A45-4A9F-B444-E4A1A7E0AC4A.html
質問 # 37
A customer has a requirement to achieve Zero-Trust Security and minimize operational overhead. Which VMware solution can be used by the customer to achieve the requirement?
- A. Carbon Black Anti-Virus
- B. Tanzu Kubernetes Grid
- C. NSX Intelligence
- D. NSX Manager
正解：A
質問 # 38
In a brownfield environment with NSX-T Data Center deployed and configured, acustomer is interested in Endpoint Protection integrations. What recommendation should be provided to the customer when it comes to their existing virtual machines?
- A. A minimum installation of VMware tools is required.
- B. A custom install of VMware tools is required to select the drivers.
- C. Virtual machine must be protected by vSphere HA.
- D. Virtual machine hardware should be version 10 or higher.
正解：D
質問 # 39
Which dot color indicates an on-going attack of medium severity in the IDS/IPS events tab of NSX-T Data Center?
- A. blinking yellow dot
- B. solid orange dot
- C. blinking orange dot
- D. solid red dot
正解：B
解説：
The dot color that indicates an on-going attack of medium severity in the IDS/IPS events tab of NSX-T Data Center is a solid orange dot. This indicates that the attack has been detected and is ongoing at a medium severity level.
Reference:
In the IDS/IPS events tab of NSX-T Data Center, different colors of dots are used to indicate the severity of an attack.
A solid red dot indicates a critical attack, which is the highest severity level.
A solid orange dot indicates a medium attack, which is a moderate severity level.
A solid yellow dot indicates a low attack, which is the lowest severity level.
In this case, a solid orange dot is used to indicate an on-going attack of medium severity in the IDS/IPS events tab of NSX-T Data Center.
It's worth noting that there is no blinking dots in this context, all the dots are solid.
VMware NSX-T Data Center documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/index.html VMware NSX-T Data Center Intrusion Detection and Prevention documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.ids.doc/GUID-C4ED1F4D-4E4B-4A9C-9F5C-7AC081A5C5D5.html
質問 # 40
A security administrator has configured NSX Intelligence for discovery. They would like to get recommendations based on the changes in the scope of the input entities every hour.
What needs to be configured to achieve the requirement?
- A. Publish the recommendations.
- B. Start a new recommendation.
- C. Adjust the time range to 1 hour.
- D. Toggle the monitoring option on.
正解：D
質問 # 41
Which two criteria would an administrator use to filter firewall connection logs on NSX?
- A. FIREWALL-PKTLOG
- B. FIREWALL MONITORING
- C. FIREWALL RULE TAG
- D. FIREWALL SYSTEM
- E. FIREWALL CONNECTION
正解：D、E
質問 # 42
An administrator has enabled the "logging" option on a specific firewall rule. The administrator does not see messages on the Logging Server related to this firewall rule. What could be causing the issue?
- A. The logging server on the transport nodes is not configured.
- B. NSX Manager must have Firewall Logging enabled.
- C. The logging on the firewall policy needs to be enabled.
- D. Firewall Rule Logging is only supported in Gateway Firewalls.
正解：C
質問 # 43
An organization wants to add security controlsfor contractor virtual desktops.Which statement Is true when configuring an NSX Identity firewall rule?
- A. User Identity can be used in the both the Source and the Destination sections of the firewall rule.
- B. User Identity can only be used in the Source section of the firewall rule.
- C. User Identity cannot be used in Source or Destination sections of the firewall rule.
- D. User Identity can only be used in the Destination Section of the firewall rule.
正解：C
質問 # 44
In a brownfield environment with NSX-T Data Center deployed and configured, a customer is interested in Endpoint Protection integrations. What recommendation should be provided to the customer when it comes to their existing virtual machines?
- A. Virtual machine hardware should be version 10 or higher.
- B. A custom install of VMware tools is required to select the drivers.
- C. A minimum installation of VMware tools is required.
- D. Virtual machine must be protected by vSphere HA.
正解：B
解説：
Endpoint Protection (EPP) integrations with NSX-T Data Center typically involve installing a security agent on the virtual machines (VMs) in the environment. This agent communicates with the NSX-T Data Center platform to provide security features such as antivirus and intrusion detection.
In order for the agent to work properly, it is important that the correct drivers are installed on the VMs. Typically, this is done by installing VMware tools on the VMs, which provides the necessary drivers. However, in a brownfield environment, the VMs may already have VMware tools installed and the drivers may not be the correct version for the agent to work properly. In this case, it is recommended to perform a custom install of VMware tools and select the drivers specifically for the agent.
Reference:
VMware NSX-T Data Center Endpoint Protection documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.epp.doc/GUID-C6F7F8C3-2F7B-4D5C-974F-F9C9E5BD5C5F.html VMware Tools documentation https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vm_admin.doc/GUID-D2F7D8C9-9D05-4F0F-A717-C4B4D4F4E4E4.html
質問 # 45
......
VMware NSX-T Data Center 3.1は、組織が複雑なマルチクラウド環境を作成、管理、保護できるネットワーク仮想化およびセキュリティプラットフォームです。 NSX-Tデータセンター3.1を使用すると、組織はネットワークインフラストラクチャの可視性、制御、自動化を改善し、運用コストを削減し、敏ility性を高めることができます。
オンライン試験練習テストと詳細な解説付き！：https://www.jpntest.com/shiken/5V0-41.21-mondaishu