VCAN610 by VMware Valid Free Exam Practice Test

Question 1

-- Exhibit -

-- Exhibit -An NSX administrator creates the NSX network in the exhibit:
What destination IP address will Host-A use when sending a VXLAN frame to Host-B?

A. The IP address of one of Host-B's new vmkernel ports created during host configuration. B. The IP address Host-B provided to Host-A during VXLAN tunnel setup negotiations. C. The IP address of Host-B's management vmkernel port, which is also the VTEP IP address. D. The IP address of Host-B's NSX Controller. The NSX Controller forwards the VXLAN frame to Host-B.

Correct Answer: A

Question 2

A Distributed Router and an NSX Edge Gateway are connected to a Logical Switch with a VNI of 7321. Both also have connections to the external network.The Distributed Router serves as the default gateway for the virtual machines in VNI 7321.
A vSphere administrator does not want to advertise the subnet in VNI 7321 to the rest of the network, but still wants to allow virtual machines in the segment to access external resources.
What two steps should the vSphere administrator take to achieve this? (Choose two)

A. Configure a static route to the NSX Edge Gateway in the upstream router. B. Make the NSX Edge Gateway the default gateway for VNI 7321. C. Configure a SNAT rule for VNI 7321 on the NSX Edge Gateway. D. Create an inbound Access Control List on the Distributed Router.

Correct Answer: B,C

Question 3

---
An administrator wishes to upgrade to NSX from the following infrastructure:
vCenter Server 4.1
vShield 5.0
ESXi hosts 4.1
What is a valid, minimum set of steps to properly upgrade this environment to NSX?

A. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.5
2.Upgrade vShield 5.0 to vShield 5.5
3.Upgrade ESXi hosts to ESXi 5.1 or greater
4.Install the NSX upgrade bundle B. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.5
2.Upgrade ESXi hosts to ESXi 5.1 or greater
3.Install the NSX upgrade bundle C. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.1
2.Upgrade vCenter Server 5.1 to vCenter Server 5.5
3.Upgrade ESXi hosts to ESXi 5.1 or greater
4.Install the NSX upgrade bundle D. 1. Upgrade vCenter Server 4.1 to vCenter Server 5.5
2.Upgrade vShield 5.0 to vShield 5.5
3.Install the NSX upgrade bundle

Correct Answer: A

Question 4

An administrator has received reports of intermittent connectivity between virtual machines on an NSX network. The network team has verified that all physical network devices have been set to 1600 MTU.
What other configuration could cause this issue?

A. An MTU value of 1500 on the distributed firewall B. An MTU value of 1500 on the logical load balancer C. An MTU value of 1500 on the vDS Switch D. An MTU value of 1500 on the logical router

Correct Answer: C

Question 5

Which option shows an advantage of implementing logical firewalls in NSX?

A. NSX provides traffic forwarding between layer 2 broadcast domains. B. NSX allows segmentation of virtual machines based upon VM names or user identity. C. NSX provides the ability to provide IPv4 and IPv6 dual stack configuration. D. NSX allows virtual machine traffic to follow multiple paths to a specific destination.

Correct Answer: B

Question 6

Which two statements are true regarding NSX? (Choose two.)

A. Workloads can be placed and moved independently of physical topology. B. Workload deployments are non-disruptive over the existing physical network. C. Operational efficiency can be achieved through automation of the physical network. D. NSX implementation requires a VMware vSphere environment.

Correct Answer: A,B

Question 7

Which Virtual Machine cannot be protected by the Distributed Firewall?

A. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.5 host. B. A Virtual Machine connected to a logical switch running on an ESXi 5.1 host. C. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.1 host. D. A Virtual Machine connected to a vSS Portgroup running on an ESXi 5.5 host.

Correct Answer: B

Question 8

Which two are valid statements regarding third-party services and NSX? (Choose two.)

A. Third party services are automatically registered with NSX Manager. B. Third party services may or may not utilize a service virtual appliance. C. Third party services can either be automatically or manually registered with NSX Manager. D. Third party services require the deployment of a virtual appliance.

Correct Answer: B,C

Question 9

In a data center using a leaf and spine architecture, which two statements define the connectivity between the leaf and spine tiers required to provide optimal network connectivity for NSX? (Choose two.)

A. Links are required between leaf and spine switches, and from each spine switch to other spine switches in the architecture. B. High availalability and scalability should be achieved using NSX High Availability. C. High availability and scalability should be achieved using Equal Cost Multipathing (ECMP). D. Links are required between leaf and spine switches in the architecture to form a point-topoint connection between the two tiers.

Correct Answer: C,D

Question 10

Which NSX component decreases layer 2 broadcast domains and improves network efficiency and scale?

A. Logical Firewalls B. Logical Routers C. Logical Virtual Private Networks D. Logical Switches

Correct Answer: B

Question 11

-- Exhibit -

-- Exhibit --
An administrator has configured an NSX network as shown:
Both VM-A and VM-B use the same Distributed Router for their default gateway.
If VM-A sends a packet to VM-B,what happens to the packet before it reaches VM-B?

A. Distributed Router in Host-A receives the packet from VM-A and forwards it to Logical Switch 7775 in Host-B, via a VXLAN frame, which delivers it to VM-B. B. Distributed Router in Host-A receives the packet from VM-A and forwards it to Logical Switch 7321 in Host-B, via a VXLAN frame, which delivers it to Logical Switch 7775 before it is delivered to VM-B. C. Logical Switch 7321 in Host-A receives the packet inside a frame from VM-A and forwards it to Logical Switch 7775 in Host-B, via a VXLAN frame, which delivers it to VM- D. Logical Switch 7321 in Host-A receives the packet from VM-A and forwards it to the Distributed Router in Host-B, which passes it along to Logical Switch 7775 in Host-B before it is delivered to VM-B.

Correct Answer: A

Question 12

An organization requires a high performance firewall as part of an NSX deployment. What is the minimum NSX Edge Services Gateway configuration that would be suitable for the organization's requirements?

A. Compact B. Large C. Quad-Large D. X-Large

Correct Answer: C

Question 13

Which two are valid types of authentication for an OSPF area? (Choose two.)

A. Password authentication B. MD5 authentication C. SHA1 authentication D. LDAP authentication

Correct Answer: A,B

Question 14

Which NSX component can validate that security policies at your organization are being enforced correctly?

A. Activity Monitoring B. Distributed firewalls C. Flow Monitoring D. ERSPAN

Correct Answer: A

Question 15

Where does the Distributed Logical Firewall enforce firewall rules?

A. At the NSX Controller's firewall kernel module. B. At the Virtual Machine's virtual Network Interface Card (vNIC). C. At the Logical Switch virtual port that the Virtual Machine connects to. D. At the ESXi host vmnic used by the vSphere Distributed Switch.

Correct Answer: B

VMware Certified Associate - Network Virtualization - VCAN610 Exam Practice Test