2V0-41.23 Free Practice Test

Which three selections are capabilities of Network Topology? (Choose three.)

1. A. Display how the different NSX components are interconnected.
2. B. Display the uplink configured on the Tier-0 Gateways.
3. C. Display how the Physical components ate interconnected.
4. D. Display the VMs connected to Segments.
5. E. Display the uplinks configured on the Tier-1 Gateways.

Correct Answer: ABD
According to the VMware NSX Documentation, these are three of the capabilities of Network Topology, which is a graphical representation of your network infrastructure in NSX:
Display how the different NSX components are interconnected: You can use Network Topology to view how your segments, gateways, routers, firewalls, load balancers, VPNs, and other NSX components are connected and configured in your network.
Display the uplink configured on the Tier-0 Gateways: You can use Network Topology to view the uplink interface and segment that connect your tier-0 gateways to your physical network. You can also view the VLAN ID and IP address of the uplink interface.
Display the VMs connected to Segments: You can use Network Topology to view the VMs that are attached to your segments. You can also view the IP address and MAC address of each VM.

What are two functions of the Service Engines in NSX Advanced Load Balancer? (Choose two.)

1. A. It collects real-time analytics from application traffic flows.
2. B. It stores the configuration and policies related to load-balancing services.
3. C. It performs application load-balancing operations.
4. D. It deploys web servers to perform load-balancing operations.
5. E. It provides a user interface to perform configuration and management tasks.

Correct Answer: CE
The Service Engines in NSX Advanced Load Balancer are VM-based applications that handle all data plane operations by receiving and executing instructions from the Controller. The Service Engines perform the following functions:
They perform application load-balancing operations for all client- and server-facing network interactions. They support various load-balancing algorithms, health monitors, SSL termination, and persistence profiles.
They provide a user interface to perform configuration and management tasks. The user interface is accessible through a web browser or a REST API. The user interface allows the user to create and modify virtual services, pools, health monitors, policies, analytics, and other load-balancing settings
https://docs.vmware.com/en/VMware-Telco-Cloud-Platform/3.0/vmware-telco-cloud-reference-architecture-gui

Which steps are required to activate Malware Prevention on the NSX Application Platform?

1. A. Select Cloud Region and Deploy Network Detection and Response.
2. B. Activate NSX Network Detection and Response and run Pre-checks.
3. C. Activate NSX Network Detection and Response and Deploy Malware Prevention.
4. D. Select Cloud Region and run Pre-checks.

Correct Answer: D
To activate Malware Prevention on the NSX Application Platform, the steps are:
In the NSX Manager UI, select System and in the Configuration section, select NSX Application Platform.
Navigate to the Features section, locate the NSX Malware Prevention feature card, and click Activate or anywhere in the card.
In the NSX Malware Prevention activation window, select one of the available cloud regions from which you can access the NSX Advanced Threat Prevention cloud service.
Click Run Prechecks. This precheck process can take some time as the system validates that the minimum license requirement is met and that it is eligible for use with the NSX Advanced Threat Prevention cloud service. The system also validates that the selected cloud region is reachable.
Click Activate. This step can take some time1. Therefore, the correct answer is D. The other options are incorrect because they involve activating or deploying NSX Network Detection and Response, which is
a different feature from Malware Prevention. References: Activate NSX Malware Prevention

What are tour NSX built-in rote-based access control (RBAC) roles? (Choose four.)

1. A. Network Admin
2. B. Enterprise Admin
3. C. Full Access
4. D. Read
5. E. LB Operator
6. F. None
7. G. Auditor

Correct Answer: ABEG
https://docs.vmware.com/en/VMware-NSX/4.1/administration/GUID-26C44DE8-1854-4B06-B6DA-A2FD426

An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

1. A. esxcli network diag ping -I vmk0O -H <destination IP address>
2. B. vmkping ++netstack=geneve -d -s 1572
3. C. esxcli network diag ping -H
4. D. vmkping ++netstack=vxlan -d -s 1572

Correct Answer: B
The command vmkping ++netstack=geneve -d -s 1572 <destination IP address> is used to check the VMwar kernel ports for tunnel end point communication. This command uses the geneve netstack, which is the default netstack for NSX-T. The -d option sets the DF (Don’t Fragment) bit in the IP header, which prevents the packet from being fragmented by intermediate routers. The -s 1572 option sets the packet size to 1572 bytes, which is the maximum payload size for a geneve encapsulated packet with an MTU of 1600 bytes.
The is the IP address of the remote ESXi host or VM. References: : VMware NS Data Center Installation Guide, page 19. : VMware Knowledge Base: Testing MTU with the vmkping command (1003728). : VMware NSX-T Data Center Administration Guide, page 102.