2V0-642 practice test

1. Question 1 · 1

   A network administrator has been tasked with deploying a 3-tier application across two data centers. Tier-1 and tier-2 will be located in Datacenter-A and tier-3 will be located in Datacenter-B. Which NSX components are needed to make this deployment functional?

   Choose one answer.

   • A universal transport zone deployed with a universal distributed logical router (UDLR), a universal logical switch and two local logical switches connected to the UDLR.
   • A universal transport zone deployed with a universal distributed logical router (UDLR), two universal logical switches and a single logical switch connected to the UDLR.
   • A universal transport zone deployed with a universal distributed logical router (UDLR) and three universal logical switches connected to the UDLR.
   • A universal transport zone, a universal distributed logical router (UDLR) and three local switches in each data center connected to the UDLR

2. Question 2 · 1

   The fact that NSX Data Security has visibility into sensitive data provides which two benefits? (Choose two)

   Choose all answers that apply.

   • It helps address compliance and risk management requirements.
   • It acts as a forensic tool to analyze TCP and UDP connections between virtual machines
   • It is able to trace packets between a source and destination without requiring access to the guestOS
   • It eliminates the typical agent footprint that exists with legacy software agents

3. Question 3 · 1

   Which NSX component can validate that security policies at your organization are being enforced correctly?

   Choose one answer.

   • Activity Monitoring
   • Flow Monitoring
   • ERSPAN
   • Distributed firewalls

4. Question 4 · 1

   What is the function of NSX Data Security?

   Choose one answer.

   • Prevents sensitive data in your virtualized environment from being copied
   • Prevents sensitive data in your virtualized environment from being modified
   • Identifies sensitive data in your virtualized environment based upon regulation security policies
   • Identifies sensitive data in your virtualized environment based upon regulation violation reports

5. Question 5 · 1

   An administrator enables the NSX Ticket Logger to track infrastructure changes. The administrator logs out for lunch, returns and logs back in to complete the task. What is the status of ticket logger when the administrator logs back in?

   Choose one answer.

   • The ticket logger still tracks changes until it is turned off by the administrator.
   • The ticket logger is turned off.
   • The ticket logger will prompt the user if they still want to continue tracking changes.
   • The ticket logger will display an error.

6. Question 6 · 1

   A Service Provider is using VMware vCloud Director with VMware vCloud Networking and Security (VCNS) on vSphere. Which two products will be impacted by the upgrade of VCNS to VMware NSX? (Choose two)

   Choose all answers that apply.

   • ESXi hosts
   • NSX Controller Cluster
   • vShield Manager
   • vCenter Server

7. Question 7 · 1

   Which tool is used to detect rogue services?

   Choose one answer.

   • NSX Logical Firewall
   • NSX Logical Router
   • Activity Monitoring
   • Flow Monitoring

8. Question 8 · 1

   Which two NSX Data Security roles could be assigned to view configured policies and violation reports? (Choose two.)

   Choose all answers that apply.

   • Security Administrator
   • NSX Administrator
   • Auditor
   • Enterprise Administrator

9. Question 9 · 1

   Which two are accurate statements with regards to Guest Introspection installation? (Choose two.)

   Choose all answers that apply.

   • The service virtual machine performs data security and activity monitoring.
   • The installation deploys a virtual machine to hosts prepared for VMware NSX.
   • A security policy weight of 4300 is assigned to hosts prepared to Guest Introspection.
   • Guest Introspection is deployed with NSX Data Security by default.

10. Question 10 · 1

    Internet access is required from virtual machines located on any logical switch. Direct access from the internet to these virtual machines is NOT permitted. Which Perimeter NSX Edge feature would achieve this with the least configuration?

    Choose one answer.

    

    • LB
    • DNAT
    • SNAT
    • VPN

11. Question 11 · 1

    Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

    Choose one answer.

    

    • Within Compute Cluster 1, Layer 2 would function, but Layer 3 would fail.
    • Within Compute Cluster 1, Layer 2 would fail, and Layer 3 would fail.
    • Within Compute Cluster 1, Layer 2 would fail, but Layer 3 would function.
    • Within Compute Cluster 1, Layer 2 would function, and Layer 3 would function.

12. Question 12 · 1

    What are the correct steps for connecting a virtual machine to a logical switch?

    Choose one answer.

    • Select the logical switch, select the virtual machine, click the Add Virtual Machine icon, select the vNIC to connect.
    • Select the logical switch, click the Add Virtual Machine Icon, select the VM, select the vNIC to connect.
    • Select the vNIC, click the Add Virtual Machine Icon, select the logical switch.
    • Click the Add Virtual Machine icon, select the logical switch, vNIC to connect.

13. Question 13 · 1

    Which term describes a situation where a bottleneck is created when traffic is sent to a single device for security enforcement?

    Choose one answer.

    • security event queueing
    • hairpinning
    • security looping
    • enforcement degradation

14. Question 14 · 1

    A group of users needs secured access to a set of web-based applications in a SDDC. Which VPN option is best suited for this?

    Choose one answer.

    • IPSec VPN
    • SSL VPN-Plus
    • L2VPN
    • Application VPN

15. Question 15 · 1

    When running the NSX Control Plane in Hybrid Mode what are the minimum physical network requirements? (Choose three.)

    Choose all answers that apply.

    • MTU 1500
    • NSX Controller connectivity
    • IGMP Snooping
    • Multicast Routing with PIM
    • Unicast L3 Routing

Paid access to all 36 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.