2V0-41.23 Online Practice Questions and Answers

Correct Answer: C

A node profile is a configuration template that can be applied to multiple NSX Edge nodes or transport nodes at once. A node profile can include settings such as NTP server, DNS server, syslog server, and so on1. By using a node profile, an administrator can efficiently configure or update the network settings of multiple NSX Edge nodes or transport nodes in a single operation2. The other options are incorrect because they are either not efficient or not supported. Using the CLI on each Edge node would require manual and repetitive commands for each node, which is not efficient. Using a Transport Node Profile would not work, because a Transport Node Profile is used to configure the NSX-T Data Center components on a transport node, such as the transport zone, the N-VDS, and the uplink profiles3. Using a PowerCLI script might work, but it would require writing and testing a custom script, which is not as efficient as using a built-in feature like a node profile.

Correct Answer: A

According to the VMware NSX 4.x Professional documents and tutorials, BFD is a failover detection protocol that provides fast and reliable detection of link failures between two routing devices. BFD can be used with ECMP routing to monitor the health of the ECMP paths and trigger a route change in case of a failure12. BFD is supported by both BGP and OSPF routing protocols in NSX-T3. BFD can also be configured with different timers to achieve different detection times3.

Correct Answer: A

Reference: https://www.ramyafifi.com/post/micro-segmentation-with-nsx-data-center#:~:text=With%20East%2DWest%20Service%20Insertion,or%20in%20a%20Service %20cluster

Correct Answer: BDE

An NSX administrator can use TCP, UDP, or TLS protocols to transfer log messages to a remote log server. These protocols are supported by NSX Manager, NSX Edge, and hypervisors for remote logging. A Log Insight log server supports all these protocols, as well as LI and LI-TLS, which are specific to Log Insight and optimize network usage. HTTPS, SSH, and SSL are not valid protocols for remote logging in NSX-T Data Center. References: : VMware NSX-T Data Center Administration Guide, page 102. : VMware Docs: Configure Remote Logging

Correct Answer: BD

Two tools that are used for centralized logging in VMware NSX are Syslog Server and VMware Aria Operations for Logs. Syslog Server is a standard protocol for sending log messages from various network devices to a centralized server1. VMware NSX supports syslog for long term retention of logs and all NSX components can send syslog messages to a configured syslog server2. VMware Aria Operations for Logs is a VMware product that provides intelligent log analytics for NSX3. It provides monitoring and troubleshooting capabilities and customizable dashboards for network virtualization, flow analysis, and alerts3. The other options are incorrect because they are not tools for centralized logging in VMware NSX. VMware Aria Operations is a VMware product that provides operations management and automation for NSX4, but it is not the same as VMware Aria Operations for Logs. VMware Aria Automation is a VMware product that provides automation and orchestration for NSX5, but it is not related to logging. VMware Aria Operations for Networks is not a valid product name. References: Syslog, NSX Logging and System Events, VMware vRealize Log Insight for NSX, VMware vRealize Operations Management Pack for NSX, VMware vRealize Automation

Correct Answer: A

According to the VMware NSX Documentation, this VPN type must be configured before enabling a L2VPN. L2VPN stands for Layer 2 VPN and is a feature that allows you to extend your layer 2 network across different sites using an IPSec tunnel. Route-based IPSec VPN is a VPN type that uses logical router ports to establish IPSec tunnels between sites. https://docs.vmware.com/en/VMware-NSX/4.1/administration/GUID-86C8D6BB-F185-46DC-828C-1E1876B854E8.html

Correct Answer: CD

NSX supports two types of authentication, authorization, and accounting (AAA) systems when integrating with VMware Identity Manager: RSA SecurID and LDAP and OpenLDAP based on Active Directory (AD). RSA SecurID is a two-factor authentication system that uses a token-based approach to verify the identity of users. LDAP and OpenLDAP based on AD are directory services that store and manage user information and credentials. Both systems can be used to provide centralized authentication for users who want to access applications in an NSX environment . https://blogs.vmware.com/networkvirtualization/2017/11/remote-user-authentication-and-rbac-with-nsx-t.html

The integration of VMware Identity Manager with NSX provides the following benefits related to user authentication:

Support for extensive authentication, authorization, and accounting (AAA) systems, including:

--RADIUS --Smart cards and common access cards --RSA SecureID --LDAP and OpenLDAP based on Active Directory (AD) Enterprise SSO: --Common authentication platform across multiple VMware solutions--Seamless SSO experience

NSX has its own native LDAP and Active Directory integration, but VMware Identity Manager also offers this capability

Correct Answer: DE

According to the VMware NSX Documentation, these are the prerequisites for adding nodes to an NSX Management Cluster using the NSX UI:

All nodes must be in the same subnet and have IP connectivity with each other. A compute manager must be configured and associated with the NSX Manager node.

The NSX Manager node must have a valid license.

The NSX Manager node must have a valid certificate.

Correct Answer: B

NSX Global Manager is a feature of NSX that allows managing multiple NSX domains across different sites or clouds from a single pane of glass. NSX Global Manager supports Federation, which is a capability that enables synchronizing configuration and policy across multiple NSX domains. Federation has many benefits such as simplifying operations, improving resiliency, and enabling disaster recovery. The only supported mode in NSX Global Manager when using Federation is Policy mode. Policy mode means that NSX Global Manager acts as a policy manager that defines and distributes global policies to local NSX managers in different domains. Policy mode also allows local NSX managers to have their own local policies that can override or merge with global policies. https://docs.vmware.com/en/VMware-NSX/4.0/administration/GUID-29998FC5-C1AB-40BC-B669-6E8E9937F345.html

Correct Answer: